0

I'm connected to the Internet, but MFF & IE won't load any websites. Error messages include "The document contains no data", "The page cannot be displayed", "Internet Explorer could not open the search page", & "The connection was refused when attempting to contact ". Plugging in IP numbers doesn't work either. Here's my HJS logfile:

Logfile of HijackThis v1.99.1
Scan saved at 12:03:09 AM, on 4/15/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\ibmpmsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Norton Internet Security\ISSVC.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\QCONSVC.EXE
C:\WINDOWS\system32\ssisvr32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\tp4serv.exe
C:\WINDOWS\system32\rundll32.exe
C:\PROGRA~1\ThinkPad\PkgMgr\HOTKEY\TPHKMGR.exe
C:\WINDOWS\system32\RunDll32.exe
C:\PROGRAM FILES\THINKPAD\CONNECTUTILITIES\QCWLICON.EXE
C:\Program Files\ThinkPad\PkgMgr\HOTKEY\TPONSCR.exe
C:\Program Files\ThinkPad\Utilities\TpKmapMn.exe
C:\Program Files\ThinkPad\PkgMgr\HOTKEY_1\TpScrex.exe
C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\IBM\Messages By IBM\ibmmessages.exe
C:\Program Files\VERITAS Software\Update Manager\sgtray.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Palm\HOTSYNC.EXE
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.nytimes.com/
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_2_3_0.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: Norton Internet Security - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_2_3_0.dll
O3 - Toolbar: Norton Internet Security - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [S3TRAY2] S3Tray2.exe
O4 - HKLM\..\Run: [TrackPointSrv] tp4serv.exe
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe irprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [TPHOTKEY] C:\PROGRA~1\ThinkPad\PkgMgr\HOTKEY\TPHKMGR.exe
O4 - HKLM\..\Run: [BMMGAG] RunDll32 C:\PROGRA~1\ThinkPad\UTILIT~1\pwrmonit.dll,StartPwrMonitor
O4 - HKLM\..\Run: [BMMLREF] C:\Program Files\ThinkPad\Utilities\BMMLREF.EXE
O4 - HKLM\..\Run: [QCWLICON] C:\PROGRAM FILES\THINKPAD\CONNECTUTILITIES\QCWLICON.EXE
O4 - HKLM\..\Run: [TPKMAPMN] C:\Program Files\ThinkPad\Utilities\TpKmapMn.exe
O4 - HKLM\..\Run: [TP4EX] tp4ex.exe
O4 - HKLM\..\Run: [EZEJMNAP] C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [ibmmessages] C:\Program Files\IBM\Messages By IBM\ibmmessages.exe
O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\VERITAS Software\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [URLLSTCK.exe] C:\Program Files\Norton Internet Security\UrlLstCk.exe
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ibmmessages] C:\Program Files\IBM\Messages By IBM\ibmmessages.exe
O4 - Startup: HotSync Manager.lnk = C:\Program Files\Palm\HOTSYNC.EXE
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O15 - Trusted Zone: *.lexis.com
O15 - Trusted Zone: *.westlaw.com
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: IBM PM Service (IBMPMSVC) - Unknown owner - C:\WINDOWS\System32\ibmpmsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: ISSvc (ISSVC) - Symantec Corporation - C:\Program Files\Norton Internet Security\ISSVC.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: QCONSVC - Unknown owner - C:\WINDOWS\System32\QCONSVC.EXE
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Software Secure Service (SSISvr32) - SoftwareSecure Inc - C:\WINDOWS\system32\ssisvr32.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe

Thanks for any insight you can offer!!!

3
Contributors
7
Replies
8
Views
11 Years
Discussion Span
Last Post by 'Stein
0

Ok, first please download ewido - www.ewido.net - Install. Update. Scan. Remove anything it finds.

Then post back with a new HJT log, as well as the ewido log.

If you know anything about this


O23 - Service: Software Secure Service (SSISvr32) - SoftwareSecure Inc - C:\WINDOWS\system32\ssisvr32.exe

Please let me know, as I am pretty sure it is a nasty, and we will be taking it out if ewido misses it.

0

tayspen--

Okay, I've downloaded Ewido & I've got a scan in progress--I'll report back with the results.

Re.:

O23 - Service: Software Secure Service (SSISvr32) - SoftwareSecure Inc - C:\WINDOWS\system32\ssisvr32.exe

I think it relates to the exam software that my school requires for taking finals on a laptop. I last downloaded the software last semester. Here's the company's link:

http://www.softwaresecure.com/

Thanks for your help!!! I'll post new logs as soon as I've got 'em.

0

Here is the Ewido scan log:

---------------------------------------------------------
ewido anti-malware - Scan report
---------------------------------------------------------

+ Created on: 1:39:59 AM, 4/15/2006
+ Report-Checksum: 9A496654

+ Scan result:

:mozilla.6:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.7:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned with backup
:mozilla.8:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned with backup
:mozilla.9:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned with backup
:mozilla.10:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.11:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.12:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.13:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.14:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.15:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.16:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.17:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.18:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.19:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.20:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.21:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.22:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.23:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.24:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.25:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.26:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.27:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.28:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.29:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.30:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.31:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.32:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.33:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.34:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.35:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.36:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.37:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.38:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.39:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.40:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.41:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.42:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.43:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.44:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.45:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.46:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.47:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.48:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.49:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.50:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.51:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.52:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.53:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.54:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.55:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.56:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.57:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.58:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.59:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.81:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.82:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.83:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.84:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.85:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.86:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.87:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Adtech : Cleaned with backup
:mozilla.88:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Adtech : Cleaned with backup
:mozilla.104:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.111:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.112:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.113:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.114:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.115:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.143:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup
:mozilla.144:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned with backup
:mozilla.149:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.150:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.151:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.152:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.153:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.176:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.181:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Com : Cleaned with backup
:mozilla.182:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Com : Cleaned with backup
:mozilla.187:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.194:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup
:mozilla.195:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup
:mozilla.196:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup
:mozilla.197:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup
:mozilla.198:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned with backup
:mozilla.216:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.401:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Overture : Cleaned with backup
:mozilla.402:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Overture : Cleaned with backup
:mozilla.423:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Overture : Cleaned with backup
:mozilla.429:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.432:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Pro-market : Cleaned with backup
:mozilla.435:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned with backup
:mozilla.436:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned with backup
:mozilla.437:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned with backup
:mozilla.438:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned with backup
:mozilla.439:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned with backup
:mozilla.466:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup
:mozilla.467:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup
:mozilla.468:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup
:mozilla.469:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup
:mozilla.470:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup
:mozilla.481:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.482:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.483:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.484:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.485:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.486:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.487:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.488:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.489:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.490:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.491:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.492:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.493:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.494:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.495:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.496:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.497:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.498:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.499:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.500:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.501:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.502:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.503:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.504:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.505:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.506:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.507:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.508:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.509:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.510:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.511:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.512:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.513:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.514:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.515:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.516:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.517:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.518:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.519:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.520:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.521:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.522:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.523:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.524:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.525:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.526:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.527:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.528:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.529:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.530:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.534:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup
:mozilla.535:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup
:mozilla.545:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.546:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.547:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.548:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.549:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.550:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.551:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.552:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Trafic : Cleaned with backup
:mozilla.556:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup
:mozilla.602:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Yadro : Cleaned with backup
:mozilla.603:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Yadro : Cleaned with backup
:mozilla.613:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup
:mozilla.614:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup
:mozilla.615:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup
:mozilla.616:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup
:mozilla.617:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup
:mozilla.618:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup
:mozilla.619:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup
:mozilla.620:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup
:mozilla.621:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup
:mozilla.622:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup
:mozilla.623:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup
:mozilla.624:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup
:mozilla.625:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup
:mozilla.626:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup
:mozilla.628:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Cqcounter : Cleaned with backup
:mozilla.635:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.636:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.637:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.638:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.649:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup
:mozilla.654:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup
:mozilla.665:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned with backup
:mozilla.666:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned with backup
:mozilla.667:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned with backup
:mozilla.668:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned with backup
:mozilla.695:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned with backup
:mozilla.719:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Realtracker : Cleaned with backup
:mozilla.720:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Realtracker : Cleaned with backup
:mozilla.730:C:\Documents and Settings\JR\Application Data\Mozilla\Firefox\Profiles\tbicqqug.default\cookies.txt -> TrackingCookie.Burstbeacon : Cleaned with backup


::Report End

0

And here is the HJT log I got after running Ewido--I'm not sure it's any different than my first HJT log.

Logfile of HijackThis v1.99.1
Scan saved at 2:04:27 AM, on 4/15/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\ibmpmsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Norton Internet Security\ISSVC.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\tp4serv.exe
C:\PROGRA~1\ThinkPad\PkgMgr\HOTKEY\TPHKMGR.exe
C:\WINDOWS\system32\RunDll32.exe
C:\PROGRAM FILES\THINKPAD\CONNECTUTILITIES\QCWLICON.EXE
C:\Program Files\ThinkPad\Utilities\TpKmapMn.exe
C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\IBM\Messages By IBM\ibmmessages.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\ThinkPad\PkgMgr\HOTKEY\TPONSCR.exe
C:\Program Files\Palm\HOTSYNC.EXE
C:\Program Files\ThinkPad\PkgMgr\HOTKEY_1\TpScrex.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\ewido anti-malware\ewidoguard.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\QCONSVC.EXE
C:\WINDOWS\system32\ssisvr32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.nytimes.com/
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_2_3_0.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: Norton Internet Security - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_2_3_0.dll
O3 - Toolbar: Norton Internet Security - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [S3TRAY2] S3Tray2.exe
O4 - HKLM\..\Run: [TrackPointSrv] tp4serv.exe
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe irprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [TPHOTKEY] C:\PROGRA~1\ThinkPad\PkgMgr\HOTKEY\TPHKMGR.exe
O4 - HKLM\..\Run: [BMMGAG] RunDll32 C:\PROGRA~1\ThinkPad\UTILIT~1\pwrmonit.dll,StartPwrMonitor
O4 - HKLM\..\Run: [BMMLREF] C:\Program Files\ThinkPad\Utilities\BMMLREF.EXE
O4 - HKLM\..\Run: [QCWLICON] C:\PROGRAM FILES\THINKPAD\CONNECTUTILITIES\QCWLICON.EXE
O4 - HKLM\..\Run: [TPKMAPMN] C:\Program Files\ThinkPad\Utilities\TpKmapMn.exe
O4 - HKLM\..\Run: [TP4EX] tp4ex.exe
O4 - HKLM\..\Run: [EZEJMNAP] C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [ibmmessages] C:\Program Files\IBM\Messages By IBM\ibmmessages.exe
O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\VERITAS Software\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [URLLSTCK.exe] C:\Program Files\Norton Internet Security\UrlLstCk.exe
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ibmmessages] C:\Program Files\IBM\Messages By IBM\ibmmessages.exe
O4 - Startup: HotSync Manager.lnk = C:\Program Files\Palm\HOTSYNC.EXE
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O15 - Trusted Zone: *.lexis.com
O15 - Trusted Zone: *.westlaw.com
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido anti-malware\ewidoguard.exe
O23 - Service: IBM PM Service (IBMPMSVC) - Unknown owner - C:\WINDOWS\System32\ibmpmsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: ISSvc (ISSVC) - Symantec Corporation - C:\Program Files\Norton Internet Security\ISSVC.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: QCONSVC - Unknown owner - C:\WINDOWS\System32\QCONSVC.EXE
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Software Secure Service (SSISvr32) - SoftwareSecure Inc - C:\WINDOWS\system32\ssisvr32.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe

0

Run HJT again and check the follwoing items. Only check the 015 entries if you did not put them in the trusted zone


O15 - Trusted Zone: *.lexis.com

O15 - Trusted Zone: *.westlaw.com

O23 - Service: Software Secure Service (SSISvr32) - SoftwareSecure Inc - C:\WINDOWS\system32\ssisvr32.exe

Then please do the following.

Start>Run type Services.msc
-Right click Software Secure Service (SSISvr32)
and choose Stop
-Now choose Properties and change Startup Type to disabled


Open HijackThis
-Choose Open Misc Tools
-Choose Delete an NT Service
-Copy and Paste - Software Secure Service (SSISvr32)
into the box and delete it.


Post a new log.

0

Good good, so you're now connected to teh internet. However, still follow tayspern's instructions from the last post, as your are in no ways clean spyware-wise.

After following his instructions, post a new log here and we'll contiune with the fix.

Thanks.

This topic has been dead for over six months. Start a new discussion instead.
Have something to contribute to this discussion? Please be thoughtful, detailed and courteous, and be sure to adhere to our posting rules.