Infostealer and Trojan.Metajuan

Question

MelissaH 0 Newbie Poster

17 Years Ago

Hey DaniWeb Helpers,
I have a major problem. My little sister somehow downloaded multiple viruses on the computer by msn. She was upset that she ruined the computer and wouldn't explain how it happened. The viruses that were downloaded are Infostealer and Trojan.Metajuan.

If you could help me as soon as possible, it would be great. Thanks in advance.

-Melissa

windows-virus

3 Contributors
18 Replies
405 Views
1 Week Discussion Span
Latest Post 16 Years Ago Latest Post by crunchie

All 18 Replies

crunchie 990 Most Valuable Poster

17 Years Ago

Download HijackThis self-extracting zip version from here. Once downloaded, double click on the file & it will install into it's own, permanent folder.
Start HJT & press the "Do a system scan and save a log file" button. When the scan is finished a window will pop up giving you the option of where to save it. Save it to desktop where it is easy to access. Open the log file and copy the entire contents of the file & paste it into the body of your post. DO NOT FIX ANYTHING YET. Most of what is there is necessary for the running of your system.

====

Please download and install AVG antispyware tool

Close all other Applications Select language click Ok
Click I Agree
Click next
Click Install
Click Finish
Wait and AVG antispyware will open to the main screen automatically.
Wait again a few minutes and AVG antispyware Should Auto update itself. If it doesn't click update at top of screen.
This is very important to get updates
When updating has finished. Close AVG antispyware.

If you have an "always on" connection to the internet, physically disconnect that connection until you are finished with Safe Mode and have rebooted back into normal mode.

Next, please reboot your computer in Safe Mode by doing the following:
Restart your computer
After hearing your computer beep once during startup, but before the Windows icon appears, press F8.
Instead of Windows loading as normal, a menu should appear use arrow up to highlight
Select the first option, to run Windows in Safe Mode hit enter.
For additional help in booting into Safe Mode, see the following site: HERE
You MUST manage to get into Safe Mode for the fix to work.

Make sure to close all open windows/programs/folders. Have nothing else open while AVG antispyware performs its scan!

Run AVG antispyware.
Click on scanner at top of AVG antispyware sceen.
Click on Settings.
Under How to Act click on Recommended Action and choose Quarantine.
Under How to scan all boxes should be selected.
Under Possibly unwanted software all boxes should be selected.
On right side under Reports: click on Automatically generate report after every scan.
Under What to scan select scan every file.
Click On scan Tab.
Click on Complete system scan.
Let the program scan the machine It can take awhile give it time.
When scan has finished at bottom of screen click Apply all Actions.
Click Save report
Click Save Report as (Save as window's screen should pop up.)
Click desktop.
Click Save.
Exit AVG antispyware.

Reboot back to normal mode.
Post the log here.

crunchie 990 Most Valuable Poster

17 Years Ago

Run hijackthis and hit the Open the Misc Tools Section and then the Open Uninstall Manager.

Then hit the Save List button. Save to the desktop for easy access. Open the log file and copy the entire list and paste it here please.

===========

Copy the bold text below and paste it into notepad. Save it to your desktop as find.bat and make sure type is set to All Files.

cd\
cd Program Files
DIR /AD /B /P > ProgramFiles.txt
start ProgramFiles.txt
cls
exit

Double click find.bat and let it run for a minute. It will open up a report in notepad. Please copy that text and post it here in your next reply.

====

Download
SDFix
and save it to your desktop.

Please then reboot your computer in Safe Mode by doing the
following :

Restart your computer
After hearing your computer beep once during startup, but before the
Windows icon appears, tap the F8 key continually;
Instead of Windows loading as normal, a menu with options should appear;
Select the first option, to run Windows in Safe Mode, then press "Enter".
Choose your usual account.

In Safe Mode, right click the SDFix.zip folder and choose Extract
All,
Open the extracted folder and double click RunThis.bat to
start the script.
Type Y to begin the script.
It will remove the Trojan Services then make some repairs to the
registry and prompt you to press any key to Reboot.
Press any Key and it will restart the PC.
Your system will take longer that normal to restart as the fixtool
will be running and removing files.
When the desktop loads the Fixtool will complete the removal and
display Finished, then press any key to end the script and load
your desktop icons.
Finally open the SDFix folder on your desktop and copy and paste the
contents of the results file Report.txt back onto the forum with
a new HijackThis log

crunchie 990 Most Valuable Poster

17 Years Ago

When I tried to save list from hijackthis, I couldn't save it onto my desktop. But I did do the find.bat part.

It saves it to the clipboard. All you need do is hit the save button and then paste it here.
You also never did the rest of my instructions.

crunchie 990 Most Valuable Poster

17 Years Ago

You still never followed the directions given :(.
http://www.daniweb.com/techtalkforums/post342757-4.html

crunchie 990 Most Valuable Poster

17 Years Ago

You still need to do the rest of what was in my post.

I have uploaded a shot of the hijackthis uninstall manager to make certain that you are in the right section. Please confirm that the button I have pointed the arrow to is the one you are selecting.

Reply to this topic

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.

MelissaH 0 Newbie Poster · Answer 1 · 2007-04-11T18:58:06+00:00

I don't know whether to do the second part yet. I figured I should just give the HJT log first.

Logfile of HijackThis v1.99.1
Scan saved at 7:14:59 PM, on 4/10/2007
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Creative\ShareDLL\CtNotify.exe
C:\Program Files\MSN Apps\Updater\01.02.3000.1001\en-ca\msnappau.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Creative\ShareDLL\MediaDet.Exe
C:\WINDOWS\System32\ezSP_Px.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\System32\svchosts.exe
C:\WINDOWS\System32\CTSvcCDA.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Norton AntiVirus\SAVScan.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Java\jre1.5.0_06\bin\jucheck.exe
C:\Documents and Settings\May\Desktop\HijackThis.exe
C:\Program Files\Messenger\msmsgs.exe

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchAssistant = ,
R1 - HKCU\Software\Microsoft\Internet Explorer,CustomizeSearch = ,
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://sympatico.msn.ca/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer provided by Sympatico
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http://proxy.library.utoronto.ca:8080
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - Default URLSearchHook is missing
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\en-ca\msntb.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: Bar888 - {C1B4DEC2-2623-438e-9CA2-C9043AB28508} - C:\PROGRA~1\COMMON~1\{3C6DA~1\Bar888.dll
O4 - HKLM\..\Run: [Disc Detector] C:\Program Files\Creative\ShareDLL\CtNotify.exe
O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.3000.1001\en-ca\msnappau.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Advanced Tools Check] C:\PROGRA~1\NORTON~1\AdvTools\ADVCHK.EXE
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - HKLM\..\Run: [ezShieldProtector for Px] C:\WINDOWS\System32\ezSP_Px.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_0
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Windows Update.hta
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=zuzed004YYCA_ZZzer000
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O16 - DPF: TruePass EPF 7,0,100,684 - https://blrscr3.egs-seg.gc.ca/applets/entrusttruepassapplet-epf.cab
O16 - DPF: Yahoo! Graffiti - http://download.games.yahoo.com/games/clients/y/grt5_x.cab
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocache/funwebproducts/ei/MyFunCardsFWBInitialSetup1.0.0.15-3.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://apple.speedera.net/qtinstall.info.apple.com/borris/us/win/QuickTimeInstaller.exe
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://burrenda17.spaces.msn.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/EN-US/a-UNO1/GAME_UNO1.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {BD8667B7-38D8-4C77-B580-18C3E146372C} (Creative Toolbox Plug-in) - http://caebmm.imgag.com/imgag/cp/install/crusher-cae.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Client IP-IPX - Unknown owner - C:\WINDOWS\System32\svchosts.exe" -e mc-110-12-0000904 (file missing)
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTSvcCDA.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\PROGRA~1\COMMON~1\SONYSH~1\AVLib\Sptisrv.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe

MelissaH 0 Newbie Poster · Answer 2 · 2007-04-12T05:47:46+00:00

When I tried to save list from hijackthis, I couldn't save it onto my desktop. But I did do the find.bat part.

Adobe
Ahead
Alt WAV MP3 WMA OGG Converter
ArcSoft
ASUS
ATI Multimedia
ATI Technologies
Azimuth
BinaryBiz
BitComet
Canon
CD to MP3 Ripper
CoffeeCup Software
Common Files
Creative
D-Link
EphPod
HijackThis
Illustrate
InetGet2
InstallShield Installation Information
Internet Explorer
iPod
Ipwindows
iTunes
Java
Jufsoft
Kongsoft
Lavasoft
Messenger
Microsoft ActiveSync
Microsoft Encarta
microsoft frontpage
Microsoft Office
Movie Maker
Mozilla Firefox
MP3 CD Ripper
MSN
MSN Apps
MSN Gaming Zone
MSN Messenger
MsnMusic
NetMeeting
Network Monitor
NewTech Infosystems
Norton AntiVirus
Online Services
Outerinfo
Outlook Express
Pinnacle
QuickTime
Sony
Square Soft, Inc
Symantec
SymNetDrv
Uninstall Information
webHancer
Windows Media Player
Windows NT
WindowsUpdate
WinRAR
WS_FTP
xerox

MelissaH 0 Newbie Poster · Answer 3 · 2007-04-13T11:48:11+00:00

You're right Crunchie, I didn't do the rest of your instructions.

---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at: 12:22:26 AM 4/13/2007

+ Scan result:

C:\Documents and Settings\May\Application Data\Ѕymantec\winspool.exe -> Downloader.Age : Cleaned.
:mozilla.43:C:\Documents and Settings\May\Application Data\Mozilla\Firefox\Profiles\8bjkbujw.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.50:C:\Documents and Settings\May\Application Data\Mozilla\Firefox\Profiles\8bjkbujw.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\May\Cookies\may@buzznet.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\May\Cookies\may@livemercial.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\May\Cookies\may@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\May\Cookies\may@partygaming.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\May\Cookies\may@pch.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\May\Cookies\may@ads.addynamix[2].txt -> TrackingCookie.Addynamix : Cleaned.
:mozilla.18:C:\Documents and Settings\May\Application Data\Mozilla\Firefox\Profiles\8bjkbujw.default\cookies.txt -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.19:C:\Documents and Settings\May\Application Data\Mozilla\Firefox\Profiles\8bjkbujw.default\cookies.txt -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.20:C:\Documents and Settings\May\Application Data\Mozilla\Firefox\Profiles\8bjkbujw.default\cookies.txt -> TrackingCookie.Adjuggler : Cleaned.
C:\Documents and Settings\May\Cookies\may@adrevolver[2].txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.66:C:\Documents and Settings\May\Application Data\Mozilla\Firefox\Profiles\8bjkbujw.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.67:C:\Documents and Settings\May\Application Data\Mozilla\Firefox\Profiles\8bjkbujw.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
C:\Documents and Settings\May\Cookies\may@advertising[1].txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.77:C:\Documents and Settings\May\Application Data\Mozilla\Firefox\Profiles\8bjkbujw.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
C:\Documents and Settings\May\Cookies\may@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.68:C:\Documents and Settings\May\Application Data\Mozilla\Firefox\Profiles\8bjkbujw.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.69:C:\Documents and Settings\May\Application Data\Mozilla\Firefox\Profiles\8bjkbujw.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.70:C:\Documents and Settings\May\Application Data\Mozilla\Firefox\Profiles\8bjkbujw.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
C:\Documents and Settings\May\Cookies\may@cpvfeed[2].txt -> TrackingCookie.Cpvfeed : Cleaned.
:mozilla.22:C:\Documents and Settings\May\Application Data\Mozilla\Firefox\Profiles\8bjkbujw.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
C:\Documents and Settings\May\Cookies\may@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned.
C:\Documents and Settings\LocalService\Cookies\system@enhance[2].txt -> TrackingCookie.Enhance : Cleaned.
C:\Documents and Settings\May\Cookies\may@fastclick[1].txt -> TrackingCookie.Fastclick : Cleaned.
C:\Documents and Settings\LocalService\Cookies\system@hitbox[2].txt -> TrackingCookie.Hitbox : Cleaned.
C:\Documents and Settings\LocalService\Cookies\system@phg.hitbox[1].txt -> TrackingCookie.Hitbox : Cleaned.
C:\Documents and Settings\May\Cookies\may@server.iad.liveperson[1].txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.60:C:\Documents and Settings\May\Application Data\Mozilla\Firefox\Profiles\8bjkbujw.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
C:\Documents and Settings\May\Cookies\may@mediaplex[1].txt -> TrackingCookie.Mediaplex : Cleaned.
C:\Documents and Settings\LocalService\Cookies\may@search.msn[2].txt -> TrackingCookie.Msn : Cleaned.
:mozilla.25:C:\Documents and Settings\May\Application Data\Mozilla\Firefox\Profiles\8bjkbujw.default\cookies.txt -> TrackingCookie.Myaffiliateprogram : Cleaned.
:mozilla.26:C:\Documents and Settings\May\Application Data\Mozilla\Firefox\Profiles\8bjkbujw.default\cookies.txt -> TrackingCookie.Myaffiliateprogram : Cleaned.
:mozilla.53:C:\Documents and Settings\May\Application Data\Mozilla\Firefox\Profiles\8bjkbujw.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.54:C:\Documents and Settings\May\Application Data\Mozilla\Firefox\Profiles\8bjkbujw.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.55:C:\Documents and Settings\May\Application Data\Mozilla\Firefox\Profiles\8bjkbujw.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.56:C:\Documents and Settings\May\Application Data\Mozilla\Firefox\Profiles\8bjkbujw.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.57:C:\Documents and Settings\May\Application Data\Mozilla\Firefox\Profiles\8bjkbujw.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
C:\Documents and Settings\May\Cookies\may@stats1.reliablestats[1].txt -> TrackingCookie.Reliablestats : Cleaned.
C:\Documents and Settings\May\Cookies\may@stats1.reliablestats[2].txt -> TrackingCookie.Reliablestats : Cleaned.
C:\Documents and Settings\May\Cookies\may@bs.serving-sys[1].txt -> TrackingCookie.Serving-sys : Cleaned.
C:\Documents and Settings\May\Cookies\may@serving-sys[1].txt -> TrackingCookie.Serving-sys : Cleaned.
C:\Documents and Settings\May\Cookies\may@statcounter[2].txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.21:C:\Documents and Settings\May\Application Data\Mozilla\Firefox\Profiles\8bjkbujw.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.72:C:\Documents and Settings\May\Application Data\Mozilla\Firefox\Profiles\8bjkbujw.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.73:C:\Documents and Settings\May\Application Data\Mozilla\Firefox\Profiles\8bjkbujw.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.74:C:\Documents and Settings\May\Application Data\Mozilla\Firefox\Profiles\8bjkbujw.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.75:C:\Documents and Settings\May\Application Data\Mozilla\Firefox\Profiles\8bjkbujw.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.76:C:\Documents and Settings\May\Application Data\Mozilla\Firefox\Profiles\8bjkbujw.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
C:\Documents and Settings\May\Cookies\may@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Cleaned.
C:\Documents and Settings\May\Cookies\may@ad.yieldmanager[3].txt -> TrackingCookie.Yieldmanager : Cleaned.
C:\Documents and Settings\May\Cookies\may@zedo[2].txt -> TrackingCookie.Zedo : Cleaned.

::Report end

---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at: 1:30:48 AM 4/13/2007

+ Scan result:

C:\My Download Files\photo13.com -> Backdoor.MSNMaker.ag : Cleaned with backup (quarantined).
C:\Program Files\MSN Messenger\msnmsgr.exe -> Backdoor.MSNMaker.ag : Cleaned with backup (quarantined).
C:\WINDOWS\system32\svchosts.exe -> Downloader.Agent.bca : Cleaned with backup (quarantined).
:mozilla.14:C:\RECYCLER\NPROTECT\00665095.MOZ -> TrackingCookie.247realmedia : Cleaned.
:mozilla.17:C:\RECYCLER\NPROTECT\00665103.MOZ -> TrackingCookie.247realmedia : Cleaned.
:mozilla.12:C:\RECYCLER\NPROTECT\00665503.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.13:C:\RECYCLER\NPROTECT\00665495.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.14:C:\RECYCLER\NPROTECT\00665167.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.17:C:\RECYCLER\NPROTECT\00665174.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.18:C:\RECYCLER\NPROTECT\00665129.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.19:C:\RECYCLER\NPROTECT\00665879.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.20:C:\RECYCLER\NPROTECT\00666357.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.22:C:\RECYCLER\NPROTECT\00665348.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.24:C:\RECYCLER\NPROTECT\00665879.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.25:C:\RECYCLER\NPROTECT\00665180.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.26:C:\RECYCLER\NPROTECT\00665520.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.27:C:\RECYCLER\NPROTECT\00665209.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.27:C:\RECYCLER\NPROTECT\00665219.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.27:C:\RECYCLER\NPROTECT\00666357.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.28:C:\RECYCLER\NPROTECT\00665356.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.29:C:\RECYCLER\NPROTECT\00665369.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.29:C:\RECYCLER\NPROTECT\00665457.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.29:C:\RECYCLER\NPROTECT\00665531.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.29:C:\RECYCLER\NPROTECT\00665545.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.29:C:\RECYCLER\NPROTECT\00665601.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.29:C:\RECYCLER\NPROTECT\00665609.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.29:C:\RECYCLER\NPROTECT\00665884.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.30:C:\RECYCLER\NPROTECT\00665884.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.32:C:\RECYCLER\NPROTECT\00665649.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.32:C:\RECYCLER\NPROTECT\00665652.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.32:C:\RECYCLER\NPROTECT\00665658.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.34:C:\RECYCLER\NPROTECT\00665229.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.34:C:\RECYCLER\NPROTECT\00665253.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.34:C:\RECYCLER\NPROTECT\00665263.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.35:C:\RECYCLER\NPROTECT\00665270.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.35:C:\RECYCLER\NPROTECT\00665275.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.35:C:\RECYCLER\NPROTECT\00665297.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.37:C:\RECYCLER\NPROTECT\00665463.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.37:C:\RECYCLER\NPROTECT\00665668.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.38:C:\RECYCLER\NPROTECT\00665461.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.40:C:\RECYCLER\NPROTECT\00665891.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.41:C:\RECYCLER\NPROTECT\00665503.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.41:C:\RECYCLER\NPROTECT\00665891.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.41:C:\RECYCLER\NPROTECT\00666364.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.42:C:\RECYCLER\NPROTECT\00665926.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.43:C:\RECYCLER\NPROTECT\00665483.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.43:C:\RECYCLER\NPROTECT\00665926.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.44:C:\RECYCLER\NPROTECT\00665674.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.44:C:\RECYCLER\NPROTECT\00665682.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.44:C:\RECYCLER\NPROTECT\00665940.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.45:C:\RECYCLER\NPROTECT\00665701.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.45:C:\RECYCLER\NPROTECT\00665721.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.45:C:\RECYCLER\NPROTECT\00665734.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.45:C:\RECYCLER\NPROTECT\00665865.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.45:C:\RECYCLER\NPROTECT\00665940.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.46:C:\RECYCLER\NPROTECT\00665495.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.46:C:\RECYCLER\NPROTECT\00665687.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.46:C:\RECYCLER\NPROTECT\00665770.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.46:C:\RECYCLER\NPROTECT\00665797.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.46:C:\RECYCLER\NPROTECT\00665800.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.46:C:\RECYCLER\NPROTECT\00665826.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.46:C:\RECYCLER\NPROTECT\00665836.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.47:C:\RECYCLER\NPROTECT\00665531.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.47:C:\RECYCLER\NPROTECT\00665545.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.47:C:\RECYCLER\NPROTECT\00665601.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.47:C:\RECYCLER\NPROTECT\00665609.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.47:C:\RECYCLER\NPROTECT\00665649.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.47:C:\RECYCLER\NPROTECT\00665652.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.47:C:\RECYCLER\NPROTECT\00665692.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.47:C:\RECYCLER\NPROTECT\00665695.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.47:C:\RECYCLER\NPROTECT\00665743.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.48:C:\RECYCLER\NPROTECT\00665520.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.48:C:\RECYCLER\NPROTECT\00666364.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.51:C:\RECYCLER\NPROTECT\00665658.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.53:C:\RECYCLER\NPROTECT\00666035.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.53:C:\RECYCLER\NPROTECT\00666060.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.53:C:\RECYCLER\NPROTECT\00666070.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.53:C:\RECYCLER\NPROTECT\00666097.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.54:C:\RECYCLER\NPROTECT\00665668.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.54:C:\RECYCLER\NPROTECT\00666035.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.54:C:\RECYCLER\NPROTECT\00666060.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.54:C:\RECYCLER\NPROTECT\00666070.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.54:C:\RECYCLER\NPROTECT\00666097.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.54:C:\RECYCLER\NPROTECT\00666346.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.55:C:\RECYCLER\NPROTECT\00666346.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.59:C:\RECYCLER\NPROTECT\00665674.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.61:C:\RECYCLER\NPROTECT\00665701.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.61:C:\RECYCLER\NPROTECT\00665721.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.62:C:\RECYCLER\NPROTECT\00665692.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.62:C:\RECYCLER\NPROTECT\00665695.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.63:C:\RECYCLER\NPROTECT\00665682.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.63:C:\RECYCLER\NPROTECT\00665687.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.63:C:\RECYCLER\NPROTECT\00665770.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.63:C:\RECYCLER\NPROTECT\00665797.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.63:C:\RECYCLER\NPROTECT\00665800.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.65:C:\RECYCLER\NPROTECT\00665865.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.66:C:\RECYCLER\NPROTECT\00665734.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.66:C:\RECYCLER\NPROTECT\00665743.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.66:C:\RECYCLER\NPROTECT\00665826.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.66:C:\RECYCLER\NPROTECT\00665836.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.7:C:\RECYCLER\NPROTECT\00665126.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.8:C:\RECYCLER\NPROTECT\00665483.MOZ -> TrackingCookie.2o7 : Cleaned.
:mozilla.18:C:\RECYCLER\NPROTECT\00665926.MOZ -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.19:C:\RECYCLER\NPROTECT\00665891.MOZ -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.19:C:\RECYCLER\NPROTECT\00665926.MOZ -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.19:C:\RECYCLER\NPROTECT\00665940.MOZ -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.19:C:\RECYCLER\NPROTECT\00666346.MOZ -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.19:C:\RECYCLER\NPROTECT\00666364.MOZ -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.20:C:\RECYCLER\NPROTECT\00665891.MOZ -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.20:C:\RECYCLER\NPROTECT\00665926.MOZ -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.21:C:\RECYCLER\NPROTECT\00665891.MOZ -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.21:C:\RECYCLER\NPROTECT\00665940.MOZ -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.21:C:\RECYCLER\NPROTECT\00666346.MOZ -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.22:C:\RECYCLER\NPROTECT\00665940.MOZ -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.22:C:\RECYCLER\NPROTECT\00666346.MOZ -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.23:C:\RECYCLER\NPROTECT\00666364.MOZ -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.24:C:\RECYCLER\NPROTECT\00666364.MOZ -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.28:C:\RECYCLER\NPROTECT\00666035.MOZ -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.28:C:\RECYCLER\NPROTECT\00666060.MOZ -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.28:C:\RECYCLER\NPROTECT\00666070.MOZ -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.28:C:\RECYCLER\NPROTECT\00666097.MOZ -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.29:C:\RECYCLER\NPROTECT\00666035.MOZ -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.29:C:\RECYCLER\NPROTECT\00666060.MOZ -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.29:C:\RECYCLER\NPROTECT\00666070.MOZ -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.29:C:\RECYCLER\NPROTECT\00666097.MOZ -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.30:C:\RECYCLER\NPROTECT\00666035.MOZ -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.30:C:\RECYCLER\NPROTECT\00666060.MOZ -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.30:C:\RECYCLER\NPROTECT\00666070.MOZ -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.30:C:\RECYCLER\NPROTECT\00666097.MOZ -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.41:C:\RECYCLER\NPROTECT\00666357.MOZ -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.43:C:\RECYCLER\NPROTECT\00666357.MOZ -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.44:C:\RECYCLER\NPROTECT\00666357.MOZ -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.10:C:\RECYCLER\NPROTECT\00665073.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.10:C:\RECYCLER\NPROTECT\00665687.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.10:C:\RECYCLER\NPROTECT\00665701.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.10:C:\RECYCLER\NPROTECT\00665826.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.11:C:\RECYCLER\NPROTECT\00665743.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.11:C:\RECYCLER\NPROTECT\00665826.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.12:C:\RECYCLER\NPROTECT\00665701.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.13:C:\RECYCLER\NPROTECT\00665800.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.14:C:\RECYCLER\NPROTECT\00665050.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.14:C:\RECYCLER\NPROTECT\00665721.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.14:C:\RECYCLER\NPROTECT\00665800.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.15:C:\RECYCLER\NPROTECT\00665050.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.15:C:\RECYCLER\NPROTECT\00665721.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.34:C:\RECYCLER\NPROTECT\00665879.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.35:C:\RECYCLER\NPROTECT\00665879.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.36:C:\RECYCLER\NPROTECT\00665884.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.37:C:\RECYCLER\NPROTECT\00665884.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.54:C:\RECYCLER\NPROTECT\00665926.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.55:C:\RECYCLER\NPROTECT\00665891.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.56:C:\RECYCLER\NPROTECT\00665891.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.56:C:\RECYCLER\NPROTECT\00665926.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.58:C:\RECYCLER\NPROTECT\00665940.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.59:C:\RECYCLER\NPROTECT\00665940.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.64:C:\RECYCLER\NPROTECT\00666035.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.64:C:\RECYCLER\NPROTECT\00666060.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.64:C:\RECYCLER\NPROTECT\00666070.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.64:C:\RECYCLER\NPROTECT\00666097.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.65:C:\RECYCLER\NPROTECT\00666035.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.65:C:\RECYCLER\NPROTECT\00666060.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.65:C:\RECYCLER\NPROTECT\00666070.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.65:C:\RECYCLER\NPROTECT\00666097.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.65:C:\RECYCLER\NPROTECT\00666346.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.66:C:\RECYCLER\NPROTECT\00666346.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.66:C:\RECYCLER\NPROTECT\00666357.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.66:C:\RECYCLER\NPROTECT\00666364.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.67:C:\RECYCLER\NPROTECT\00666357.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.67:C:\RECYCLER\NPROTECT\00666364.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.6:C:\RECYCLER\NPROTECT\00665055.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.6:C:\RECYCLER\NPROTECT\00665090.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.6:C:\RECYCLER\NPROTECT\00665695.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.6:C:\RECYCLER\NPROTECT\00665734.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.6:C:\RECYCLER\NPROTECT\00665770.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.7:C:\RECYCLER\NPROTECT\00665041.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.7:C:\RECYCLER\NPROTECT\00665090.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.7:C:\RECYCLER\NPROTECT\00665095.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.7:C:\RECYCLER\NPROTECT\00665692.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.7:C:\RECYCLER\NPROTECT\00665743.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.7:C:\RECYCLER\NPROTECT\00665797.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.8:C:\RECYCLER\NPROTECT\00665041.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.8:C:\RECYCLER\NPROTECT\00665073.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.8:C:\RECYCLER\NPROTECT\00665095.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.8:C:\RECYCLER\NPROTECT\00665103.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.8:C:\RECYCLER\NPROTECT\00665692.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.8:C:\RECYCLER\NPROTECT\00665695.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.8:C:\RECYCLER\NPROTECT\00665734.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.8:C:\RECYCLER\NPROTECT\00665836.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.8:C:\RECYCLER\NPROTECT\00665865.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.9:C:\RECYCLER\NPROTECT\00665055.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.9:C:\RECYCLER\NPROTECT\00665103.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.9:C:\RECYCLER\NPROTECT\00665687.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.9:C:\RECYCLER\NPROTECT\00665770.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.9:C:\RECYCLER\NPROTECT\00665797.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.9:C:\RECYCLER\NPROTECT\00665836.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.9:C:\RECYCLER\NPROTECT\00665865.MOZ -> TrackingCookie.Advertising : Cleaned.
:mozilla.10:C:\RECYCLER\NPROTECT\00665609.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.11:C:\RECYCLER\NPROTECT\00665095.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.11:C:\RECYCLER\NPROTECT\00665263.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.11:C:\RECYCLER\NPROTECT\00665601.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.12:C:\RECYCLER\NPROTECT\00665734.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.13:C:\RECYCLER\NPROTECT\00665270.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.13:C:\RECYCLER\NPROTECT\00665668.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.13:C:\RECYCLER\NPROTECT\00665743.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.13:C:\RECYCLER\NPROTECT\00665770.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.15:C:\RECYCLER\NPROTECT\00665275.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.15:C:\RECYCLER\NPROTECT\00665297.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.15:C:\RECYCLER\NPROTECT\00665687.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.15:C:\RECYCLER\NPROTECT\00665692.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.15:C:\RECYCLER\NPROTECT\00665695.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.15:C:\RECYCLER\NPROTECT\00665701.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.16:C:\RECYCLER\NPROTECT\00665103.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.18:C:\RECYCLER\NPROTECT\00665674.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.18:C:\RECYCLER\NPROTECT\00665797.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.20:C:\RECYCLER\NPROTECT\00665865.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.21:C:\RECYCLER\NPROTECT\00665531.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.21:C:\RECYCLER\NPROTECT\00665800.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.21:C:\RECYCLER\NPROTECT\00665826.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.21:C:\RECYCLER\NPROTECT\00665836.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.30:C:\RECYCLER\NPROTECT\00665348.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.39:C:\RECYCLER\NPROTECT\00665356.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.39:C:\RECYCLER\NPROTECT\00665369.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.39:C:\RECYCLER\NPROTECT\00665457.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.44:C:\RECYCLER\NPROTECT\00665879.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.48:C:\RECYCLER\NPROTECT\00665463.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.48:C:\RECYCLER\NPROTECT\00665884.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.49:C:\RECYCLER\NPROTECT\00665461.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.49:C:\RECYCLER\NPROTECT\00665503.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.50:C:\RECYCLER\NPROTECT\00665483.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.50:C:\RECYCLER\NPROTECT\00665495.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.64:C:\RECYCLER\NPROTECT\00665891.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.66:C:\RECYCLER\NPROTECT\00665926.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.67:C:\RECYCLER\NPROTECT\00665940.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.6:C:\RECYCLER\NPROTECT\00665229.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.6:C:\RECYCLER\NPROTECT\00665545.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.6:C:\RECYCLER\NPROTECT\00665652.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.6:C:\RECYCLER\NPROTECT\00665721.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.75:C:\RECYCLER\NPROTECT\00666070.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.75:C:\RECYCLER\NPROTECT\00666097.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.76:C:\RECYCLER\NPROTECT\00666035.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.76:C:\RECYCLER\NPROTECT\00666060.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.76:C:\RECYCLER\NPROTECT\00666346.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.77:C:\RECYCLER\NPROTECT\00666357.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.77:C:\RECYCLER\NPROTECT\00666364.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.7:C:\RECYCLER\NPROTECT\00665520.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.7:C:\RECYCLER\NPROTECT\00665682.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.8:C:\RECYCLER\NPROTECT\00665253.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.8:C:\RECYCLER\NPROTECT\00665649.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.8:C:\RECYCLER\NPROTECT\00665658.MOZ -> TrackingCookie.Atdmt : Cleaned.
:mozilla.10:C:\RECYCLER\NPROTECT\00665050.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.10:C:\RECYCLER\NPROTECT\00665090.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.10:C:\RECYCLER\NPROTECT\00665668.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.10:C:\RECYCLER\NPROTECT\00665800.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.10:C:\RECYCLER\NPROTECT\00665865.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.11:C:\RECYCLER\NPROTECT\00665041.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.11:C:\RECYCLER\NPROTECT\00665055.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.11:C:\RECYCLER\NPROTECT\00665073.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.11:C:\RECYCLER\NPROTECT\00665103.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.11:C:\RECYCLER\NPROTECT\00665668.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.11:C:\RECYCLER\NPROTECT\00665800.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.11:C:\RECYCLER\NPROTECT\00665865.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.12:C:\RECYCLER\NPROTECT\00665041.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.12:C:\RECYCLER\NPROTECT\00665055.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.12:C:\RECYCLER\NPROTECT\00665073.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.12:C:\RECYCLER\NPROTECT\00665090.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.12:C:\RECYCLER\NPROTECT\00665095.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.12:C:\RECYCLER\NPROTECT\00665103.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.12:C:\RECYCLER\NPROTECT\00665687.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.12:C:\RECYCLER\NPROTECT\00665692.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.12:C:\RECYCLER\NPROTECT\00665695.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.12:C:\RECYCLER\NPROTECT\00665721.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.12:C:\RECYCLER\NPROTECT\00665836.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.12:C:\RECYCLER\NPROTECT\00665865.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.13:C:\RECYCLER\NPROTECT\00665041.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.13:C:\RECYCLER\NPROTECT\00665055.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.13:C:\RECYCLER\NPROTECT\00665073.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.13:C:\RECYCLER\NPROTECT\00665090.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.13:C:\RECYCLER\NPROTECT\00665095.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.13:C:\RECYCLER\NPROTECT\00665103.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.13:C:\RECYCLER\NPROTECT\00665687.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.13:C:\RECYCLER\NPROTECT\00665692.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.13:C:\RECYCLER\NPROTECT\00665695.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.13:C:\RECYCLER\NPROTECT\00665701.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.13:C:\RECYCLER\NPROTECT\00665734.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.14:C:\RECYCLER\NPROTECT\00665055.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.14:C:\RECYCLER\NPROTECT\00665073.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.14:C:\RECYCLER\NPROTECT\00665103.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.14:C:\RECYCLER\NPROTECT\00665674.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.14:C:\RECYCLER\NPROTECT\00665687.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.14:C:\RECYCLER\NPROTECT\00665692.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.14:C:\RECYCLER\NPROTECT\00665695.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.14:C:\RECYCLER\NPROTECT\00665734.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.14:C:\RECYCLER\NPROTECT\00665743.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.14:C:\RECYCLER\NPROTECT\00665770.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.15:C:\RECYCLER\NPROTECT\00665055.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.15:C:\RECYCLER\NPROTECT\00665073.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.15:C:\RECYCLER\NPROTECT\00665095.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.15:C:\RECYCLER\NPROTECT\00665103.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.15:C:\RECYCLER\NPROTECT\00665674.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.15:C:\RECYCLER\NPROTECT\00665734.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.15:C:\RECYCLER\NPROTECT\00665743.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.15:C:\RECYCLER\NPROTECT\00665770.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.16:C:\RECYCLER\NPROTECT\00665095.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.16:C:\RECYCLER\NPROTECT\00665674.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.16:C:\RECYCLER\NPROTECT\00665743.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.16:C:\RECYCLER\NPROTECT\00665770.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.17:C:\RECYCLER\NPROTECT\00665095.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.19:C:\RECYCLER\NPROTECT\00665797.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.20:C:\RECYCLER\NPROTECT\00665797.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.21:C:\RECYCLER\NPROTECT\00665797.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.32:C:\RECYCLER\NPROTECT\00665879.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.33:C:\RECYCLER\NPROTECT\00665879.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.36:C:\RECYCLER\NPROTECT\00665879.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.38:C:\RECYCLER\NPROTECT\00665884.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.39:C:\RECYCLER\NPROTECT\00665884.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.40:C:\RECYCLER\NPROTECT\00665884.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.52:C:\RECYCLER\NPROTECT\00665891.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.53:C:\RECYCLER\NPROTECT\00665891.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.54:C:\RECYCLER\NPROTECT\00665891.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.55:C:\RECYCLER\NPROTECT\00665926.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.55:C:\RECYCLER\NPROTECT\00665940.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.56:C:\RECYCLER\NPROTECT\00665940.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.57:C:\RECYCLER\NPROTECT\00665926.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.57:C:\RECYCLER\NPROTECT\00665940.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.58:C:\RECYCLER\NPROTECT\00665926.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.66:C:\RECYCLER\NPROTECT\00666035.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.66:C:\RECYCLER\NPROTECT\00666060.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.66:C:\RECYCLER\NPROTECT\00666070.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.66:C:\RECYCLER\NPROTECT\00666097.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.67:C:\RECYCLER\NPROTECT\00666035.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.67:C:\RECYCLER\NPROTECT\00666060.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.67:C:\RECYCLER\NPROTECT\00666070.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.67:C:\RECYCLER\NPROTECT\00666097.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.67:C:\RECYCLER\NPROTECT\00666346.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.68:C:\RECYCLER\NPROTECT\00666035.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.68:C:\RECYCLER\NPROTECT\00666060.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.68:C:\RECYCLER\NPROTECT\00666070.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.68:C:\RECYCLER\NPROTECT\00666097.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.68:C:\RECYCLER\NPROTECT\00666346.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.68:C:\RECYCLER\NPROTECT\00666357.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.68:C:\RECYCLER\NPROTECT\00666364.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.69:C:\RECYCLER\NPROTECT\00666346.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.69:C:\RECYCLER\NPROTECT\00666357.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.69:C:\RECYCLER\NPROTECT\00666364.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.6:C:\RECYCLER\NPROTECT\00665050.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.6:C:\RECYCLER\NPROTECT\00665682.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.6:C:\RECYCLER\NPROTECT\00665800.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.6:C:\RECYCLER\NPROTECT\00665826.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.6:C:\RECYCLER\NPROTECT\00665836.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.70:C:\RECYCLER\NPROTECT\00666357.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.70:C:\RECYCLER\NPROTECT\00666364.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.7:C:\RECYCLER\NPROTECT\00665050.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.7:C:\RECYCLER\NPROTECT\00665721.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.7:C:\RECYCLER\NPROTECT\00665836.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.8:C:\RECYCLER\NPROTECT\00665050.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.8:C:\RECYCLER\NPROTECT\00665090.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.8:C:\RECYCLER\NPROTECT\00665682.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.8:C:\RECYCLER\NPROTECT\00665701.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.8:C:\RECYCLER\NPROTECT\00665826.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.9:C:\RECYCLER\NPROTECT\00665050.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.9:C:\RECYCLER\NPROTECT\00665090.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.9:C:\RECYCLER\NPROTECT\00665668.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.9:C:\RECYCLER\NPROTECT\00665682.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.9:C:\RECYCLER\NPROTECT\00665701.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.9:C:\RECYCLER\NPROTECT\00665721.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.9:C:\RECYCLER\NPROTECT\00665826.MOZ -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.24:C:\RECYCLER\NPROTECT\00665926.MOZ -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.24:C:\RECYCLER\NPROTECT\00666346.MOZ -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.25:C:\RECYCLER\NPROTECT\00665940.MOZ -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.34:C:\RECYCLER\NPROTECT\00666035.MOZ -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.34:C:\RECYCLER\NPROTECT\00666060.MOZ -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.34:C:\RECYCLER\NPROTECT\00666070.MOZ -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.34:C:\RECYCLER\NPROTECT\00666097.MOZ -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.46:C:\RECYCLER\NPROTECT\00666357.MOZ -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.50:C:\RECYCLER\NPROTECT\00666364.MOZ -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.13:C:\RECYCLER\NPROTECT\00666035.MOZ -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.14:C:\RECYCLER\NPROTECT\00666060.MOZ -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.14:C:\RECYCLER\NPROTECT\00666070.MOZ -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.14:C:\RECYCLER\NPROTECT\00666097.MOZ -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.22:C:\RECYCLER\NPROTECT\00665545.MOZ -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.22:C:\RECYCLER\NPROTECT\00665601.MOZ -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.22:C:\RECYCLER\NPROTECT\00665609.MOZ -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.24:C:\RECYCLER\NPROTECT\00665649.MOZ -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.24:C:\RECYCLER\NPROTECT\00665652.MOZ -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.26:C:\RECYCLER\NPROTECT\00665658.MOZ -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.31:C:\RECYCLER\NPROTECT\00665668.MOZ -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.36:C:\RECYCLER\NPROTECT\00665674.MOZ -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.36:C:\RECYCLER\NPROTECT\00666346.MOZ -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.37:C:\RECYCLER\NPROTECT\00665682.MOZ -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.39:C:\RECYCLER\NPROTECT\00665687.MOZ -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.39:C:\RECYCLER\NPROTECT\00665692.MOZ -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.39:C:\RECYCLER\NPROTECT\00665695.MOZ -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.39:C:\RECYCLER\NPROTECT\00665701.MOZ -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.39:C:\RECYCLER\NPROTECT\00665721.MOZ -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.39:C:\RECYCLER\NPROTECT\00665734.MOZ -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.39:C:\RECYCLER\NPROTECT\00665865.MOZ -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.40:C:\RECYCLER\NPROTECT\00665743.MOZ -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.40:C:\RECYCLER\NPROTECT\00665770.MOZ -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.40:C:\RECYCLER\NPROTECT\00665797.MOZ -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.40:C:\RECYCLER\NPROTECT\00665800.MOZ -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.40:C:\RECYCLER\NPROTECT\00665826.MOZ -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.40:C:\RECYCLER\NPROTECT\00665836.MOZ -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.49:C:\RECYCLER\NPROTECT\00665879.MOZ -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.51:C:\RECYCLER\NPROTECT\00665884.MOZ -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.58:C:\RECYCLER\NPROTECT\00666357.MOZ -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.60:C:\RECYCLER\NPROTECT\00666364.MOZ -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.67:C:\RECYCLER\NPROTECT\00665891.MOZ -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.69:C:\RECYCLER\NPROTECT\00665926.MOZ -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.6:C:\RECYCLER\NPROTECT\00665531.MOZ -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.70:C:\RECYCLER\NPROTECT\00665940.MOZ -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.17:C:\RECYCLER\NPROTECT\00665891.MOZ -> TrackingCookie.Myaffiliateprogram : Cleaned.
:mozilla.17:C:\RECYCLER\NPROTECT\00666364.MOZ -> TrackingCookie.Myaffiliateprogram : Cleaned.
:mozilla.18:C:\RECYCLER\NPROTECT\00666364.MOZ -> TrackingCookie.Myaffiliateprogram : Cleaned.
:mozilla.25:C:\RECYCLER\NPROTECT\00665926.MOZ -> TrackingCookie.Myaffiliateprogram : Cleaned.
:mozilla.25:C:\RECYCLER\NPROTECT\00666346.MOZ -> TrackingCookie.Myaffiliateprogram : Cleaned.
:mozilla.26:C:\RECYCLER\NPROTECT\00665940.MOZ -> TrackingCookie.Myaffiliateprogram : Cleaned.
:mozilla.26:C:\RECYCLER\NPROTECT\00666346.MOZ -> TrackingCookie.Myaffiliateprogram : Cleaned.
:mozilla.35:C:\RECYCLER\NPROTECT\00666035.MOZ -> TrackingCookie.Myaffiliateprogram : Cleaned.
:mozilla.35:C:\RECYCLER\NPROTECT\00666060.MOZ -> TrackingCookie.Myaffiliateprogram : Cleaned.
:mozilla.35:C:\RECYCLER\NPROTECT\00666070.MOZ -> TrackingCookie.Myaffiliateprogram : Cleaned.
:mozilla.35:C:\RECYCLER\NPROTECT\00666097.MOZ -> TrackingCookie.Myaffiliateprogram : Cleaned.
:mozilla.47:C:\RECYCLER\NPROTECT\00666357.MOZ -> TrackingCookie.Myaffiliateprogram : Cleaned.
:mozilla.48:C:\RECYCLER\NPROTECT\00666357.MOZ -> TrackingCookie.Myaffiliateprogram : Cleaned.
:mozilla.10:C:\RECYCLER\NPROTECT\00666035.MOZ -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.10:C:\RECYCLER\NPROTECT\00666060.MOZ -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.10:C:\RECYCLER\NPROTECT\00666070.MOZ -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.10:C:\RECYCLER\NPROTECT\00666097.MOZ -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.11:C:\RECYCLER\NPROTECT\00666035.MOZ -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.11:C:\RECYCLER\NPROTECT\00666060.MOZ -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.11:C:\RECYCLER\NPROTECT\00666070.MOZ -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.11:C:\RECYCLER\NPROTECT\00666097.MOZ -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.12:C:\RECYCLER\NPROTECT\00666060.MOZ -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.12:C:\RECYCLER\NPROTECT\00666070.MOZ -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.12:C:\RECYCLER\NPROTECT\00666097.MOZ -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.29:C:\RECYCLER\NPROTECT\00666346.MOZ -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.30:C:\RECYCLER\NPROTECT\00666346.MOZ -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.31:C:\RECYCLER\NPROTECT\00666346.MOZ -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.32:C:\RECYCLER\NPROTECT\00666346.MOZ -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.33:C:\RECYCLER\NPROTECT\00666346.MOZ -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.51:C:\RECYCLER\NPROTECT\00666357.MOZ -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.52:C:\RECYCLER\NPROTECT\00666357.MOZ -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.53:C:\RECYCLER\NPROTECT\00666357.MOZ -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.53:C:\RECYCLER\NPROTECT\00666364.MOZ -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.54:C:\RECYCLER\NPROTECT\00666357.MOZ -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.54:C:\RECYCLER\NPROTECT\00666364.MOZ -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.55:C:\RECYCLER\NPROTECT\00666357.MOZ -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.55:C:\RECYCLER\NPROTECT\00666364.MOZ -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.56:C:\RECYCLER\NPROTECT\00666364.MOZ -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.57:C:\RECYCLER\NPROTECT\00666364.MOZ -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.7:C:\RECYCLER\NPROTECT\00666035.MOZ -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.8:C:\RECYCLER\NPROTECT\00666035.MOZ -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.8:C:\RECYCLER\NPROTECT\00666060.MOZ -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.8:C:\RECYCLER\NPROTECT\00666070.MOZ -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.8:C:\RECYCLER\NPROTECT\00666097.MOZ -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.9:C:\RECYCLER\NPROTECT\00666035.MOZ -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.9:C:\RECYCLER\NPROTECT\00666060.MOZ -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.9:C:\RECYCLER\NPROTECT\00666070.MOZ -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.9:C:\RECYCLER\NPROTECT\00666097.MOZ -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.18:C:\RECYCLER\NPROTECT\00665891.MOZ -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.20:C:\RECYCLER\NPROTECT\00665940.MOZ -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.20:C:\RECYCLER\NPROTECT\00666346.MOZ -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.21:C:\RECYCLER\NPROTECT\00666364.MOZ -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.23:C:\RECYCLER\NPROTECT\00665926.MOZ -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.33:C:\RECYCLER\NPROTECT\00666035.MOZ -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.33:C:\RECYCLER\NPROTECT\00666060.MOZ -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.33:C:\RECYCLER\NPROTECT\00666070.MOZ -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.33:C:\RECYCLER\NPROTECT\00666097.MOZ -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.42:C:\RECYCLER\NPROTECT\00666357.MOZ -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.10:C:\RECYCLER\NPROTECT\00665674.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.11:C:\RECYCLER\NPROTECT\00665674.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.12:C:\RECYCLER\NPROTECT\00665674.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.12:C:\RECYCLER\NPROTECT\00665797.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.13:C:\RECYCLER\NPROTECT\00665797.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.14:C:\RECYCLER\NPROTECT\00665682.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.14:C:\RECYCLER\NPROTECT\00665797.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.14:C:\RECYCLER\NPROTECT\00665865.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.15:C:\RECYCLER\NPROTECT\00665682.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.15:C:\RECYCLER\NPROTECT\00665797.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.15:C:\RECYCLER\NPROTECT\00665800.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.15:C:\RECYCLER\NPROTECT\00665826.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.15:C:\RECYCLER\NPROTECT\00665836.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.15:C:\RECYCLER\NPROTECT\00665865.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.16:C:\RECYCLER\NPROTECT\00665682.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.16:C:\RECYCLER\NPROTECT\00665687.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.16:C:\RECYCLER\NPROTECT\00665692.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.16:C:\RECYCLER\NPROTECT\00665695.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.16:C:\RECYCLER\NPROTECT\00665701.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.16:C:\RECYCLER\NPROTECT\00665721.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.16:C:\RECYCLER\NPROTECT\00665734.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.16:C:\RECYCLER\NPROTECT\00665797.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.16:C:\RECYCLER\NPROTECT\00665800.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.16:C:\RECYCLER\NPROTECT\00665826.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.16:C:\RECYCLER\NPROTECT\00665836.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.16:C:\RECYCLER\NPROTECT\00665865.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.17:C:\RECYCLER\NPROTECT\00665682.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.17:C:\RECYCLER\NPROTECT\00665687.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.17:C:\RECYCLER\NPROTECT\00665692.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.17:C:\RECYCLER\NPROTECT\00665695.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.17:C:\RECYCLER\NPROTECT\00665701.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.17:C:\RECYCLER\NPROTECT\00665721.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.17:C:\RECYCLER\NPROTECT\00665734.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.17:C:\RECYCLER\NPROTECT\00665743.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.17:C:\RECYCLER\NPROTECT\00665770.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.17:C:\RECYCLER\NPROTECT\00665800.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.17:C:\RECYCLER\NPROTECT\00665826.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.17:C:\RECYCLER\NPROTECT\00665836.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.17:C:\RECYCLER\NPROTECT\00665865.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.18:C:\RECYCLER\NPROTECT\00665682.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.18:C:\RECYCLER\NPROTECT\00665687.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.18:C:\RECYCLER\NPROTECT\00665692.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.18:C:\RECYCLER\NPROTECT\00665695.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.18:C:\RECYCLER\NPROTECT\00665701.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.18:C:\RECYCLER\NPROTECT\00665721.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.18:C:\RECYCLER\NPROTECT\00665734.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.18:C:\RECYCLER\NPROTECT\00665743.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.18:C:\RECYCLER\NPROTECT\00665770.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.18:C:\RECYCLER\NPROTECT\00665800.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.18:C:\RECYCLER\NPROTECT\00665826.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.18:C:\RECYCLER\NPROTECT\00665836.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.18:C:\RECYCLER\NPROTECT\00665865.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.19:C:\RECYCLER\NPROTECT\00665687.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.19:C:\RECYCLER\NPROTECT\00665692.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.19:C:\RECYCLER\NPROTECT\00665695.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.19:C:\RECYCLER\NPROTECT\00665701.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.19:C:\RECYCLER\NPROTECT\00665721.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.19:C:\RECYCLER\NPROTECT\00665734.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.19:C:\RECYCLER\NPROTECT\00665743.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.19:C:\RECYCLER\NPROTECT\00665770.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.19:C:\RECYCLER\NPROTECT\00665800.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.19:C:\RECYCLER\NPROTECT\00665826.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.19:C:\RECYCLER\NPROTECT\00665836.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.20:C:\RECYCLER\NPROTECT\00665687.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.20:C:\RECYCLER\NPROTECT\00665692.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.20:C:\RECYCLER\NPROTECT\00665695.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.20:C:\RECYCLER\NPROTECT\00665701.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.20:C:\RECYCLER\NPROTECT\00665721.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.20:C:\RECYCLER\NPROTECT\00665734.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.20:C:\RECYCLER\NPROTECT\00665743.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.20:C:\RECYCLER\NPROTECT\00665770.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.21:C:\RECYCLER\NPROTECT\00665743.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.21:C:\RECYCLER\NPROTECT\00665770.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.38:C:\RECYCLER\NPROTECT\00665879.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.39:C:\RECYCLER\NPROTECT\00665879.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.40:C:\RECYCLER\NPROTECT\00665879.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.41:C:\RECYCLER\NPROTECT\00665879.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.42:C:\RECYCLER\NPROTECT\00665879.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.42:C:\RECYCLER\NPROTECT\00665884.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.43:C:\RECYCLER\NPROTECT\00665884.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.44:C:\RECYCLER\NPROTECT\00665884.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.45:C:\RECYCLER\NPROTECT\00665884.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.46:C:\RECYCLER\NPROTECT\00665884.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.58:C:\RECYCLER\NPROTECT\00665891.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.59:C:\RECYCLER\NPROTECT\00665891.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.60:C:\RECYCLER\NPROTECT\00665891.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.60:C:\RECYCLER\NPROTECT\00665926.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.61:C:\RECYCLER\NPROTECT\00665891.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.61:C:\RECYCLER\NPROTECT\00665926.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.61:C:\RECYCLER\NPROTECT\00665940.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.62:C:\RECYCLER\NPROTECT\00665891.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.62:C:\RECYCLER\NPROTECT\00665926.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.62:C:\RECYCLER\NPROTECT\00665940.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.63:C:\RECYCLER\NPROTECT\00665926.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.63:C:\RECYCLER\NPROTECT\00665940.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.64:C:\RECYCLER\NPROTECT\00665926.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.64:C:\RECYCLER\NPROTECT\00665940.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.65:C:\RECYCLER\NPROTECT\00665940.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.70:C:\RECYCLER\NPROTECT\00666035.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.70:C:\RECYCLER\NPROTECT\00666060.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.70:C:\RECYCLER\NPROTECT\00666070.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.70:C:\RECYCLER\NPROTECT\00666097.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.71:C:\RECYCLER\NPROTECT\00666035.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.71:C:\RECYCLER\NPROTECT\00666060.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.71:C:\RECYCLER\NPROTECT\00666070.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.71:C:\RECYCLER\NPROTECT\00666097.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.71:C:\RECYCLER\NPROTECT\00666346.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.72:C:\RECYCLER\NPROTECT\00666035.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.72:C:\RECYCLER\NPROTECT\00666060.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.72:C:\RECYCLER\NPROTECT\00666070.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.72:C:\RECYCLER\NPROTECT\00666097.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.72:C:\RECYCLER\NPROTECT\00666346.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.72:C:\RECYCLER\NPROTECT\00666357.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.72:C:\RECYCLER\NPROTECT\00666364.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.73:C:\RECYCLER\NPROTECT\00666035.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.73:C:\RECYCLER\NPROTECT\00666060.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.73:C:\RECYCLER\NPROTECT\00666070.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.73:C:\RECYCLER\NPROTECT\00666097.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.73:C:\RECYCLER\NPROTECT\00666346.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.73:C:\RECYCLER\NPROTECT\00666357.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.73:C:\RECYCLER\NPROTECT\00666364.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.74:C:\RECYCLER\NPROTECT\00666035.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.74:C:\RECYCLER\NPROTECT\00666060.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.74:C:\RECYCLER\NPROTECT\00666070.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.74:C:\RECYCLER\NPROTECT\00666097.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.74:C:\RECYCLER\NPROTECT\00666346.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.74:C:\RECYCLER\NPROTECT\00666357.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.74:C:\RECYCLER\NPROTECT\00666364.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.75:C:\RECYCLER\NPROTECT\00666346.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.75:C:\RECYCLER\NPROTECT\00666357.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.75:C:\RECYCLER\NPROTECT\00666364.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.76:C:\RECYCLER\NPROTECT\00666357.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.76:C:\RECYCLER\NPROTECT\00666364.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.9:C:\RECYCLER\NPROTECT\00665674.MOZ -> TrackingCookie.Yieldmanager : Cleaned.
C:\WINDOWS\system32\wnscpisu.exe -> Trojan.Small : Cleaned with backup (quarantined).
C:\WINDOWS\uninstall_nmon.vbs -> Trojan.Small : Cleaned with backup (quarantined).
C:\WINDOWS\system32\unsvchosts.exe -> Trojan.Small.mf : Cleaned with backup (quarantined).

::Report end

Thanks for all of your help so far! :)

MelissaH 0 Newbie Poster · Answer 4 · 2007-04-13T21:34:09+00:00

I know I might sound stupid or crazy but I still can't save anything. When I hit the Save List button, the program closes. I tried to paste the information here but it still doesn't work.

What should I do? :(

MelissaH 0 Newbie Poster · Answer 5 · 2007-04-14T08:53:37+00:00

SDFix: Version 1.78

Run by May - Fri 04/13/2007 - 22:30:03.50

Microsoft Windows XP [Version 5.1.2600]

Running From: C:\DOCUME~1\May\Desktop\SDFix

Safe Mode:
Checking Services: 

Name:
Client IP-IPX

ImagePath:
"C:\WINDOWS\System32\svchosts.exe" -e mc-110-12-0000904

Client IP-IPX - Deleted



Restoring Windows Registry Values
Restoring Windows Default Hosts File


Rebooting...

Normal Mode:
Checking Files:

No Trojan Files Found...




Removing Temp Files

ADS Check:

Checking if ADS is attached to system32 Folder 
C:\WINDOWS\system32
No streams found.

Checking if ADS is attached to svchost.exe
C:\WINDOWS\system32\svchost.exe
No streams found.



                                 Final Check:

Remaining Services:
------------------




Remaining Files:
---------------


Checking For Files with Hidden Attributes:

C:\Documents and Settings\May\NetHood\erilan.d2g.com\Desktop.ini
C:\Documents and Settings\May\NetHood\international_opportunities on [url]www.commerce.ubc.ca\Desktop.ini[/url]
C:\Documents and Settings\May\NetHood\ON on teacherweb.com\Desktop.ini
C:\WINDOWS\system32\vturo.dll
C:\WINDOWS\VXNlcg\asappsrv.dll
C:\Documents and Settings\May\Application Data\?ymantec\winspool.exe
C:\Documents and Settings\May\My Documents\?ecurity\m?hta.exe
C:\Program Files\Common Files\Yazzle1122OinUninstaller.exe
C:\WINDOWS\VXNlcg\command.exe
C:\Documents and Settings\May\Local Settings\Temp\LWI16.tmp\nai.idx
C:\Documents and Settings\May\My Documents\~WRL3317.tmp
C:\Documents and Settings\May\My Documents\Mommy & Daddy\~WRL3846.tmp
C:\WINDOWS\LastGood.Tmp\INF\oem10.inf
C:\WINDOWS\LastGood.Tmp\INF\oem10.PNF
C:\WINDOWS\system32\orutv.tmp

                                 Finished


-----

Logfile of HijackThis v1.99.1
Scan saved at 10:46:21 PM, on 4/13/2007
Platform: Windows XP  (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\VXNlcg\command.exe
C:\WINDOWS\System32\CTSvcCDA.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Network Monitor\netmon.exe
C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\System32\wdfmgr.exe
C:\Program Files\Norton AntiVirus\SAVScan.exe
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\notepad.exe
C:\Program Files\Creative\ShareDLL\CtNotify.exe
C:\Program Files\MSN Apps\Updater\01.02.3000.1001\en-ca\msnappau.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Creative\ShareDLL\MediaDet.Exe
C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
C:\WINDOWS\System32\ezSP_Px.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\webHancer\Programs\whagent.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\nfomon\nfomon.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Ipwindows\ipwins.exe
C:\Documents and Settings\May\My Documents\?ecurity\m?hta.exe
C:\DOCUME~1\May\APPLIC~1\YMANTE~1\winspool.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\May\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchAssistant = ,
R1 - HKCU\Software\Microsoft\Internet Explorer,CustomizeSearch = ,
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = [url]http://sympatico.msn.ca/[/url]
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer provided by Sympatico
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = [url]http://proxy.library.utoronto.ca:8080[/url]
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
R3 - Default URLSearchHook is missing
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\en-ca\msntb.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: Bar888 - {C1B4DEC2-2623-438e-9CA2-C9043AB28508} - C:\PROGRA~1\COMMON~1\{3C6DA~1\Bar888.dll
O4 - HKLM\..\Run: [Disc Detector] C:\Program Files\Creative\ShareDLL\CtNotify.exe
O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.3000.1001\en-ca\msnappau.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Advanced Tools Check] C:\PROGRA~1\NORTON~1\AdvTools\ADVCHK.EXE
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - HKLM\..\Run: [ezShieldProtector for Px] C:\WINDOWS\System32\ezSP_Px.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [webHancer Agent] C:\Program Files\webHancer\Programs\whagent.exe
O4 - HKLM\..\Run: [PrintDrive] rundll32.exe "C:\WINDOWS\System32\bdepwjry.dll",setvm
O4 - HKLM\..\Run: [Nfo] C:\WINDOWS\System32\nfomon\nfomon.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_0
O4 - HKCU\..\Run: [IpWins] C:\Program Files\Ipwindows\ipwins.exe
O4 - HKCU\..\Run: [Ebm] "C:\Documents and Settings\May\My Documents\?ecurity\m?hta.exe"
O4 - HKCU\..\Run: [Airi] "C:\DOCUME~1\May\APPLIC~1\YMANTE~1\winspool.exe" -vt ndrv
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Windows Update.hta
O8 - Extra context menu item: &Search - [url]http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=zuzed004YYCA_ZZzer000[/url]
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O10 - Hijacked Internet access by WebHancer
O10 - Hijacked Internet access by WebHancer
O10 - Hijacked Internet access by WebHancer
O16 - DPF: TruePass EPF 7,0,100,684 - [url]https://blrscr3.egs-seg.gc.ca/applets/entrusttruepassapplet-epf.cab[/url]
O16 - DPF: Yahoo! Graffiti - [url]http://download.games.yahoo.com/games/clients/y/grt5_x.cab[/url]
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - [url]http://ak.exe.imgfarm.com/images/nocache/funwebproducts/ei/MyFunCardsFWBInitialSetup1.0.0.15-3.cab[/url]
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - [url]http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab[/url]
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - [url]http://apple.speedera.net/qtinstall.info.apple.com/borris/us/win/QuickTimeInstaller.exe[/url]
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - [url]http://burrenda17.spaces.msn.com//PhotoUpload/MsnPUpld.cab[/url]
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - [url]http://messenger.zone.msn.com/EN-US/a-UNO1/GAME_UNO1.cab[/url]
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - [url]http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab[/url]
O16 - DPF: {BD8667B7-38D8-4C77-B580-18C3E146372C} (Creative Toolbox Plug-in) - [url]http://caebmm.imgag.com/imgag/cp/install/crusher-cae.cab[/url]
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Command Service (cmdService) - Unknown owner - C:\WINDOWS\VXNlcg\command.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTSvcCDA.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Network Monitor - Unknown owner - C:\Program Files\Network Monitor\netmon.exe
O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\PROGRA~1\COMMON~1\SONYSH~1\AVLib\Sptisrv.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe

Please confirm that the button I have pointed the arrow to is the one you are selecting.

Yes it is the button that I have tried to use.

crunchie 990 Most Valuable Poster Team Colleague Featured Poster · Answer 6 · 2007-04-14T11:27:40+00:00

Uninstall the following please;

webHancer
Outerinfo
Ipwindows or Ipwins
InetGet2 or similar

==

Please go here & install ALL critical updates required for your system, including service pack 1a for both XP and IE6.

==

Reboot when done and post another log please.

MelissaH 0 Newbie Poster · Answer 7 · 2007-04-15T04:29:37+00:00

I uninstalled all of the programs except for inetget2 or similar. I couldn't find it.

Logfile of HijackThis v1.99.1
Scan saved at 6:20:50 PM, on 4/14/2007
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Creative\ShareDLL\CtNotify.exe
C:\Program Files\MSN Apps\Updater\01.02.3000.1001\en-ca\msnappau.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\System32\ezSP_Px.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\System32\nfomon\nfomon.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Creative\ShareDLL\MediaDet.Exe
C:\Program Files\Ipwindows\ipwins.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\VXNlcg\command.exe
C:\WINDOWS\System32\CTSvcCDA.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Network Monitor\netmon.exe
C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\System32\wdfmgr.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Norton AntiVirus\SAVScan.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\System32\taskmgr.exe
C:\Documents and Settings\May\Desktop\HijackThis.exe
C:\Program Files\Symantec\LiveUpdate\AUpdate.exe
C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
C:\Program Files\Symantec\LiveUpdate\LuCallbackProxy.exe
C:\WINDOWS\System32\wbem\wmiprvse.exe
C:\Program Files\Symantec\LiveUpdate\LuCallbackProxy.exe

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchAssistant = ,
R1 - HKCU\Software\Microsoft\Internet Explorer,CustomizeSearch = ,
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://sympatico.msn.ca/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer provided by Sympatico
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http://proxy.library.utoronto.ca:8080
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\en-ca\msntb.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: Bar888 - {C1B4DEC2-2623-438e-9CA2-C9043AB28508} - C:\PROGRA~1\COMMON~1\{3C6DA~1\Bar888.dll
O4 - HKLM\..\Run: [Disc Detector] C:\Program Files\Creative\ShareDLL\CtNotify.exe
O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.3000.1001\en-ca\msnappau.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Advanced Tools Check] C:\PROGRA~1\NORTON~1\AdvTools\ADVCHK.EXE
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - HKLM\..\Run: [ezShieldProtector for Px] C:\WINDOWS\System32\ezSP_Px.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [PrintDrive] rundll32.exe "C:\WINDOWS\System32\bdepwjry.dll",setvm
O4 - HKLM\..\Run: [Nfo] C:\WINDOWS\System32\nfomon\nfomon.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_0
O4 - HKCU\..\Run: [IpWins] C:\Program Files\Ipwindows\ipwins.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Windows Update.hta
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=zuzed004YYCA_ZZzer000
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O16 - DPF: TruePass EPF 7,0,100,684 - https://blrscr3.egs-seg.gc.ca/applets/entrusttruepassapplet-epf.cab
O16 - DPF: Yahoo! Graffiti - http://download.games.yahoo.com/games/clients/y/grt5_x.cab
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocache/funwebproducts/ei/MyFunCardsFWBInitialSetup1.0.0.15-3.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://apple.speedera.net/qtinstall.info.apple.com/borris/us/win/QuickTimeInstaller.exe
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://burrenda17.spaces.msn.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/EN-US/a-UNO1/GAME_UNO1.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {BD8667B7-38D8-4C77-B580-18C3E146372C} (Creative Toolbox Plug-in) - http://caebmm.imgag.com/imgag/cp/install/crusher-cae.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Command Service (cmdService) - Unknown owner - C:\WINDOWS\VXNlcg\command.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTSvcCDA.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Network Monitor - Unknown owner - C:\Program Files\Network Monitor\netmon.exe
O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\PROGRA~1\COMMON~1\SONYSH~1\AVLib\Sptisrv.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe

MelissaH 0 Newbie Poster · Answer 8 · 2007-04-15T06:23:59+00:00

Actually, I searched for InetGet2 on my computer and it showed up in Program Files. Should I just delete the file folder?

crunchie 990 Most Valuable Poster Team Colleague Featured Poster · Answer 9 · 2007-04-15T07:14:07+00:00

Please go here & install ALL critical updates required for your system, including service pack 1a for both XP and IE6.[/b]

How about this one?

MelissaH 0 Newbie Poster · Answer 10 · 2007-04-15T08:28:02+00:00

I don't have Internet Explorer 5 or later. My computer is going very slow now, especially the internet. I'm starting to lose some hope in saving my computer. I've been told to re-write my hard drive instead.

crunchie 990 Most Valuable Poster Team Colleague Featured Poster · Answer 11 · 2007-04-15T08:55:05+00:00

I don't have Internet Explorer 5 or later. My computer is going very slow now, especially the internet. I'm starting to lose some hope in saving my computer. I've been told to re-write my hard drive instead.

According to your hijackthis log,you do :?:

Logfile of HijackThis v1.99.1
Scan saved at 6:20:50 PM, on 4/14/2007
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

ilyaus 0 Newbie Poster · Answer 12 · 2007-04-18T03:42:55+00:00

Hello guys. I have the same problemo with Infostealer & trojan.metajuan. I was wondering if i should start the new tread or continue here. I quess i need to post info from Hilackthis and find.bat but i don't know where. I can't remove it even in safe mode (comp freeze at startup after i entered password and confrmed running in safe mode) all i see is black screen without any icons. I'm sorry for newbiesh post but i'm new here and i rarelly use this kind of help (usually i manage to remove spyware/malware or viruses and fix my comp on my own but this is something i've never expirienced).:?:

Thanks in advance.

crunchie 990 Most Valuable Poster Team Colleague Featured Poster · Answer 13 · 2007-04-18T15:22:21+00:00

Yes, please start a new thread. You never know, MelissaH may come back :).

Infostealer and Trojan.Metajuan

Recommended Answers Collapse Answers

All 18 Replies

Recommended Answers