My HiJack This Log Please could any one tell me why i have so many of wfwall1.exe

Question

cbbcisace 0 Newbie Poster

18 Years Ago

Logfile of HijackThis v1.99.1
Scan saved at 21:02:09, on 24/04/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\WINDOWS\system32\VTTimer.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\BTBROA~2\SMARTB~1\BTHelpNotifier.exe
C:\Program Files\Ahead\InCD\InCD.exe
C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\WINDOWS\system32\wfwall1.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAAE.EXE
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\Common Files\Teleca Shared\CapabilityManager.exe
C:\WINDOWS\BricoPacks\Vista Inspirat\YzToolbar\YzToolBar.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\BT Broadband Help\bin\mpbtn.exe
C:\Program Files\Common Files\Teleca Shared\Generic.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\Program Files\Ahead\Nero StartSmart\NeroStartSmart.exe
C:\Program Files\Opera\Opera.exe
C:\DOCUME~1\Paula\LOCALS~1\Temp\Temporary Directory 1 for hijackthis.zip\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.skysports.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\BTBROA~2\SMARTB~1\BTHelpNotifier.exe
O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [EPSON Stylus C46 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0T1.EXE /P23 "EPSON Stylus C46 Series" /O6 "USB001" /M "Stylus C46"
O4 - HKLM\..\Run: [ElbyCheckAnyDVD] "C:\Program Files\SlySoft\AnyDVD\ElbyCheck.exe" /L AnyDVD
O4 - HKLM\..\Run: [AnyDVD] C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [EPSON Stylus D68 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAAE.EXE /P23 "EPSON Stylus D68 Series" /O6 "USB002" /M "Stylus D68"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [exp] C:\WINDOWS\system32\wfwall1.exe
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /startintray
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /Minimized
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [EPSON Stylus D68 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAAE.EXE /P23 "EPSON Stylus D68 Series" /M "Stylus D68" /EF "HKCU"
O4 - Startup: Y'z ToolBar.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\YzToolbar\YzToolBar.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: BT Broadband Help.lnk = C:\Program Files\BT Broadband Help\bin\matcli.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1125479620453
O16 - DPF: {FCF289D4-0AC8-4ED8-BE31-E8AF09606AB5} (download_35mb_com.applet) - http://static.35mb.com/applet/applet_o.cab
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O21 - SSODL: AproposClient - {E66CC6A7-0313-881F-7970-AEE8D408E0B3} - (no file)
O21 - SSODL: SysTray.Excn2 - {1722ECFF-4356-4f5b-B534-E67294FE75E9} - (no file)
O21 - SSODL: SysTray.Exsn - {2368D1FC-2F5C-4f1b-B124-E67214FC78E2} - (no file)
O21 - SSODL: SysTray.Exsh - {1768ECFC-4F5C-4f5b-B134-D67294FC78E9} - (no file)
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

windows-virus

3 Contributors
7 Replies
319 Views
1 Day Discussion Span
Latest Post 18 Years Ago Latest Post by 'Stein

tayspen 28 <Insert title here>

18 Years Ago

Hi :)

Well, I can tell you for sure you don't want it. So lets start by running HJT and selecting Do system scan only. Then place a check next to these items.

O4 - HKLM\..\Run: [exp] C:\WINDOWS\system32\wfwall1.exe

O16 - DPF: {FCF289D4-0AC8-4ED8-BE31-E8AF09606AB5} (download_35mb_com.applet) - http://static.35mb.com/applet/applet_o.cab

Click Fix Checked

--------------------------------------------------------------
Download pocket killbox from http://www.thespykiller.co.uk/files/killbox.exe & put it on the desktop where you can find it easily

Now Start killbox Copy the list of files below to the clipboard by selecting all of them with your mouse (Left click the start of the list and drag the mouse to the bottom of the list) and when they are all selected ( highlighted in blue) right click on any part of the blue area and say copy

In the Killbox, Go to the toolbar press file and select Paste from clipboard. The first file name will appear in the window and if the file exists it will appear in blue under that window, check Delete on reboot and then reboot.

File List:

C:\WINDOWS\system32\wfwall1.exe

-----------------------------------------------------------------

Please download the trial version of Ewido Security Suite here:

http://www.ewido.net/en/download/

Install it, and update the definitions to the newest files.

Please run Ewido,and save the logfile from the scan

Post back the results here, along with a new HJT log. - Then we will continue the fix

tayspen 28 <Insert title here>

18 Years Ago

It is back :mad:. Boot into safe mode, and Run killbox. Paste this path into the box, and then click the red X. If it doesn't delete it (It will tell you if it couldn't) please browse to it and delete it manually.

The Path:

C:\WINDOWS\system32\wfwall1.exe

While still in safe mode please have HJT fix the following.

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =

O4 - HKLM\..\Run: [exp] C:\WINDOWS\system32\wfwall1.exe

O21 - SSODL: AproposClient - {E66CC6A7-0313-881F-7970-AEE8D408E0B3} - (no file)

O21 - SSODL: SysTray.Excn2 - {1722ECFF-4356-4f5b-B534-E67294FE75E9} - (no file)

O21 - SSODL: SysTray.Exsn - {2368D1FC-2F5C-4f1b-B124-E67214FC78E2} - (no file)

O21 - SSODL: SysTray.Exsh - {1768ECFC-4F5C-4f5b-B134-D67294FC78E9} - (no file)

Click Fix Checked.

Post a new log, and if that file is gone we will continue with the fix...

Reply to this topic

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.

cbbcisace 0 Newbie Poster · Answer 1 · 2006-04-26T00:07:15+00:00

Hi here my hijack this log

Logfile of HijackThis v1.99.1
Scan saved at 19:05:36, on 25/04/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)


Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\VTTimer.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\BTBROA~2\SMARTB~1\BTHelpNotifier.exe
C:\Program Files\Ahead\InCD\InCD.exe
C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\wfwall1.exe
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAAE.EXE
C:\Program Files\Common Files\Teleca Shared\CapabilityManager.exe
C:\WINDOWS\BricoPacks\Vista Inspirat\YzToolbar\YzToolBar.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\BT Broadband Help\bin\mpbtn.exe
C:\Program Files\Common Files\Teleca Shared\Generic.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\WINDOWS\system32\wfwall1.exe
C:\Program Files\BitComet\BitComet.exe
C:\Program Files\HiJack This\HijackThis.exe


R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =         <style>


R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\BTBROA~2\SMARTB~1\BTHelpNotifier.exe
O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [EPSON Stylus C46 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0T1.EXE /P23 "EPSON Stylus C46 Series" /O6 "USB001" /M "Stylus C46"
O4 - HKLM\..\Run: [ElbyCheckAnyDVD] "C:\Program Files\SlySoft\AnyDVD\ElbyCheck.exe" /L AnyDVD
O4 - HKLM\..\Run: [AnyDVD] C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [EPSON Stylus D68 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAAE.EXE /P23 "EPSON Stylus D68 Series" /O6 "USB002" /M "Stylus D68"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /startintray
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [exp] C:\WINDOWS\system32\wfwall1.exe
O4 - HKCU\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /Minimized
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [EPSON Stylus D68 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAAE.EXE /P23 "EPSON Stylus D68 Series" /M "Stylus D68" /EF "HKCU"
O4 - Startup: Y'z ToolBar.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\YzToolbar\YzToolBar.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: BT Broadband Help.lnk = C:\Program Files\BT Broadband Help\bin\matcli.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1125479620453
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O21 - SSODL: AproposClient - {E66CC6A7-0313-881F-7970-AEE8D408E0B3} - (no file)
O21 - SSODL: SysTray.Excn2 - {1722ECFF-4356-4f5b-B534-E67294FE75E9} - (no file)
O21 - SSODL: SysTray.Exsn - {2368D1FC-2F5C-4f1b-B124-E67214FC78E2} - (no file)
O21 - SSODL: SysTray.Exsh - {1768ECFC-4F5C-4f5b-B134-D67294FC78E9} - (no file)
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe


and heres the other report
---------------------------------------------------------
ewido anti-malware - Scan report
---------------------------------------------------------


+ Created on:           19:05:03, 25/04/2006
+ Report-Checksum:      2F92FBBE


+ Scan result:


:mozilla.9:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Revenue : Cleaned with backup
:mozilla.10:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Revenue : Cleaned with backup
:mozilla.14:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned with backup
:mozilla.15:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.16:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.17:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.18:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.19:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.21:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup
:mozilla.22:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Targetnet : Cleaned with backup
:mozilla.23:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Targetnet : Cleaned with backup
:mozilla.24:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup
:mozilla.25:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup
:mozilla.26:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup
:mozilla.28:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Revenue : Cleaned with backup
:mozilla.29:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Targetnet : Cleaned with backup
:mozilla.30:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Paypopup : Cleaned with backup
:mozilla.31:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Paypopup : Cleaned with backup
:mozilla.32:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Paypopup : Cleaned with backup
:mozilla.33:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Paypopup : Cleaned with backup
:mozilla.34:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Paypopup : Cleaned with backup
:mozilla.35:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Paypopup : Cleaned with backup
:mozilla.36:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Paypopup : Cleaned with backup
:mozilla.37:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Paypopup : Cleaned with backup
:mozilla.38:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Paypopup : Cleaned with backup
:mozilla.39:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Paypopup : Cleaned with backup
:mozilla.40:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Paypopup : Cleaned with backup
:mozilla.41:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Paypopup : Cleaned with backup
:mozilla.42:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Paypopup : Cleaned with backup
:mozilla.43:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Paypopup : Cleaned with backup
:mozilla.44:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Paypopup : Cleaned with backup
:mozilla.47:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned with backup
:mozilla.48:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned with backup
:mozilla.53:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned with backup
:mozilla.60:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Adtech : Cleaned with backup
:mozilla.61:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Adtech : Cleaned with backup
:mozilla.62:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.63:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.64:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.65:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.66:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.67:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.68:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.69:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned with backup
:mozilla.70:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Bluestreak : Cleaned with backup
:mozilla.72:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned with backup
:mozilla.73:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned with backup
:mozilla.74:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned with backup
:mozilla.80:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.81:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.82:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.83:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.84:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.85:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.86:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.87:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.88:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.89:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.90:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.91:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.92:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.93:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.94:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.95:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.96:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.110:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup
:mozilla.111:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup
:mozilla.112:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup
:mozilla.113:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup
:mozilla.115:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup
:mozilla.122:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.123:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.124:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.125:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.126:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.138:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned with backup
:mozilla.139:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned with backup
:mozilla.140:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned with backup
:mozilla.141:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned with backup
:mozilla.142:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned with backup
:mozilla.147:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Clickhype : Cleaned with backup
:mozilla.149:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned with backup
:mozilla.162:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Qksrv : Cleaned with backup
:mozilla.163:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Qksrv : Cleaned with backup
:mozilla.170:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Casinotropez : Cleaned with backup
:mozilla.171:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Casinotropez : Cleaned with backup
:mozilla.172:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Casinotropez : Cleaned with backup
:mozilla.173:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Casinotropez : Cleaned with backup
:mozilla.174:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Casinotropez : Cleaned with backup
:mozilla.175:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Casinotropez : Cleaned with backup
:mozilla.176:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Casinotropez : Cleaned with backup
:mozilla.177:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Casinotropez : Cleaned with backup
:mozilla.180:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned with backup
:mozilla.203:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned with backup
:mozilla.204:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned with backup
:mozilla.205:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned with backup
:mozilla.206:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned with backup
:mozilla.207:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned with backup
:mozilla.208:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned with backup
:mozilla.209:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned with backup
:mozilla.210:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned with backup
:mozilla.227:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Cqcounter : Cleaned with backup
:mozilla.232:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Onestat : Cleaned with backup
:mozilla.233:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Onestat : Cleaned with backup
:mozilla.234:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Onestat : Cleaned with backup
:mozilla.235:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Onestat : Cleaned with backup
:mozilla.236:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Onestat : Cleaned with backup
:mozilla.237:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Onestat : Cleaned with backup
:mozilla.238:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Onestat : Cleaned with backup
:mozilla.244:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.245:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
:mozilla.251:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Clickzs : Cleaned with backup
:mozilla.252:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Clickzs : Cleaned with backup
:mozilla.254:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Clickzs : Cleaned with backup
:mozilla.255:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Clickzs : Cleaned with backup
:mozilla.257:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.258:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.259:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.260:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.261:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.262:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.263:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.265:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Valuead : Cleaned with backup
:mozilla.266:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Valuead : Cleaned with backup
:mozilla.267:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Valuead : Cleaned with backup
:mozilla.268:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Valuead : Cleaned with backup
:mozilla.269:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Valuead : Cleaned with backup
:mozilla.270:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Valuead : Cleaned with backup
:mozilla.271:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup
:mozilla.272:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup
:mozilla.273:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup
:mozilla.305:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup
:mozilla.315:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup
:mozilla.316:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup
:mozilla.317:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup
:mozilla.318:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned with backup
:mozilla.341:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup
:mozilla.342:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup
:mozilla.343:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup
:mozilla.344:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup
:mozilla.345:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup
:mozilla.346:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup
:mozilla.347:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup
:mozilla.348:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup
:mozilla.352:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned with backup
:mozilla.356:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.357:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.358:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.366:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Masterstats : Cleaned with backup
:mozilla.382:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.388:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.389:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.390:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.391:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.412:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Valueclick : Cleaned with backup
:mozilla.413:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Valueclick : Cleaned with backup
:mozilla.461:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Adjuggler : Cleaned with backup
:mozilla.465:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.466:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
:mozilla.476:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Com : Cleaned with backup
:mozilla.479:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.482:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.488:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.491:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.492:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.499:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Overture : Cleaned with backup
:mozilla.500:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Overture : Cleaned with backup
:mozilla.501:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.505:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Valueclick : Cleaned with backup
:mozilla.506:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Valueclick : Cleaned with backup
:mozilla.528:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.545:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.564:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Adviva : Cleaned with backup
:mozilla.570:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned with backup
:mozilla.573:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup
:mozilla.574:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup
:mozilla.575:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup
:mozilla.576:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned with backup
:mozilla.593:C:\Documents and Settings\Paula\Application Data\Mozilla\Firefox\Profiles\eid2tcp4.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned with backup
C:\Documents and Settings\Paula\Cookies\paula@112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Documents and Settings\Paula\Cookies\paula@122.2o7[2].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Documents and Settings\Paula\Cookies\paula@247realmedia[1].txt -> TrackingCookie.247realmedia : Cleaned with backup
C:\Documents and Settings\Paula\Cookies\paula@2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Documents and Settings\Paula\Cookies\paula@aavalue[2].txt -> TrackingCookie.Aavalue : Cleaned with backup
C:\Documents and Settings\Paula\Cookies\paula@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Cleaned with backup
C:\Documents and Settings\Paula\Cookies\paula@adopt.euroclick[1].txt -> TrackingCookie.Euroclick : Cleaned with backup
C:\Documents and Settings\Paula\Cookies\paula@adrevolver[1].txt -> TrackingCookie.Adrevolver : Cleaned with backup
C:\Documents and Settings\Paula\Cookies\paula@adtech[2].txt -> TrackingCookie.Adtech : Cleaned with backup
C:\Documents and Settings\Paula\Cookies\paula@as-us.falkag[1].txt -> TrackingCookie.Falkag : Cleaned with backup
C:\Documents and Settings\Paula\Cookies\paula@as1.falkag[2].txt -> TrackingCookie.Falkag : Cleaned with backup
C:\Documents and Settings\Paula\Cookies\paula@banner.paypopup[1].txt -> TrackingCookie.Paypopup : Cleaned with backup
C:\Documents and Settings\Paula\Cookies\paula@bluestreak[1].txt -> TrackingCookie.Bluestreak : Cleaned with backup
C:\Documents and Settings\Paula\Cookies\paula@bs.serving-sys[1].txt -> TrackingCookie.Serving-sys : Cleaned with backup
C:\Documents and Settings\Paula\Cookies\paula@casalemedia[1].txt -> TrackingCookie.Casalemedia : Cleaned with backup
C:\Documents and Settings\Paula\Cookies\paula@com[1].txt -> TrackingCookie.Com : Cleaned with backup
C:\Documents and Settings\Paula\Cookies\paula@data1.perf.overture[1].txt -> TrackingCookie.Overture : Cleaned with backup
C:\Documents and Settings\Paula\Cookies\paula@e-2dj6wfkykjcpelp.stats.esomniture[1].txt -> TrackingCookie.Esomniture : Cleaned with backup
C:\Documents and Settings\Paula\Cookies\paula@e-2dj6wfkywpc5gkp.stats.esomniture[1].txt -> TrackingCookie.Esomniture : Cleaned with backup
C:\Documents and Settings\Paula\Cookies\paula@e-2dj6wfliegdjwhp.stats.esomniture[1].txt -> TrackingCookie.Esomniture : Cleaned with backup
C:\Documents and Settings\Paula\Cookies\paula@e-2dj6wgloomcpocq.stats.esomniture[1].txt -> TrackingCookie.Esomniture : Cleaned with backup
C:\Documents and Settings\Paula\Cookies\paula@e-2dj6wjl4goczgfp.stats.esomniture[1].txt -> TrackingCookie.Esomniture : Cleaned with backup
C:\Documents and Settings\Paula\Cookies\paula@e-2dj6wjny-1pdjch.stats.esomniture[1].txt -> TrackingCookie.Esomniture : Cleaned with backup
C:\Documents and Settings\Paula\Cookies\paula@e13.media.addynamix[1].txt -> TrackingCookie.Addynamix : Cleaned with backup
C:\Documents and Settings\Paula\Cookies\paula@edge.ru4[2].txt -> TrackingCookie.Ru4 : Cleaned with backup
C:\Documents and Settings\Paula\Cookies\paula@eztracks.aavalue[2].txt -> TrackingCookie.Aavalue : Cleaned with backup
C:\Documents and Settings\Paula\Cookies\paula@h.starware[1].txt -> TrackingCookie.Starware : Cleaned with backup
C:\Documents and Settings\Paula\Cookies\paula@microsofteup.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Documents and Settings\Paula\Cookies\paula@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Documents and Settings\Paula\Cookies\paula@paypopup[1].txt -> TrackingCookie.Paypopup : Cleaned with backup
C:\Documents and Settings\Paula\Cookies\paula@perf.overture[1].txt -> TrackingCookie.Overture : Cleaned with backup
C:\Documents and Settings\Paula\Cookies\paula@qksrv[2].txt -> TrackingCookie.Qksrv : Cleaned with backup
C:\Documents and Settings\Paula\Cookies\paula@questionmarket[1].txt -> TrackingCookie.Questionmarket : Cleaned with backup
C:\Documents and Settings\Paula\Cookies\paula@reduxads.valuead[1].txt -> TrackingCookie.Valuead : Cleaned with backup
C:\Documents and Settings\Paula\Cookies\paula@sel.as-us.falkag[1].txt -> TrackingCookie.Falkag : Cleaned with backup
C:\Documents and Settings\Paula\Cookies\paula@serving-sys[2].txt -> TrackingCookie.Serving-sys : Cleaned with backup
C:\Documents and Settings\Paula\Cookies\paula@statcounter[1].txt -> TrackingCookie.Statcounter : Cleaned with backup
C:\Documents and Settings\Paula\Cookies\paula@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : Cleaned with backup
C:\Documents and Settings\Paula\Cookies\paula@trafic[1].txt -> TrackingCookie.Trafic : Cleaned with backup
C:\Documents and Settings\Paula\Cookies\paula@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : Cleaned with backup
C:\Documents and Settings\Paula\Cookies\paula@try.starware[1].txt -> TrackingCookie.Starware : Cleaned with backup
C:\Documents and Settings\Paula\Cookies\paula@valueclick[1].txt -> TrackingCookie.Valueclick : Cleaned with backup
C:\Documents and Settings\Paula\Cookies\paula@zedo[2].txt -> TrackingCookie.Zedo : Cleaned with backup



::Report End

cbbcisace 0 Newbie Poster · Answer 2 · 2006-04-26T01:23:00+00:00

Here again is the new HJT Log...

Logfile of HijackThis v1.99.1
Scan saved at 20:12:29, on 25/04/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Opera\Opera.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\HiJack This\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\BTBROA~2\SMARTB~1\BTHelpNotifier.exe
O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [EPSON Stylus C46 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0T1.EXE /P23 "EPSON Stylus C46 Series" /O6 "USB001" /M "Stylus C46"
O4 - HKLM\..\Run: [ElbyCheckAnyDVD] "C:\Program Files\SlySoft\AnyDVD\ElbyCheck.exe" /L AnyDVD
O4 - HKLM\..\Run: [AnyDVD] C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [EPSON Stylus D68 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAAE.EXE /P23 "EPSON Stylus D68 Series" /O6 "USB002" /M "Stylus D68"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /startintray
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKCU\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /Minimized
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [EPSON Stylus D68 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAAE.EXE /P23 "EPSON Stylus D68 Series" /M "Stylus D68" /EF "HKCU"
O4 - Startup: Y'z ToolBar.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\YzToolbar\YzToolBar.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: BT Broadband Help.lnk = C:\Program Files\BT Broadband Help\bin\matcli.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1125479620453
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

tayspen 28 <Insert title here> Team Colleague · Answer 3 · 2006-04-26T01:26:15+00:00

Good it is gone :). Afew things to clean up, have HJT fix these.

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =

Then you are looking pretty clean, does everything seem to be back to normal?

cbbcisace 0 Newbie Poster · Answer 4 · 2006-04-26T01:31:48+00:00

Yes everything seems to be normal

but i have a problem with itunes because it will never will connect to the music store due to it saying 'the connection isnot active' but it is. on the itunes website they say it could be something to be with the computers firewalls setting
have you any idea on how to fix this????

'Stein 150 Lapsed Skeptic Team Colleague · Answer 5 · 2006-04-26T05:34:00+00:00

Well, have ya tried disabeling Norton AntiVirus from running on start up, restarting the computer, and running it again?

If not, try this, and then post back here on how it worked.

Thanks.