also @ TechSpot: Blizzard talks Diablo 3 facts, nerfing and buffs for legendary items

TechSpot
Collaborate in the cloud with Office, Exchange, SharePoint, and Lync.
Microsoft Office 365. Pay-as-you-go starting at $8/user/month. Begin your free trial now.

[Active] Battling PC Peformance and Stability Analysis Report Virus

Discussion in 'Virus and Malware Removal' started by Eric72, Nov 2, 2011.

Page 3 of 3

  1. Bobbye Helper on the Fringe

    Eric, Am I correct in thinking that a redirect was not one of the original problems?
    =======================================
    1. Please update and run a new scan with HijackThis.

    2. Also update and run new scan with Eset online virus scan.

    3.I' d like you to run SperAntiSpyware also:
    [IMG]
    SuperAntiSpyware Home Edition Free Version
    • Please download SuperAntiSpyware from HERE
    • Launch SuperAntiSpyware and click on 'Check for updates'.
    • Wait for the updates to be installed
    • On the main screen click on 'Scan your computer'.
    • Check: 'Perform Complete Scan then Click 'Next' to start the scan.
    • Superantispyware will now scan your computer,when it's finished it will list all/any infections found.
    • Make sure everything found has a checkmark next to it,then press 'Next'.
    • Click on 'Finish' when you've done.
    It's possible that the program will ask you to reboot in order to delete some files.

    Obtain the SuperAntiSpyware log as follows:
    • Click on 'Preferences'.
    • Click on the 'Statistics/Logs' tab.
    • Under 'Scanner Logs' double click on 'SuperAntiSpyware Scan Log'.
    It will then open in your default text editor,such as Notepad. Paste the notepad file here on your reply

    You should not be having redirects at this point- unless you have something new on the system.
    Bobbye, Dec 2, 2011
    #41

  2. Eric72 Newcomer, in training

    You are correct, Bobbye - I think this redirect problem somehow emerged after my initial symptoms.

    I've completed the three scans and will paste the log files after this post. They all appeared to run correctly, and the SuperAntiSpyware scan identified and appeared remove a large number of adware cookies. However, when testing the Google search results after these scans, I notice that the redirect problem continues to persist.

    Thanks for the continuing help!
    Eric72, Dec 6, 2011
    #42

  3. Eric72 Newcomer, in training

    Logfile of Trend Micro HijackThis v2.0.4
    Scan saved at 6:26:08 PM, on 12/5/2011
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v8.00 (8.00.6001.18702)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\eHome\ehRecvr.exe
    C:\WINDOWS\eHome\ehSched.exe
    C:\Program Files\Common Files\Motive\McciCMService.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\Program Files\Common Files\McAfee\SystemCore\mfevtps.exe
    C:\Program Files\Verizon\VSP\ServicepointService.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WLService.exe
    C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WUSB54GSv2.exe
    C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe
    C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
    C:\WINDOWS\system32\dllhost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\rundll32.exe
    C:\WINDOWS\ehome\ehtray.exe
    C:\WINDOWS\system32\dla\tfswctrl.exe
    C:\WINDOWS\eHome\ehmsas.exe
    C:\Program Files\McAfee.com\Agent\mcagent.exe
    C:\Program Files\Skype\Phone\Skype.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Digital Line Detect\DLG.exe
    C:\Program Files\internet explorer\iexplore.exe
    C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
    C:\Documents and Settings\Erik\Desktop\HijackThis\HijackThis.exe

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://search.yahoo.com/search?fr=mcafee&p=%s
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    R3 - URLSearchHook: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
    O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\Common Files\McAfee\SystemCore\ScriptSn.20111119165526.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
    O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
    O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.7018.1622\swg.dll
    O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
    O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
    O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
    O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
    O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
    O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
    O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
    O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
    O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
    O4 - HKLM\..\Run: [mcui_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
    O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\\Phone\Skype.exe" /nosplash /minimized
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\RunOnce: [FlashPlayerUpdate] C:\WINDOWS\system32\Macromed\Flash\FlashUtil11c_ActiveX.exe -update activex
    O4 - Global Startup: Digital Line Detect.lnk = ?
    O8 - Extra context menu item: Append Link Target to Existing PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
    O8 - Extra context menu item: Append to Existing PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
    O8 - Extra context menu item: Convert Link Target to Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
    O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
    O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
    O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
    O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
    O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: vzTCPConfig - http://my.verizon.com/micro/speedoptimizer/fios/vzTCPConfig.CAB
    O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED} (Support.com Configuration Class) - https://activatemyfios.verizon.net/sdcCommon/download/FIOS/Verizon FiOS Installer.cab
    O16 - DPF: {74C861A1-D548-4916-BC8A-FDE92EDFF62C} - http://mediaplayer.walmart.com/installer/install.cab
    O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab
    O16 - DPF: {9600F64D-755F-11D4-A47F-0001023E6D5A} (Shutterfly Picture Upload Plugin) - http://web1.shutterfly.com/downloads/Uploader.cab
    O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
    O18 - Protocol: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
    O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
    O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
    O18 - Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\progra~1\mcafee\msc\mcsniepl.dll
    O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
    O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
    O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: Creative Labs Licensing Service - Creative Labs - C:\Program Files\Common Files\Creative Labs Shared\Service\CreativeLicensing.exe
    O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
    O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
    O23 - Service: Google Update Service (gupdate1ca857bbf3bd2a7) (gupdate1ca857bbf3bd2a7) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
    O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
    O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
    O23 - Service: McAfee SiteAdvisor Service - McAfee, Inc. - C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
    O23 - Service: McciCMService - Alcatel-Lucent - C:\Program Files\Common Files\Motive\McciCMService.exe
    O23 - Service: McAfee Personal Firewall Service (McMPFSvc) - McAfee, Inc. - C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
    O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
    O23 - Service: McAfee VirusScan Announcer (McNaiAnn) - McAfee, Inc. - C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
    O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
    O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan\mcods.exe
    O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
    O23 - Service: McAfee McShield (McShield) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe
    O23 - Service: McAfee Firewall Core Service (mfefire) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe
    O23 - Service: McAfee Validation Trust Protection Service (mfevtp) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\mfevtps.exe
    O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
    O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
    O23 - Service: ServicepointService - Radialpoint Inc. - C:\Program Files\Verizon\VSP\ServicepointService.exe
    O23 - Service: WUSB54GSv2SVC - GEMTEKS - C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WLService.exe

    --
    End of file - 11840 bytes
    Eric72, Dec 6, 2011
    #43

  4. Eric72 Newcomer, in training

    ESET Log:

    C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\6.0\57\4c85f79-4bce12da Java/Agent.DW trojan
    C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\6.0\6\2b2dd8c6-2e62bd77 Java/Agent.DW trojan
    C:\Documents and Settings\Erik\Application Data\Sun\Java\Deployment\cache\6.0\25\5881c799-36cc4fe1 multiple threats
    C:\Documents and Settings\Erik\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\7656823660-6b406ab0-2f0105ad.zip multiple threats
    C:\Documents and Settings\Erik\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\plugins.jar-77c163df-1b781d71.zip multiple threats
    C:\Program Files\FoxTabAudioConverter\AudioConverter.exe a variant of Win32/InstallCore.A application
    Eric72, Dec 6, 2011
    #44

  5. Eric72 Newcomer, in training

    SUPERAntiSpyware Scan Log
    http://www.superantispyware.com

    Generated 12/05/2011 at 11:53 PM

    Application Version : 5.0.1136

    Core Rules Database Version : 8018
    Trace Rules Database Version: 5830

    Scan type : Complete Scan
    Total Scan Time : 01:47:54

    Operating System Information
    Windows XP Professional 32-bit, Service Pack 3 (Build 5.01.2600)
    Administrator

    Memory items scanned : 560
    Memory threats detected : 0
    Registry items scanned : 40250
    Registry threats detected : 0
    File items scanned : 90705
    File threats detected : 411

    Malware.SpywareQuake
    C:\Documents and Settings\Erik\Start Menu\Programs\SpywareQuake

    Adware.Tracking Cookie
    ad.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\T4RBU59D ]
    cdn.tremormedia.com [ C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\T4RBU59D ]
    objects.tremormedia.com [ C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\T4RBU59D ]
    C:\Documents and Settings\Erik\Cookies\erik@a1.interclick[1].txt [ /a1.interclick ]
    C:\Documents and Settings\Erik\Cookies\erik@ad.yieldmanager[2].txt [ /ad.yieldmanager ]
    C:\Documents and Settings\Erik\Cookies\erik@ad.yieldmanager[3].txt [ /ad.yieldmanager ]
    C:\Documents and Settings\Erik\Cookies\erik@ad.yieldmanager[4].txt [ /ad.yieldmanager ]
    C:\Documents and Settings\Erik\Cookies\erik@ads.pointroll[2].txt [ /ads.pointroll ]
    C:\Documents and Settings\Erik\Cookies\erik@ads.pubmatic[1].txt [ /ads.pubmatic ]
    C:\Documents and Settings\Erik\Cookies\erik@advertising[2].txt [ /advertising ]
    C:\Documents and Settings\Erik\Cookies\erik@artcitymedia[1].txt [ /artcitymedia ]
    C:\Documents and Settings\Erik\Cookies\erik@at.atwola[1].txt [ /at.atwola ]
    C:\Documents and Settings\Erik\Cookies\erik@at.atwola[2].txt [ /at.atwola ]
    C:\Documents and Settings\Erik\Cookies\erik@burstbeacon[1].txt [ /burstbeacon ]
    C:\Documents and Settings\Erik\Cookies\erik@burstnet[1].txt [ /burstnet ]
    C:\Documents and Settings\Erik\Cookies\erik@casalemedia[1].txt [ /casalemedia ]
    C:\Documents and Settings\Erik\Cookies\erik@collective-media[2].txt [ /collective-media ]
    C:\Documents and Settings\Erik\Cookies\erik@dc.tremormedia[2].txt [ /dc.tremormedia ]
    C:\Documents and Settings\Erik\Cookies\erik@fastclick[1].txt [ /fastclick ]
    C:\Documents and Settings\Erik\Cookies\erik@fastclick[2].txt [ /fastclick ]
    C:\Documents and Settings\Erik\Cookies\erik@intermundomedia[2].txt [ /intermundomedia ]
    C:\Documents and Settings\Erik\Cookies\erik@invitemedia[1].txt [ /invitemedia ]
    C:\Documents and Settings\Erik\Cookies\erik@legolas-media[2].txt [ /legolas-media ]
    C:\Documents and Settings\Erik\Cookies\erik@liveperson[2].txt [ /liveperson ]
    C:\Documents and Settings\Erik\Cookies\erik@liveperson[4].txt [ /liveperson ]
    C:\Documents and Settings\Erik\Cookies\erik@media6degrees[1].txt [ /media6degrees ]
    C:\Documents and Settings\Erik\Cookies\erik@mediaplex[1].txt [ /mediaplex ]
    C:\Documents and Settings\Erik\Cookies\erik@mediaplex[2].txt [ /mediaplex ]
    C:\Documents and Settings\Erik\Cookies\erik@network.realmedia[1].txt [ /network.realmedia ]
    C:\Documents and Settings\Erik\Cookies\erik@pro-market[1].txt [ /pro-market ]
    C:\Documents and Settings\Erik\Cookies\erik@questionmarket[1].txt [ /questionmarket ]
    C:\Documents and Settings\Erik\Cookies\erik@revsci[2].txt [ /revsci ]
    C:\Documents and Settings\Erik\Cookies\erik@ru4[2].txt [ /ru4 ]
    C:\Documents and Settings\Erik\Cookies\erik@server.iad.liveperson[1].txt [ /server.iad.liveperson ]
    C:\Documents and Settings\Erik\Cookies\erik@tacoda[2].txt [ /tacoda ]
    C:\Documents and Settings\Erik\Cookies\erik@tacoda[3].txt [ /tacoda ]
    C:\Documents and Settings\Erik\Cookies\erik@tracking.foxnews[1].txt [ /tracking.foxnews ]
    C:\Documents and Settings\Erik\Cookies\erik@tribalfusion[2].txt [ /tribalfusion ]
    C:\Documents and Settings\Erik\Cookies\erik@www.burstbeacon[1].txt [ /www.burstbeacon ]
    C:\Documents and Settings\Erik\Cookies\erik@www.burstnet[2].txt [ /www.burstnet ]
    C:\Documents and Settings\Erik\Cookies\erik@www.burstnet[3].txt [ /www.burstnet ]
    C:\Documents and Settings\Erik\Cookies\erik@yieldmanager[1].txt [ /yieldmanager ]
    C:\Documents and Settings\Erik\Cookies\erik@zedo[2].txt [ /zedo ]
    C:\Documents and Settings\Erik\Cookies\258Z9ZQ5.txt [ /accounts.google.com ]
    C:\Documents and Settings\Erik\Cookies\7ZLXXPNU.txt [ /doubleclick.net ]
    C:\Documents and Settings\Erik\Cookies\9PJX579I.txt [ /serving-sys.com ]
    C:\Documents and Settings\Erik\Cookies\135NDAA9.txt [ /interclick.com ]
    C:\Documents and Settings\Erik\Cookies\KOQIPLOH.txt [ /ar.atwola.com ]
    C:\Documents and Settings\Erik\Cookies\WUR9K5X6.txt [ /invitemedia.com ]
    C:\Documents and Settings\Erik\Cookies\TAYV3ETC.txt [ /apmebf.com ]
    C:\Documents and Settings\Erik\Cookies\QRP7QWAF.txt [ /tribalfusion.com ]
    C:\Documents and Settings\Erik\Cookies\N50VRDME.txt [ /ad.yieldmanager.com ]
    C:\Documents and Settings\Erik\Cookies\SXU3UYB3.txt [ /atwola.com ]
    C:\Documents and Settings\Erik\Cookies\ABHBEBJT.txt [ /tacoda.net ]
    C:\Documents and Settings\Erik\Cookies\I8U909MO.txt [ /collective-media.net ]
    C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\COOKIES\ADMINISTRATOR@ADVERTISING[2].TXT [ /ADVERTISING ]
    C:\Documents and Settings\Erik\Cookies\N7UKWIY1.txt [ /advertising.com ]
    C:\Documents and Settings\Erik\Cookies\U356OBR8.txt [ /xml.mediality.com ]
    C:\Documents and Settings\Erik\Cookies\0YA2SCMA.txt [ /adxpose.com ]
    C:\Documents and Settings\Erik\Cookies\MB5O1LB3.txt [ /at.atwola.com ]
    C:\Documents and Settings\Erik\Cookies\G7HBTL3M.txt [ /tacoda.at.atwola.com ]
    C:\Documents and Settings\Erik\Cookies\Y759G30K.txt [ /eset.122.2o7.net ]
    C:\Documents and Settings\Erik\Cookies\5VTAJPEO.txt [ /atdmt.com ]
    C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\Cookies\administrator@apmebf[2].txt [ Cookie:administrator@apmebf.com/ ]
    C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\Cookies\administrator@atdmt[2].txt [ Cookie:administrator@atdmt.com/ ]
    C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\Cookies\administrator@media6degrees[1].txt [ Cookie:administrator@media6degrees.com/ ]
    C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\Cookies\administrator@legolas-media[1].txt [ Cookie:administrator@legolas-media.com/ ]
    C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\Cookies\administrator@adsonar[3].txt [ Cookie:administrator@adsonar.com/adserving ]
    C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\Cookies\administrator@adserver.adtechus[1].txt [ Cookie:administrator@adserver.adtechus.com/ ]
    C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\Cookies\administrator@ru4[2].txt [ Cookie:administrator@ru4.com/ ]
    C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\Cookies\administrator@adbrite[1].txt [ Cookie:administrator@adbrite.com/ ]
    C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\Cookies\administrator@specificclick[1].txt [ Cookie:administrator@specificclick.net/ ]
    C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\Cookies\administrator@eyeviewads[2].txt [ Cookie:administrator@eyeviewads.com/ ]
    C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\Cookies\administrator@revsci[3].txt [ Cookie:administrator@revsci.net/ ]
    C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\Cookies\administrator@tacoda.at.atwola[1].txt [ Cookie:administrator@tacoda.at.atwola.com/ ]
    C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\Cookies\administrator@tribalfusion[1].txt [ Cookie:administrator@tribalfusion.com/ ]
    C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\Cookies\administrator@at.atwola[2].txt [ Cookie:administrator@at.atwola.com/ ]
    C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\Cookies\administrator@pro-market[1].txt [ Cookie:administrator@pro-market.net/ ]
    C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\Cookies\administrator@adxpose[1].txt [ Cookie:administrator@adxpose.com/ ]
    C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\Cookies\administrator@lucidmedia[2].txt [ Cookie:administrator@lucidmedia.com/ ]
    C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\Cookies\administrator@eyewonder[2].txt [ Cookie:administrator@eyewonder.com/ ]
    C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\Cookies\administrator@advertise[1].txt [ Cookie:administrator@advertise.com/ ]
    C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\Cookies\administrator@interclick[1].txt [ Cookie:administrator@interclick.com/ ]
    C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\Cookies\administrator@kontera[1].txt [ Cookie:administrator@kontera.com/ ]
    C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\Cookies\administrator@adserver.leanmarket[1].txt [ Cookie:administrator@adserver.leanmarket.com/ ]
    C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\Cookies\administrator@stopzilla[1].txt [ Cookie:administrator@stopzilla.com/ ]
    C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\Cookies\administrator@doubleclick[2].txt [ Cookie:administrator@doubleclick.net/ ]
    C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\Cookies\administrator@pointroll[3].txt [ Cookie:administrator@pointroll.com/ ]
    C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\Cookies\administrator@questionmarket[1].txt [ Cookie:administrator@questionmarket.com/ ]
    C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\Cookies\administrator@serving-sys[1].txt [ Cookie:administrator@serving-sys.com/ ]
    C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\Cookies\administrator@burstnet[1].txt [ Cookie:administrator@burstnet.com/ ]
    C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\Cookies\administrator@fastclick[4].txt [ Cookie:administrator@fastclick.net/ ]
    C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\Cookies\administrator@a1.interclick[1].txt [ Cookie:administrator@a1.interclick.com/ ]
    C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\Cookies\administrator@advertising[1].txt [ Cookie:administrator@advertising.com/ ]
    C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\Cookies\administrator@mediaplex[1].txt [ Cookie:administrator@mediaplex.com/ ]
    C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\Cookies\administrator@r1-ads.ace.advertising[2].txt [ Cookie:administrator@r1-ads.ace.advertising.com/ ]
    C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\Cookies\administrator@www.stopzilla[1].txt [ Cookie:administrator@www.stopzilla.com/ ]
    C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\Cookies\administrator@collective-media[2].txt [ Cookie:administrator@collective-media.net/ ]
    C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\Cookies\administrator@intermundomedia[2].txt [ Cookie:administrator@intermundomedia.com/ ]
    C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\Cookies\administrator@zedo[1].txt [ Cookie:administrator@zedo.com/ ]
    C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\Cookies\administrator@ad.yieldmanager[3].txt [ Cookie:administrator@ad.yieldmanager.com/ ]
    C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\Cookies\administrator@www.burstnet[1].txt [ Cookie:administrator@www.burstnet.com/ ]
    C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\Cookies\administrator@micklemedia[2].txt [ Cookie:administrator@micklemedia.com/ ]
    C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\Cookies\administrator@tacoda[1].txt [ Cookie:administrator@tacoda.net/ ]
    C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\Cookies\administrator@insightexpressai[3].txt [ Cookie:administrator@insightexpressai.com/ ]
    C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\Cookies\administrator@realmedia[2].txt [ Cookie:administrator@realmedia.com/ ]
    C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\Cookies\administrator@eset.122.2o7[1].txt [ Cookie:administrator@eset.122.2o7.net/ ]
    C:\DOCUMENTS AND SETTINGS\ERIK\Cookies\erik@verizon[6].txt [ Cookie:erik@verizon.com/media ]
    C:\DOCUMENTS AND SETTINGS\ERIK\Cookies\erik@verizon[5].txt [ Cookie:erik@verizon.com/vztracker/ ]
    C:\DOCUMENTS AND SETTINGS\GUNNAR\Cookies\gunnar@clkads[4].txt [ Cookie:gunnar@clkads.com/adServe/banners ]
    C:\DOCUMENTS AND SETTINGS\GUNNAR\Cookies\gunnar@adopt.euroclick[2].txt [ Cookie:gunnar@adopt.euroclick.com/ ]
    C:\DOCUMENTS AND SETTINGS\GUNNAR\Cookies\gunnar@ads.bridgetrack[1].txt [ Cookie:gunnar@ads.bridgetrack.com/ ]
    C:\DOCUMENTS AND SETTINGS\GUNNAR\Cookies\gunnar@giftscom.122.2o7[1].txt [ Cookie:gunnar@giftscom.122.2o7.net/ ]
    C:\DOCUMENTS AND SETTINGS\GUNNAR\Cookies\gunnar@adrevolver[2].txt [ Cookie:gunnar@adrevolver.com/ ]
    C:\DOCUMENTS AND SETTINGS\GUNNAR\Cookies\gunnar@mediaplex[1].txt [ Cookie:gunnar@mediaplex.com/ ]
    C:\DOCUMENTS AND SETTINGS\GUNNAR\Cookies\gunnar@serving-sys[2].txt [ Cookie:gunnar@serving-sys.com/ ]
    C:\DOCUMENTS AND SETTINGS\GUNNAR\Cookies\gunnar@borders.112.2o7[1].txt [ Cookie:gunnar@borders.112.2o7.net/ ]
    C:\DOCUMENTS AND SETTINGS\GUNNAR\Cookies\gunnar@server.cpmstar[2].txt [ Cookie:gunnar@server.cpmstar.com/ ]
    C:\DOCUMENTS AND SETTINGS\GUNNAR\Cookies\gunnar@invitemedia[2].txt [ Cookie:gunnar@invitemedia.com/ ]
    C:\DOCUMENTS AND SETTINGS\GUNNAR\Cookies\gunnar@atdmt[2].txt [ Cookie:gunnar@atdmt.com/ ]
    C:\DOCUMENTS AND SETTINGS\GUNNAR\Cookies\gunnar@adserver.adtechus[1].txt [ Cookie:gunnar@adserver.adtechus.com/ ]
    C:\DOCUMENTS AND SETTINGS\GUNNAR\Cookies\gunnar@a1.interclick[1].txt [ Cookie:gunnar@a1.interclick.com/ ]
    C:\DOCUMENTS AND SETTINGS\GUNNAR\Cookies\gunnar@www.googleadservices[5].txt [ Cookie:gunnar@www.googleadservices.com/pagead/conversion/1058501446/ ]
    C:\DOCUMENTS AND SETTINGS\GUNNAR\Cookies\gunnar@www.googleadservices[2].txt [ Cookie:gunnar@www.googleadservices.com/pagead/conversion/1041763058/ ]
    C:\DOCUMENTS AND SETTINGS\GUNNAR\Cookies\gunnar@burstnet[2].txt [ Cookie:gunnar@burstnet.com/ ]
    C:\DOCUMENTS AND SETTINGS\GUNNAR\Cookies\gunnar@www.googleadservices[1].txt [ Cookie:gunnar@www.googleadservices.com/pagead/conversion/1072630628/ ]
    C:\DOCUMENTS AND SETTINGS\GUNNAR\Cookies\gunnar@pointroll[2].txt [ Cookie:gunnar@pointroll.com/ ]
    C:\DOCUMENTS AND SETTINGS\GUNNAR\Cookies\gunnar@adtech[1].txt [ Cookie:gunnar@adtech.de/ ]
    C:\DOCUMENTS AND SETTINGS\GUNNAR\Cookies\gunnar@click.cashengines[2].txt [ Cookie:gunnar@click.cashengines.com/ ]
    C:\DOCUMENTS AND SETTINGS\GUNNAR\Cookies\gunnar@bluestreak[2].txt [ Cookie:gunnar@bluestreak.com/ ]
    C:\DOCUMENTS AND SETTINGS\GUNNAR\Cookies\gunnar@eyewonder[1].txt [ Cookie:gunnar@eyewonder.com/ ]
    C:\DOCUMENTS AND SETTINGS\GUNNAR\Cookies\gunnar@tacoda[2].txt [ Cookie:gunnar@tacoda.net/ ]
    C:\DOCUMENTS AND SETTINGS\GUNNAR\Cookies\gunnar@ads.pointroll[1].txt [ Cookie:gunnar@ads.pointroll.com/ ]
    C:\DOCUMENTS AND SETTINGS\GUNNAR\Cookies\gunnar@advertising[2].txt [ Cookie:gunnar@advertising.com/ ]
    C:\DOCUMENTS AND SETTINGS\GUNNAR\Cookies\gunnar@stats.townnews[3].txt [ Cookie:gunnar@stats.townnews.com/thepublicopinion.com/ ]
    C:\DOCUMENTS AND SETTINGS\GUNNAR\Cookies\gunnar@insightexpressai[1].txt [ Cookie:gunnar@insightexpressai.com/ ]
    C:\DOCUMENTS AND SETTINGS\GUNNAR\Cookies\gunnar@adcentriconline[1].txt [ Cookie:gunnar@adcentriconline.com/ ]
    C:\DOCUMENTS AND SETTINGS\GUNNAR\Cookies\gunnar@clkads[3].txt [ Cookie:gunnar@clkads.com/adServe/static/ ]
    C:\DOCUMENTS AND SETTINGS\GUNNAR\Cookies\gunnar@questionmarket[1].txt [ Cookie:gunnar@questionmarket.com/ ]
    C:\DOCUMENTS AND SETTINGS\GUNNAR\Cookies\gunnar@zedo[1].txt [ Cookie:gunnar@zedo.com/ ]
    C:\DOCUMENTS AND SETTINGS\GUNNAR\Cookies\gunnar@tribalfusion[1].txt [ Cookie:gunnar@tribalfusion.com/ ]
    C:\DOCUMENTS AND SETTINGS\GUNNAR\Cookies\gunnar@burstbeacon[2].txt [ Cookie:gunnar@burstbeacon.com/ ]
    C:\DOCUMENTS AND SETTINGS\GUNNAR\Cookies\gunnar@intermundomedia[2].txt [ Cookie:gunnar@intermundomedia.com/ ]
    C:\DOCUMENTS AND SETTINGS\GUNNAR\Cookies\gunnar@media.legacy[1].txt [ Cookie:gunnar@media.legacy.com/ ]
    C:\DOCUMENTS AND SETTINGS\GUNNAR\Cookies\gunnar@specificclick[1].txt [ Cookie:gunnar@specificclick.net/ ]
    C:\DOCUMENTS AND SETTINGS\GUNNAR\Cookies\gunnar@tracking.foxnews[1].txt [ Cookie:gunnar@tracking.foxnews.com/ ]
    C:\DOCUMENTS AND SETTINGS\GUNNAR\Cookies\gunnar@imrworldwide[2].txt [ Cookie:gunnar@imrworldwide.com/cgi-bin ]
    C:\DOCUMENTS AND SETTINGS\GUNNAR\Cookies\gunnar@interclick[2].txt [ Cookie:gunnar@interclick.com/ ]
    C:\DOCUMENTS AND SETTINGS\GUNNAR\Cookies\gunnar@apmebf[1].txt [ Cookie:gunnar@apmebf.com/ ]
    C:\DOCUMENTS AND SETTINGS\GUNNAR\Cookies\gunnar@www.burstnet[1].txt [ Cookie:gunnar@www.burstnet.com/ ]
    C:\DOCUMENTS AND SETTINGS\GUNNAR\Cookies\gunnar@blethenmaine.112.2o7[1].txt [ Cookie:gunnar@blethenmaine.112.2o7.net/ ]
    C:\DOCUMENTS AND SETTINGS\GUNNAR\Cookies\gunnar@stats.townnews[1].txt [ Cookie:gunnar@stats.townnews.com/siouxcityjournal.com/ ]
    C:\DOCUMENTS AND SETTINGS\GUNNAR\Cookies\gunnar@saxoaberdeennews.122.2o7[1].txt [ Cookie:gunnar@saxoaberdeennews.122.2o7.net/ ]
    C:\DOCUMENTS AND SETTINGS\GUNNAR\Cookies\gunnar@adbrite[1].txt [ Cookie:gunnar@adbrite.com/ ]
    C:\DOCUMENTS AND SETTINGS\GUNNAR\Cookies\gunnar@dardenrestaurants.112.2o7[1].txt [ Cookie:gunnar@dardenrestaurants.112.2o7.net/ ]
    C:\DOCUMENTS AND SETTINGS\GUNNAR\Cookies\gunnar@adopt.specificclick[1].txt [ Cookie:gunnar@adopt.specificclick.net/ ]
    C:\DOCUMENTS AND SETTINGS\GUNNAR\Cookies\gunnar@revsci[1].txt [ Cookie:gunnar@revsci.net/ ]
    C:\DOCUMENTS AND SETTINGS\GUNNAR\Cookies\gunnar@specificmedia[1].txt [ Cookie:gunnar@specificmedia.com/ ]
    C:\DOCUMENTS AND SETTINGS\GUNNAR\Cookies\gunnar@ad.yieldmanager[2].txt [ Cookie:gunnar@ad.yieldmanager.com/ ]
    C:\DOCUMENTS AND SETTINGS\GUNNAR\Cookies\gunnar@realmedia[1].txt [ Cookie:gunnar@realmedia.com/ ]
    C:\DOCUMENTS AND SETTINGS\GUNNAR\Cookies\gunnar@trafficmp[2].txt [ Cookie:gunnar@trafficmp.com/ ]
    C:\DOCUMENTS AND SETTINGS\GUNNAR\Cookies\gunnar@msnportal.112.2o7[1].txt [ Cookie:gunnar@msnportal.112.2o7.net/ ]
    C:\DOCUMENTS AND SETTINGS\GUNNAR\Cookies\gunnar@dmtracker[1].txt [ Cookie:gunnar@dmtracker.com/ ]
    C:\DOCUMENTS AND SETTINGS\GUNNAR\Cookies\gunnar@www.googleadservices[4].txt [ Cookie:gunnar@www.googleadservices.com/pagead/conversion/1056414046/ ]
    C:\DOCUMENTS AND SETTINGS\GUNNAR\Cookies\gunnar@www.burstbeacon[1].txt [ Cookie:gunnar@www.burstbeacon.com/ ]
    C:\DOCUMENTS AND SETTINGS\GUNNAR\Cookies\gunnar@media.adrevolver[1].txt [ Cookie:gunnar@media.adrevolver.com/ ]
    C:\DOCUMENTS AND SETTINGS\GUNNAR\Cookies\gunnar@s.clickability[2].txt [ Cookie:gunnar@s.clickability.com/ ]
    C:\DOCUMENTS AND SETTINGS\GUNNAR\Cookies\gunnar@adxpose[1].txt [ Cookie:gunnar@adxpose.com/ ]
    C:\DOCUMENTS AND SETTINGS\GUNNAR\Cookies\gunnar@clkads[2].txt [ Cookie:gunnar@clkads.com/adServe/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@rotator.adjuggler[2].txt [ Cookie:lisa@rotator.adjuggler.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@browseinside.harperteen[2].txt [ Cookie:lisa@browseinside.harperteen.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@pointclickhome[1].txt [ Cookie:lisa@pointclickhome.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@adxpose[1].txt [ Cookie:lisa@adxpose.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@pbteen[1].txt [ Cookie:lisa@pbteen.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@liveperson[4].txt [ Cookie:lisa@liveperson.net/hc/65803736 ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@petfinder[2].txt [ Cookie:lisa@petfinder.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@find.myrecipes[2].txt [ Cookie:lisa@find.myrecipes.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@intermundomedia[1].txt [ Cookie:lisa@intermundomedia.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@harperteen[1].txt [ Cookie:lisa@harperteen.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@ru4[1].txt [ Cookie:lisa@ru4.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@blainmaine.112.2o7[1].txt [ Cookie:lisa@blainmaine.112.2o7.net/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@yieldmanager[2].txt [ Cookie:lisa@yieldmanager.net/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@mediaplex[2].txt [ Cookie:lisa@mediaplex.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@a1.interclick[2].txt [ Cookie:lisa@a1.interclick.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@test.coremetrics[1].txt [ Cookie:lisa@test.coremetrics.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@trafficmp[2].txt [ Cookie:lisa@trafficmp.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@adecn[1].txt [ Cookie:lisa@adecn.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@media.adfrontiers[1].txt [ Cookie:lisa@media.adfrontiers.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@data.coremetrics[1].txt [ Cookie:lisa@data.coremetrics.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@statse.webtrendslive[2].txt [ Cookie:lisa@statse.webtrendslive.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@h.atdmt[2].txt [ Cookie:lisa@h.atdmt.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@interclick[2].txt [ Cookie:lisa@interclick.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@www.qksrv[2].txt [ Cookie:lisa@www.qksrv.net/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@www.directnetadvertising[1].txt [ Cookie:lisa@www.directnetadvertising.net/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@doubleclick[1].txt [ Cookie:lisa@doubleclick.net/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@statcounter[1].txt [ Cookie:lisa@statcounter.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@atdmt[2].txt [ Cookie:lisa@atdmt.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@collective-media[1].txt [ Cookie:lisa@collective-media.net/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@legolas-media[1].txt [ Cookie:lisa@legolas-media.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@pro-market[2].txt [ Cookie:lisa@pro-market.net/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@sdc.pointclickhome[1].txt [ Cookie:lisa@sdc.pointclickhome.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@tracking.foxnews[1].txt [ Cookie:lisa@tracking.foxnews.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@superstats[2].txt [ Cookie:lisa@superstats.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@casalemedia[2].txt [ Cookie:lisa@casalemedia.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@s.clickability[1].txt [ Cookie:lisa@s.clickability.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@target.db.advertising[2].txt [ Cookie:lisa@target.db.advertising.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@updates.liquiddigitalmedia[2].txt [ Cookie:lisa@updates.liquiddigitalmedia.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@stats.townnews[2].txt [ Cookie:lisa@stats.townnews.com/leesburg2day.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@realmedia[1].txt [ Cookie:lisa@realmedia.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@find.keywordblocks[1].txt [ Cookie:lisa@find.keywordblocks.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@allbritton.122.2o7[1].txt [ Cookie:lisa@allbritton.122.2o7.net/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@counter.hitslink[1].txt [ Cookie:lisa@counter.hitslink.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@teenvogue[2].txt [ Cookie:lisa@teenvogue.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@adtech[1].txt [ Cookie:lisa@adtech.de/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@adlegend[1].txt [ Cookie:lisa@adlegend.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@tribalfusion[1].txt [ Cookie:lisa@tribalfusion.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@zedo[3].txt [ Cookie:lisa@zedo.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@oasn04.247realmedia[2].txt [ Cookie:lisa@oasn04.247realmedia.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@partner2profit[2].txt [ Cookie:lisa@partner2profit.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@specificmedia[1].txt [ Cookie:lisa@specificmedia.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@www.matracking[1].txt [ Cookie:lisa@www.matracking.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@specificclick[1].txt [ Cookie:lisa@specificclick.net/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@ar.atwola[1].txt [ Cookie:lisa@ar.atwola.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@ads.pointroll[1].txt [ Cookie:lisa@ads.pointroll.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@www.ifactostat[1].txt [ Cookie:lisa@www.ifactostat.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@xiti[1].txt [ Cookie:lisa@xiti.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@adcentriconline[1].txt [ Cookie:lisa@adcentriconline.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@liveperson[2].txt [ Cookie:lisa@liveperson.net/hc/74613876 ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@advertstream[1].txt [ Cookie:lisa@advertstream.com/a ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@burstbeacon[1].txt [ Cookie:lisa@burstbeacon.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@mm.chitika[1].txt [ Cookie:lisa@mm.chitika.net/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@anrtx.tacoda[2].txt [ Cookie:lisa@anrtx.tacoda.net/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@www.harperteen[1].txt [ Cookie:lisa@www.harperteen.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@accountingcoach[1].txt [ Cookie:lisa@accountingcoach.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@o1.qnsr[1].txt [ Cookie:lisa@o1.qnsr.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@liveperson[3].txt [ Cookie:lisa@liveperson.net/hc/37343836 ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@imrworldwide[2].txt [ Cookie:lisa@imrworldwide.com/cgi-bin ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@www.seventeen[2].txt [ Cookie:lisa@www.seventeen.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@qnsr[1].txt [ Cookie:lisa@qnsr.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@careers-in-accounting[2].txt [ Cookie:lisa@careers-in-accounting.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@adbrite[1].txt [ Cookie:lisa@adbrite.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@ad1.clickhype[1].txt [ Cookie:lisa@ad1.clickhype.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@microsoftwlsearchcrm.112.2o7[1].txt [ Cookie:lisa@microsoftwlsearchcrm.112.2o7.net/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@www.google[3].txt [ Cookie:lisa@www.google.com/accounts ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@liveperson[5].txt [ Cookie:lisa@liveperson.net/hc/1338460 ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@adsonar[3].txt [ Cookie:lisa@adsonar.com/adserving ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@ads.bridgetrack[2].txt [ Cookie:lisa@ads.bridgetrack.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@paypal.112.2o7[1].txt [ Cookie:lisa@paypal.112.2o7.net/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@accountemps[1].txt [ Cookie:lisa@accountemps.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@microsoftwindows.112.2o7[1].txt [ Cookie:lisa@microsoftwindows.112.2o7.net/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@www.qsstats[2].txt [ Cookie:lisa@www.qsstats.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@e2itg.pbteen[2].txt [ Cookie:lisa@e2itg.pbteen.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@pointroll[2].txt [ Cookie:lisa@pointroll.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@ads.addynamix[1].txt [ Cookie:lisa@ads.addynamix.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@oasn03.247realmedia[1].txt [ Cookie:lisa@oasn03.247realmedia.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@stats2.officite[1].txt [ Cookie:lisa@stats2.officite.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@CANID5Y8.txt [ Cookie:lisa@liveperson.net/hc/43853546 ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@hpi.rotator.hadj7.adjuggler[2].txt [ Cookie:lisa@hpi.rotator.hadj7.adjuggler.net/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@e1.cdn.qnsr[1].txt [ Cookie:lisa@e1.cdn.qnsr.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@msnbc.112.2o7[1].txt [ Cookie:lisa@msnbc.112.2o7.net/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@jobsinaccounting[1].txt [ Cookie:lisa@jobsinaccounting.org/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@adserver.adtechus[2].txt [ Cookie:lisa@adserver.adtechus.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@cratebarrel.112.2o7[1].txt [ Cookie:lisa@cratebarrel.112.2o7.net/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@liveperson[6].txt [ Cookie:lisa@liveperson.net/hc/88878672 ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@serving-sys[1].txt [ Cookie:lisa@serving-sys.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@lucidmedia[2].txt [ Cookie:lisa@lucidmedia.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@eyewonder[1].txt [ Cookie:lisa@eyewonder.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@liveperson[1].txt [ Cookie:lisa@liveperson.net/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@warnerbros.112.2o7[1].txt [ Cookie:lisa@warnerbros.112.2o7.net/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@pluckit.demandmedia[1].txt [ Cookie:lisa@pluckit.demandmedia.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@liveperson[7].txt [ Cookie:lisa@liveperson.net/hc/14639449 ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@tracking.servedbyy[2].txt [ Cookie:lisa@tracking.servedbyy.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@educationmanagementllc.112.2o7[1].txt [ Cookie:lisa@educationmanagementllc.112.2o7.net/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@usgs.122.2o7[1].txt [ Cookie:lisa@usgs.122.2o7.net/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@secure.leadback.advertising[1].txt [ Cookie:lisa@secure.leadback.advertising.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@mallimages.mallfinder[2].txt [ Cookie:lisa@mallimages.mallfinder.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@tracking.plattformad[1].txt [ Cookie:lisa@tracking.plattformad.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@mediaforge[2].txt [ Cookie:lisa@mediaforge.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@wegmansfoods.112.2o7[1].txt [ Cookie:lisa@wegmansfoods.112.2o7.net/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@www.windowsmedia[2].txt [ Cookie:lisa@www.windowsmedia.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@linksynergy[2].txt [ Cookie:lisa@linksynergy.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@www.accountingcoach[1].txt [ Cookie:lisa@www.accountingcoach.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@bizrate[1].txt [ Cookie:lisa@bizrate.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@ehg-adidas.hitbox[2].txt [ Cookie:lisa@ehg-adidas.hitbox.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@unitedcountry[2].txt [ Cookie:lisa@unitedcountry.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@web4.realtracker[1].txt [ Cookie:lisa@web4.realtracker.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@carlson.112.2o7[1].txt [ Cookie:lisa@carlson.112.2o7.net/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@loudouncountyjobs.jobamatic[2].txt [ Cookie:lisa@loudouncountyjobs.jobamatic.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@countryinns[1].txt [ Cookie:lisa@countryinns.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@in.getclicky[1].txt [ Cookie:lisa@in.getclicky.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@CARPDBPV.txt [ Cookie:lisa@liveperson.net/hc/LPneimanmarcus ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@fairfaxcounty[1].txt [ Cookie:lisa@fairfaxcounty.gov/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@accounts.google[1].txt [ Cookie:lisa@accounts.google.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@insightexpressai[2].txt [ Cookie:lisa@insightexpressai.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@www.countryliving[4].txt [ Cookie:lisa@www.countryliving.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@www.accountemps[1].txt [ Cookie:lisa@www.accountemps.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@gs.serving-sys[1].txt [ Cookie:lisa@gs.serving-sys.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@liveperson[8].txt [ Cookie:lisa@liveperson.net/hc/37457093 ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@webanalytics.crownpeak.com.re.getclicky[1].txt [ Cookie:lisa@webanalytics.crownpeak.com.re.getclicky.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@traveladvertising[2].txt [ Cookie:lisa@traveladvertising.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@rotator.hadj7.adjuggler[3].txt [ Cookie:lisa@rotator.hadj7.adjuggler.net/servlet/ajrotator/track/pt63551 ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@marketlive.122.2o7[1].txt [ Cookie:lisa@marketlive.122.2o7.net/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@atrack.art[2].txt [ Cookie:lisa@atrack.art.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@liveperson[9].txt [ Cookie:lisa@liveperson.net/hc/48912686 ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@countryliving[1].txt [ Cookie:lisa@countryliving.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@hitbox[2].txt [ Cookie:lisa@hitbox.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@teenfashion.about[1].txt [ Cookie:lisa@teenfashion.about.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@msnportal.112.2o7[1].txt [ Cookie:lisa@msnportal.112.2o7.net/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@stats.washingtonpost[2].txt [ Cookie:lisa@stats.washingtonpost.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@akamai.interclickproxy[2].txt [ Cookie:lisa@akamai.interclickproxy.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@www.googleadservices[1].txt [ Cookie:lisa@www.googleadservices.com/pagead/conversion/1070254509/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@nestleusa.122.2o7[1].txt [ Cookie:lisa@nestleusa.122.2o7.net/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@hearstmagazines.112.2o7[1].txt [ Cookie:lisa@hearstmagazines.112.2o7.net/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@adserve.navigateboomermedia[1].txt [ Cookie:lisa@adserve.navigateboomermedia.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@ad.yieldmanager[1].txt [ Cookie:lisa@ad.yieldmanager.net/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@search.clicksthe[1].txt [ Cookie:lisa@search.clicksthe.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@nextag[2].txt [ Cookie:lisa@nextag.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@amazonlocal.122.2o7[1].txt [ Cookie:lisa@amazonlocal.122.2o7.net/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@CAVL92NT.txt [ Cookie:lisa@liveperson.net/hc/89901003 ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@msn[7].txt [ Cookie:lisa@msn.com/fall-tv-guide/fall-tvs-sexiest-stars/photo-gallery/feature/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@pmamedia.sitescout[2].txt [ Cookie:lisa@pmamedia.sitescout.com/ ]
    C:\DOCUMENTS AND SETTINGS\LISA\Cookies\lisa@amazonmerchants.122.2o7[1].txt [ Cookie:lisa@amazonmerchants.122.2o7.net/ ]
    C:\DOCUMENTS AND SETTINGS\MORGAN\Cookies\morgan@media6degrees[1].txt [ Cookie:morgan@media6degrees.com/ ]
    C:\DOCUMENTS AND SETTINGS\MORGAN\Cookies\morgan@zedo[2].txt [ Cookie:morgan@zedo.com/ ]
    C:\DOCUMENTS AND SETTINGS\MORGAN\Cookies\morgan@a1.interclick[2].txt [ Cookie:morgan@a1.interclick.com/ ]
    C:\DOCUMENTS AND SETTINGS\MORGAN\Cookies\morgan@advertising[2].txt [ Cookie:morgan@advertising.com/ ]
    C:\DOCUMENTS AND SETTINGS\MORGAN\Cookies\morgan@invitemedia[2].txt [ Cookie:morgan@invitemedia.com/ ]
    C:\DOCUMENTS AND SETTINGS\MORGAN\Cookies\morgan@insightexpressai[1].txt [ Cookie:morgan@insightexpressai.com/ ]
    C:\DOCUMENTS AND SETTINGS\MORGAN\Cookies\morgan@casalemedia[2].txt [ Cookie:morgan@casalemedia.com/ ]
    C:\DOCUMENTS AND SETTINGS\MORGAN\Cookies\morgan@revsci[2].txt [ Cookie:morgan@revsci.net/ ]
    C:\DOCUMENTS AND SETTINGS\MORGAN\Cookies\morgan@burstbeacon[2].txt [ Cookie:morgan@burstbeacon.com/ ]
    C:\DOCUMENTS AND SETTINGS\MORGAN\Cookies\morgan@ads.bridgetrack[2].txt [ Cookie:morgan@ads.bridgetrack.com/ ]
    C:\DOCUMENTS AND SETTINGS\MORGAN\Cookies\morgan@bizrate[1].txt [ Cookie:morgan@bizrate.com/ ]
    C:\DOCUMENTS AND SETTINGS\MORGAN\Cookies\morgan@clkads[2].txt [ Cookie:morgan@clkads.com/adServe/ ]
    C:\DOCUMENTS AND SETTINGS\MORGAN\Cookies\morgan@content.yieldmanager[2].txt [ Cookie:morgan@content.yieldmanager.com/ ]
    C:\DOCUMENTS AND SETTINGS\MORGAN\Cookies\morgan@adbrite[1].txt [ Cookie:morgan@adbrite.com/ ]
    C:\DOCUMENTS AND SETTINGS\MORGAN\Cookies\morgan@trafficmp[1].txt [ Cookie:morgan@trafficmp.com/ ]
    C:\DOCUMENTS AND SETTINGS\MORGAN\Cookies\morgan@lucidmedia[1].txt [ Cookie:morgan@lucidmedia.com/ ]
    C:\DOCUMENTS AND SETTINGS\MORGAN\Cookies\morgan@clkads[3].txt [ Cookie:morgan@clkads.com/adServe/banners ]
    C:\DOCUMENTS AND SETTINGS\MORGAN\Cookies\morgan@pointroll[2].txt [ Cookie:morgan@pointroll.com/ ]
    C:\DOCUMENTS AND SETTINGS\MORGAN\Cookies\morgan@www.googleadservices[1].txt [ Cookie:morgan@www.googleadservices.com/pagead/conversion/1056755011/ ]
    C:\DOCUMENTS AND SETTINGS\MORGAN\Cookies\morgan@interclick[1].txt [ Cookie:morgan@interclick.com/ ]
    C:\DOCUMENTS AND SETTINGS\MORGAN\Cookies\morgan@imrworldwide[2].txt [ Cookie:morgan@imrworldwide.com/cgi-bin ]
    C:\DOCUMENTS AND SETTINGS\MORGAN\Cookies\morgan@specificclick[1].txt [ Cookie:morgan@specificclick.net/ ]
    C:\DOCUMENTS AND SETTINGS\MORGAN\Cookies\morgan@burstnet[1].txt [ Cookie:morgan@burstnet.com/ ]
    C:\DOCUMENTS AND SETTINGS\MORGAN\Cookies\morgan@collective-media[1].txt [ Cookie:morgan@collective-media.net/ ]
    C:\DOCUMENTS AND SETTINGS\MORGAN\Cookies\morgan@server.cpmstar[2].txt [ Cookie:morgan@server.cpmstar.com/ ]
    C:\DOCUMENTS AND SETTINGS\MORGAN\Cookies\morgan@buildabear.122.2o7[1].txt [ Cookie:morgan@buildabear.122.2o7.net/ ]
    C:\DOCUMENTS AND SETTINGS\MORGAN\Cookies\morgan@ad.yieldmanager[2].txt [ Cookie:morgan@ad.yieldmanager.com/ ]
    C:\DOCUMENTS AND SETTINGS\MORGAN\Cookies\morgan@fastclick[2].txt [ Cookie:morgan@fastclick.net/ ]
    C:\DOCUMENTS AND SETTINGS\MORGAN\Cookies\morgan@atdmt[2].txt [ Cookie:morgan@atdmt.com/ ]
    C:\DOCUMENTS AND SETTINGS\MORGAN\Cookies\morgan@cdn4.specificclick[1].txt [ Cookie:morgan@cdn4.specificclick.net/ ]
    C:\DOCUMENTS AND SETTINGS\MORGAN\Cookies\morgan@statse.webtrendslive[1].txt [ Cookie:morgan@statse.webtrendslive.com/ ]
    C:\DOCUMENTS AND SETTINGS\MORGAN\Cookies\morgan@adxpose[1].txt [ Cookie:morgan@adxpose.com/ ]
    C:\DOCUMENTS AND SETTINGS\MORGAN\Cookies\morgan@ru4[1].txt [ Cookie:morgan@ru4.com/ ]
    C:\DOCUMENTS AND SETTINGS\MORGAN\Cookies\morgan@www.burstbeacon[1].txt [ Cookie:morgan@www.burstbeacon.com/ ]
    C:\DOCUMENTS AND SETTINGS\MORGAN\Cookies\morgan@tribalfusion[2].txt [ Cookie:morgan@tribalfusion.com/ ]
    a.ads2.msads.net [ C:\DOCUMENTS AND SETTINGS\GUNNAR\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\GUGQFEPM ]
    ad.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\GUNNAR\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\GUGQFEPM ]
    ads2.msads.net [ C:\DOCUMENTS AND SETTINGS\GUNNAR\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\GUGQFEPM ]
    adsatt.espn.go.com [ C:\DOCUMENTS AND SETTINGS\GUNNAR\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\GUGQFEPM ]
    b.ads2.msads.net [ C:\DOCUMENTS AND SETTINGS\GUNNAR\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\GUGQFEPM ]
    cdn4.specificclick.net [ C:\DOCUMENTS AND SETTINGS\GUNNAR\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\GUGQFEPM ]
    interclick.com [ C:\DOCUMENTS AND SETTINGS\GUNNAR\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\GUGQFEPM ]
    m1.2mdn.net [ C:\DOCUMENTS AND SETTINGS\GUNNAR\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\GUGQFEPM ]
    media1.clubpenguin.com [ C:\DOCUMENTS AND SETTINGS\GUNNAR\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\GUGQFEPM ]
    msntest.serving-sys.com [ C:\DOCUMENTS AND SETTINGS\GUNNAR\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\GUGQFEPM ]
    secure-us.imrworldwide.com [ C:\DOCUMENTS AND SETTINGS\GUNNAR\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\GUGQFEPM ]
    serving-sys.com [ C:\DOCUMENTS AND SETTINGS\GUNNAR\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\GUGQFEPM ]
    udn.specificclick.net [ C:\DOCUMENTS AND SETTINGS\GUNNAR\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\GUGQFEPM ]
    a.ads2.msads.net [ C:\DOCUMENTS AND SETTINGS\LISA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\DZFW5UYL ]
    ad.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\LISA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\DZFW5UYL ]
    ads2.msads.net [ C:\DOCUMENTS AND SETTINGS\LISA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\DZFW5UYL ]
    b.ads2.msads.net [ C:\DOCUMENTS AND SETTINGS\LISA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\DZFW5UYL ]
    cdn.tremormedia.com [ C:\DOCUMENTS AND SETTINGS\LISA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\DZFW5UYL ]
    cdn4.specificclick.net [ C:\DOCUMENTS AND SETTINGS\LISA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\DZFW5UYL ]
    core.insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\LISA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\DZFW5UYL ]
    interclick.com [ C:\DOCUMENTS AND SETTINGS\LISA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\DZFW5UYL ]
    m1.2mdn.net [ C:\DOCUMENTS AND SETTINGS\LISA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\DZFW5UYL ]
    media.overstock.com [ C:\DOCUMENTS AND SETTINGS\LISA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\DZFW5UYL ]
    media.scanscout.com [ C:\DOCUMENTS AND SETTINGS\LISA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\DZFW5UYL ]
    media10.washingtonpost.com [ C:\DOCUMENTS AND SETTINGS\LISA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\DZFW5UYL ]
    mediaforgews.com [ C:\DOCUMENTS AND SETTINGS\LISA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\DZFW5UYL ]
    msnbcmedia.msn.com [ C:\DOCUMENTS AND SETTINGS\LISA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\DZFW5UYL ]
    msntest.serving-sys.com [ C:\DOCUMENTS AND SETTINGS\LISA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\DZFW5UYL ]
    s0.2mdn.net [ C:\DOCUMENTS AND SETTINGS\LISA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\DZFW5UYL ]
    secure-us.imrworldwide.com [ C:\DOCUMENTS AND SETTINGS\LISA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\DZFW5UYL ]
    serving-sys.com [ C:\DOCUMENTS AND SETTINGS\LISA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\DZFW5UYL ]
    stmedia.startribune.com [ C:\DOCUMENTS AND SETTINGS\LISA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\DZFW5UYL ]
    www.accountingcoach.com [ C:\DOCUMENTS AND SETTINGS\LISA\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\DZFW5UYL ]
    C:\DOCUMENTS AND SETTINGS\LISA\COOKIES\LISA@2O7[1].TXT [ /2O7 ]
    C:\DOCUMENTS AND SETTINGS\LISA\COOKIES\LISA@ADOPT.EUROCLICK[1].TXT [ /ADOPT.EUROCLICK ]
    C:\DOCUMENTS AND SETTINGS\LISA\COOKIES\LISA@DMTRACKER[1].TXT [ /DMTRACKER ]
    C:\DOCUMENTS AND SETTINGS\LISA\COOKIES\LISA@JMP.CLICKBOOTH[1].TXT [ /JMP.CLICKBOOTH ]
    C:\DOCUMENTS AND SETTINGS\LISA\COOKIES\LISA@KODAKIMAGINGNETWORK.122.2O7[1].TXT [ /KODAKIMAGINGNETWORK.122.2O7 ]
    C:\DOCUMENTS AND SETTINGS\LISA\COOKIES\LISA@QKSRV[1].TXT [ /QKSRV ]
    C:\DOCUMENTS AND SETTINGS\LISA\COOKIES\LISA@TRACKING.ADMARKETPLACE[1].TXT [ /TRACKING.ADMARKETPLACE ]
    C:\DOCUMENTS AND SETTINGS\LISA\COOKIES\LISA@VIDEOEGG.ADBUREAU[1].TXT [ /VIDEOEGG.ADBUREAU ]
    C:\DOCUMENTS AND SETTINGS\LISA\COOKIES\LISA@ZEDO[1].TXT [ /ZEDO ]
    C:\DOCUMENTS AND SETTINGS\LISA\COOKIES\LISA@ZEDO[2].TXT [ /ZEDO ]
    a.ads2.msads.net [ C:\DOCUMENTS AND SETTINGS\MORGAN\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\4TC53H5J ]
    adimages.scrippsnetworks.com [ C:\DOCUMENTS AND SETTINGS\MORGAN\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\4TC53H5J ]
    ads2.msads.net [ C:\DOCUMENTS AND SETTINGS\MORGAN\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\4TC53H5J ]
    b.ads2.msads.net [ C:\DOCUMENTS AND SETTINGS\MORGAN\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\4TC53H5J ]
    cdn4.specificclick.net [ C:\DOCUMENTS AND SETTINGS\MORGAN\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\4TC53H5J ]
    media1.clubpenguin.com [ C:\DOCUMENTS AND SETTINGS\MORGAN\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\4TC53H5J ]
    udn.specificclick.net [ C:\DOCUMENTS AND SETTINGS\MORGAN\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\4TC53H5J ]

    Adware.SelectRebates[SAH]
    C:\SYSTEM VOLUME INFORMATION\_RESTORE{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP1290\A0148309.DLL

    Trojan.Unknown Origin
    C:\WINDOWS\SYSTEM32\OT.ICO
    C:\WINDOWS\SYSTEM32\TS.ICO
    Eric72, Dec 6, 2011
    #45

  6. Bobbye Helper on the Fringe

    Erik, you have new, active malware- quite a bit in the Java cache. We need to find how this is getting in. I have several things for you to do- while we try to find the leak, please don't do any new downloads, installs. There are several users on the system> Start here:

    1. Download Security Check by screen317 from one of these links:
    Link1
    Link 2
    • Save it to your Desktop.
    • Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
    • A Notepad document should open automatically called checkup.txt; please post the contents of that document.
    =======================================
    2. Please download OTMovit by Old Timer and save to your desktop.
    • Double-click OTMoveIt3.exe to run it. (Vista users, please right click on OTMoveit3.exe and select "Run as an Administrator")
    • Copy the file paths below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy):
      Code:
      :Files 
C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\6.0\57\4c85f79-4bce12da 
C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\6.0\6\2b2dd8c6-2e62bd77 
C:\Documents and Settings\Erik\Application Data\Sun\Java\Deployment\cache\6.0\25\5881c799-36cc4fe1 
C:\Documents and Settings\Erik\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\7656823660-6b406ab0-2f0105ad.zip 
C:\Documents and Settings\Erik\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\plugins.jar-77c163df-1b781d71.zip 
C:\Program Files\FoxTabAudioConverter\AudioConverter.exe 
:Commands
[purity]
[emptytemp]
[start explorer]
[Reboot]
    • Return to OTMoveIt3, right click in the "Paste Instructions for Items to be Moved" window and choose Paste.
    • Click the red Moveit! button.
    • A log of files and folders moved will be created in the c:\_OTMoveIt\MovedFiles folder in the form of Date and Time (mmddyyyy_hhmmss.log). Please open this log in Notepad and post its contents in your next reply.
    • Close OTMoveIt3
    If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes.
    ========================================
    3. To clear the Java Plug-in cache:

    • [1]. Click Start > Control Panel.
      [2]. Double-click the Java icon in the control panel. [IMG] The Java Control Panel appears.
      [IMG]
      [3].Click Settings under Temporary Internet Files.The Temporary Files Settings dialog box appears.
      [IMG]
      [4] Click Delete Files.The Delete Temporary Files dialog box appears.
      [IMG]
      [5]. Click OK on Delete Temporary Files window.
      Note: This deletes all the Downloaded Applications and Applets from the cache.
      [6]. Click Apply> OK on Temporary Files Settings window.
    Images courtesy java.com
    ======================================
    4. Reset Cookies
    This same thing need to be done for all accounts:
    Administrator
    Erik
    GUNNAR
    LISA
    MORGAN
    For Internet Explorer: Internet Options (through Tools or Control Panel) Privacy tab> Advanced button> CHECK 'override automatic Cookie handling'> CHECK 'accept first party Cookies'> CHECK 'Block third party Cookies'> CHECK 'allow per session Cookies'> Apply> OK.

    For Firefox: Tools> Options> Privacy> Cookies> CHECK ‘accept Cookies from Sites’> UNCHECK 'accept third party Cookies'> Set Keep until 'they expire'. This will allow you to keep Cookies for registered sites and prevent or remove others. (Note: for Firefox v3.5, after Privacy click on 'use custom settings for History.')

    I suggest using the following two add-on for Firefox. They will prevent the Tracking Cookies that come from ads and banners and other sources:
    AdBlock Plus
    Easy List

    For Chrome: Tools> Options> Under The Hood> Privacy Section> CHECK 'Restrict how third party Cookies can be used'> Close.
    (First-party and third-party cookies can be set by the website you're visiting and websites that have items embedded in the website you're visiting. But when you next visit the website, only first-party cookie information is sent to the website. Third-party cookie information isn't sent back to the websites that originally set the third-party cookies.)
    ====================================
    5. If you've done any of the above, do it again. It's based on what I see in these logs..

    I'll check the Security Check tomorrow and give you specific information for removing {b]SpywareQuake[/b] You may see fake alerts resembling this:
    [IMG]

    Do not act on any of these alerts!
    Bobbye, Dec 6, 2011
    #46

  7. Eric72 Newcomer, in training

    OK - thanks, Bobbye. I've completed the steps you listed, and they all appeared to work just fine.

    Here's the Security Check Log:

    Results of screen317's Security Check version 0.99.28
    Windows XP Service Pack 3 x86
    Internet Explorer 8
    ``````````````````````````````
    Antivirus/Firewall Check:
    Windows Firewall Disabled!
    ESET Online Scanner v3
    Antivirus up to date!
    ```````````````````````````````
    Anti-malware/Other Utilities Check:
    Malwarebytes' Anti-Malware
    CCleaner
    Java(TM) 6 Update 21
    Java 2 Runtime Environment, SE v1.4.2_03
    Java version out of date!
    ````````````````````````````````
    Process Check:
    objlist.exe by Laurent
    ``````````End of Log````````````


    And here's the OTM log:

    All processes killed
    ========== FILES ==========
    C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\6.0\57\4c85f79-4bce12da moved successfully.
    C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\6.0\6\2b2dd8c6-2e62bd77 moved successfully.
    C:\Documents and Settings\Erik\Application Data\Sun\Java\Deployment\cache\6.0\25\5881c799-36cc4fe1 moved successfully.
    C:\Documents and Settings\Erik\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\7656823660-6b406ab0-2f0105ad.zip moved successfully.
    C:\Documents and Settings\Erik\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\plugins.jar-77c163df-1b781d71.zip moved successfully.
    C:\Program Files\FoxTabAudioConverter\AudioConverter.exe moved successfully.
    ========== COMMANDS ==========

    [EMPTYTEMP]

    User: Administrator
    ->Temp folder emptied: 121064 bytes
    ->Temporary Internet Files folder emptied: 76322 bytes
    ->Java cache emptied: 1003 bytes
    ->Flash cache emptied: 5847 bytes

    User: All Users

    User: Default User
    ->Temp folder emptied: 59964 bytes
    ->Temporary Internet Files folder emptied: 32902 bytes

    User: Erik
    ->Temp folder emptied: 2679355 bytes
    ->Temporary Internet Files folder emptied: 193119843 bytes
    ->Java cache emptied: 1232742 bytes
    ->Flash cache emptied: 2852 bytes

    User: Gunnar
    ->Temp folder emptied: 414289760 bytes
    ->Temporary Internet Files folder emptied: 239087336 bytes
    ->Java cache emptied: 0 bytes
    ->Flash cache emptied: 124712 bytes

    User: Lisa
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 157915 bytes
    ->Java cache emptied: 14377 bytes
    ->Flash cache emptied: 40920 bytes

    User: LocalService
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 213126 bytes
    ->Flash cache emptied: 300 bytes

    User: Morgan
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 190857 bytes
    ->Java cache emptied: 0 bytes
    ->Flash cache emptied: 19777 bytes

    User: NetworkService
    ->Temp folder emptied: 65748 bytes
    ->Temporary Internet Files folder emptied: 32902 bytes

    %systemdrive% .tmp files removed: 0 bytes
    %systemroot% .tmp files removed: 19569 bytes
    %systemroot%\System32 .tmp files removed: 8388739 bytes
    %systemroot%\System32\dllcache .tmp files removed: 0 bytes
    %systemroot%\System32\drivers .tmp files removed: 0 bytes
    Windows Temp folder emptied: 16384 bytes
    %systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 103727435 bytes
    %systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 59136 bytes
    RecycleBin emptied: 1022919 bytes

    Total Files Cleaned = 920.00 mb


    OTM by OldTimer - Version 3.1.19.0 log created on 12072011_191614

    Files moved on Reboot...

    Registry entries deleted on Reboot...
    Eric72, Dec 7, 2011
    #47

  8. Eric72 Newcomer, in training

    By the way, I see that Security Check indicates the Windows firewall is disabled, which sounds significant to me! However, Verizon Internet Security Suite indicates that its firewall is active.
    Eric72, Dec 7, 2011
    #48

  9. Bobbye Helper on the Fringe

    Verizon Security uses McAfee. If it has a firewall included, then the Windows Firewall should be disabled. Only one software firewall should be running.

    The only antivirus program showing is the ESET Online Scanner v3. Neither the McAfee antivirus or firewall are indicated in the Security Scan. This is NOT a resident program and gives you no protection in Real Time. I finally got system information for DDS on Reply #32! But it's not reading correctly:
    AV: Anti-Virus and Anti-Spyware *Enabled/Updated* {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}
    FW: Firewall *Enabled*

    Should be:
    AV: McAfee Anti-Virus and Anti-Spyware *Disabled/Updated* {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}
    FW: McAfee Firewall *Enabled* ...
    ---------------------------------------------
    I see McAfee entries: These are all stopped, designation S. They should be Running, designation R.
    S2 McMPFSvc;McAfee Personal Firewall Service;c:\program files\common files\mcafee\mcsvchost\McSvHost.exe [2010-10-7 214904]
    S2 McNaiAnn;McAfee VirusScan Announcer;c:\program files\common files\mcafee\mcsvchost\McSvHost.exe [2010-10-7 214904]
    S2 McProxy;McAfee Proxy Service;c:\program files\common files\mcafee\mcsvchost\McSvHost.exe [2010-10-7 214904]

    These processes are running/Automatic:
    R2 McShield;McAfee McShield;c:\program files\common files\mcafee\systemcore\mcshield.exe [2010-10-7 166288]
    R2 mfefire;McAfee Firewall Core Service;c:\program files\common files\mcafee\systemcore\mfefire.exe [2010-10-7 160608]
    These are said to be huge resource users. At some point, you might want to consider removing the McAfee Security and replacing it with a free AV and FW:
    See Section #2 below
    ====================================
    OTM results: Total Files Cleaned = 920.00 mb This is way too many files still on the system. You need to increase the maintenance on the system- or start it! Delete temporary internet Files, delete Cookies, Disc Cleanup, Defrag.

    Java should have been updated: Please update Java: Java Updates . Uninstall any earlier versions in Add/Remove Programs as they are vulnerabilities for the system.

    You are continuing to get new, active malware. Something is wrong with your security setup.
    ===================================
    Here are some tips that will help with the security:
    Tips for added security and safer browsing: (Links are in Bold Blue)
    1. Browser Security
      [o] Safe Settings (Please ignore the suggestion to use the Registry Editor in this section "Creating a Custom Security Zone")
      [o] ZonedOut. This manages the Zones in Internet Explorer. (For IE7 and IE8, Windows 2000 thru Vista. No Windows 7)
      [o] Replace the Host Files
      [o] Google Toolbar Pop Up Blocker
      [o]Web of Trust (WOT) Site Advisor. Traffic-light rating symbols show which rate the site for Trustworthiness, Vendor Reliability, Privacy, Child Safety.
    2. Have layered Security:
      [o]Antivirus :(only one):Both of the following programs are free and known to be good:
      [o]Avira-AntiVir-Personal-Free-Antivirus
      [o]Avast-Free Antivirus
      [o]Firewall (only one): Use bi-directional firewall. Both of the following programs are free and known to be good:
      [o]Comodo
      [o]Zone Alarm
    3. Antimalware: I recommend all of the following:
      [o]Spywareblaster: SpywareBlaster protects against bad ActiveX.
      [o]Spybot Search & Destroy
    4. Updates: Stay current:
      [o] the Microsoft Download Sitefrequently. All updates marked Critical and the current SP updates.
      [o]Adobe Reader Install current, uninstall old.
      [o]Java Updates Install current, uninstall old.
    5. Tracking Cookies
      Reset Cookie:
      [o]For Internet Explorer: Internet Options (through Tools or Control Panel) Privacy tab> Advanced button> check 'override automatic Cookie handling'> check 'accept first party Cookies'> check 'Block third party Cookies'> check 'allow per session Cookies'> Apply> OK.
      [o]For Firefox: Tools> Options> Privacy> Cookies> check ‘accept Cookies from Sites’> Uncheck 'accept third party Cookies'> Set Keep until 'they expire'. This will allow you to keep Cookies for registered sites and prevent or remove others. (Note: for Firefox v3.5, after Privacy click on 'use custom settings for History.')
      I suggest using the following two add-on for Firefox. They will prevent the Tracking Cookies that come from ads and banners and other sources:
      AdBlock Plus
      Easy List
      [o]For Chrome: Tools> Options> Under The Hood> Privacy Section> CHECK 'Restrict how third party Cookies can be used'> Close.
    6. Do regular Maintenance
      Clean the temporary internet files often:
      [o] Temporary File Cleaner]
      or
      [o] ATF Cleaner by Atribune
    7. Restore Points:
      [o]See System Restore Guide
    8. Safe Email Handling
      [o] Don't open email from anyone you don't know.
      [o] Don't open Attachments in the email. Safe to your desktop and scan for viruses using a right click
      [o] Don't leave your personal email address on the internet. Have a separate email account at one of the free web-based emails like Yahoo.
    Please let me know if you find any bad link.
    ======================================
    Please give me information on how the system is running now.
    Bobbye, Dec 9, 2011
    #49

  10. Eric72 Newcomer, in training

    Will do, Bobbye - thanks. I haven't had a chance to run through all these steps yet, but I will.
    Eric72, Dec 15, 2011
    #50

  11. Bobbye Helper on the Fringe

    Try to get to it before more files get infected.
    Bobbye, Dec 16, 2011
    #51

  12. Bobbye Helper on the Fringe

    Holiday Notice! I will not be working on the threads Sat. Dec. 24 or Sunday Dec. 25. I will begin with the oldest threads first on Monday. I will do my best to get you finished or as far along as I can before that. Please do not send a PM during those days.
    Bobbye, Dec 23, 2011
    #52
Page 3 of 3