|
|
|
New Member
Group: Forum Members
Last Login: 3/11/2008 5:34 AM
Posts: 34,
Visits: 37
|
|
Hello,
I've red and followed the steps on the "READ BEFORE POSTING HIJACK THIS LOGS".
My computer is becoming slower and slower and since a few month I now often get a message saying that the system is running low on memory. Applications take very long to load and shut down, some of them over a minute if I have several things running simultaneously. This computer is often used for gaming and lately the game applications have to be shut down and relaunched so that the game can run smoothly for 1/2 hour or so before it becomes all choppy again and the memory warnings start to come up.
Thank you very much for your help
SUPERAntiSpyware Scan Log
http://www.superantispyware.com
Generated 08/25/2010 at 01:26 PM
Application Version : 4.41.1000
Core Rules Database Version : 5402
Trace Rules Database Version: 3214
Scan type : Complete Scan
Total Scan Time : 00:37:37
Memory items scanned : 254
Memory threats detected : 0
Registry items scanned : 12838
Registry threats detected : 0
File items scanned : 37574
File threats detected : 540
Trojan.Agent/Gen-FakeAlert
C:\PROGRAM FILES (X86)\WINAMP\PLUGINS\IN_FLAC.DLL
Adware.Tracking Cookie
.cgm.adbureau.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.advertising.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.atdmt.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.revsci.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.adbureau.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
eas.apm.emediate.eu [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.partypoker.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.zedo.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.adtech.de [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.iacas.adbureau.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
media.adrevolver.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.mediaplex.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.zedo.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.statcounter.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.statcounter.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.statcounter.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.imrworldwide.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.2o7.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.2o7.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.xiti.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.msnportal.112.2o7.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.2o7.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.2o7.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.2o7.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.2o7.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.2o7.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.2o7.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.wowwebstats.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.statcounter.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.2o7.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.statcounter.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.smartadserver.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.tribalfusion.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.tribalfusion.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.kontera.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.adbrite.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.atdmt.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.statcounter.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.iacas.adbureau.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
data.coremetrics.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.invitemedia.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.ads.pointroll.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.statcounter.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.mediaweb.musicradio.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.mediaplex.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
server.lon.liveperson.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.fastclick.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.fastclick.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.statcounter.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.men.122.2o7.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.game-advertising-online.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.apmebf.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.overture.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.statcounter.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
eas.apm.emediate.eu [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.247realmedia.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.ilead.itrack.it [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.statcounter.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
eas.apm.emediate.eu [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.statcounter.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.dmtracker.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.videoegg.adbureau.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.247realmedia.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.2o7.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.2o7.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.smartadserver.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.statcounter.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
media.adrevolver.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.247realmedia.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.adserver.adtechus.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.112.2o7.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.pointroll.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.statcounter.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.eyewonder.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.cgm.adbureau.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.server.cpmstar.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.burstnet.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.realmedia.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.statcounter.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.view.atdmt.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.trvlnet.adbureau.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.interclick.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.trafficmp.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.trafficmp.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.roiservice.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.msnaccountservices.112.2o7.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.adrevolver.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.adrevolver.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.statcounter.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.2o7.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.2o7.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.2o7.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
counter.hitslink.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
stat.onestat.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
stat.onestat.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.mediametrics.mpsa.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.foxfilmedentertainment.122.2o7.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.collective-media.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.network.realmedia.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.wowwebstats.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
adserver.armory.lt [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
server.iad.liveperson.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
server.iad.liveperson.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.112.2o7.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.2o7.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.revenue.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
secure.partyaccount.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.partyaccount.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.cgm.adbureau.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
fr.sitestat.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
fr.sitestat.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
fr.sitestat.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
fr.sitestat.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.2o7.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.cgm.adbureau.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.cgm.adbureau.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
fr.sitestat.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
stat.easydate.biz [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.at.atwola.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.cgm.adbureau.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.cgm.adbureau.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.eb.adbureau.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.media.wow-europe.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.cgm.adbureau.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
www.findaproperty.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
www.findaproperty.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
www.findaproperty.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.findaproperty.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.gmeurope.112.2o7.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
dc.tremormedia.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.leisure.122.2o7.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
passport.menmedia.co.uk [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.ds.clickexperts.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.partypoker.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
www.partypoker.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.adsby.webtraffic.se [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
fr.sitestat.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.tradedoubler.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.ad.uk.doubleclick.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.trvlnet.adbureau.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
adserver.adtech.de [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
adserver.adtech.de [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.yadro.ru [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
server.iad.liveperson.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.2o7.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
media.mtvnservices.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.tns-counter.ru [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.amazonmerchants.122.2o7.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.premiumtv.122.2o7.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.trinitymirror.112.2o7.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.ads.pointroll.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
ext-us.bestofmedia.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.bs.serving-sys.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
fl01.ct2.comclick.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.ehg-tfl.hitbox.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.ehg-tfl.hitbox.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
fl01.ct2.comclick.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.bluestreak.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
stats.renault.co.uk [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.112.2o7.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.2o7.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.2o7.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.hertz.122.2o7.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.traveladvertising.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.interclick.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.realmedia.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.stats.adbrite.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.trvlnet.adbureau.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.realmedia.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
server.iad.liveperson.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.zedo.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.2o7.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.lfstmedia.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.media.photobucket.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.popcapgames.122.2o7.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.avivauk.122.2o7.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.fls.doubleclick.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
server.lon.liveperson.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.fls.doubleclick.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
server.lon.liveperson.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.adserve.tescofinance.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.122.2o7.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.lfstmedia.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
fr.sitestat.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
fr.sitestat.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.roiservice.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.xm.xtendmedia.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.ehg-tfl.hitbox.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
trafficalerts.tfl.gov.uk [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.ehg-tfl.hitbox.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.ehg-tfl.hitbox.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.kontera.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.kontera.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.kontera.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
account.live.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.atdmt.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.atdmt.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.mediaplex.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
nemesistracker.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
nemesistracker.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
flagcounter.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
es.sitestat.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
adserver1.20below.eu [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
uk.sitestat.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
uk.sitestat.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.skymagazinelive.mymedia.co.uk [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.skymagazinelive.mymedia.co.uk [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.skymagazinelive.mymedia.co.uk [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
in.getclicky.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.terra.112.2o7.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.112.2o7.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.tracking.keywordmax.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.bloomingmarvellous.112.2o7.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
pluckit.demandmedia.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.112.2o7.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.2o7.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.surveymonkey.122.2o7.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.adecn.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
metroleap.rotator.hadj7.adjuggler.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
metroleap.rotator.hadj7.adjuggler.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.roiservice.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.blog.squeakywheelmedia.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.blog.squeakywheelmedia.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.blog.squeakywheelmedia.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.microsoftwga.112.2o7.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
counter.search.bg [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.imrworldwide.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.2o7.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.insightexpressai.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.insightexpressai.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.insightexpressai.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.insightexpressai.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.pointroll.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.ads.pointroll.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.ads.pointroll.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.ads.pointroll.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.ads.pointroll.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.ads.pointroll.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.ads.pointroll.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.2o7.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.burstnet.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.pro-market.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
cms.trafficmp.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.trafficmp.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.trafficmp.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.trafficmp.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.trafficmp.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.insightexpressai.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.insightexpressai.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.insightexpressai.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.insightexpressai.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.insightexpressai.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.adxpose.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.richmedia.yahoo.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.tacoda.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.tribalfusion.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.tribalfusion.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.tribalfusion.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.smartadserver.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.smartadserver.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
cdn4.specificclick.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.liveperson.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.liveperson.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.clickbank.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
fidelity.rotator.hadj7.adjuggler.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
onlineadtracker.co.uk [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
onlineadtracker.co.uk [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.adfarm1.adition.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
ad.zanox.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
s14.shinystat.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.liveperson.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.azjmp.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.liveperson.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.interclick.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.fastclick.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.lucidmedia.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.lucidmedia.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.lucidmedia.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.serving-sys.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.serving-sys.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
uk.sitestat.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
uk.sitestat.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.112.2o7.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.112.2o7.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
pixel-hk.pixelinteractivemedia.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
cdn4.specificclick.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
cdn4.specificclick.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
cdn4.specificclick.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
cdn4.specificclick.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.adjuggler.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
adv.vclick.it [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.bravenet.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.ice.112.2o7.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
s03.flagcounter.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
server.lon.liveperson.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.2o7.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.burstnet.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.77tracking.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.77tracking.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.findlaw.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.attorney.findlaw.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.findlaw.co.uk [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
www.findlaw.co.uk [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.hitbox.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.ehg-findlaw.hitbox.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.gamerdnamedia.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.gamerdnamedia.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.gamerdnamedia.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.ad-emea.doubleclick.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
statse.webtrendslive.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.clicksor.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.clicksor.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.overture.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.clicksor.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.clicksor.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.clicksor.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.adtech.de [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
www.googleadservices.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.tradedoubler.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.tradedoubler.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
adverts.flyingstartonline.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.partypoker.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.statcounter.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.advertising.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.yieldmanager.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.content.yieldmanager.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.tradedoubler.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.2o7.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.2o7.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.2o7.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.media6degrees.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.atdmt.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.partypoker.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
track.adform.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.media6degrees.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.casalemedia.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.casalemedia.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.casalemedia.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.casalemedia.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.eb.adbureau.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.revsci.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.eb.adbureau.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
rev.remnantmedianetwork.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.weborama.fr [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.revsci.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
ad.yieldmanager.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
www.googleadservices.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.2o7.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
uk.sitestat.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.invitemedia.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
track.adform.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.media6degrees.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.media6degrees.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.media6degrees.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.media6degrees.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.media6degrees.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.media6degrees.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.chitika.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.112.2o7.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.112.2o7.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.ru4.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.ru4.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
int.sitestat.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
menmedia.co.uk [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.menmedia.co.uk [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.menmedia.co.uk [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.menmedia.co.uk [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
menmedia.co.uk [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.revsci.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.revsci.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.menmedia.co.uk [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.invitemedia.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.specificclick.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.specificclick.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.specificclick.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.specificclick.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.specificclick.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.specificclick.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.specificclick.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.specificclick.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.specificclick.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.specificclick.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.specificclick.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
cdn5.specificclick.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.specificclick.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
cdn5.specificclick.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.specificclick.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.tacoda.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.tacoda.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.tacoda.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.at.atwola.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.at.atwola.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.clickaider.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.adbrite.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.adbrite.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.adbrite.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.adbrite.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.adbrite.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.adbrite.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.statcounter.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.revsci.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.vdwp.solution.weborama.fr [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.vdwp.solution.weborama.fr [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.vdwp.solution.weborama.fr [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.vdwp.solution.weborama.fr [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.revsci.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.revsci.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.himedia.individuad.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.himedia.individuad.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.adtech.de [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
gr.burstnet.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
fidelity.rotator.hadj7.adjuggler.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
ad.yieldmanager.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.advertising.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.advertising.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.advertising.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.fastclick.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.fastclick.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.fastclick.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.fastclick.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
ad.yieldmanager.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
ad.yieldmanager.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.zanox.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
s07.flagcounter.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
www.googleadservices.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.tradedoubler.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
tracking.dc-storm.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
tracking.dc-storm.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.tradedoubler.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.tradedoubler.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.doubleclick.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.mediaplex.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.questionmarket.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.questionmarket.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.adviva.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.adviva.net [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.advertising.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.advertising.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.tribalfusion.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.bs.serving-sys.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.serving-sys.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.serving-sys.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.serving-sys.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.serving-sys.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.serving-sys.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.serving-sys.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.serving-sys.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
ad.yieldmanager.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
ad.yieldmanager.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.invitemedia.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.invitemedia.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.invitemedia.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
.invitemedia.com [ C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Cookies ]
acvs.mediaonenetwork.net [ C:\Users\David\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\KGDAZMSP ]
addynamix.com [ C:\Users\David\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\KGDAZMSP ]
ads1.msn.com [ C:\Users\David\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\KGDAZMSP ]
asset2.countrylife.joyeurs.com [ C:\Users\David\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\KGDAZMSP ]
atdmt.com [ C:\Users\David\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\KGDAZMSP ]
broadcast.piximedia.fr [ C:\Users\David\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\KGDAZMSP ]
cdn.insights.gravity.com [ C:\Users\David\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\KGDAZMSP ]
cdn5.specificclick.net [ C:\Users\David\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\KGDAZMSP ]
cdn5.tribalfusion.com [ C:\Users\David\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\KGDAZMSP ]
cloud.video.unrulymedia.com [ C:\Users\David\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\KGDAZMSP ]
ds.serving-sys.com [ C:\Users\David\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\KGDAZMSP ]
ec.atdmt.com [ C:\Users\David\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\KGDAZMSP ]
googleads.g.doubleclick.net [ C:\Users\David\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\KGDAZMSP ]
ia.media-imdb.com [ C:\Users\David\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\KGDAZMSP ]
img-cdn.mediaplex.com [ C:\Users\David\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\KGDAZMSP ]
m.uk.2mdn.net [ C:\Users\David\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\KGDAZMSP ]
m1.2mdn.net [ C:\Users\David\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\KGDAZMSP ]
m1.emea.2mdn.net [ C:\Users\David\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\KGDAZMSP ]
media.dyson.com [ C:\Users\David\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\KGDAZMSP ]
media.monster.com [ C:\Users\David\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\KGDAZMSP ]
media.mtvnservices.com [ C:\Users\David\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\KGDAZMSP ]
media.play.com [ C:\Users\David\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\KGDAZMSP ]
media.scanscout.com [ C:\Users\David\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\KGDAZMSP ]
media.tattomedia.com [ C:\Users\David\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\KGDAZMSP ]
media.xfire.com [ C:\Users\David\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\KGDAZMSP ]
msntest.serving-sys.com [ C:\Users\David\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\KGDAZMSP ]
objects.tremormedia.com [ C:\Users\David\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\KGDAZMSP ]
s0.2mdn.net [ C:\Users\David\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\KGDAZMSP ]
secure-uk.imrworldwide.com [ C:\Users\David\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\KGDAZMSP ]
secure-us.imrworldwide.com [ C:\Users\David\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\KGDAZMSP ]
serving-sys.com [ C:\Users\David\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\KGDAZMSP ]
skymagazinelive.mymedia.co.uk [ C:\Users\David\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\KGDAZMSP ]
spe.atdmt.com [ C:\Users\David\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\KGDAZMSP ]
tracking.onefeed.co.uk [ C:\Users\David\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\KGDAZMSP ]
udn.specificclick.net [ C:\Users\David\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\KGDAZMSP ]
us.media.blizzard.com [ C:\Users\David\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\KGDAZMSP ]
video.unrulymedia.com [ C:\Users\David\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\KGDAZMSP ]
.game-advertising-online.com [ C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\dgusow7a.default\cookies.sqlite ]
.media.wow-europe.com [ C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\dgusow7a.default\cookies.sqlite ]
.tracking.summitmedia.co.uk [ C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\dgusow7a.default\cookies.sqlite ]
uk.sitestat.com [ C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\dgusow7a.default\cookies.sqlite ]
.track.asus.com [ C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\dgusow7a.default\cookies.sqlite ]
.track.asus.com [ C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\dgusow7a.default\cookies.sqlite ]
track.asus.com [ C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\dgusow7a.default\cookies.sqlite ]
eas.apm.emediate.eu [ C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\dgusow7a.default\cookies.sqlite ]
.wowwebstats.com [ C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\dgusow7a.default\cookies.sqlite ]
.wowwebstats.com [ C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\dgusow7a.default\cookies.sqlite ]
.collective-media.net [ C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\dgusow7a.default\cookies.sqlite ]
.collective-media.net [ C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\dgusow7a.default\cookies.sqlite ]
.collective-media.net [ C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\dgusow7a.default\cookies.sqlite ]
.collective-media.net [ C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\dgusow7a.default\cookies.sqlite ]
uk.sitestat.com [ C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\dgusow7a.default\cookies.sqlite ]
int.sitestat.com [ C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\dgusow7a.default\cookies.sqlite ]
int.sitestat.com [ C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\dgusow7a.default\cookies.sqlite ]
uk.sitestat.com [ C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\dgusow7a.default\cookies.sqlite ]
es.sitestat.com [ C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\dgusow7a.default\cookies.sqlite ]
es.sitestat.com [ C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\dgusow7a.default\cookies.sqlite ]
uk.sitestat.com [ C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\dgusow7a.default\cookies.sqlite ]
uk.sitestat.com [ C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\dgusow7a.default\cookies.sqlite ]
stat.aldi.com [ C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\dgusow7a.default\cookies.sqlite ]
stat.aldi.com [ C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\dgusow7a.default\cookies.sqlite ]
eas.apm.emediate.eu [ C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\dgusow7a.default\cookies.sqlite ]
eas.apm.emediate.eu [ C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\dgusow7a.default\cookies.sqlite ]
.nextag.co.uk [ C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\dgusow7a.default\cookies.sqlite ]
.nextag.co.uk [ C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\dgusow7a.default\cookies.sqlite ]
.nextag.co.uk [ C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\dgusow7a.default\cookies.sqlite ]
.nextag.co.uk [ C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\dgusow7a.default\cookies.sqlite ]
.nextag.co.uk [ C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\dgusow7a.default\cookies.sqlite ]
.euroclick.com [ C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\dgusow7a.default\cookies.sqlite ]
.myaccount.turbine.com [ C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\dgusow7a.default\cookies.sqlite ]
.cogaccounts.codemasters.com [ C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\dgusow7a.default\cookies.sqlite ]
.ads.mediamayhemcorp.com [ C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\dgusow7a.default\cookies.sqlite ]
server.cpmstar.com [ C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\dgusow7a.default\cookies.sqlite ]
media.sensis.com.au [ C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\dgusow7a.default\cookies.sqlite ]
media.sensis.com.au [ C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\dgusow7a.default\cookies.sqlite ]
.mediaonenetwork.net [ C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\dgusow7a.default\cookies.sqlite ]
.interclick.com [ C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\dgusow7a.default\cookies.sqlite ]
.specificmedia.com [ C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\dgusow7a.default\cookies.sqlite ]
www.skyscanner.net [ C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\dgusow7a.default\cookies.sqlite ]
www.skyscanner.net [ C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\dgusow7a.default\cookies.sqlite ]
fr.sitestat.com [ C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\dgusow7a.default\cookies.sqlite ]
fr.sitestat.com [ C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\dgusow7a.default\cookies.sqlite ]
.stats.routesgame.com [ C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\dgusow7a.default\cookies.sqlite ]
uk.sitestat.com [ C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\dgusow7a.default\cookies.sqlite ]
uk.sitestat.com [ C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\dgusow7a.default\cookies.sqlite ]
www.googleadservices.com [ C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\dgusow7a.default\cookies.sqlite ]
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:43:33, on 25/08/2010
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe
C:\Users\David\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\David\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Common Files\Symantec Shared\coShared\Browser\2.6\coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\PROGRA~2\COMMON~1\SYMANT~1\IDS\IPSBHO.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Show Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Common Files\Symantec Shared\coShared\Browser\2.6\CoIEPlg.dll
O4 - HKLM\..\Run: [ccApp] "C:\Program Files (x86)\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "C:\Program Files (x86)\Norton 360\osCheck.exe"
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe
O4 - HKCU\..\Run: [EPSON Stylus SX200 Series] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIEFE.EXE /FU "C:\Windows\TEMP\E_S78A8.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [Google Update] "C:\Users\David\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files (x86)\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKUS\S-1-5-18\..\Run: [EPSON Stylus SX200 Series (Copy 1)] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIEFE.EXE /FU "C:\Windows\TEMP\E_SEE06.tmp" /EF "HKCU" (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [EPSON Stylus SX200 Series (Copy 1)] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIEFE.EXE /FU "C:\Windows\TEMP\E_SEE06.tmp" /EF "HKCU" (User 'Default user')
O4 - Global Startup: SetPointII.lnk = ?
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files (x86)\SUPERAntiSpyware\SASWINLO.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files (x86)\Symantec\LiveUpdate\AluSchedulerSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files (x86)\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LiveUpdate - Symantec Corporation - C:\Program Files (x86)\Symantec\LiveUpdate\LuComServer_3_4.EXE
O23 - Service: LiveUpdate Notice - Symantec Corporation - C:\Program Files (x86)\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: SiSoftware Deployment Agent Service (SandraAgentSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2009.SP2\RpcAgentSrv.exe
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: Symantec Core LC - Unknown owner - C:\PROGRA~2\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec RemoteAssist - Unknown owner - C:\Program Files (x86)\Common Files\Symantec Shared\Support Controls\ssrc.exe (file missing)
O23 - Service: TomTomHOMEService - TomTom - C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 8762 bytes
------------------------------------------
tyvm 
|
|
|
|
|
Senior Forum Moderator
Group: Moderators
Last Login: 8/9/2008 10:14 AM
Posts: 35,654,
Visits: 54,734
|
|
Welcome
**Important**
First of all for anyone else reading this topic other than this topic starter should read on.
Please note that some of the instructions given in this topic may be customized for this particular computer only,and could possibly cause problems if used on another computer with different issues.
Ok,lets make a start:
If you don't know or understand anything posted by myself in this topic,please don't hesitate to ask,i'm here to help.
Please DO NOT run any other tools,fixes or scans etc while i'm helping you,this could complicate the malware removal process.
First of all if you have the Symantec/Norton 360 installation disk and product key,uninstall/reinstall the program.
If you run into problems during uninstallation then you will need to download and run the Norton Removal Tool:
http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2005033108162039
*Please Note*
The Norton Removal Tool will remove all Norton/Symantec products from your pc.
Download TFC by OldTimer to your Desktop.
* Please double-click TFC.exe to run it,if you're running Windows Vista right click on TFC.exe and click on "Run as Administrator".
* It will close all programs when run, so make sure you have saved all your work before you begin.
* Click the Start button to begin the process. Depending on how often you clean temp files, execution time should be anywhere from a few seconds to a minute or two.
* Let it run uninterrupted until it's finished.
* Once it's finished it should reboot your machine.If it doesn't,please manually restart the pc to ensure a complete cleanup.
Now backup the Windows Registry using Erunt by following the steps in the link below:
How to backup Windows Registry using ERUNT.
Download and scan with CCleaner.
1. Starting with v1.27.260, CCleaner started installing the Yahoo Toolbar as an option which IS checkmarked by default during the installation.
IF you do NOT want it, REMOVE the checkmark when provided with the option OR download the 'No Toolbar' 'Slim' version instead of the 'Standard Build'.
2. Before first use, select Options > Advanced and UNCHECK "Only delete files in Windows Temp folder older than 48 hours"
3. Then select the items you wish to clean up.
In the Windows Tab:
* Clean all entries in the "Internet Explorer" section.
* Clean all the entries in the "Windows Explorer" section.
* Clean all entries in the "System" section.
* Clean all entries in the "Advanced" section.
* Clean any others that you choose.
In the Applications Tab:
* Clean all in the Firefox/Mozilla section if you use it.
* Clean all in the Opera section if you use it.
* Clean Sun Java in the Internet Section.
* Clean any others that you choose.
4. Click the "Run Cleaner" button.
5. A pop up box will appear advising this process will permanently delete files from your system.
6. Click "OK" and it will scan and clean your system.
* Now click on the 'Registry' tab/button on the left.
* Then click on the 'Scan for issues' button at the bottom.
* If CCleaner displays any issues,click on 'Fix selected issues'.
* You'll then be asked 'Do you want to backup changes to the registry',you must click 'YES'.
* Save the backup somewhere safe,your desktop is a good a place as any.
* Then click 'Fix Issues',then click 'Close'.
* Exit CCleaner.
Download Security Check by screen317 and save it to your Desktop.
Double-click on SecurityCheck.exe and follow the on-screen instructions inside the black box.
Notepad should open a file named checkup.txt.
Copy and paste the entire contents of that file into your next reply.
Download ComboFix from HERE to your Desktop,by following the steps below.
**Note: In the event you already have Combofix, this is a new version that I need you to download. It is important that it is saved and renamed following this process directly to your desktop**
1.If you are using Firefox, make sure that your download settings are as follows:
* Click on Tools->Options->"Main" tab
* Set to "Always ask me where to Save the files".
2.During the download,rename Combofix to Combo-Fix as follows:
3.It is important you rename Combofix during the download, but not after.
4.Please do not rename Combofix to other names, but only to the one indicated.
5.Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".
* Click Here to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.
-----------------------------------------------------------
* Close any open browsers.
* WARNING: Combofix will disconnect your machine from the Internet as soon as it starts.
* Please do not attempt to re-connect your machine back to the Internet until Combofix has completely finished.
* If there is no internet connection after running Combofix, then restart your computer to restore back your connection.
-----------------------------------------------------------
6.Double click on Combo-Fix.exe & follow the prompts,if you're running Windows Vista\Windows 7 right click on Combo-Fix.exe and click on "Run as Administrator".
7.When finished, it will produce a report for you.
8.Please post the contents of "C:\Combo-Fix.txt".
**Note: Do not mouseclick combo-fix's window while it's running. That may cause it to stall**
Post the following in your next reply:
The contents of checkup.txt from the Security Check scan.
The contents of C:\ComboFix.txt
A new HijackThis log.
Also let me know how your pc is running now.
___________________________________________________________
|
|
|
|
|
New Member
Group: Forum Members
Last Login: 3/11/2008 5:34 AM
Posts: 34,
Visits: 37
|
|
Ok I've followed the instructions and all seems to be working fine, I had a problem running combofix since I get an OS incompatibility error (Error-Win32 Only). When I ran the CCleaner I mistakenly skipped the step to choose files older than 48 hours, I hope this doesn't create any problems.
So far the computer is working fine, I will push it over the next couple of days and let you know how it goes. Thank you very much for your time and help
Here are the new logs:
Results of screen317's Security Check version 0.99.5
Windows Vista (UAC is enabled)
[color=red]Out of date service pack!![/color]
Internet Explorer 7 [color=red]Out of date![/color]
``````````````````````````````
Antivirus/Firewall Check:
Windows Firewall Disabled!
Norton 360
[size=1]WMI entry may not exist for antivirus; attempting automatic update.[/size]
```````````````````````````````
Anti-malware/Other Utilities Check:
Malwarebytes' Anti-Malware
CCleaner
Java(TM) 6 Update 17
[color=red]Out of date Java installed![/color]
Adobe Flash Player 10.0.45.2
Adobe Reader 8.1.2
Adobe Reader 8.1.2 Security Update 1 (KB403742)
[color=red]Out of date Adobe Reader installed![/color]
````````````````````````````````
Process Check:
objlist.exe by Laurent
Norton ccSvcHst.exe
````````````````````````````````
DNS Vulnerability Check:
[color=red]Request Timed Out (Wireless Internet connection/Disconnected Internet/Proxy?)[/color]
``````````End of Log````````````
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:39:21, on 28/08/2010
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe
C:\Users\David\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\David\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine\4.1.0.32\coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Engine\4.1.0.32\IPSBHO.DLL
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\4.1.0.32\coIEPlg.dll
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe
O4 - HKCU\..\Run: [EPSON Stylus SX200 Series] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIEFE.EXE /FU "C:\Windows\TEMP\E_S78A8.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [Google Update] "C:\Users\David\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-18\..\Run: [EPSON Stylus SX200 Series (Copy 1)] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIEFE.EXE /FU "C:\Windows\TEMP\E_SEE06.tmp" /EF "HKCU" (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [EPSON Stylus SX200 Series (Copy 1)] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIEFE.EXE /FU "C:\Windows\TEMP\E_SEE06.tmp" /EF "HKCU" (User 'Default user')
O4 - Global Startup: SetPointII.lnk = ?
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files (x86)\SUPERAntiSpyware\SASWINLO.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LiveUpdate - Symantec Corporation - C:\Program Files (x86)\Symantec\LiveUpdate\LuComServer_3_4.EXE
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Norton 360 (N360) - Symantec Corporation - C:\Program Files (x86)\Norton 360\Engine\4.1.0.32\ccSvcHst.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: SiSoftware Deployment Agent Service (SandraAgentSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2009.SP2\RpcAgentSrv.exe
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: Symantec RemoteAssist - Unknown owner - C:\Program Files (x86)\Common Files\Symantec Shared\Support Controls\ssrc.exe (file missing)
O23 - Service: TomTomHOMEService - TomTom - C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 7503 bytes
------------------------------------------
tyvm
|
|
|
|
|
Senior Forum Moderator
Group: Moderators
Last Login: 8/9/2008 10:14 AM
Posts: 35,654,
Visits: 54,734
|
|
Click on Start/All Programs/Accessories/Run,copy and paste ComboFix /uninstall into the 'Open:' space,then press OK [see image below]
This will uninstall Combofix,delete its related folders and files,reset your clock settings,hide file extensions,hide the system/hidden files and resets System Restore.
Out of date service pack!!
You need to get the operating system up to date by installing all the latest important/high priority updates including the latest service pack <-Important!!!
How to obtain the latest Windows Vista service pack:
http://support.microsoft.com/kb/935791
Out of date Internet Explorer installed!
For security reasons you should update Internet Explorer to the latest version [IE8].
http://www.microsoft.com/windows/internet-explorer/default.aspx
Out of date Adobe Reader installed!
Launch Adobe Reader,click on Help->Check for Updates...,to update to the latest version.
Out of date Java installed!
Your version of Sun Java is out of date.
Older versions have vulnerabilities that malware can use to infect your system.
1. Download the latest version of Java Runtime Environment.
*. Under "JDK 6 Update 21 (JDK or JRE)",click on the "Download JRE" button on the right.
2. Select the Platform for your download,then check the box that says: "I agree to the Java SE Runtime Environment 6u21 with JavaFX 1 License Agreement",then click "Continue".
3. The page will refresh.
4. Click on the link to download 'Windows Offline Installation - jre-6u21-windows-i586-p.exe' [15.32 MB] and save to your desktop.
5. Close any programs you may have running - especially your web browser.
6. Click Start and choose Control Panel:
- In Control Panel double click on the "Programs and Features" icon.
- Here you can find all the programs and items which are installed in Windows Vista/Win 7.
- Now remove all older versions of Sun Java.
7. Click on any item with Java Runtime Environment [JRE or J2SE or Java(TM)] in the name to uninstall/remove it.
8. Repeat as many times as necessary to remove each Java version.
9. Reboot your computer once all Java components are removed.
10. Then from your desktop double-click on jre-6u21-windows-i586-p.exe to install the newest version.
11. If the installer refuses to launch due to insufficient user permissions,follow the info found in this link to Run As Administrator.
Verify your installation of Sun Java:
http://www.java.com/en/download/help/testvm.xml
Post a new HijackThis log into your next reply.
Also let me know how your pc is running now.
___________________________________________________________
|
|
|
|
|
New Member
Group: Forum Members
Last Login: 3/11/2008 5:34 AM
Posts: 34,
Visits: 37
|
|
Hello,
I've tried updating windows but I get an error message and the update fails. I've had this problem for the last 2 years and nobody has been able to fix it other than by re-installing windows. This solution is only temporary though since the error reappears after a couple of months (its happened twice already). On the system tray I get a message saying that windows cannot check for updates, when you click it it shows that there are some updates ready and when you try to install error 80240016 pops up.
EDIT: I wanted to do a manual update following Method 3 from the link you suggested but I'm not sure how to check whether or not I have SP1 already installed.
I also tried updating Internet Explorer and the installation failed, IE has not been working on this computer for ages. When you launch it everything seems fine but you cannot run any searches on it (clicking the search button on the browser does nothing and neither does pressing enter on the keyboard), hence I switched to Google Chrome.
On the other hand, Java and Adobe were updated without any problems.
PC Performance Update:
Overall the PC is moving faster than it used to, applications are loading and shutting down faster and the annoying message about the system being low on memory is finally gone. Theres a slight improvement in gaming performance and still get choppy images and overall low FPS, not as much as before but still happens.
Once again, thank you very much for your time and help
Not sure if its worth posting another log at this point but here it is
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:40:35, on 31/08/2010
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe
C:\Users\David\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\David\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\David\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine\4.2.0.12\coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Engine\4.2.0.12\IPSBHO.DLL
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\4.2.0.12\coIEPlg.dll
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [EPSON Stylus SX200 Series] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIEFE.EXE /FU "C:\Windows\TEMP\E_S78A8.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [Google Update] "C:\Users\David\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-18\..\Run: [EPSON Stylus SX200 Series (Copy 1)] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIEFE.EXE /FU "C:\Windows\TEMP\E_SEE06.tmp" /EF "HKCU" (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [EPSON Stylus SX200 Series (Copy 1)] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIEFE.EXE /FU "C:\Windows\TEMP\E_SEE06.tmp" /EF "HKCU" (User 'Default user')
O4 - Global Startup: SetPointII.lnk = ?
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files (x86)\SUPERAntiSpyware\SASWINLO.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LiveUpdate - Symantec Corporation - C:\Program Files (x86)\Symantec\LiveUpdate\LuComServer_3_4.EXE
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Norton 360 (N360) - Symantec Corporation - C:\Program Files (x86)\Norton 360\Engine\4.2.0.12\ccSvcHst.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: Symantec RemoteAssist - Unknown owner - C:\Program Files (x86)\Common Files\Symantec Shared\Support Controls\ssrc.exe (file missing)
O23 - Service: TomTomHOMEService - TomTom - C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 7725 bytes
------------------------------------------
tyvm
|
|
|
|
|
Senior Forum Moderator
Group: Moderators
Last Login: 8/9/2008 10:14 AM
Posts: 35,654,
Visits: 54,734
|
|
Follow the steps in the link below to run System File Checker [sfc /scannow] from the Command Prompt.
When you've done the above,try updating Windows/IE again.
Verify the Integrity of Windows Vista System Files:
http://bit.ly/5CuPjw
___________________________________________________________
|
|
|
|
|
New Member
Group: Forum Members
Last Login: 3/11/2008 5:34 AM
Posts: 34,
Visits: 37
|
|
Ok I tried reinstalling both Windows and IE8 after running the sfc/scannow and unfortunately I was unsuccessful. On the first attempt to update windows I got the unknown error 80070490 and on the second attempt I got error 80240016. IE8 gave me a message saying that the installation did not complete and that that I should restart the computer to undo any changes.
Both the sfc/scannow and sfc/verifyonly gave the following message: "Windows resource protection found corrupt files but was unable to fix some of them. Details are included in the CBS.Log windir\Logs\CBS\CBS.Log"
I also tried to open the CBS.log to post you the info but I got an access denied message.
------------------------------------------
tyvm
|
|
|
|
|
Senior Forum Moderator
Group: Moderators
Last Login: 8/9/2008 10:14 AM
Posts: 35,654,
Visits: 54,734
|
|
First try turning off UAC see if that helps.
Disable User Account Control (UAC) the Easy Way on Win 7 or Vista:
http://bit.ly/1zX2P7
If the above does'nt help,try adding Take Ownership to the right click context menu.
Then right click on CBS.Log and select Take Ownership.
How to Add Take Ownership to the Context Menu in Vista:
http://www.vistax64.com/tutorials/112795-context-menu-take-ownership.html
Let me know what happens.
___________________________________________________________
|
|
|
|
|
Senior Forum Moderator
Group: Moderators
Last Login: 8/9/2008 10:14 AM
Posts: 35,654,
Visits: 54,734
|
|
If the above does'nt help,try this:
Download the SubInACL tool and install it via this link:
http://www.microsoft.com/downloads/details.aspx?FamilyId=E8BA3E56-D8FE-4A91-93CF-ED6985E3927B&displaylang=en
By default it will install to c:\Program Files\Windows Resource Kits\Tools
If you are running Windows Vista, click on the Start menu, choose All Programs, then Accessories, then right-click on the item named Command Prompt and choose "Run as administrator"
If you are running an OS other than Windows Vista, go to the Start menu, choose Run, type cmd and click OK
In the command prompt, type notepad reset.cmd and click Yes to open Notepad.exe and create a new text file named reset.cmd
Copy and paste the following contents into reset.cmd
cd /d "%programfiles%\Windows Resource Kits\Tools"
subinacl /subkeyreg HKEY_CURRENT_USER /grant=administrators=f /grant=system=f /grant=restricted=r /grant=YOURUSERNAME=f /setowner=administrators > %temp%\subinacl_output.txt
subinacl /keyreg HKEY_CURRENT_USER /grant=administrators=f /grant=system=f /grant=restricted=r /grant=YOURUSERNAME=f /setowner=administrators >> %temp%\subinacl_output.txt
subinacl /subkeyreg HKEY_LOCAL_MACHINE /grant=administrators=f /grant=system=f /grant=users=r /grant=everyone=r /grant=restricted=r /setowner=administrators >> %temp%\subinacl_output.txt
subinacl /keyreg HKEY_LOCAL_MACHINE /grant=administrators=f /grant=system=f /grant=users=r /grant=everyone=r /grant=restricted=r /setowner=administrators >> %temp%\subinacl_output.txt
subinacl /subkeyreg HKEY_CLASSES_ROOT /grant=administrators=f /grant=system=f /grant=users=r /setowner=administrators >> %temp%\subinacl_output.txt
subinacl /keyreg HKEY_CLASSES_ROOT /grant=administrators=f /grant=system=f /grant=users=r /setowner=administrators >> %temp%\subinacl_output.txt
subinacl /subdirectories %programfiles%\ /grant=administrators=f /grant=system=f /grant=users=e >> %temp%\subinacl_output.txt
subinacl /subdirectories %windir%\ /grant=administrators=f /grant=system=f /grant=users=e >> %temp%\subinacl_output.txt
Important!!
Change/edit the values named YOURUSERNAME [above in the code box] to the exact name of the Windows user account that you are logged in with.
Note:
The YOURUSERNAME value should match the name of your user folder at c:\users.You can also find the value to use for YOURUSERNAME by launching Task Manager and looking at the user name listed in the User Name column of the Processes tab.
Save and close reset.cmd.
In the command prompt, type reset.cmd and press Enter to run the SubInACL tool.
This tool will take several minutes to run so be patient,and it requires that the user account you are using has administrator privileges on the system. This is why it is necessary to run it from an elevated cmd prompt on Windows Vista. "Run as administrator" above can be used to start an elevated cmd prompt on Windows Vista.
After reset.cmd completes, try to install the product that previously failed to install correctly on your system.
___________________________________________________________
|
|
|
|
|
New Member
Group: Forum Members
Last Login: 3/11/2008 5:34 AM
Posts: 34,
Visits: 37
|
|
I'm a bit lost, I disabled the UAC and I'm trying to install the take ownership functionality but according to the link the file that I download should be a .reg and what I get is a .download which windows says it cannot open and when right clicked I see no such option as merge.
EDIT: I managed to access the CBS log but it contains thousands of lines dating back to 2008, shall I post you the whole thing or is would you prefer me to clip it and send you only the last few months or so?
------------------------------------------
tyvm
|
|
|
|
