another "get answers fast" request for repair

[empyers]

I'm not usually one to post duplicate threads on similar topics, but apparently that's what you prefer here... -rolls eyes-

I was following the directions in the OTHER "get answers fast" thread but the OP stopped responding. So since I obviously can't reply to that thread I'm going to post my own ComboFix log:


ComboFix 11-09-27.01 - Matt 09/27/2011  14:20:18.1.8 - x64
Microsoft Windows 7 Home Premium   6.1.7600.0.1252.1.1033.18.6077.3450 [GMT -7:00]
Running from: c:\users\Matt\Desktop\ComboFix.exe
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((((((   Other Deletions   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\FullRemove.exe
c:\users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\gz5tsvbo.default\extensions\{df4f1925-3034-4bd8-8e54-8c0079e4620c}
c:\users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\gz5tsvbo.default\extensions\{df4f1925-3034-4bd8-8e54-8c0079e4620c}\chrome.manifest
c:\users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\gz5tsvbo.default\extensions\{df4f1925-3034-4bd8-8e54-8c0079e4620c}\chrome\xulcache.jar
c:\users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\gz5tsvbo.default\extensions\{df4f1925-3034-4bd8-8e54-8c0079e4620c}\defaults\preferences\xulcache.js
c:\users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\gz5tsvbo.default\extensions\{df4f1925-3034-4bd8-8e54-8c0079e4620c}\install.rdf
D:\install.exe
.
.
(((((((((((((((((((((((((   Files Created from 2011-08-27 to 2011-09-27  )))))))))))))))))))))))))))))))
.
.
2011-09-27 21:27 . 2011-09-27 21:27   --------   d-----w-   c:\users\Default\AppData\Local\temp
2011-09-27 21:17 . 2011-09-27 21:17   --------   d-----w-   c:\windows\Sun
2011-09-21 01:10 . 2011-09-27 02:45   --------   d-----w-   c:\users\Matt\AppData\Local\dxhr
2011-09-21 01:10 . 2011-09-21 01:10   --------   d-----w-   c:\users\Matt\AppData\Local\28050
2011-09-21 01:10 . 2010-02-04 17:01   78680   ----a-w-   c:\windows\system32\XAPOFX1_4.dll
2011-09-21 01:10 . 2010-02-04 17:01   530776   ----a-w-   c:\windows\system32\XAudio2_6.dll
2011-09-21 01:10 . 2010-02-04 17:01   24920   ----a-w-   c:\windows\system32\X3DAudio1_7.dll
2011-09-21 01:10 . 2010-02-04 17:01   176984   ----a-w-   c:\windows\system32\xactengine3_6.dll
2011-09-13 22:47 . 2011-09-13 23:04   --------   d-----w-   c:\programdata\PC Tools
2011-08-31 18:09 . 2011-08-31 18:12   --------   d-----w-   C:\IGG
2011-08-31 18:09 . 2011-08-31 18:09   --------   d-----w-   c:\users\Matt\AppData\Roaming\IGG
.
.
.
((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-09-05 21:32 . 2010-09-09 19:21   280736   ----a-w-   c:\windows\SysWow64\PnkBstrB.xtr
2011-09-05 21:32 . 2010-09-09 19:20   280736   ----a-w-   c:\windows\SysWow64\PnkBstrB.exe
2011-09-05 21:27 . 2010-09-09 19:20   215128   ----a-w-   c:\windows\SysWow64\PnkBstrB.ex0
2011-08-16 17:13 . 2011-08-16 17:13   404640   ----a-w-   c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2011-07-22 05:35 . 2011-08-11 16:19   1638912   ----a-w-   c:\windows\system32\mshtml.tlb
2011-07-22 04:56 . 2011-08-11 16:19   1638912   ----a-w-   c:\windows\SysWow64\mshtml.tlb
2011-07-16 05:26 . 2011-08-11 16:19   362496   ----a-w-   c:\windows\system32\wow64win.dll
2011-07-16 05:26 . 2011-08-11 16:19   243200   ----a-w-   c:\windows\system32\wow64.dll
2011-07-16 05:26 . 2011-08-11 16:19   13312   ----a-w-   c:\windows\system32\wow64cpu.dll
2011-07-16 05:26 . 2011-08-11 16:19   214528   ----a-w-   c:\windows\system32\winsrv.dll
2011-07-16 05:24 . 2011-08-11 16:19   16384   ----a-w-   c:\windows\system32\ntvdm64.dll
2011-07-16 05:21 . 2011-08-11 16:19   422400   ----a-w-   c:\windows\system32\KernelBase.dll
2011-07-16 05:17 . 2011-08-11 16:19   338432   ----a-w-   c:\windows\system32\conhost.exe
2011-07-16 05:04 . 2011-08-11 16:19   6144   ---ha-w-   c:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2011-07-16 05:04 . 2011-08-11 16:19   5120   ---ha-w-   c:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2011-07-16 05:04 . 2011-08-11 16:19   4608   ---ha-w-   c:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2011-07-16 05:04 . 2011-08-11 16:19   4608   ---ha-w-   c:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2011-07-16 05:04 . 2011-08-11 16:19   4096   ---ha-w-   c:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2011-07-16 05:04 . 2011-08-11 16:19   4096   ---ha-w-   c:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2011-07-16 05:04 . 2011-08-11 16:19   4096   ---ha-w-   c:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2011-07-16 05:04 . 2011-08-11 16:19   4096   ---ha-w-   c:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2011-07-16 05:04 . 2011-08-11 16:19   3584   ---ha-w-   c:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2011-07-16 05:04 . 2011-08-11 16:19   3584   ---ha-w-   c:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2011-07-16 05:04 . 2011-08-11 16:19   3584   ---ha-w-   c:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2011-07-16 05:04 . 2011-08-11 16:19   3584   ---ha-w-   c:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2011-07-16 05:04 . 2011-08-11 16:19   3584   ---ha-w-   c:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2011-07-16 05:04 . 2011-08-11 16:19   3584   ---ha-w-   c:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2011-07-16 05:04 . 2011-08-11 16:19   3584   ---ha-w-   c:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2011-07-16 05:04 . 2011-08-11 16:19   3072   ---ha-w-   c:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2011-07-16 05:04 . 2011-08-11 16:19   3072   ---ha-w-   c:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2011-07-16 05:04 . 2011-08-11 16:19   3072   ---ha-w-   c:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2011-07-16 05:04 . 2011-08-11 16:19   3072   ---ha-w-   c:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2011-07-16 05:04 . 2011-08-11 16:19   3072   ---ha-w-   c:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2011-07-16 05:04 . 2011-08-11 16:19   3072   ---ha-w-   c:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2011-07-16 05:04 . 2011-08-11 16:19   3072   ---ha-w-   c:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2011-07-16 05:04 . 2011-08-11 16:19   3072   ---ha-w-   c:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2011-07-16 05:04 . 2011-08-11 16:19   3072   ---ha-w-   c:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2011-07-16 05:04 . 2011-08-11 16:19   3072   ---ha-w-   c:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2011-07-16 05:04 . 2011-08-11 16:19   3072   ---ha-w-   c:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2011-07-16 05:04 . 2011-08-11 16:19   3072   ---ha-w-   c:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2011-07-16 05:04 . 2011-08-11 16:19   3072   ---ha-w-   c:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2011-07-16 04:36 . 2011-08-11 16:19   14336   ----a-w-   c:\windows\SysWow64\ntvdm64.dll
2011-07-16 04:32 . 2011-08-11 16:19   44032   ----a-w-   c:\windows\apppatch\acwow64.dll
2011-07-16 04:31 . 2011-08-11 16:19   25600   ----a-w-   c:\windows\SysWow64\setup16.exe
2011-07-16 04:30 . 2011-08-11 16:19   5120   ----a-w-   c:\windows\SysWow64\wow32.dll
2011-07-16 04:30 . 2011-08-11 16:19   272384   ----a-w-   c:\windows\SysWow64\KernelBase.dll
2011-07-16 04:19 . 2011-08-11 16:19   5120   ---ha-w-   c:\windows\SysWow64\api-ms-win-core-file-l1-1-0.dll
2011-07-16 04:19 . 2011-08-11 16:19   4608   ---ha-w-   c:\windows\SysWow64\api-ms-win-core-processthreads-l1-1-0.dll
2011-07-16 04:19 . 2011-08-11 16:19   4096   ---ha-w-   c:\windows\SysWow64\api-ms-win-core-sysinfo-l1-1-0.dll
2011-07-16 04:19 . 2011-08-11 16:19   4096   ---ha-w-   c:\windows\SysWow64\api-ms-win-core-synch-l1-1-0.dll
2011-07-16 04:19 . 2011-08-11 16:19   4096   ---ha-w-   c:\windows\SysWow64\api-ms-win-core-misc-l1-1-0.dll
2011-07-16 04:19 . 2011-08-11 16:19   4096   ---ha-w-   c:\windows\SysWow64\api-ms-win-core-localregistry-l1-1-0.dll
2011-07-16 04:19 . 2011-08-11 16:19   4096   ---ha-w-   c:\windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll
2011-07-16 04:19 . 2011-08-11 16:19   3584   ---ha-w-   c:\windows\SysWow64\api-ms-win-core-processenvironment-l1-1-0.dll
2011-07-16 04:19 . 2011-08-11 16:19   3584   ---ha-w-   c:\windows\SysWow64\api-ms-win-core-namedpipe-l1-1-0.dll
2011-07-16 04:19 . 2011-08-11 16:19   3584   ---ha-w-   c:\windows\SysWow64\api-ms-win-core-memory-l1-1-0.dll
2011-07-16 04:19 . 2011-08-11 16:19   3584   ---ha-w-   c:\windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll
2011-07-16 04:19 . 2011-08-11 16:19   3584   ---ha-w-   c:\windows\SysWow64\api-ms-win-core-interlocked-l1-1-0.dll
2011-07-16 04:19 . 2011-08-11 16:19   3584   ---ha-w-   c:\windows\SysWow64\api-ms-win-core-heap-l1-1-0.dll
2011-07-16 04:19 . 2011-08-11 16:19   3072   ---ha-w-   c:\windows\SysWow64\api-ms-win-core-string-l1-1-0.dll
2011-07-16 04:19 . 2011-08-11 16:19   3072   ---ha-w-   c:\windows\SysWow64\api-ms-win-core-rtlsupport-l1-1-0.dll
2011-07-16 04:19 . 2011-08-11 16:19   3072   ---ha-w-   c:\windows\SysWow64\api-ms-win-core-profile-l1-1-0.dll
2011-07-16 04:19 . 2011-08-11 16:19   3072   ---ha-w-   c:\windows\SysWow64\api-ms-win-core-io-l1-1-0.dll
2011-07-16 04:19 . 2011-08-11 16:19   3072   ---ha-w-   c:\windows\SysWow64\api-ms-win-core-handle-l1-1-0.dll
2011-07-16 04:19 . 2011-08-11 16:19   3072   ---ha-w-   c:\windows\SysWow64\api-ms-win-core-fibers-l1-1-0.dll
2011-07-16 04:19 . 2011-08-11 16:19   3072   ---ha-w-   c:\windows\SysWow64\api-ms-win-core-errorhandling-l1-1-0.dll
2011-07-16 04:19 . 2011-08-11 16:19   3072   ---ha-w-   c:\windows\SysWow64\api-ms-win-core-delayload-l1-1-0.dll
2011-07-16 04:19 . 2011-08-11 16:19   3072   ---ha-w-   c:\windows\SysWow64\api-ms-win-core-debug-l1-1-0.dll
2011-07-16 04:19 . 2011-08-11 16:19   3072   ---ha-w-   c:\windows\SysWow64\api-ms-win-core-datetime-l1-1-0.dll
2011-07-16 04:19 . 2011-08-11 16:19   3072   ---ha-w-   c:\windows\SysWow64\api-ms-win-core-console-l1-1-0.dll
2011-07-16 02:26 . 2011-08-11 16:19   7680   ----a-w-   c:\windows\SysWow64\instnm.exe
2011-07-16 02:26 . 2011-08-11 16:19   2048   ----a-w-   c:\windows\SysWow64\user.exe
2011-07-16 02:21 . 2011-08-11 16:19   6144   ---ha-w-   c:\windows\SysWow64\api-ms-win-security-base-l1-1-0.dll
2011-07-16 02:21 . 2011-08-11 16:19   4608   ---ha-w-   c:\windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll
2011-07-16 02:21 . 2011-08-11 16:19   3584   ---ha-w-   c:\windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll
2011-07-16 02:21 . 2011-08-11 16:19   3072   ---ha-w-   c:\windows\SysWow64\api-ms-win-core-util-l1-1-0.dll
2011-07-13 04:53 . 2011-08-02 16:49   8578896   ----a-w-   c:\programdata\Microsoft\Windows Defender\Definition Updates\{E827E16C-92CD-4778-968F-81D8FA915831}\mpengine.dll
2011-07-09 05:14 . 2011-08-24 16:46   2048   ----a-w-   c:\windows\system32\tzres.dll
2011-07-09 04:30 . 2011-08-24 16:46   2048   ----a-w-   c:\windows\SysWow64\tzres.dll
2011-07-09 02:44 . 2011-08-11 16:19   287744   ----a-w-   c:\windows\system32\drivers\mrxsmb10.sys
.
.
(((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ADSMOverlayIcon1]
@="{A8D448F4-0431-45AC-9F5E-E1B434AB2249}"
[HKEY_CLASSES_ROOT\CLSID\{A8D448F4-0431-45AC-9F5E-E1B434AB2249}]
2007-06-02 00:08   143360   ----a-w-   c:\program files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x86\OverlayIconShlExt1.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Steam"="c:\program files (x86)\Steam\Steam.exe" [2011-08-03 1242448]
"DAEMON Tools Lite"="d:\program files\DAEMON Tools Lite\DTLite.exe" [2010-04-01 357696]
"Facebook Update"="c:\users\Matt\AppData\Local\Facebook\Update\FacebookUpdate.exe" [2011-07-14 137536]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Microsoft Pinyin IME Migration"="c:\progra~2\COMMON~1\MICROS~1\IME12\IMESC\IMSCMIG.EXE" [2008-11-04 33128]
"UpdateLBPShortCut"="c:\program files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" [2009-05-20 222504]
"HControlUser"="c:\program files (x86)\ASUS\ATK Hotkey\HControlUser.exe" [2009-06-19 105016]
"ATKOSD2"="c:\program files (x86)\ASUS\ATKOSD2\ATKOSD2.exe" [2009-10-09 6937216]
"ATKMEDIA"="c:\program files (x86)\ASUS\ATK Media\DMedia.exe" [2009-08-20 170624]
"VolPanel"="c:\program files (x86)\Creative\SB Audigy\Volume Panel\VolPanlu.exe" [2008-12-29 237693]
"UpdReg"="c:\windows\UpdReg.EXE" [2000-05-11 90112]
"AdobeCS5ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" [2010-07-23 402432]
"SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2009-09-04 935288]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-10-03 35696]
.
c:\users\Matt\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.2.lnk - c:\program files (x86)\OpenOffice.org 3\program\quickstart.exe [2010-5-20 1195008]
Trillian.lnk - c:\program files (x86)\Trillian\trillian.exe [2011-6-28 2068832]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2009-7-1 1079584]
FancyStart daemon.lnk - c:\windows\Installer\{60D6618B-153F-4353-8185-908E676E5888}\_DCE9A4DB2A5F2786140FA3.exe [2010-4-8 12862]
vpngui.exe.lnk - c:\windows\Installer\{467D5E81-8349-4892-9E81-C3674ED8E451}\Icon09DB8A851.exe [2010-12-10 5120]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer4"=wdmaud.drv
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Google Update Service (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-04-08 135664]
R3 Creative ALchemy AL6 Licensing Service;Creative ALchemy AL6 Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [2010-04-08 79360]
R3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2010-04-08 79360]
R3 gupdatem;Google Update Service (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-04-08 135664]
R3 Point64;Microsoft IntelliPoint Filter Driver;c:\windows\system32\DRIVERS\point64.sys

R3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver;c:\windows\system32\DRIVERS\SiSG664.sys

R3 SwitchBoard;Adobe SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe

S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys

S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys

S2 AFBAgent;AFBAgent;c:\windows\system32\FBAgent.exe

S2 ASMMAP64;ASMMAP64;c:\program files\ATKGFNEX\ASMMAP64.sys [2007-07-24 14904]
S2 rimspci;rimspci;c:\windows\system32\DRIVERS\rimspe64.sys

S2 rixdpcie;rixdpcie;c:\windows\system32\DRIVERS\rixdpe64.sys

S2 TabletServiceWacom;TabletServiceWacom;c:\program files\Tablet\Wacom\Wacom_Tablet.exe [2010-09-20 5671792]
S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2009-10-01 2314240]
S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys

S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys

S3 L1C;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller (NDIS 6.20);c:\windows\system32\DRIVERS\L1C62x64.sys

S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys

S3 wacmoumonitor;Wacom Mode Helper;c:\windows\system32\DRIVERS\wacmoumonitor.sys

.
.
Contents of the 'Scheduled Tasks' folder
.
2011-09-27 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2197443109-516160951-3318183103-1000Core.job
- c:\users\Matt\AppData\Local\Facebook\Update\FacebookUpdate.exe [2011-07-06 16:50]
.
2011-09-27 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2197443109-516160951-3318183103-1000UA.job
- c:\users\Matt\AppData\Local\Facebook\Update\FacebookUpdate.exe [2011-07-06 16:50]
.
2011-09-27 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-04-08 19:48]
.
2011-09-27 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-04-08 19:48]
.
2011-09-27 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2197443109-516160951-3318183103-1000Core.job
- c:\users\Matt\AppData\Local\Google\Update\GoogleUpdate.exe [2011-07-12 13:15]
.
2011-09-27 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2197443109-516160951-3318183103-1000UA.job
- c:\users\Matt\AppData\Local\Google\Update\GoogleUpdate.exe [2011-07-12 13:15]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1TortoiseNormal]
@="{C5994560-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994560-53D9-4125-87C9-F193FC689CB2}]
2010-03-21 15:55   99080   ----a-w-   c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\2TortoiseModified]
@="{C5994561-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994561-53D9-4125-87C9-F193FC689CB2}]
2010-03-21 15:55   99080   ----a-w-   c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\3TortoiseConflict]
@="{C5994562-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994562-53D9-4125-87C9-F193FC689CB2}]
2010-03-21 15:55   99080   ----a-w-   c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\4TortoiseLocked]
@="{C5994563-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994563-53D9-4125-87C9-F193FC689CB2}]
2010-03-21 15:55   99080   ----a-w-   c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\5TortoiseReadOnly]
@="{C5994564-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994564-53D9-4125-87C9-F193FC689CB2}]
2010-03-21 15:55   99080   ----a-w-   c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\6TortoiseDeleted]
@="{C5994565-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994565-53D9-4125-87C9-F193FC689CB2}]
2010-03-21 15:55   99080   ----a-w-   c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\7TortoiseAdded]
@="{C5994566-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994566-53D9-4125-87C9-F193FC689CB2}]
2010-03-21 15:55   99080   ----a-w-   c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\8TortoiseIgnored]
@="{C5994567-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994567-53D9-4125-87C9-F193FC689CB2}]
2010-03-21 15:55   99080   ----a-w-   c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\9TortoiseUnversioned]
@="{C5994568-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994568-53D9-4125-87C9-F193FC689CB2}]
2010-03-21 15:55   99080   ----a-w-   c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ADSMOverlayIcon1]
@="{A8D448F4-0431-45AC-9F5E-E1B434AB2249}"
[HKEY_CLASSES_ROOT\CLSID\{A8D448F4-0431-45AC-9F5E-E1B434AB2249}]
2007-06-01 23:52   159744   ----a-w-   c:\program files (x86)\ASUS\ASUS Data Security Manager\ShlExt\x64\OverlayIconShlExt1_64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_B]
@="{6D4133E5-0742-4ADC-8A8C-9303440F7190}"
[HKEY_CLASSES_ROOT\CLSID\{6D4133E5-0742-4ADC-8A8C-9303440F7190}]
2009-11-26 05:49   70656   ----a-w-   c:\program files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSShellExt64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_O]
@="{64174815-8D98-4CE6-8646-4C039977D808}"
[HKEY_CLASSES_ROOT\CLSID\{64174815-8D98-4CE6-8646-4C039977D808}]
2009-11-26 05:49   70656   ----a-w-   c:\program files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSShellExt64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Microsoft Pinyin IME Migration"="c:\progra~1\COMMON~1\MICROS~1\IME12\IMESC\IMSCMIG.EXE" [2008-10-25 60264]
"ASUS WebStorage"="c:\program files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe" [2009-12-24 1736704]
"RunDLLEntry"="c:\windows\system32\RunDLL32.exe" [2009-07-14 45568]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-03-06 500208]
"IntelliPoint"="c:\program files\Microsoft IntelliPoint\ipoint.exe" [2010-07-21 2327952]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
------- Supplementary Scan -------
.
uStart Page = about:blank
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: Download Using &BitSpirit - c:\program files (x86)\BitSpirit\bsurl.htm
IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: Send image to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Send page to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
TCP: DhcpNameServer = 192.168.10.1
FF - ProfilePath - c:\users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\gz5tsvbo.default\
.
- - - - ORPHANS REMOVED - - - -
.
Toolbar-Locked - (no file)
Wow6432Node-HKCU-Run-AdobeBridge - (no file)
Wow6432Node-HKLM-Run-Setwallpaper - c:\programdata\SetWallpaper.cmd
Toolbar-Locked - (no file)
WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
AddRemove-ASUS_ScreenSaver_GSeries - c:\windows\system32\ASUS_ScreenSaver_GSeries.scr
AddRemove-PunkBusterSvc - c:\windows\system32\pbsvc_bc2.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MySQL]
"ImagePath"="\"d:\mysql\bin\mysqld\" --defaults-file=\"d:\mysql\my.ini\" MySQL"
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10g_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10g_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10g.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10g.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10g.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10g.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2011-09-27  14:29:49
ComboFix-quarantined-files.txt  2011-09-27 21:29
.
Pre-Run: 12,928,172,032 bytes free
Post-Run: 13,572,780,032 bytes free
.
- - End Of File - - 8D989BB45B216301FDACC3F0B90B9E9F

[SuperDave]

Hello and welcome to Computer Hope Forum. My name is Dave. I will be helping you out with your particular problem on your computer.

1. I will be working on your Malware issues. This may or may not solve other issues you have with your machine.
2. The fixes are specific to your problem and should only be used for this issue on this machine.
3. If you don't know or understand something, please don't hesitate to ask.
4. Please DO NOT run any other tools or scans while I am helping you.
5. It is important that you reply to this thread. Do not start a new topic.
6. Your security programs may give warnings for some of the tools I will ask you to use. Be assured, any links I give are safe.
7. Absence of symptoms does not mean that everything is clear.

If you can't access the internet with your infected computer you will have to download and transfer any programs to the computer you're using now and transfer them to the infected computer with a CD-RW or a USB storage device. I prefer a CD because a storage device can get infected. If you use a storage device hold the shift key down while inserting the USB storage device for about 10 secs. You will also have to transfer the logs you receive back to the good computer using the same method until we can get the computer back on-line.
*************************************************************************

I'm not usually one to post duplicate threads on similar topics, but apparently that's what you prefer here

No two computers are alike. That's why you should not cleaning instructions for someone else's computer.
ComboFix is a powerful tool and should not be used unless requested by a malware removal expert.
What sort of problems are you experiencing with your computer?

SUPERAntiSpyware

If you already have SUPERAntiSpyware be sure to check for updates before scanning!

Download SuperAntispyware Free Edition (SAS)
* Double-click the icon on your desktop to run the installer.
* When asked to Update the program definitions, click Yes
* If you encounter any problems while downloading the updates, manually download and unzip them from here
* Next click the Preferences button.

•Under Start-Up Options uncheck Start SUPERAntiSpyware when Windows starts
* Click the Scanning Control tab.
* Under Scanner Options make sure only the following are checked:

•Close browsers before scanning
•Scan for tracking cookies
•Terminate memory threats before quarantining
•Please leave the others unchecked

•Click the Close button to leave the control center screen.

* On the main screen click Scan your computer
* On the left check the box for the drive you are scanning.
* On the right choose Perform Complete Scan
* Click Next to start the scan. Please be patient while it scans your computer.
* After the scan is complete a summary box will appear. Click OK
* Make sure everything in the white box has a check next to it, then click Next
* It will quarantine what it found and if it asks if you want to reboot, click Yes

•To retrieve the removal information please do the following:
•After reboot, double-click the SUPERAntiSpyware icon on your desktop.
•Click Preferences. Click the Statistics/Logs tab.

•Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.

•It will open in your default text editor (preferably Notepad).
•Save the notepad file to your desktop by clicking (in notepad) File > Save As...

* Save the log somewhere you can easily find it. (normally the desktop)
* Click close and close again to exit the program.
*Copy and Paste the log in your post.
**********************************************
Please download Malwarebytes Anti-Malware from here.
Double Click mbam-setup.exe to install the application.

• Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes Anti-Malware, then click Finish.
  
• If an update is found, it will download and install the latest version.
• Once the program has loaded, select "Perform Full Scan", then click Scan.
  
• The scan may take some time to finish,so please be patient.
• When the scan is complete, click OK, then Show Results to view the results.
• Make sure that everything is checked, and click Remove Selected.
  
• When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. (See Extra Note)
• Please save the log to a location you will remember.
• The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
• Copy and paste the entire report in your next reply.

Extra Note:

If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process. If asked to restart the computer, please do so immediately.
************************************************
Download DDS from HERE or HERE and save it to your desktop.

Vista users right click on dds and select Run as administrator (you will receive a UAC prompt, please allow it)

* XP users Double click on dds to run it.
* If your antivirus or firewall try to block DDS then please allow it to run.
* When finished DDS will open two (2) logs.
* Save both reports to your desktop.
* The instructions here ask you to attach the Attach.txt.



1) DDS.txt
2) Attach.txt
Instead of attaching, please copy/past both logs into your Thread

Note: DDS will instruct you to post the Attach.txt log as an attachment.
Please just post it as you would any other log by copying and pasting it into the reply.

•Close the program window, and delete the program from your desktop.

Please note: You may have to disable any script protection running if the scan fails to run.
After downloading the tool, disconnect from the internet and disable all antivirus protection.
Run the scan, enable your A/V and reconnect to the internet.
Information on A/V control HERE .Then post your DDS logs. (DDS.txt and Attach.txt )

[empyers]

This is the log from the SUPERAntispyware scan.
Going to work on the next step now.


SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 09/27/2011 at 05:41 PM

Application Version : 5.0.1128

Core Rules Database Version : 7733
Trace Rules Database Version: 5545

Scan type       : Complete Scan
Total Scan Time : 01:23:44

Operating System Information
Windows 7 Home Premium 64-bit (Build 6.01.7600)
UAC On - Limited User

Memory items scanned      : 687
Memory threats detected   : 0
Registry items scanned    : 71822
Registry threats detected : 0
File items scanned        : 310230
File threats detected     : 659

Adware.Tracking Cookie
   C:\Users\Matt\AppData\Roaming\Microsoft\Windows\Cookies\05O1OOQE.txt [ /bizzclick.com ]
   C:\Users\Matt\AppData\Roaming\Microsoft\Windows\Cookies\TDVB6TXL.txt [ /content.yieldmanager.com ]
   C:\Users\Matt\AppData\Roaming\Microsoft\Windows\Cookies\5MVPD6RL.txt [ /atdmt.com ]
   C:\Users\Matt\AppData\Roaming\Microsoft\Windows\Cookies\4IW5MD00.txt [ /ads.fearzone.com ]
   C:\Users\Matt\AppData\Roaming\Microsoft\Windows\Cookies\AMD9XQS0.txt [ /yieldmanager.net ]
   C:\Users\Matt\AppData\Roaming\Microsoft\Windows\Cookies\NPS7WDQG.txt [ /doubleclick.net ]
   C:\Users\Matt\AppData\Roaming\Microsoft\Windows\Cookies\7Q3JU6G1.txt [ /statcounter.com ]
   C:\Users\Matt\AppData\Roaming\Microsoft\Windows\Cookies\RVN7YO3X.txt [ /serving-sys.com ]
   C:\Users\Matt\AppData\Roaming\Microsoft\Windows\Cookies\ZP6D2Z32.txt [ /at.atwola.com ]
   C:\Users\Matt\AppData\Roaming\Microsoft\Windows\Cookies\2BBYEZT9.txt [ /ar.atwola.com ]
   C:\Users\Matt\AppData\Roaming\Microsoft\Windows\Cookies\H4NOT032.txt [ /imrworldwide.com ]
   C:\Users\Matt\AppData\Roaming\Microsoft\Windows\Cookies\WBYARVVP.txt [ /findology.com ]
   C:\Users\Matt\AppData\Roaming\Microsoft\Windows\Cookies\NUONHWND.txt [ /revsci.net ]
   C:\Users\Matt\AppData\Roaming\Microsoft\Windows\Cookies\VQ0RC55Y.txt [ /apmebf.com ]
   C:\Users\Matt\AppData\Roaming\Microsoft\Windows\Cookies\SP12SAQF.txt [ /realmedia.com ]
   C:\Users\Matt\AppData\Roaming\Microsoft\Windows\Cookies\N72Q369X.txt [ /invitemedia.com ]
   C:\Users\Matt\AppData\Roaming\Microsoft\Windows\Cookies\BX2KO2VX.txt [ /advertising.com ]
   C:\Users\Matt\AppData\Roaming\Microsoft\Windows\Cookies\Y0VWA03O.txt [ /www.commission-junction.com ]
   C:\Users\Matt\AppData\Roaming\Microsoft\Windows\Cookies\Z1CZ72C9.txt [ /adserver.adtechus.com ]
   C:\Users\Matt\AppData\Roaming\Microsoft\Windows\Cookies\NZIZ74IY.txt [ /casalemedia.com ]
   C:\Users\Matt\AppData\Roaming\Microsoft\Windows\Cookies\UIZ46F38.txt [ /tacoda.at.atwola.com ]
   C:\Users\Matt\AppData\Roaming\Microsoft\Windows\Cookies\8A2KRN71.txt [ /r1-ads.ace.advertising.com ]
   C:\Users\Matt\AppData\Roaming\Microsoft\Windows\Cookies\WME3O34Q.txt [ /tribalfusion.com ]
   C:\Users\Matt\AppData\Roaming\Microsoft\Windows\Cookies\2VEPMNP1.txt [ /fastclick.net ]
   C:\Users\Matt\AppData\Roaming\Microsoft\Windows\Cookies\OPECVWCZ.txt [ /adxpose.com ]
   C:\Users\Matt\AppData\Roaming\Microsoft\Windows\Cookies\1UC5WO0B.txt [ /anrtx.tacoda.net ]
   C:\Users\Matt\AppData\Roaming\Microsoft\Windows\Cookies\M23XK18G.txt [ /ads.lycos.com ]
   C:\Users\Matt\AppData\Roaming\Microsoft\Windows\Cookies\9TV6YBCG.txt [ /bs.serving-sys.com ]
   C:\Users\Matt\AppData\Roaming\Microsoft\Windows\Cookies\N5PFJUR4.txt [ /ad.yieldmanager.com ]
   C:\Users\Matt\AppData\Roaming\Microsoft\Windows\Cookies\UUG7T5L1.txt [ /pro-market.net ]
   C:\Users\Matt\AppData\Roaming\Microsoft\Windows\Cookies\AX68KURU.txt [ /mm.chitika.net ]
   C:\Users\Matt\AppData\Roaming\Microsoft\Windows\Cookies\LE7PQSLS.txt [ /media6degrees.com ]
   C:\Users\Matt\AppData\Roaming\Microsoft\Windows\Cookies\RU6ZITD7.txt [ /interclick.com ]
   C:\Users\Matt\AppData\Roaming\Microsoft\Windows\Cookies\X5T0UDOM.txt [ /adbrite.com ]
   C:\Users\Matt\AppData\Roaming\Microsoft\Windows\Cookies\ZGR34TJV.txt [ /lucidmedia.com ]
   C:\Users\Matt\AppData\Roaming\Microsoft\Windows\Cookies\GS0LQEVV.txt [ /dc.tremormedia.com ]
   C:\Users\Matt\AppData\Roaming\Microsoft\Windows\Cookies\JB1V61R0.txt [ /interchangecorporation.122.2o7.net ]
   C:\Users\Matt\AppData\Roaming\Microsoft\Windows\Cookies\W2CTKXH0.txt [ /mediabrandsww.com ]
   C:\Users\Matt\AppData\Roaming\Microsoft\Windows\Cookies\W2XUMNGD.txt [ /collective-media.net ]
   C:\Users\Matt\AppData\Roaming\Microsoft\Windows\Cookies\BK4FJOGI.txt [ /traffictester.net ]
   C:\USERS\MATT\AppData\Roaming\Microsoft\Windows\Cookies\Low\matt@atdmt[1].txt [ Cookie:[email protected]/ ]
   C:\USERS\MATT\Cookies\05O1OOQE.txt [ Cookie:[email protected]/ ]
   C:\USERS\MATT\Cookies\5MVPD6RL.txt [ Cookie:[email protected]/ ]
   C:\USERS\MATT\Cookies\AMD9XQS0.txt [ Cookie:[email protected]/ ]
   C:\USERS\MATT\Cookies\NPS7WDQG.txt [ Cookie:[email protected]/ ]
   C:\USERS\MATT\Cookies\7Q3JU6G1.txt [ Cookie:[email protected]/ ]
   C:\USERS\MATT\Cookies\RVN7YO3X.txt [ Cookie:[email protected]/ ]
   C:\USERS\MATT\Cookies\2BBYEZT9.txt [ Cookie:[email protected]/ ]
   C:\USERS\MATT\Cookies\H4NOT032.txt [ Cookie:[email protected]/cgi-bin ]
   C:\USERS\MATT\Cookies\WBYARVVP.txt [ Cookie:[email protected]/ ]
   C:\USERS\MATT\Cookies\NUONHWND.txt [ Cookie:[email protected]/ ]
   C:\USERS\MATT\Cookies\VQ0RC55Y.txt [ Cookie:[email protected]/ ]
   C:\USERS\MATT\Cookies\SP12SAQF.txt [ Cookie:[email protected]/ ]
   C:\USERS\MATT\Cookies\N72Q369X.txt [ Cookie:[email protected]/ ]
   C:\USERS\MATT\Cookies\Z1CZ72C9.txt [ Cookie:[email protected]/ ]
   C:\USERS\MATT\Cookies\NZIZ74IY.txt [ Cookie:[email protected]/ ]
   C:\USERS\MATT\Cookies\UIZ46F38.txt [ Cookie:[email protected]/ ]
   C:\USERS\MATT\Cookies\OPECVWCZ.txt [ Cookie:[email protected]/ ]
   C:\USERS\MATT\Cookies\1UC5WO0B.txt [ Cookie:[email protected]/ ]
   C:\USERS\MATT\Cookies\9TV6YBCG.txt [ Cookie:[email protected]/ ]
   C:\USERS\MATT\Cookies\N5PFJUR4.txt [ Cookie:[email protected]/ ]
   C:\USERS\MATT\Cookies\UUG7T5L1.txt [ Cookie:[email protected]/ ]
   C:\USERS\MATT\Cookies\AX68KURU.txt [ Cookie:[email protected]/ ]
   C:\USERS\MATT\Cookies\LE7PQSLS.txt [ Cookie:[email protected]/ ]
   C:\USERS\MATT\Cookies\RU6ZITD7.txt [ Cookie:[email protected]/ ]
   C:\USERS\MATT\Cookies\X5T0UDOM.txt [ Cookie:[email protected]/ ]
   C:\USERS\MATT\Cookies\ZGR34TJV.txt [ Cookie:[email protected]/ ]
   C:\USERS\MATT\Cookies\GS0LQEVV.txt [ Cookie:[email protected]/ ]
   C:\USERS\MATT\Cookies\JB1V61R0.txt [ Cookie:[email protected]/ ]
   C:\USERS\MATT\Cookies\W2CTKXH0.txt [ Cookie:[email protected]/ ]
   C:\USERS\MATT\Cookies\W2XUMNGD.txt [ Cookie:[email protected]/ ]
   C:\USERS\MATT\Cookies\BK4FJOGI.txt [ Cookie:[email protected]/ ]
   .atdmt.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .serving-sys.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .imrworldwide.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .imrworldwide.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .lfstmedia.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .invitemedia.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .adbrite.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .ru4.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .ru4.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .lucidmedia.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .lucidmedia.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   s07.flagcounter.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .advertising.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .adxpose.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .legolas-media.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .legolas-media.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .legolas-media.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .ads.pointroll.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .pointroll.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .realmedia.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .adecn.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .apmebf.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .mediaplex.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .diablomedia.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .auto-price-finder.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .auto-price-finder.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .auto-price-finder.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .a.websponsors.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .a.websponsors.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .microsoftwlsearchcrm.112.2o7.net [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .ru4.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .edgeadx.net [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   media303.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .adserver.adtechus.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .adlegend.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .adlegend.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .specificclick.net [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .specificclick.net [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .specificclick.net [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .specificclick.net [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .specificmedia.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .fastclick.net [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   in.getclicky.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .fastclick.net [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .chitika.net [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .mm.chitika.net [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .eaeacom.112.2o7.net [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .atdmt.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .collective-media.net [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .interclick.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .doubleclick.net [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .interclick.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .revsci.net [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .revsci.net [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .revsci.net [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .statcounter.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .azjmp.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .azjmp.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .clickbooth.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   jmp.clickbooth.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .stpetersburgtimes.122.2o7.net [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .serving-sys.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .revsci.net [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .lfstmedia.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .zedo.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .adbrite.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .at.atwola.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .atwola.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .at.atwola.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .tacoda.at.atwola.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .tacoda.at.atwola.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .tacoda.at.atwola.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .tacoda.at.atwola.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .at.atwola.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .burstnet.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .adbrite.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .accounts.google.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .accounts.google.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   accounts.google.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .zedo.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .eyewonder.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .eyewonder.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .eyewonder.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .eyewonder.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .questionmarket.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .questionmarket.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .intermundomedia.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .intermundomedia.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .themis-media.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .legolas-media.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .legolas-media.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .invitemedia.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   media.angelfire.lycos.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .media.adfrontiers.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .collective-media.net [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .content.yieldmanager.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   ad.yieldmanager.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   www.burstbeacon.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .burstbeacon.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .advertising.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .mediabrandsww.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .www.burstnet.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .yieldmanager.net [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .casalemedia.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .casalemedia.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .casalemedia.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .casalemedia.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .casalemedia.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .casalemedia.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .ru4.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .lfstmedia.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .r1-ads.ace.advertising.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .trafficmp.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .trafficmp.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .trafficmp.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   www.burstnet.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .burstnet.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .advertising.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .advertising.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .advertising.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .collective-media.net [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .collective-media.net [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .collective-media.net [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .collective-media.net [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .collective-media.net [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   www.burstnet.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .media.adfrontiers.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .fastclick.net [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .realmedia.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .collective-media.net [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .collective-media.net [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .collective-media.net [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .collective-media.net [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .lucidmedia.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .collective-media.net [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .collective-media.net [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .collective-media.net [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .collective-media.net [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   ad.yieldmanager.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .pro-market.net [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .revsci.net [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .adbrite.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   ad.yieldmanager.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .media6degrees.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .invitemedia.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .invitemedia.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .advertising.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .advertising.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .zedo.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .zedo.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .collective-media.net [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .adserver.adtechus.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .adbrite.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .adbrite.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .adbrite.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .adbrite.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .adbrite.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .media6degrees.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .media6degrees.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .media6degrees.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .media6degrees.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .media6degrees.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .tribalfusion.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .mediaplex.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .ads.pointroll.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .pointroll.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .ads.pointroll.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .ads.pointroll.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .ads.pointroll.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .ads.pointroll.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .ads.pointroll.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .ads.pointroll.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .invitemedia.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .invitemedia.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .invitemedia.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .invitemedia.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .trafficmp.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .trafficmp.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .serving-sys.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .serving-sys.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .serving-sys.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .media.adfrontiers.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .trafficmp.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .trafficmp.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .trafficmp.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .trafficmp.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .account.swtor.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   .invitemedia.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   ad.yieldmanager.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   ad.yieldmanager.com [ C:\USERS\MATT\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
   a.ads2.msads.net [ C:\USERS\MATT\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\GXTH2DBD ]
   ad.insightexpressai.com [ C:\USERS\MATT\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\GXTH2DBD ]
   ads2.msads.net [ C:\USERS\MATT\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\GXTH2DBD ]
   b.ads2.msads.net [ C:\USERS\MATT\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\GXTH2DBD ]
   cdn.eyewonder.com [ C:\USERS\MATT\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\GXTH2DBD ]
   cdn.insights.gravity.com [ C:\USERS\MATT\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\GXTH2DBD ]
   cdn2.themis-media.com [ C:\USERS\MATT\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\GXTH2DBD ]
   cloud.video.unrulymedia.com [ C:\USERS\MATT\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\GXTH2DBD ]
   content.oddcast.com [ C:\USERS\MATT\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\GXTH2DBD ]
   content.yieldmanager.edgesuite.net [ C:\USERS\MATT\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\GXTH2DBD ]
   convoad.technoratimedia.net [ C:\USERS\MATT\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\GXTH2DBD ]
   core.insightexpressai.com [ C:\USERS\MATT\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\GXTH2DBD ]
   games.mochimedia.com [ C:\USERS\MATT\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\GXTH2DBD ]
   i.*adult URL* [ C:\USERS\MATT\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\GXTH2DBD ]
   ia.media-imdb.com [ C:\USERS\MATT\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\GXTH2DBD ]
   media-mv.halycongames.com [ C:\USERS\MATT\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\GXTH2DBD ]
   media.ign.com [ C:\USERS\MATT\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\GXTH2DBD ]
   media.kelbymediagroup.com [ C:\USERS\MATT\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\GXTH2DBD ]
   media.kyte.tv [ C:\USERS\MATT\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\GXTH2DBD ]
   media.mtvnservices.com [ C:\USERS\MATT\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\GXTH2DBD ]
   media.nbcdfw.com [ C:\USERS\MATT\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\GXTH2DBD ]
   media.nbcphiladelphia.com [ C:\USERS\MATT\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\GXTH2DBD ]
   media.pandamoniumgames.com [ C:\USERS\MATT\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\GXTH2DBD ]
   media.scanscout.com [ C:\USERS\MATT\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\GXTH2DBD ]
   media.whosay.com [ C:\USERS\MATT\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\GXTH2DBD ]
   media.xfire.com [ C:\USERS\MATT\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\GXTH2DBD ]
   media1.break.com [ C:\USERS\MATT\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\GXTH2DBD ]
   msnbcmedia.msn.com [ C:\USERS\MATT\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\GXTH2DBD ]
   objects.tremormedia.com [ C:\USERS\MATT\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\GXTH2DBD ]
   s0.2mdn.net [ C:\USERS\MATT\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\GXTH2DBD ]
   secure-us.imrworldwide.com [ C:\USERS\MATT\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\GXTH2DBD ]
   serving-sys.com [ C:\USERS\MATT\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\GXTH2DBD ]
   spe.atdmt.com [ C:\USERS\MATT\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\GXTH2DBD ]
   speed.pointroll.com [ C:\USERS\MATT\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\GXTH2DBD ]
   static.socialmedia.com [ C:\USERS\MATT\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\GXTH2DBD ]
   vhss-d.oddcast.com [ C:\USERS\MATT\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\GXTH2DBD ]
   video.minecraftelite.com [ C:\USERS\MATT\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\GXTH2DBD ]
   www.naiadsystems.com [ C:\USERS\MATT\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\GXTH2DBD ]
   C:\USERS\MATT\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\[email protected][1].TXT [ /STATSE.WEBTRENDSLIVE ]
   .imrworldwide.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .imrworldwide.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .atdmt.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .mediaplex.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .revsci.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .kontera.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .advertising.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .realmedia.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .ru4.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .ru4.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   user.lucidmedia.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .invitemedia.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .adbrite.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .azjmp.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .collective-media.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .lfstmedia.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .adxpose.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .cmp.112.2o7.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .legolas-media.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .ads.pointroll.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .pointroll.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .interclick.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .interclick.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .247realmedia.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .adserver.adtechus.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .insightexpressai.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .insightexpressai.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .server.cpmstar.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .mediabistro.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .mediabistro.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .mediabistro.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .2o7.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .eaeacom.112.2o7.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .eyewonder.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .insightexpressai.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .insightexpressai.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .insightexpressai.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .insightexpressai.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .lucidmedia.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .zedo.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .lucidmedia.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .2o7.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .2o7.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .network.realmedia.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .adtechus.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .specificclick.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .specificclick.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .specificclick.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .specificclick.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .specificmedia.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .insightexpressai.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .ad.yieldmanager.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .ad.yieldmanager.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .insightexpressai.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .2o7.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .at.atwola.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .2o7.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .2o7.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .statcounter.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .fastclick.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   stat.onestat.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   stat.onestat.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .server.cpmstar.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   s07.flagcounter.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .kontera.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .kontera.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .tripod.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .paypal.112.2o7.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .serving-sys.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   accounts.youtube.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .fastclick.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .lfstmedia.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   citi.bridgetrack.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   citi.bridgetrack.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   optimize.indieclick.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   optimize.indieclick.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   optimize.indieclick.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .burstnet.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .clickbank.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .clickbank.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   fidelity.rotator.hadj7.adjuggler.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   fidelity.rotator.hadj7.adjuggler.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .clicksor.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .clicksor.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .clicksor.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .clicksor.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .tracking.dsmmadvantage.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .avgtechnologies.112.2o7.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .adbrite.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .game-advertising-online.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   bg.2.cqcounter.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   media.angelfire.lycos.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .ads.pointroll.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .2o7.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .2o7.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .2o7.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .doubleclick.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .adbrite.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   ad10.walklightmedia.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   mediaservices-d.openxenterprise.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .insightexpressai.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .insightexpressai.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .bonniercorp.122.2o7.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   static.freewebs.getclicky.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .andomedia.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .overture.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .ad.doubleclick.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   eas.apm.emediate.eu [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .lfstmedia.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .azjmp.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   track.vipgamesnetwork.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .www.burstnet.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .media.adfrontiers.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .media.adfrontiers.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .server.cpmstar.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .2o7.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .zedo.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .at.atwola.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .tacoda.at.atwola.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .tacoda.at.atwola.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .at.atwola.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .ar.atwola.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   www.find-fast-answers.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .eyewonder.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .eyewonder.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .casalemedia.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   www.googleadservices.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   www.googleadservices.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   www.googleadservices.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   data.coremetrics.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .atdmt.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .atdmt.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .mediaplex.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   cn.clickable.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .collective-media.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .beta-ads.ace.advertising.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   www.pixeltrack66.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   www.pixeltrack66.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .112.2o7.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .revsci.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .timeinc.122.2o7.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   ads.bridgetrack.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   ads.bridgetrack.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   ads.bridgetrack.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .insightexpressai.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .zedo.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .mm.chitika.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .zedo.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .zedo.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .microsoftsto.112.2o7.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .statcounter.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .ru4.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   gr.burstnet.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   dc.tremormedia.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .mmotraffic.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .hardwarezone.com.sg [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .hardwarezone.com.sg [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .hardwarezone.com.sg [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .hardwarezone.com.sg [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .revsci.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .ru4.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .googleads.g.doubleclick.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   *Blocked Russian URL* [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   *Blocked Russian URL* [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .atdmt.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .atdmt.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .eyewonder.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .realmedia.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .realmedia.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .content.yieldmanager.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   ad.yieldmanager.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .insightexpressai.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .zedo.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .insightexpressai.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .revsci.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   statse.webtrendslive.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .server.cpmstar.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .server.cpmstar.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .server.cpmstar.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .server.cpmstar.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .insightexpressai.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .collective-media.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .collective-media.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .adbrite.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   www.addfreestats.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   adserver.i3d.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .revsci.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .casalemedia.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .casalemedia.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .tripod.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .lfstmedia.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .collective-media.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .mediabrandsww.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .casalemedia.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .casalemedia.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .casalemedia.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .casalemedia.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .yieldmanager.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   www.burstbeacon.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .burstbeacon.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .a1.interclick.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .interclick.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .collective-media.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .server.cpmstar.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .server.cpmstar.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .server.cpmstar.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .adbrite.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .lfstmedia.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .a1.interclick.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .bs.serving-sys.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .adbrite.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .revsci.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .revsci.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .revsci.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .revsci.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   uk.sitestat.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   uk.sitestat.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .ru4.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .ru4.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .trafficmp.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .trafficmp.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .trafficmp.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .revsci.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .media.adfrontiers.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .media6degrees.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .collective-media.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .collective-media.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .questionmarket.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .questionmarket.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .legolas-media.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .legolas-media.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .legolas-media.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .ru4.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .media6degrees.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .invitemedia.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .advertising.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .advertising.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .realmedia.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .a1.interclick.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .a1.interclick.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .ads.pointroll.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .ru4.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .clickaider.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .insightexpressai.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .insightexpressai.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .insightexpressai.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .insightexpressai.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .tribalfusion.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .media.adfrontiers.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .pointroll.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .ads.pointroll.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .ads.pointroll.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .ads.pointroll.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .ads.pointroll.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .ads.pointroll.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .ads.pointroll.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .collective-media.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .collective-media.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .collective-media.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .r1-ads.ace.advertising.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .advertising.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .fastclick.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   accounts.google.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .pro-market.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .insightexpressai.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .burstnet.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   www.burstnet.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .trafficmp.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .content.yieldmanager.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .intermundomedia.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .intermundomedia.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   www.burstnet.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .adbrite.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .ru4.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .adbrite.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   eas.apm.emediate.eu [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .mediaplex.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .invitemedia.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .invitemedia.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .advertise.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .liveperson.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   server.iad.liveperson.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .liveperson.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .bizzclick.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   www.blogcounter.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .collective-media.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .collective-media.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .collective-media.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .collective-media.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .atdmt.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .h.atdmt.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .h.atdmt.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .h.atdmt.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .h.atdmt.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .trafficmp.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .trafficmp.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .trafficmp.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .trafficmp.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .trafficmp.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .trafficmp.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .media.adfrontiers.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .lucidmedia.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .invitemedia.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   ad.yieldmanager.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .invitemedia.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .trafficmp.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .trafficmp.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .adbrite.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .adbrite.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .advertising.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .advertising.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .advertising.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .advertising.com [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GZ5TSVBO.DEFAULT\COOKIES.SQLITE ]
   .collective-media.net [ C:\USERS\MATT\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\

[empyers]

Results of Malwarebytes....nothing found.


Malwarebytes' Anti-Malware 1.51.2.1300
www.malwarebytes.org

Database version: 7811

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

9/27/2011 6:38:08 PM
mbam-log-2011-09-27 (18-38-08).txt

Scan type: Full scan (C:\|D:\|)
Objects scanned: 435186
Time elapsed: 38 minute(s), 15 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

[empyers]

DDS.txt log:


.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 8.0.7600.16385  BrowserJavaVersion: 1.6.0_22
Run by Matt at 18:40:16 on 2011-09-27
Microsoft Windows 7 Home Premium   6.1.7600.0.1252.1.1033.18.6077.3105 [GMT -7:00]
.
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\FBAgent.exe
C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe
C:\Program Files\ATKGFNEX\GFNEXSrv.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\SYSTEM32\WISPTIS.EXE
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
D:\Program Files\VPN\cvpnd.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
D:\MySQL\bin\mysqld.exe
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe
C:\Windows\SYSTEM32\WISPTIS.EXE
C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\taskhost.exe
C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe
C:\Program Files\P4G\BatteryLife.exe
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\system32\Dwm.exe
C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
C:\Windows\Explorer.EXE
C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe
C:\Program Files\Tablet\Wacom\Wacom_TabletUser.exe
C:\Windows\SysWOW64\ACEngSvr.exe
C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
C:\Program Files (x86)\ASUS\ATK Hotkey\HControl.exe
C:\Program Files (x86)\ASUS\ATK Hotkey\ATKOSD.exe
C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe
C:\Program Files (x86)\ASUS\ATK Hotkey\KBFiltr.exe
C:\Program Files (x86)\ASUS\ATK Hotkey\WDC.exe
C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\Program Files (x86)\Steam\Steam.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
D:\Program Files\DAEMON Tools Lite\DTLite.exe
D:\SVN\bin\TSVNCache.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe
C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe
C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe
C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
C:\Program Files (x86)\Creative\SB Audigy\Volume Panel\VolPanlu.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Trillian\trillian.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files (x86)\Common Files\Steam\SteamService.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe
C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Users\Matt\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Windows\SysWOW64\NOTEPAD.EXE
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\conhost.exe
C:\Windows\SysWOW64\cscript.exe
C:\Windows\system32\wbem\wmiprvse.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = about:blank
uURLSearchHooks: H - No File
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO: Search Helper: {6ebf7485-159f-4bff-a14f-b9e3aac4465b} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO: Skype Plug-In: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
BHO: Windows Live Toolbar Helper: {e15a8dc0-8516-42a1-81ea-dc94ec1acf10} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll
TB: &Windows Live Toolbar: {21fa44ef-376d-4d53-9b0f-8a89d3229068} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll
TB: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
uRun: [Steam] "C:\Program Files (x86)\Steam\Steam.exe" -silent
uRun: [DAEMON Tools Lite] "D:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
uRun: [Facebook Update] "C:\Users\Matt\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
mRun: [Microsoft Pinyin IME Migration] C:\PROGRA~2\COMMON~1\MICROS~1\IME12\IMESC\IMSCMIG.EXE /INSTALL
mRun: [UpdateLBPShortCut] "C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\LabelPrint" UpdateWithCreateOnce "Software\CyberLink\LabelPrint\2.5"
mRun: [HControlUser] C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe
mRun: [ATKOSD2] C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe
mRun: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe
mRun: [VolPanel] "C:\Program Files (x86)\Creative\SB Audigy\Volume Panel\VolPanlu.exe" /r
mRun: [UpdReg] C:\Windows\UpdReg.EXE
mRun: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
mRun: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
mRun: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
mRunOnce: [Malwarebytes' Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
StartupFolder: C:\Users\Matt\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\OPENOF~1.LNK - C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe
StartupFolder: C:\Users\Matt\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\Trillian.lnk - C:\Program Files (x86)\Trillian\trillian.exe
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\BLUETO~1.LNK - C:\Program Files (x86)\WIDCOMM\Bluetooth Software\BTTray.exe
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\FANCYS~1.LNK - C:\Windows\Installer\{60D6618B-153F-4353-8185-908E676E5888}\_DCE9A4DB2A5F2786140FA3.exe
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\VPNGUI~1.LNK - C:\Windows\Installer\{467D5E81-8349-4892-9E81-C3674ED8E451}\Icon09DB8A851.exe
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: Download Using &BitSpirit - C:\Program Files (x86)\BitSpirit\bsurl.htm
IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
TCP: DhcpNameServer = 192.168.10.1
TCP: Interfaces\{7D7C05EF-8AD2-4366-9861-F731B2FED9DB} : DhcpNameServer = 192.168.10.1
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
BHO-X64: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO-X64:     AcroIEHelperStub - No File
BHO-X64: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO-X64: Search Helper: {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
BHO-X64:     Search Helper - No File
BHO-X64: Windows Live Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO-X64: Skype Plug-In: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
BHO-X64:     SkypeIEPluginBHO - No File
BHO-X64: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
BHO-X64: Windows Live Toolbar Helper: {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll
TB-X64: &Windows Live Toolbar: {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll
TB-X64: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
mRun-x64: [Microsoft Pinyin IME Migration] C:\PROGRA~2\COMMON~1\MICROS~1\IME12\IMESC\IMSCMIG.EXE /INSTALL
mRun-x64: [UpdateLBPShortCut] "C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\LabelPrint" UpdateWithCreateOnce "Software\CyberLink\LabelPrint\2.5"
mRun-x64: [HControlUser] C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe
mRun-x64: [ATKOSD2] C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe
mRun-x64: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe
mRun-x64: [VolPanel] "C:\Program Files (x86)\Creative\SB Audigy\Volume Panel\VolPanlu.exe" /r
mRun-x64: [UpdReg] C:\Windows\UpdReg.EXE
mRun-x64: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
mRun-x64: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
mRun-x64: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
mRun-x64: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun-x64: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
mRun-x64: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
mRunOnce-x64: [Malwarebytes' Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
IE-X64: {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
.
================= FIREFOX ===================
.
FF - ProfilePath - C:\Users\Matt\AppData\Roaming\Mozilla\Firefox\Profiles\gz5tsvbo.default\
FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.69\npGoogleUpdate3.dll
FF - plugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: C:\Program Files (x86)\Microsoft Silverlight\4.0.60531.0\npctrlui.dll
FF - plugin: C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll
FF - plugin: C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll
FF - plugin: C:\Program Files (x86)\TabletPlugins\npwacom.dll
FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
FF - plugin: C:\Users\Matt\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll
FF - plugin: C:\Users\Matt\AppData\Local\Google\Update\1.3.21.69\npGoogleUpdate3.dll
FF - plugin: C:\Users\Matt\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll
FF - plugin: C:\Users\Matt\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll
FF - plugin: C:\Users\Matt\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll
FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
.
============= SERVICES / DRIVERS ===============
.
R1 SASDIFSV;SASDIFSV;C:\Program Files\SUPERAntiSpyware\sasdifsv64.sys [2011-7-22 14928]
R1 SASKUTIL;SASKUTIL;C:\Program Files\SUPERAntiSpyware\saskutil64.sys [2011-7-12 12368]
R1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\system32\DRIVERS\vwififlt.sys --> C:\Windows\system32\DRIVERS\vwififlt.sys [?]
R2 !SASCORE;SAS Core Service;C:\Program Files\SUPERAntiSpyware\SASCore64.exe [2011-8-11 140672]
R2 AFBAgent;AFBAgent;"C:\Windows\system32\FBAgent.exe" --> C:\Windows\system32\FBAgent.exe [?]
R2 ASMMAP64;ASMMAP64;C:\Program Files\ATKGFNEX\ASMMAP64.sys [2010-4-8 14904]
R2 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2011-9-27 366152]
R2 rimspci;rimspci;C:\Windows\system32\DRIVERS\rimspe64.sys --> C:\Windows\system32\DRIVERS\rimspe64.sys [?]
R2 rixdpcie;rixdpcie;C:\Windows\system32\DRIVERS\rixdpe64.sys --> C:\Windows\system32\DRIVERS\rixdpe64.sys [?]
R2 TabletServiceWacom;TabletServiceWacom;C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe [2010-9-30 5671792]
R2 UNS;Intel(R) Management & Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-4-8 2314240]
R3 btwl2cap;Bluetooth L2CAP Service;C:\Windows\system32\DRIVERS\btwl2cap.sys --> C:\Windows\system32\DRIVERS\btwl2cap.sys [?]
R3 HECIx64;Intel(R) Management Engine Interface;C:\Windows\system32\DRIVERS\HECIx64.sys --> C:\Windows\system32\DRIVERS\HECIx64.sys [?]
R3 L1C;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller (NDIS 6.20);C:\Windows\system32\DRIVERS\L1C62x64.sys --> C:\Windows\system32\DRIVERS\L1C62x64.sys [?]
R3 MBAMProtector;MBAMProtector;\??\C:\Windows\system32\drivers\mbam.sys --> C:\Windows\system32\drivers\mbam.sys [?]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver;C:\Windows\system32\drivers\nvhda64v.sys --> C:\Windows\system32\drivers\nvhda64v.sys [?]
R3 wacmoumonitor;Wacom Mode Helper;C:\Windows\system32\DRIVERS\wacmoumonitor.sys --> C:\Windows\system32\DRIVERS\wacmoumonitor.sys [?]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
S2 gupdate;Google Update Service (gupdate);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-4-8 135664]
S3 Creative ALchemy AL6 Licensing Service;Creative ALchemy AL6 Licensing Service;C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [2010-4-8 79360]
S3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2010-4-8 79360]
S3 fssfltr;fssfltr;C:\Windows\system32\DRIVERS\fssfltr.sys --> C:\Windows\system32\DRIVERS\fssfltr.sys [?]
S3 fsssvc;Windows Live Family Safety;C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2008-12-8 533344]
S3 gupdatem;Google Update Service (gupdatem);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-4-8 135664]
S3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver;C:\Windows\system32\DRIVERS\SiSG664.sys --> C:\Windows\system32\DRIVERS\SiSG664.sys [?]
S3 SwitchBoard;Adobe SwitchBoard;C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-2-19 517096]
S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\system32\Wat\WatAdminSvc.exe --> C:\Windows\system32\Wat\WatAdminSvc.exe [?]
.
=============== Created Last 30 ================
.
2011-09-28 00:57:48   --------   d-----w-   C:\Users\Matt\AppData\Roaming\Malwarebytes
2011-09-28 00:57:43   --------   d-----w-   C:\ProgramData\Malwarebytes
2011-09-28 00:57:40   25416   ----a-w-   C:\Windows\System32\drivers\mbam.sys
2011-09-28 00:57:40   --------   d-----w-   C:\Program Files (x86)\Malwarebytes' Anti-Malware
2011-09-28 00:43:24   --------   d-sh--w-   C:\$RECYCLE.BIN
2011-09-27 23:15:25   --------   d-----w-   C:\Users\Matt\AppData\Roaming\SUPERAntiSpyware.com
2011-09-27 23:15:14   --------   d-----w-   C:\ProgramData\SUPERAntiSpyware.com
2011-09-27 23:15:14   --------   d-----w-   C:\Program Files\SUPERAntiSpyware
2011-09-27 21:18:14   98816   ----a-w-   C:\Windows\sed.exe
2011-09-27 21:18:14   518144   ----a-w-   C:\Windows\SWREG.exe
2011-09-27 21:18:14   256000   ----a-w-   C:\Windows\PEV.exe
2011-09-27 21:18:14   208896   ----a-w-   C:\Windows\MBR.exe
2011-09-21 01:10:53   --------   d-----w-   C:\Users\Matt\AppData\Local\dxhr
2011-09-21 01:10:19   --------   d-----w-   C:\Users\Matt\AppData\Local\28050
2011-09-21 01:10:13   78680   ----a-w-   C:\Windows\System32\XAPOFX1_4.dll
2011-09-21 01:10:13   530776   ----a-w-   C:\Windows\System32\XAudio2_6.dll
2011-09-21 01:10:13   24920   ----a-w-   C:\Windows\System32\X3DAudio1_7.dll
2011-09-21 01:10:13   176984   ----a-w-   C:\Windows\System32\xactengine3_6.dll
2011-09-13 22:47:16   --------   d-----w-   C:\ProgramData\PC Tools
2011-08-31 18:09:03   --------   d-----w-   C:\IGG
2011-08-31 18:09:00   --------   d-----w-   C:\Users\Matt\AppData\Roaming\IGG
.
==================== Find3M  ====================
.
2011-09-05 21:32:29   280736   ----a-w-   C:\Windows\SysWow64\PnkBstrB.xtr
2011-09-05 21:32:29   280736   ----a-w-   C:\Windows\SysWow64\PnkBstrB.exe
2011-09-05 21:27:29   215128   ----a-w-   C:\Windows\SysWow64\PnkBstrB.ex0
2011-08-16 17:13:11   404640   ----a-w-   C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2011-07-22 05:35:08   1638912   ----a-w-   C:\Windows\System32\mshtml.tlb
2011-07-22 04:56:17   1638912   ----a-w-   C:\Windows\SysWow64\mshtml.tlb
2011-07-16 05:26:54   362496   ----a-w-   C:\Windows\System32\wow64win.dll
2011-07-16 05:26:53   243200   ----a-w-   C:\Windows\System32\wow64.dll
2011-07-16 05:26:53   13312   ----a-w-   C:\Windows\System32\wow64cpu.dll
2011-07-16 05:26:18   214528   ----a-w-   C:\Windows\System32\winsrv.dll
2011-07-16 05:24:09   16384   ----a-w-   C:\Windows\System32\ntvdm64.dll
2011-07-16 05:21:32   422400   ----a-w-   C:\Windows\System32\KernelBase.dll
2011-07-16 05:17:46   338432   ----a-w-   C:\Windows\System32\conhost.exe
2011-07-16 04:36:09   14336   ----a-w-   C:\Windows\SysWow64\ntvdm64.dll
2011-07-16 04:32:14   44032   ----a-w-   C:\Windows\apppatch\acwow64.dll
2011-07-16 04:31:50   25600   ----a-w-   C:\Windows\SysWow64\setup16.exe
2011-07-16 04:30:29   5120   ----a-w-   C:\Windows\SysWow64\wow32.dll
2011-07-16 04:30:27   272384   ----a-w-   C:\Windows\SysWow64\KernelBase.dll
2011-07-16 02:26:12   7680   ----a-w-   C:\Windows\SysWow64\instnm.exe
2011-07-16 02:26:11   2048   ----a-w-   C:\Windows\SysWow64\user.exe
2011-07-16 02:21:47   6144   ---ha-w-   C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll
2011-07-16 02:21:47   4608   ---ha-w-   C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll
2011-07-16 02:21:47   3584   ---ha-w-   C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll
2011-07-16 02:21:47   3072   ---ha-w-   C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll
2011-07-09 05:14:10   2048   ----a-w-   C:\Windows\System32\tzres.dll
2011-07-09 04:30:52   2048   ----a-w-   C:\Windows\SysWow64\tzres.dll
2011-07-09 02:44:55   287744   ----a-w-   C:\Windows\System32\drivers\mrxsmb10.sys
.
============= FINISH: 18:40:41.46 ===============

[empyers]

aaand Attach.txt log:


.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2011-08-26.01)
.
Microsoft Windows 7 Home Premium
Boot Device: \Device\HarddiskVolume2
Install Date: 9/1/2010 8:53:42 AM
System Uptime: 9/27/2011 5:42:43 PM (1 hours ago)
.
Motherboard: PEGATRON CORPORATION |  | G60JX
Processor: Intel(R) Core(TM) i7 CPU       Q 720  @ 1.60GHz | Socket 989 | 1600/533mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 116 GiB total, 12.193 GiB free.
D: is FIXED (NTFS) - 330 GiB total, 293.754 GiB free.
E: is CDROM ()
F: is CDROM ()
.
==== Disabled Device Manager Items =============
.
Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318}
Description: Cisco Systems VPN Adapter for 64-bit Windows
Device ID: ROOT\NET\0000
Manufacturer: Cisco Systems
Name: Cisco Systems VPN Adapter for 64-bit Windows
PNP Device ID: ROOT\NET\0000
Service: CVirtA
.
==== System Restore Points ===================
.
RP217: 9/26/2011 1:00:28 PM - Scheduled Checkpoint
RP218: 9/27/2011 2:10:12 PM - Removed AVG 2011
RP219: 9/27/2011 2:12:05 PM - Removed AVG 2011
.
==== Installed Programs ======================
.
 Update for Microsoft Office 2007 (KB2508958)
ÊÍÏíË áÜ Microsoft Office Excel 2007 Help (KB963678)
ÊÍÏíË áÜ Microsoft Office Powerpoint 2007 Help (KB963669)
ÊÍÏíË áÜ Microsoft Office Word 2007 Help (KB963665)
2007 Microsoft Office system
Acrobat.com
Activation Assistant for the 2007 Microsoft Office suites
Actualização do Microsoft Office Excel 2007 Help (KB963678)
Actualização do Microsoft Office Powerpoint 2007 Help (KB963669)
Actualização do Microsoft Office Word 2007 Help (KB963665)
Adobe After Effects CS4
Adobe After Effects CS4 Presets
Adobe After Effects CS4 Third Party Content
Adobe AIR
Adobe Anchor Service CS4
Adobe CMaps CS4
Adobe Color Video Profiles AE CS4
Adobe Community Help
Adobe Creative Suite 4 Master Collection
Adobe Creative Suite 5 Web Premium
Adobe Default Language CS4
Adobe Dynamiclink Support
Adobe ExtendScript Toolkit CS4
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Fonts All
Adobe Media Encoder CS4
Adobe Media Encoder CS4 Additional Exporter
Adobe Media Encoder CS4 Dolby
Adobe Media Encoder CS4 Exporter
Adobe Media Encoder CS4 Importer
Adobe Media Player
Adobe MotionPicture Color Files CS4
Adobe Output Module
Adobe PDF Library Files CS4
Adobe Premiere Pro CS4
Adobe Reader 9.2 MUI
Adobe Setup
Adobe Type Support CS4
Adobe Update Manager CS4
Adobe XMP Panels CS4
ASUS AI Recovery
ASUS AP Bank
ASUS Data Security Manager
ASUS FancyStart
ASUS LifeFrame3
ASUS Live Update
ASUS SmartLogon
ASUS Splendid Video Enhancement Technology
ASUS Virtual Camera
ASUS_ScreenSaver_GSeries
ATK Generic Function Service
ATK Hotkey
ATK Media
ATKOSD2
Atualização do produto Microsoft Office Excel 2007 Help (KB963678)
Atualização do produto Microsoft Office Outlook 2007 Help (KB963677)
Atualização do produto Microsoft Office Powerpoint 2007 Help (KB963669)
Atualização do produto Microsoft Office Word 2007 Help (KB963665)
Audacity 1.2.6
Battlefield: Bad Company 2
BitSpirit v3.6.0.403 Stable
Braid
CamStudio
Choice Guard
ControlDeck
Creative MediaSource 5
CyberLink LabelPrint
Deus Ex: Human Revolution
Dig-N-Rig version 1.0
Driver Detective
Dungeon Crawl Stone Soup
Express Gate
Facebook Video Calling 1.0.0.8526
Fallout New Vegas
Fraps (remove only)
Google Chrome
Google Talk Plugin
Google Update Helper
Intel(R) Management Engine Components
Java Auto Updater
Java(TM) 6 Update 22
Junk Mail filter update
Malwarebytes' Anti-Malware version 1.51.2.1300
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office Access MUI (Arabic) 2007
Microsoft Office Access MUI (Chinese (Simplified)) 2007
Microsoft Office Access MUI (Chinese (Traditional)) 2007
Microsoft Office Access MUI (English) 2007
Microsoft Office Access MUI (French) 2007
Microsoft Office Access MUI (Portuguese (Brazil)) 2007
Microsoft Office Access MUI (Portuguese (Portugal)) 2007
Microsoft Office Access MUI (Spanish) 2007
Microsoft Office Access MUI (Thai) 2007
Microsoft Office Access MUI (Turkish) 2007
Microsoft Office Access Setup Metadata MUI (English) 2007
Microsoft Office Excel 2007 Help ©ºÑºÍѾഷ (KB963678)
Microsoft Office Excel 2007 Help ¸üР(KB963678)
Microsoft Office Excel 2007 Help Actualización (KB963678)
Microsoft Office Excel 2007 Help Güncelleþtirmesi (KB963678)
Microsoft Office Excel 2007 Help §ó·sµ{¦¡ (KB963678)
Microsoft Office Excel MUI (Arabic) 2007
Microsoft Office Excel MUI (Chinese (Simplified)) 2007
Microsoft Office Excel MUI (Chinese (Traditional)) 2007
Microsoft Office Excel MUI (English) 2007
Microsoft Office Excel MUI (French) 2007
Microsoft Office Excel MUI (Portuguese (Brazil)) 2007
Microsoft Office Excel MUI (Portuguese (Portugal)) 2007
Microsoft Office Excel MUI (Spanish) 2007
Microsoft Office Excel MUI (Thai) 2007
Microsoft Office Excel MUI (Turkish) 2007
Microsoft Office IME (Chinese (Simplified)) 2007
Microsoft Office IME (Chinese (Traditional)) 2007
Microsoft Office Live Add-in 1.3
Microsoft Office Outlook 2007 Help ¸üР(KB963677)
Microsoft Office Outlook 2007 Help Actualización (KB963677)
Microsoft Office Outlook Connector
Microsoft Office Outlook MUI (Arabic) 2007
Microsoft Office Outlook MUI (Chinese (Simplified)) 2007
Microsoft Office Outlook MUI (Chinese (Traditional)) 2007
Microsoft Office Outlook MUI (English) 2007
Microsoft Office Outlook MUI (French) 2007
Microsoft Office Outlook MUI (Portuguese (Brazil)) 2007
Microsoft Office Outlook MUI (Portuguese (Portugal)) 2007
Microsoft Office Outlook MUI (Spanish) 2007
Microsoft Office Outlook MUI (Thai) 2007
Microsoft Office Outlook MUI (Turkish) 2007
Microsoft Office Powerpoint 2007 Help ©ºÑºÍѾഷ (KB963669)
Microsoft Office Powerpoint 2007 Help ¸üР(KB963669)
Microsoft Office Powerpoint 2007 Help Actualización (KB963669)
Microsoft Office Powerpoint 2007 Help Güncelleþtirmesi (KB963669)
Microsoft Office Powerpoint 2007 Help §ó·sµ{¦¡ (KB963669)
Microsoft Office PowerPoint 2007 §ó·sµ{¦¡ (KB963669)
Microsoft Office PowerPoint MUI (Arabic) 2007
Microsoft Office PowerPoint MUI (Chinese (Simplified)) 2007
Microsoft Office PowerPoint MUI (Chinese (Traditional)) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office PowerPoint MUI (French) 2007
Microsoft Office PowerPoint MUI (Portuguese (Brazil)) 2007
Microsoft Office PowerPoint MUI (Portuguese (Portugal)) 2007
Microsoft Office PowerPoint MUI (Spanish) 2007
Microsoft Office PowerPoint MUI (Thai) 2007
Microsoft Office PowerPoint MUI (Turkish) 2007
Microsoft Office Professional Hybrid 2007
Microsoft Office Proof (Arabic) 2007
Microsoft Office Proof (Basque) 2007
Microsoft Office Proof (Catalan) 2007
Microsoft Office Proof (Chinese (Simplified)) 2007
Microsoft Office Proof (Chinese (Traditional)) 2007
Microsoft Office Proof (Dutch) 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Galician) 2007
Microsoft Office Proof (German) 2007
Microsoft Office Proof (Portuguese (Brazil)) 2007
Microsoft Office Proof (Portuguese (Portugal)) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proof (Thai) 2007
Microsoft Office Proof (Turkish) 2007
Microsoft Office Proofing (Arabic) 2007
Microsoft Office Proofing (Chinese (Simplified)) 2007
Microsoft Office Proofing (Chinese (Traditional)) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Proofing (French) 2007
Microsoft Office Proofing (Portuguese (Brazil)) 2007
Microsoft Office Proofing (Portuguese (Portugal)) 2007
Microsoft Office Proofing (Spanish) 2007
Microsoft Office Proofing (Thai) 2007
Microsoft Office Proofing (Turkish) 2007
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
Microsoft Office Publisher MUI (Arabic) 2007
Microsoft Office Publisher MUI (Chinese (Simplified)) 2007
Microsoft Office Publisher MUI (Chinese (Traditional)) 2007
Microsoft Office Publisher MUI (English) 2007
Microsoft Office Publisher MUI (French) 2007
Microsoft Office Publisher MUI (Portuguese (Brazil)) 2007
Microsoft Office Publisher MUI (Portuguese (Portugal)) 2007
Microsoft Office Publisher MUI (Spanish) 2007
Microsoft Office Publisher MUI (Thai) 2007
Microsoft Office Publisher MUI (Turkish) 2007
Microsoft Office Shared MUI (Arabic) 2007
Microsoft Office Shared MUI (Chinese (Simplified)) 2007
Microsoft Office Shared MUI (Chinese (Traditional)) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared MUI (French) 2007
Microsoft Office Shared MUI (Portuguese (Brazil)) 2007
Microsoft Office Shared MUI (Portuguese (Portugal)) 2007
Microsoft Office Shared MUI (Spanish) 2007
Microsoft Office Shared MUI (Thai) 2007
Microsoft Office Shared MUI (Turkish) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Word 2007 Help ©ºÑºÍѾഷ (KB963665)
Microsoft Office Word 2007 Help ¸üР(KB963665)
Microsoft Office Word 2007 Help Actualización (KB963665)
Microsoft Office Word 2007 Help Güncelleþtirmesi (KB963665)
Microsoft Office Word 2007 Help §ó·sµ{¦¡ (KB963665)
Microsoft Office Word 2007 §ó·sµ{¦¡ (KB963665)
Microsoft Office Word MUI (Arabic) 2007
Microsoft Office Word MUI (Chinese (Simplified)) 2007
Microsoft Office Word MUI (Chinese (Traditional)) 2007
Microsoft Office Word MUI (English) 2007
Microsoft Office Word MUI (French) 2007
Microsoft Office Word MUI (Portuguese (Brazil)) 2007
Microsoft Office Word MUI (Portuguese (Portugal)) 2007
Microsoft Office Word MUI (Spanish) 2007
Microsoft Office Word MUI (Thai) 2007
Microsoft Office Word MUI (Turkish) 2007
Microsoft Search Enhancement Pack
Microsoft Silverlight
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft Sync Framework Runtime Native v1.0 (x86)
Microsoft Sync Framework Services Native v1.0 (x86)
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Microsoft XNA Framework Redistributable 3.0
Microsoft XNA Framework Redistributable 3.1
Microsoft XNA Framework Redistributable 4.0
Microsoft_VC80_ATL_x86
Microsoft_VC80_CRT_x86
Microsoft_VC80_MFC_x86
Microsoft_VC80_MFCLOC_x86
Microsoft_VC90_ATL_x86
Microsoft_VC90_CRT_x86
Microsoft_VC90_MFC_x86
Mise à jour Microsoft Office Excel 2007 Help  (KB963678)
Mise à jour Microsoft Office Outlook 2007 Help  (KB963677)
Mise à jour Microsoft Office Powerpoint 2007 Help  (KB963669)
Mise à jour Microsoft Office Word 2007 Help  (KB963665)
Mozilla Firefox 6.0.2 (x86 en-US)
MSVCRT
MSXML 4.0 SP3 Parser (KB973685)
MySQL Workbench 5.2 CE
Notepad++
NVIDIA PhysX
Octoshape add-in for Adobe Flash Player
OpenOffice.org 3.2
PDF Settings CS5
Photoshop Camera Raw
PunkBuster Services
Realtek High Definition Audio Driver
RICOH R5U230 Media Driver ver.2.05.02.02
Security Update for 2007 Microsoft Office System (KB2288621)
Security Update for 2007 Microsoft Office System (KB2288931)
Security Update for 2007 Microsoft Office System (KB2345043)
Security Update for 2007 Microsoft Office System (KB2553074)
Security Update for 2007 Microsoft Office System (KB2553089)
Security Update for 2007 Microsoft Office System (KB2553090)
Security Update for 2007 Microsoft Office System (KB2584063)
Security Update for 2007 Microsoft Office System (KB969559)
Security Update for 2007 Microsoft Office System (KB976321)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)
Security Update for Microsoft .NET Framework 4 Extended (KB2416472)
Security Update for Microsoft .NET Framework 4 Extended (KB2487367)
Security Update for Microsoft Office Access 2007 (KB979440)
Security Update for Microsoft Office Excel 2007 (KB2553073)
Security Update for Microsoft Office InfoPath 2007 (KB979441)
Security Update for Microsoft Office PowerPoint 2007 (KB2535818)
Security Update for Microsoft Office PowerPoint Viewer 2007 (KB2464623)
Security Update for Microsoft Office Publisher 2007 (KB2284697)
Security Update for Microsoft Office system 2007 (972581)
Security Update for Microsoft Office system 2007 (KB974234)
Security Update for Microsoft Office Visio Viewer 2007 (KB973709)
Security Update for Microsoft Office Word 2007 (KB2344993)
Skype Toolbars
Skype™ 5.0
Sound Blaster Audigy HD
SQLyog Trial 9.0
StarCraft II
Steam
Suite Shared Configuration CS4
Trapcode Particular 32 bit
Trillian
Unity Web Player
Update for 2007 Microsoft Office System (KB2284654)
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871)
Update for Microsoft .NET Framework 4 Client Profile (KB2473228)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523)
Update for Microsoft .NET Framework 4 Extended (KB2468871)
Update for Microsoft .NET Framework 4 Extended (KB2533523)
Update for Microsoft Office 2007 Help for Common Features (KB963673)
Update for Microsoft Office 2007 System (KB2539530)
Update for Microsoft Office Access 2007 Help (KB963663)
Update for Microsoft Office Excel 2007 Help (KB963678)
Update for Microsoft Office Outlook 2007 (KB2583910)
Update for Microsoft Office Outlook 2007 Help (KB963677)
Update for Microsoft Office Powerpoint 2007 Help (KB963669)
Update for Microsoft Office Publisher 2007 Help (KB963667)
Update for Microsoft Office Script Editor Help (KB963671)
Update for Microsoft Office Word 2007 Help (KB963665)
Update for Outlook 2007 Junk Email Filter (KB2553110)
Visual Studio 2008 x64 Redistributables
WebTablet IE Plugin
WebTablet Netscape Plugin
Windows Live Call
Windows Live Communications Platform
Windows Live Essentials
Windows Live Mail
Windows Live Messenger
Windows Live Photo Gallery
Windows Live Sign-in Assistant
Windows Live Sync
Windows Live Toolbar
Windows Live Upload Tool
Windows Live Writer
WinFlash
WinRAR archiver
Wireless Console 3
WModem Driver Installer
.
==== Event Viewer Messages From Past Week ========
.
9/27/2011 2:27:24 PM, Error: Service Control Manager [7030]  - The PEVSystemStart service is marked as an interactive service.  However, the system is configured to not allow interactive services.  This service may not function properly.
9/27/2011 2:26:49 PM, Error: Application Popup [1060]  - \??\C:\ComboFix\catchme.sys has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver.
9/27/2011 2:15:33 PM, Error: Service Control Manager [7009]  - A timeout was reached (30000 milliseconds) while waiting for the Steam Client Service service to connect.
9/27/2011 2:15:33 PM, Error: Service Control Manager [7000]  - The Steam Client Service service failed to start due to the following error:  The service did not respond to the start or control request in a timely fashion.
9/26/2011 12:54:24 PM, Error: volsnap [36]  - The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit.
9/26/2011 11:07:10 AM, Error: bowser [8003]  - The master browser has received a server announcement from the computer ALIEN that believes that it is the master browser for the domain on transport NetBT_Tcpip_{7D7C05EF-8AD2-4366-9861-F731B2FED9DB}. The master browser is stopping or an election is being forced.
9/23/2011 1:36:01 PM, Error: NetBT [4319]  - A duplicate name has been detected on the TCP network.  The IP address of the computer that sent the message is in the data. Use nbtstat -n in a command window to see which name is in the Conflict state.
.
==== End Of File ===========================

[SuperDave]

The logs show that you only have 12 Gb's of free space on your computer. Windows requires at least 15% (17 Gb's) in order to function properly. You will have to find some way of free up some space. You can do this by uninstalling any programs you no longer use. You can also save files, pictures, videos and music to DVD's or an external harddrive.

P2P - I see you have P2P software installed on your machine; BitSpirit). We are not here to pass judgment on file-sharing as a concept. However, we will warn you that engaging in this activity and having this kind of software installed on your machine will always make you more susceptible to re-infections. It is certainly contributing to your current situation.

Please note: Even if you are using a "safe" P2P program, it is only the program that is safe. You will be sharing files from uncertified sources, and these are often infected. The bad guys use P2P filesharing as a major conduit to spread their wares.

I would strongly recommend that you uninstall them, however that choice is up to you. If you choose to remove these programs, you can do so via Control Panel >> Add or Remove Programs.
****************************************************
Update Your Java (JRE)

Old versions of Java have vulnerabilities that malware can use to infect your system.

First Verify your Java Version

If there are any other version(s) installed then update now.

Get the new version (if needed)

If your version is out of date install the newest version of the Sun Java Runtime Environment.

Note: UNCHECK any pre-checked toolbar and/or software offered with the Java update. The pre-checked toolbars/software are not part of the Java update.

Be sure to close ALL open web browsers before starting the installation.

Remove any old versions

1. Download JavaRa and unzip the file to your Desktop.
2. Open JavaRA.exe and choose Remove Older Versions
3. Once complete exit JavaRA.

Additional Note: The Java Quick Starter (JQS.exe) adds a service to improve the initial startup time of Java applets and applications. To disable the JQS service if you don't want to use it, go to Start > Control Panel > Java > Advanced > Miscellaneous and uncheck the box for Java Quick Starter. Click OK and reboot your computer.
*****************************************************
Download OTL to your desktop.

* Open OTL
* Copy and Paste the following text in the codebox into the Custom Scans/Fixes window.

Code: [Select]

:OTL

uURLSearchHooks: H - No File
BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO-X64:     AcroIEHelperStub - No File
BHO-X64: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO-X64:     Search Helper - No File
BHO-X64:     SkypeIEPluginBHO - No File
TB-X64: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File

:COMMANDS
[resethosts]
[purity]
[start explorer]

* Click Run Fix
* OTLI2 may ask to reboot the machine. Please do so if asked.
* Click OK
* A report will open. Copy and Paste that report in your next reply.
*****************************************************************
Download Security Check by screen317 from one of the following links and save it to your desktop.

Link 1
Link 2

* Unzip SecurityCheck.zip and a folder named Security Check should appear.
* Open the Security Check folder and double-click Security Check.bat
* Follow the on-screen instructions inside of the black box.
* A Notepad document should open automatically called checkup.txt
* Post the contents of that document in your next reply.

Note: If a security program requests permission from dig.exe to access the Internet, allow it to do so.
*********************************************************
Please download Rooter and Save it to your desktop.

• Double click it to start the tool.Vista and Windows7 run as administrator.
• Click Scan.
  
• Eventually, a Notepad file containing the report will open, also found at C:\Rooter.txt. Post that log in your next reply.
  

[empyers]

Security Check log:

 Results of screen317's Security Check version 0.99.18 
 Windows 7  (UAC is enabled)
 Internet Explorer 8 
``````````````````````````````
Antivirus/Firewall Check:
 Windows Firewall Enabled! 
 WMI entry may not exist for antivirus; attempting automatic update.
```````````````````````````````
Anti-malware/Other Utilities Check:
 Malwarebytes' Anti-Malware   
 Java(TM) 6 Update 27 
 Adobe Flash Player    10.3.183.5 
 Mozilla Firefox (x86 en-US..)
````````````````````````````````
Process Check: 
objlist.exe by Laurent
 Malwarebytes' Anti-Malware mbamservice.exe 
 Malwarebytes' Anti-Malware mbamgui.exe 
``````````End of Log````````````

[SuperDave]

Looking over your log it seems you don't have any antivirus software.

Before we continue download and install a free antivirus.

Remember to only install one antivirus!
 
1) Avast! Home Edition
2) AVG Free Edition
3) Avira AntiVir Personal
4) Microsoft Security Essentials for Windows Vista\Windows 7 - 64 bit Download
4-a) Microsoft Security Essentials for Windows XP
5) Comodo Antivirus (Uncheck during installation "Install Comodo SafeSurf..", Make Comodo my default search provider" and "Make Comodo Search my homepage" if you choose this one)
6) PC Tools AntiVirus Free Edition

It is strongly recommended that you run only one antivirus program at a time. Having more than one antivirus program active in memory uses additional resources and can result in program conflicts and false virus alerts. If you choose to install more than one antivirus program on your computer, then only one of them should be active in memory at a time.

[empyers]

I did have AVG installed but your programs told me to uninstall/disable them.

Also, I don't think your "Rooter" program is working.
It's been sitting at "please wait..." for hours now and doesn't seem to be doing anything.

[SuperDave]

I did have AVG installed but your programs told me to uninstall/disable them.

Ok. Just make sure to install one.

Please try this one.

Please download the Sophos Anti-Rootkit Scanner and save it to your desktop.

You will need to enter your name, e-mail address and location in order to access the download page.

• Once you have downloaded the file, double click the sarsfx icon
  
• Review the licence agreement and click on the Accept button
  
• The scanner will prompt you to extract the files to C:\SOPHTEMP - DO NOT change this location, simply click the Install button
  
  
• Once the files have been extracted; using Windows Explorer, navigate to C:\SOPHTEMP and double click on the blue shield icon called sargui
  
• Ensure that there are checkmarks next to Running processes, Windows registry and Local hard drives, then click Start scan
  
• Allow the program to scan your computer - please be patient as it may take some time
• Once the scan has completed a window will pop-up with the results of the scan - click OK to this
  
• In the main window, you will see each of the entries found by the scan (if any)
• If the scanner generated any warning messages, please click on each warning and copy and paste the text of it into this thread for me to review
• Once you have posted any warning messages here, you can close the scanner and wait for me to get back to you
• If you have not had any warnings, any entries which can be cleaned up by the scanner will have a box with a green checkmark in it next to the entry
• To clean up these entries click on the Clean up checked items button
  
• If you accidentally check a file NOT recommended for clean up, you will get a warning message and if necessary can re-select the entries you want to clean up
• Once you have cleaned the selected files, you will be prompted to re-boot your computer - please do so
• When you have re-booted,and tell me how your computer is running now