Welcome guest. Before posting on our computer help forum, you must register. Click here it's easy and free.

« previous next »
Pages: [1]   Go Down

Author Topic: Virus/malware blocking Internet access  (Read 28132 times)

0 Members and 1 Guest are viewing this topic.

Crturn24

    Topic Starter


    Greenhorn

    • Experience: Beginner
    • OS: Unknown
    Virus/malware blocking Internet access
    « on: November 08, 2011, 12:26:26 PM »
    I have been presumably infected with a virus that is blocking my Internet connection.  I have run mbar and superantispyware but still have a problem.  I researched and evilFantasy looks like he helped a user in Jan 2009 on a similar type of issue. Any suggestions?
    Logged

    SuperDave

    • Malware Removal Specialist


      • Genius
      • Thanked: 1020
    • Certifications: List
    • Experience: Expert
    • OS: Windows 10
    Re: Virus/malware blocking Internet access
    « Reply #1 on: November 08, 2011, 12:50:43 PM »
    Hello and welcome to Computer Hope Forum. My name is Dave. I will be helping you out with your particular problem on your computer.

    1. I will be working on your Malware issues. This may or may not solve other issues you have with your machine.
    2. The fixes are specific to your problem and should only be used for this issue on this machine.
    3. If you don't know or understand something, please don't hesitate to ask.
    4. Please DO NOT run any other tools or scans while I am helping you.
    5. It is important that you reply to this thread. Do not start a new topic.
    6. Your security programs may give warnings for some of the tools I will ask you to use. Be assured, any links I give are safe.
    7. Absence of symptoms does not mean that everything is clear.

    If you can't access the internet with your infected computer you will have to download and transfer any programs to the computer you're using now and transfer them to the infected computer with a CD-RW or a USB storage device. I prefer a CD because a storage device can get infected. If you use a storage device hold the shift key down while inserting the USB storage device for about 10 secs. You will also have to transfer the logs you receive back to the good computer using the same method until we can get the computer back on-line.
    *************************************************************************
    SUPERAntiSpyware

    If you already have SUPERAntiSpyware be sure to check for updates before scanning!

    Download SuperAntispyware Free Edition (SAS)
    * Double-click the icon on your desktop to run the installer.
    * When asked to Update the program definitions, click Yes
    * If you encounter any problems while downloading the updates, manually download and unzip them from here
    * Next click the Preferences button.

    •Under Start-Up Options uncheck Start SUPERAntiSpyware when Windows starts
    * Click the Scanning Control tab.
    * Under Scanner Options make sure only the following are checked:

    •Close browsers before scanning
    •Scan for tracking cookies
    •Terminate memory threats before quarantining
    •Please leave the others unchecked

    •Click the Close button to leave the control center screen.

    * On the main screen click Scan your computer
    * On the left check the box for the drive you are scanning.
    * On the right choose Perform Complete Scan
    * Click Next to start the scan. Please be patient while it scans your computer.
    * After the scan is complete a summary box will appear. Click OK
    * Make sure everything in the white box has a check next to it, then click Next
    * It will quarantine what it found and if it asks if you want to reboot, click Yes

    •To retrieve the removal information please do the following:
    •After reboot, double-click the SUPERAntiSpyware icon on your desktop.
    •Click Preferences. Click the Statistics/Logs tab.

    •Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.

    •It will open in your default text editor (preferably Notepad).
    •Save the notepad file to your desktop by clicking (in notepad) File > Save As...

    * Save the log somewhere you can easily find it. (normally the desktop)
    * Click close and close again to exit the program.
    *Copy and Paste the log in your post.
    **********************************************
    Please download Malwarebytes Anti-Malware from here.
    Double Click mbam-setup.exe to install the application.
    • Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes Anti-Malware, then click Finish.
    • If an update is found, it will download and install the latest version.
    • Once the program has loaded, select "Perform Full Scan", then click Scan.
    • The scan may take some time to finish,so please be patient.
    • When the scan is complete, click OK, then Show Results to view the results.
    • Make sure that everything is checked, and click Remove Selected.
    • When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. (See Extra Note)
    • Please save the log to a location you will remember.
    • The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
    • Copy and paste the entire report in your next reply.
    Extra Note:

    If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process. If asked to restart the computer, please do so immediately.
    **********************************************
    Download DDS from HERE or HERE and save it to your desktop.

    Vista users right click on dds and select Run as administrator (you will receive a UAC prompt, please allow it)

    * XP users Double click on dds to run it.
    * If your antivirus or firewall try to block DDS then please allow it to run.
    * When finished DDS will open two (2) logs.
    * Save both reports to your desktop.
    * The instructions here ask you to attach the Attach.txt.



    1) DDS.txt
    2) Attach.txt
    Instead of attaching, please copy/past both logs into your Thread

    Note: DDS will instruct you to post the Attach.txt log as an attachment.
    Please just post it as you would any other log by copying and pasting it into the reply.

    •Close the program window, and delete the program from your desktop.

    Please note: You may have to disable any script protection running if the scan fails to run.
    After downloading the tool, disconnect from the internet and disable all antivirus protection.
    Run the scan, enable your A/V and reconnect to the internet.
    Information on A/V control HERE .Then post your DDS logs. (DDS.txt and Attach.txt )
    Logged
    Windows 8 and Windows 10 dual boot with two SSD's

    Crturn24

      Topic Starter


      Greenhorn

      • Experience: Beginner
      • OS: Unknown
      Re: Virus/malware blocking Internet access
      « Reply #2 on: November 08, 2011, 01:30:57 PM »
      SuperDave
      Thanks in advance for your help!  I think you have solved a few of these in the past! 

      I've done the SuperSpyware scan and removed all of the identified objects. I've also attached the MBAM log below.  These are bit challenging without internet access.  I've been unable to download the "dds" file.  Neither link works on my mac?  Is there an alternative way to get this program and run the scan?


      Malwarebytes' Anti-Malware 1.51.2.1300
      www.malwarebytes.org

      Database version: 7622

      Windows 5.1.2600 Service Pack 3
      Internet Explorer 8.0.6001.18702

      11/8/2011 1:09:02 PM
      mbam-log-2011-11-08 (13-09-01).txt

      Scan type: Quick scan
      Objects scanned: 186134
      Time elapsed: 10 minute(s), 51 second(s)

      Memory Processes Infected: 0
      Memory Modules Infected: 0
      Registry Keys Infected: 0
      Registry Values Infected: 1
      Registry Data Items Infected: 3
      Folders Infected: 0
      Files Infected: 0

      Memory Processes Infected:
      (No malicious items detected)

      Memory Modules Infected:
      (No malicious items detected)

      Registry Keys Infected:
      (No malicious items detected)

      Registry Values Infected:
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\ForceClassicControlPanel (Hijack.ControlPanelStyle) -> Value: ForceClassicControlPanel -> Quarantined and deleted successfully.

      Registry Data Items Infected:
      HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\StartMenuLogoff (PUM.Hijack.StartMenu) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\ANTIVIRUSDISABLENOTIFY (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
      HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore\DisableConfig (Windows.Tool.Disabled) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

      Folders Infected:
      (No malicious items detected)

      Files Infected:
      (No malicious items detected)

      Thanks!
      Logged

      Crturn24

        Topic Starter


        Greenhorn

        • Experience: Beginner
        • OS: Unknown
        Re: Virus/malware blocking Internet access
        « Reply #3 on: November 08, 2011, 01:46:59 PM »
        Sorry...SuperSpyware Log attached:SUPERAntiSpyware Scan Log
        http://www.superantispyware.com

        Generated 11/08/2011 at 12:50 PM

        Application Version : 5.0.1134

        Core Rules Database Version : 7911
        Trace Rules Database Version: 5723

        Scan type       : Complete Scan
        Total Scan Time : 00:14:42

        Operating System Information
        Windows XP Professional 32-bit, Service Pack 3 (Build 5.01.2600)
        Administrator

        Memory items scanned      : 685
        Memory threats detected   : 0
        Registry items scanned    : 39208
        Registry threats detected : 30
        File items scanned        : 8765
        File threats detected     : 342

        Adware.Zugo
           HKCR\CLSID\{9D425283-D487-4337-BAB6-AB8354A81457}
           HKCR\CLSID\{9D425283-D487-4337-BAB6-AB8354A81457}\InprocServer32
           HKCR\CLSID\{9D425283-D487-4337-BAB6-AB8354A81457}\InprocServer32#ThreadingModel
           HKCR\CLSID\{9D425283-D487-4337-BAB6-AB8354A81457}\ProgID
           HKCR\CLSID\{9D425283-D487-4337-BAB6-AB8354A81457}\Programmable
           HKCR\CLSID\{9D425283-D487-4337-BAB6-AB8354A81457}\TypeLib
           HKCR\CLSID\{9D425283-D487-4337-BAB6-AB8354A81457}\VersionIndependentProgID
           HKLM\Software\Classes\CLSID\{9D425283-D487-4337-BAB6-AB8354A81457}
           HKCR\CLSID\{9D425283-D487-4337-BAB6-AB8354A81457}
           HKCR\SearchToolbarLib.CSearchToolbarImpl.1
           HKCR\SearchToolbarLib.CSearchToolbarImpl.1\CLSID
           HKCR\SearchToolbarLib.CSearchToolbarImpl
           HKCR\SearchToolbarLib.CSearchToolbarImpl\CLSID
           HKCR\SearchToolbarLib.CSearchToolbarImpl\CurVer
           HKCR\TypeLib\{E43AD97A-5248-46A7-BB03-35574058224C}
           HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9D425283-D487-4337-BAB6-AB8354A81457}
           HKU\S-1-5-21-1482476501-2000478354-682003330-197641\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9D425283-D487-4337-BAB6-AB8354A81457}
           HKLM\Software\Microsoft\Internet Explorer\Toolbar#{9D425283-D487-4337-BAB6-AB8354A81457}
           [SASINPROCSERVER32]
           HKU\S-1-5-21-1482476501-2000478354-682003330-197641\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser#{9D425283-D487-4337-BAB6-AB8354A81457}

        Browser Hijacker.Tubby
           HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Search Toolbar
           HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Search Toolbar#NoModify
           HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Search Toolbar#NoRepair
           HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Search Toolbar#DisplayName
           HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Search Toolbar#UninstallString
           HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Search Toolbar#DisplayIcon
           HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Search Toolbar#DisplayVersion
           HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Search Toolbar#URLInfoAbout
           HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Search Toolbar#Publisher
           HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Search Toolbar#EstimatedSize

        Disabled.SecurityCenterOption
           HKLM\SOFTWARE\MICROSOFT\SECURITY CENTER#ANTIVIRUSDISABLENOTIFY

        Adware.Tracking Cookie
           C:\Documents and Settings\cturner\Cookies\cturner@2o7[2].txt [ /2o7 ]
           C:\Documents and Settings\cturner\Cookies\[email protected][1].txt [ /a1.interclick ]
           C:\Documents and Settings\cturner\Cookies\[email protected][2].txt [ /ad.wsod ]
           C:\Documents and Settings\cturner\Cookies\cturner@adbrite[2].txt [ /adbrite ]
           C:\Documents and Settings\cturner\Cookies\cturner@adinterax[2].txt [ /adinterax ]
           C:\Documents and Settings\cturner\Cookies\[email protected][1].txt [ /ads.jiwire ]
           C:\Documents and Settings\cturner\Cookies\[email protected][2].txt [ /ads.ookla ]
           C:\Documents and Settings\cturner\Cookies\[email protected][1].txt [ /ads.pointroll ]
           C:\Documents and Settings\cturner\Cookies\cturner@advertising[2].txt [ /advertising ]
           C:\Documents and Settings\cturner\Cookies\cturner@adxpose[1].txt [ /adxpose ]
           C:\Documents and Settings\cturner\Cookies\cturner@apmebf[1].txt [ /apmebf ]
           C:\Documents and Settings\cturner\Cookies\[email protected][1].txt [ /at.atwola ]
           C:\Documents and Settings\cturner\Cookies\[email protected][1].txt [ /bs.serving-sys ]
           C:\Documents and Settings\cturner\Cookies\[email protected][1].txt [ /carlson.112.2o7 ]
           C:\Documents and Settings\cturner\Cookies\cturner@casalemedia[2].txt [ /casalemedia ]
           C:\Documents and Settings\cturner\Cookies\[email protected][1].txt [ /charter.122.2o7 ]
           C:\Documents and Settings\cturner\Cookies\cturner@chitika[2].txt [ /chitika ]
           C:\Documents and Settings\cturner\Cookies\cturner@collective-media[2].txt [ /collective-media ]
           C:\Documents and Settings\cturner\Cookies\cturner@doubleclick[1].txt [ /doubleclick ]
           C:\Documents and Settings\cturner\Cookies\[email protected][1].txt [ /etrade.122.2o7 ]
           C:\Documents and Settings\cturner\Cookies\cturner@fastclick[1].txt [ /fastclick ]
           C:\Documents and Settings\cturner\Cookies\cturner@find-assist[2].txt [ /find-assist ]
           C:\Documents and Settings\cturner\Cookies\[email protected][1].txt [ /in.getclicky ]
           C:\Documents and Settings\cturner\Cookies\cturner@insightexpressai[1].txt [ /insightexpressai ]
           C:\Documents and Settings\cturner\Cookies\cturner@interclick[2].txt [ /interclick ]
           C:\Documents and Settings\cturner\Cookies\cturner@invitemedia[1].txt [ /invitemedia ]
           C:\Documents and Settings\cturner\Cookies\cturner@liveperson[1].txt [ /liveperson ]
           C:\Documents and Settings\cturner\Cookies\cturner@liveperson[2].txt [ /liveperson ]
           C:\Documents and Settings\cturner\Cookies\cturner@liveperson[4].txt [ /liveperson ]
           C:\Documents and Settings\cturner\Cookies\cturner@media6degrees[1].txt [ /media6degrees ]
           C:\Documents and Settings\cturner\Cookies\cturner@mediaplex[1].txt [ /mediaplex ]
           C:\Documents and Settings\cturner\Cookies\cturner@megaporn[2].txt [ /megaporn ]
           C:\Documents and Settings\cturner\Cookies\[email protected][1].txt [ /microsoftwindows.112.2o7 ]
           C:\Documents and Settings\cturner\Cookies\[email protected][2].txt [ /p1335.superclick ]
           C:\Documents and Settings\cturner\Cookies\[email protected][1].txt [ /perf.overture ]
           C:\Documents and Settings\cturner\Cookies\cturner@pointroll[2].txt [ /pointroll ]
           C:\Documents and Settings\cturner\Cookies\cturner@revsci[1].txt [ /revsci ]
           C:\Documents and Settings\cturner\Cookies\[email protected][1].txt [ /sales.liveperson ]
           C:\Documents and Settings\cturner\Cookies\cturner@serving-sys[1].txt [ /serving-sys ]
           C:\Documents and Settings\cturner\Cookies\cturner@specificclick[1].txt [ /specificclick ]
           C:\Documents and Settings\cturner\Cookies\cturner@specificmedia[1].txt [ /specificmedia ]
           C:\Documents and Settings\cturner\Cookies\[email protected][1].txt [ /statse.webtrendslive ]
           C:\Documents and Settings\cturner\Cookies\cturner@tacoda[1].txt [ /tacoda ]
           C:\Documents and Settings\cturner\Cookies\cturner@tribalfusion[2].txt [ /tribalfusion ]
           C:\Documents and Settings\cturner\Cookies\[email protected][1].txt [ /usta.122.2o7 ]
           C:\Documents and Settings\cturner\Cookies\[email protected][2].txt [ /www.windowsmedia ]
           C:\Documents and Settings\cturner\Cookies\cturner@yieldmanager[1].txt [ /yieldmanager ]
           C:\Documents and Settings\cturner\Cookies\17ZMQ1Q5.txt [ /ad.wsod.com ]
           C:\Documents and Settings\cturner\Cookies\88EBIUVA.txt [ /statse.webtrendslive.com ]
           C:\Documents and Settings\cturner\Cookies\3GMXMBJ4.txt [ /ad.yieldmanager.com ]
           C:\Documents and Settings\cturner\Cookies\ZTHEZ3Z4.txt [ /doubleclick.net ]
           C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\Cookies\YYVQ403R.txt [ Cookie:[email protected]/ ]
           C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\Cookies\KCYNZTFN.txt [ Cookie:[email protected]/cgi-bin ]
           C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\Cookies\ZNJDW43R.txt [ Cookie:[email protected]/ ]
           C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\Cookies\5NUV8A6S.txt [ Cookie:[email protected]/ ]
           C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\Cookies\4I9ASM7T.txt [ Cookie:[email protected]/ ]
           C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\Cookies\7TYMF8XL.txt [ Cookie:[email protected]/ ]
           C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\Cookies\BISCZF21.txt [ Cookie:[email protected]/ ]
           C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\Cookies\Y3N2GK5K.txt [ Cookie:[email protected]/ ]
           C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\Cookies\NW3ZHILF.txt [ Cookie:[email protected]/ ]
           C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\Cookies\S6JQZINI.txt [ Cookie:[email protected]/ ]
           C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\Cookies\C3APYU6K.txt [ Cookie:[email protected]/ ]
           C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\Cookies\XJ91S8VI.txt [ Cookie:[email protected]/ ]
           C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\Cookies\TOPBCPVF.txt [ Cookie:[email protected]/ ]
           C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\Cookies\4MBZG0FZ.txt [ Cookie:[email protected]/ ]
           C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\Cookies\MWTG6OIO.txt [ Cookie:[email protected]/ ]
           C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\Cookies\I7F0LPIU.txt [ Cookie:[email protected]/ ]
           C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\Cookies\Q7NFRWTO.txt [ Cookie:[email protected]/ ]
           C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\Cookies\PX2OGM2S.txt [ Cookie:[email protected]/ ]
           C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\Cookies\OWYIOBR6.txt [ Cookie:[email protected]/ ]
           C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\Cookies\NY2JE567.txt [ Cookie:[email protected]/ ]
           C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\Cookies\WVFNC18S.txt [ Cookie:[email protected]/ ]
           C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\Cookies\2SK393OC.txt [ Cookie:[email protected]/ ]
           C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\Cookies\3146XLDS.txt [ Cookie:[email protected]/ ]
           C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\Cookies\3RPMQFZ1.txt [ Cookie:[email protected]/ ]
           C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\Cookies\TGVKJRRD.txt [ Cookie:[email protected]/ ]
           C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\Cookies\G40ZRP89.txt [ Cookie:[email protected]/ ]
           C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\Cookies\8RQKWQAY.txt [ Cookie:[email protected]/ ]
           C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\Cookies\WTT2KGXY.txt [ Cookie:[email protected]/ ]
           C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\Cookies\SQ20W33E.txt [ Cookie:[email protected]/ ]
           C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\Cookies\BTU70DAK.txt [ Cookie:[email protected]/ ]
           C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\Cookies\9788YBDA.txt [ Cookie:[email protected]/ ]
           C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\Cookies\PH1JC8FD.txt [ Cookie:[email protected]/ ]
           C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\Cookies\[email protected][2].txt [ Cookie:[email protected]/ ]
           data-ero-advertising.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\USPJS8B9 ]
           secure-us.imrworldwide.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\APPLICATION DATA\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\USPJS8B9 ]
           .zedo.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           ad.yieldmanager.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .serving-sys.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .invitemedia.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .specificclick.net [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .realmedia.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .adinterax.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .interclick.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .interclick.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .atdmt.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .atdmt.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .trafficmp.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .fastclick.net [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .collective-media.net [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .adviva.net [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .traveladvertising.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .traveladvertising.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .*adult URL* [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .adserver.adtechus.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .fastclick.net [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .trafficmp.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .interclick.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .trafficmp.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .hornymatches.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .hornymatches.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .hornymatches.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .hornymatches.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .hornymatches.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .getclicky.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .static.getclicky.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .hornymatches.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .hornymatches.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .hornymatches.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .hornymatches.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           in.getclicky.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .hornymatches.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .accounts.google.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .accounts.google.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           accounts.google.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .invitemedia.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .ero-advertising.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .ero-advertising.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .adbrite.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .adbrite.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .histats.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .histats.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .*adult URL* [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .*adult URL* [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .*adult URL* [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .*adult URL* [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .*adult URL* [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .*adult URL* [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .*adult URL* [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .*adult URL* [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .pornmart.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .pornmart.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .adbrite.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .pornmart.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .adbrite.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .adbrite.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .a1.interclick.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .imrworldwide.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .imrworldwide.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .interclick.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .akamai.interclickproxy.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .eyewonder.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .eyewonder.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .serving-sys.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .bs.serving-sys.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .collective-media.net [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .adserver.adtechus.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .adserver.adtechus.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .casalemedia.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           a.intentmedia.net [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           a.intentmedia.net [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           a.intentmedia.net [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .adxpose.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .ru4.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .adtech.de [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .ru4.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .ru4.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .www.burstnet.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .burstnet.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .a1.interclick.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .a1.interclick.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .a1.interclick.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .interclick.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .ads.pointroll.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .pointroll.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .advertising.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .revsci.net [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .collective-media.net [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .collective-media.net [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .collective-media.net [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .collective-media.net [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .legolas-media.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .casalemedia.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .casalemedia.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .collective-media.net [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .collective-media.net [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .collective-media.net [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .collective-media.net [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .collective-media.net [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .collective-media.net [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .legolas-media.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .adbrite.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .viewablemedia.net [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .ru4.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .ru4.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .ru4.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .revsci.net [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .zedo.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .zedo.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .revsci.net [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .media6degrees.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .2o7.net [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .2o7.net [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .insightexpressai.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .exoclick.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           ads.crakmedia.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .tacoda.at.atwola.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .ar.atwola.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .legolas-media.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .atwola.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .ar.atwola.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .yieldmanager.net [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .zedo.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .zedo.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           dc.tremormedia.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .adinterax.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           ad.yieldmanager.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           ad.yieldmanager.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .officialsexandlondoncity.blogspot.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .officialsexandlondoncity.blogspot.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .officialsexandlondoncity.blogspot.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           s07.flagcounter.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .doubleclick.net [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           officialsexandlondoncity.blogspot.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           officialsexandlondoncity.blogspot.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           officialsexandlondoncity.blogspot.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           officialsexandlondoncity.blogspot.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           officialsexandlondoncity.blogspot.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           officialsexandlondoncity.blogspot.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .linksynergy.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           counters.gigya.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .statcounter.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .thehairymonster.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .amazon-adsystem.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .amazon-adsystem.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .thehairymonster.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .thehairymonster.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .thehairymonster.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .revsci.net [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .revsci.net [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .revsci.net [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .revsci.net [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .media6degrees.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .picadmedia.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .picadmedia.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           ad.yieldmanager.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .zedo.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .collective-media.net [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .collective-media.net [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .collective-media.net [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .lucidmedia.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .zedo.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .zedo.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .zedo.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .collective-media.net [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .legolas-media.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .legolas-media.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .legolas-media.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .invitemedia.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .burstnet.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           www.burstnet.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .pro-market.net [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .realmedia.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .invitemedia.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .invitemedia.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .invitemedia.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .invitemedia.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .casalemedia.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .casalemedia.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .casalemedia.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .casalemedia.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .casalemedia.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .casalemedia.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .casalemedia.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .casalemedia.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .martiniadnetwork.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .martiniadnetwork.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .martiniadnetwork.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           www.burstnet.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .247realmedia.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .247realmedia.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .r1-ads.ace.advertising.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .doubleclick.net [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .realmedia.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .serving-sys.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .serving-sys.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .realmedia.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           ad.yieldmanager.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .ads.pointroll.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .pointroll.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .ads.pointroll.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .ads.pointroll.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .ads.pointroll.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .ads.pointroll.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .ads.pointroll.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .ads.pointroll.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .questionmarket.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .questionmarket.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .realmedia.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           network.realmedia.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .network.realmedia.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           ad.yieldmanager.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           ad.yieldmanager.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           ad.yieldmanager.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           ad.yieldmanager.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .sex.healthguru.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .sex.healthguru.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .sex.healthguru.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .adbrite.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .invitemedia.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .media6degrees.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .media6degrees.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .media6degrees.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .media6degrees.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .media6degrees.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .tribalfusion.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .revsci.net [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .revsci.net [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .invitemedia.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .tacoda.at.atwola.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .tacoda.at.atwola.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .tacoda.at.atwola.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .at.atwola.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .advertising.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .at.atwola.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .advertising.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           ad.yieldmanager.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           ad.yieldmanager.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .advertising.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .advertising.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           .advertising.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           ads.bridgetrack.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           ads.bridgetrack.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
           ads.bridgetrack.com [ C:\DOCUMENTS AND SETTINGS\CTURNER\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
        Logged

        Crturn24

          Topic Starter


          Greenhorn

          • Experience: Beginner
          • OS: Unknown
          Re: Virus/malware blocking Internet access
          « Reply #4 on: November 08, 2011, 03:43:06 PM »
          SuperDave-
          Forgive the multiple posts.  I was able to get the dds.  Both logs posted here:

          .
          DDS (Ver_2011-08-26.01) - NTFSx86
          Internet Explorer: 8.0.6001.18702  BrowserJavaVersion: 1.6.0_25
          Run by cturner at 16:35:23 on 2011-11-08
          Microsoft Windows XP Professional  5.1.2600.3.1252.1.1033.18.1944.1058 [GMT -6:00]
          .
          AV: Symantec Endpoint Protection *Enabled/Updated* {FB06448E-52B8-493A-90F3-E43226D3305C}
          FW: Symantec Endpoint Protection *Enabled*
          .
          ============== Running Processes ===============
          .
          C:\WINDOWS\system32\ibmpmsvc.exe
          C:\WINDOWS\system32\svchost -k DcomLaunch
          svchost.exe
          C:\WINDOWS\System32\svchost.exe -k netsvcs
          C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
          svchost.exe
          C:\Program Files\Common Files\Juniper Networks\JUNS\dsAccessService.exe
          C:\Program Files\Common Files\Juniper Networks\TNC Client\jTnccService.exe
          C:\Program Files\Juniper Networks\Odyssey Access Client\odClientService.exe
          C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
          C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe
          C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
          C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
          C:\Program Files\Bonjour\mDNSResponder.exe
          C:\WINDOWS\system32\CCM\CcmExec.exe
          C:\Program Files\ThinkPad\Utilities\DOZESVC.EXE
          C:\Program Files\Juniper Networks\Common Files\dsNcService.exe
          C:\WINDOWS\system32\svchost.exe -k hpdevmgmt
          C:\WINDOWS\system32\svchost.exe -k HPService
          C:\Program Files\iPass\iPassConnect\iPassPeriodicUpdateService.exe
          C:\Program Files\Java\jre6\bin\jqs.exe
          C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
          C:\WINDOWS\System32\svchost.exe -k HPZ12
          C:\WINDOWS\System32\svchost.exe -k HPZ12
          C:\Program Files\ThinkPad\Utilities\PWMDBSVC.EXE
          svchost.exe
          C:\WINDOWS\system32\svchost.exe -k imgsvc
          C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe
          C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe
          C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDFME\WDFME.exe
          C:\Program Files\WinMagic\SecureDoc-NT\SDService.exe
          C:\Program Files\iPass\iPassConnect\iPassPeriodicUpdateApp.exe
          C:\Program Files\Google\Update\GoogleUpdate.exe
          C:\WINDOWS\Explorer.EXE
          C:\Program Files\Lenovo\TrackPoint\tp4serv.exe
          C:\Program Files\Juniper Networks\Odyssey Access Client\OdTray.exe
          C:\WINDOWS\system32\TpShocks.exe
          C:\WINDOWS\system32\rundll32.exe
          C:\Program Files\Lenovo\NPDIRECT\TPFNF7SP.exe
          C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe
          C:\WINDOWS\system32\igfxext.exe
          C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe
          C:\WINDOWS\system32\igfxsrvc.exe
          C:\Program Files\Lenovo\Zoom\TpScrex.exe
          C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe
          C:\WINDOWS\system32\igfxtray.exe
          C:\WINDOWS\system32\hkcmd.exe
          C:\WINDOWS\system32\igfxpers.exe
          C:\Program Files\DivX\DivX Update\DivXUpdate.exe
          C:\Program Files\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe
          C:\Program Files\WinMagic\SecureDoc-NT\WMPUCmd.exe
          C:\Program Files\WinMagic\SecureDoc-NT\SDPin.exe
          C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
          C:\Program Files\iTunes\iTunesHelper.exe
          C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
          C:\WINDOWS\system32\ctfmon.exe
          C:\Program Files\Microsoft Office Communicator\Communicator.exe
          C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
          C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
          C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
          C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe
          C:\Program Files\Windows Desktop Search\WindowsSearch.exe
          C:\Program Files\iPod\bin\iPodService.exe
          C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
          C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
          C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
          C:\Program Files\Juniper Networks\Odyssey Access Client\odClientMgr.exe
          .
          ============== Pseudo HJT Report ===============
          .
          uStart Page = hxxp://www-int.juniper.net/
          uSearch Page = hxxp://www.charter.net/google/index.php?q=
          uSearch Bar = hxxp://www.google.com/ie
          uDefault_Search_URL = hxxp://www.google.com/ie
          uWindow Title = Windows Internet Explorer provided by Juniper Networks
          uInternet Settings,ProxyOverride = *.local
          uSearchAssistant = hxxp://www.google.com/ie
          uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
          uURLSearchHooks: Vuze Remote Toolbar: {ba14329e-9550-4989-b3f2-9732e92d17cc} - c:\program files\vuze_remote\prxtbVuze.dll
          BHO: HP Print Enhancer: {0347c33e-8762-4905-bf09-768834316c61} - c:\program files\hp\digital imaging\smart web printing\hpswp_printenhancer.dll
          BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
          BHO: DivX Plus Web Player HTML5 <video>: {326e768d-4182-46fd-9c16-1449a49795f4} - c:\program files\divx\divx plus web player\npdivx32.dll
          BHO: DivX HiQ: {593ddec6-7468-4cdd-90e1-42dadaa222e9} - c:\program files\divx\divx plus web player\npdivx32.dll
          BHO: Skype Plug-In: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
          BHO: Vuze Remote Toolbar: {ba14329e-9550-4989-b3f2-9732e92d17cc} - c:\program files\vuze_remote\prxtbVuze.dll
          BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
          BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
          BHO: HP Smart BHO Class: {ffffffff-cf4e-4f2b-bdc2-0e72e116a856} - c:\program files\hp\digital imaging\smart web printing\hpswp_BHO.dll
          TB: Vuze Remote Toolbar: {ba14329e-9550-4989-b3f2-9732e92d17cc} - c:\program files\vuze_remote\prxtbVuze.dll
          TB: {4E7BD74F-2B8D-469E-85AB-AF21F3D9AE2F} - No File
          EB: HP Smart Web Printing: {555d4d79-4bd2-4094-a395-cfc534424a05} - c:\program files\hp\digital imaging\smart web printing\hpswp_bho.dll
          uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
          uRun: [COMMUNICATOR] "c:\program files\microsoft office communicator\Communicator.exe"  /background
          uRun: [ISUSPM] "c:\program files\common files\installshield\updateservice\ISUSPM.exe" -scheduler
          uRun: [Privacy Protection] c:\documents and settings\all users\application data\privacy.exe
          uRun: [SUPERAntiSpyware] c:\program files\superantispyware\SUPERAntiSpyware.exe
          mRun: [PHIME2002ASync] c:\windows\system32\ime\tintlgnt\TINTSETP.EXE /SYNC
          mRun: [PHIME2002A] c:\windows\system32\ime\tintlgnt\TINTSETP.EXE /IMEName
          mRun: [TkBellExe] "c:\program files\common files\real\update_ob\realsched.exe"  -osboot
          mRun: [ccApp] "c:\program files\common files\symantec shared\ccApp.exe"
          mRun: [TrackPointSrv] c:\program files\lenovo\trackpoint\tp4serv.exe
          mRun: [MSPY2002] c:\windows\system32\ime\pintlgnt\ImScInst.exe /SYNC
          mRun: [OdTray.exe] "c:\program files\juniper networks\odyssey access client\OdTray.exe"
          mRun: [TpShocks] TpShocks.exe
          mRun: [PWRMGRTR] rundll32 c:\progra~1\thinkpad\utilit~1\PWRMGRTR.DLL,PwrMgrBkGndMonitor
          mRun: [TPFNF7] c:\program files\lenovo\npdirect\TPFNF7SP.exe /r
          mRun: [TPHOTKEY] c:\program files\lenovo\hotkey\TPOSDSVC.exe
          mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
          mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
          mRun: [StartSecurDoc] c:\program files\winmagic\securedoc-nt\SDPin.exe
          mRun: [Seagate Dashboard] c:\program files\seagate\seagate dashboard\MemeoLauncher.exe --silent --no_ui
          mRun: [EZEJMNAP] c:\progra~1\thinkpad\utilit~1\EzEjMnAp.Exe
          mRun: [IgfxTray] c:\windows\system32\igfxtray.exe
          mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
          mRun: [Persistence] c:\windows\system32\igfxpers.exe
          mRun: [DivXUpdate] "c:\program files\divx\divx update\DivXUpdate.exe" /CHECKNOW
          mRun: [RIMBBLaunchAgent.exe] c:\program files\common files\research in motion\usb drivers\RIMBBLaunchAgent.exe
          mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
          mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe
          mRun: [<NO NAME>]
          mRun: [AppleSyncNotifier] c:\program files\common files\apple\mobile device support\AppleSyncNotifier.exe
          mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
          mRun: [APSDaemon] "c:\program files\common files\apple\apple application support\APSDaemon.exe"
          mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
          mRun: [Malwarebytes' Anti-Malware] "c:\program files\malwarebytes' anti-malware\mbamgui.exe" /starttray
          dRun: [Communicator] "c:\program files\microsoft office communicator\Communicator.exe"
          dRun: [GoTrusted] c:\program files\gotrusted.com\gotrusted secure tunnel v2.3.1.5\GoTrusted Secure Tunnel.exe
          StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\hpdigi~1.lnk - c:\program files\hp\digital imaging\bin\hpqtra08.exe
          StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\wddmst~1.lnk - c:\program files\western digital\wd smartware\wd drive manager\WDDMStatus.exe
          StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\window~1.lnk - c:\program files\windows desktop search\WindowsSearch.exe
          uPolicies-explorer: NoSMMyPictures = 1 (0x1)
          uPolicies-explorer: NoResolveTrack = 1 (0x1)
          uPolicies-explorer: NoDesktopCleanupWizard = 1 (0x1)
          uPolicies-explorer: NoPropertiesRecycleBin = 1 (0x1)
          uPolicies-explorer: NoSimpleStartMenu = 0 (0x0)
          uPolicies-explorer: NoInternetIcon = 1 (0x1)
          uPolicies-explorer: ForceStartMenuLogOff = 1 (0x1)
          uPolicies-explorer: NoWelcomeScreen = 1 (0x1)
          uPolicies-explorer: NoActiveDesktop = 1 (0x1)
          uPolicies-explorer: NoSMConfigurePrograms = 1 (0x1)
          uPolicies-explorer: NoSMBalloonTip = 1 (0x1)
          uPolicies-explorer: NoStartMenuMyMusic = 1 (0x1)
          uPolicies-explorer: NoPublishingWizard = 1 (0x1)
          uPolicies-explorer: NoWebServices = 1 (0x1)
          uPolicies-explorer: NoOnlinePrintsWizard = 1 (0x1)
          mPolicies-explorer: NoWelcomeScreen = 1 (0x1)
          mPolicies-system: MaxGPOScriptWait = 300 (0x12c)
          IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
          IE: E&xport to Microsoft Excel - c:\progra~1\micros~3\office12\EXCEL.EXE/3000
          IE: {c95fe080-8f5d-11d2-a20b-00aa003c157a}
          IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
          IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
          IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office12\REFIEBAR.DLL
          IE: {DDE87865-83C5-48c4-8357-2F5B1AA84522} - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - c:\program files\hp\digital imaging\smart web printing\hpswp_BHO.dll
          Trusted Zone: microsoft.com
          DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab
          DPF: {CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA} - hxxp://java.sun.com/products/plugin/autodl/jinstall-142-windows-i586.cab
          DPF: {CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab
          DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab
          DPF: {F27237D7-93C8-44C2-AC6E-D6057B9A918F} - hxxps://wf-access.juniper.net/dana-cached/sc/JuniperSetupClient.cab
          Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
          Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
          Notify: !SASWinLogon - c:\program files\superantispyware\SASWINLO.DLL
          Notify: igfxcui - igfxdev.dll
          Notify: OdysseyClient - odyEvent.dll
          SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
          SEH: Windows Desktop Search Namespace Manager: {56f9679e-7826-4c84-81f3-532071a8bcc5} - c:\program files\windows desktop search\MSNLNamespaceMgr.dll
          SEH: SABShellExecuteHook Class: {5ae067d3-9afb-48e0-853a-ebb7f4a000da} - c:\program files\superantispyware\SASSEH.DLL
          .
          ================= FIREFOX ===================
          .
          FF - ProfilePath - c:\documents and settings\cturner\application data\mozilla\firefox\profiles\fk2rldz9.default\
          FF - prefs.js: browser.startup.homepage - hxxp://www.yahoo.com/
          FF - prefs.js: keyword.URL - chrome://browser-region/locale/region.properties
          FF - prefs.js: network.proxy.type - 1
          FF - component: c:\documents and settings\cturner\application data\mozilla\firefox\profiles\fk2rldz9.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}\components\FFExternalAlert.dll
          FF - component: c:\documents and settings\cturner\application data\mozilla\firefox\profiles\fk2rldz9.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}\components\RadioWMPCore.dll
          FF - component: c:\documents and settings\cturner\application data\mozilla\firefox\profiles\fk2rldz9.default\extensions\[email protected]\lib\winnt\ff3\AbineComponent.dll
          FF - component: c:\program files\mozilla firefox\extensions\{ab2ce124-6272-4b12-94a9-7303c7397bd1}\components\SkypeFfComponent.dll
          FF - plugin: c:\program files\common files\research in motion\bbwebsllauncher\NPWebSLLauncher.dll
          FF - plugin: c:\program files\divx\divx ovs helper\npovshelper.dll
          FF - plugin: c:\program files\divx\divx plus web player\npdivx32.dll
          FF - plugin: c:\program files\google\google earth\plugin\npgeplugin.dll
          FF - plugin: c:\program files\google\picasa3\npPicasa3.dll
          FF - plugin: c:\program files\google\update\1.3.21.79\npGoogleUpdate3.dll
          FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll
          FF - plugin: c:\program files\mozilla firefox\plugins\npCouponPrinter.dll
          FF - plugin: c:\program files\mozilla firefox\plugins\npdeployJava1.dll
          FF - plugin: c:\program files\mozilla firefox\plugins\npMozCouponPrinter.dll
          .
          ============= SERVICES / DRIVERS ===============
          .
          R0 DozeHDD;DozeHDD;c:\windows\system32\drivers\DOZEHDD.SYS [2010-6-30 24304]
          R0 mv64xx;mv64xx;c:\windows\system32\drivers\mv64xx.sys [2010-5-5 277032]
          R0 odFips;odFips;c:\windows\system32\drivers\odFIPS.sys [2010-2-18 9856]
          R0 odFips2;odFips2;c:\windows\system32\drivers\odFIPS2.sys [2010-2-18 282496]
          R0 PinFile;PinFile;c:\windows\system32\drivers\PinFile.sys [2007-10-30 11776]
          R0 SDDisk2K;WinMagic SecureDoc;c:\windows\system32\drivers\SDDisk2K.sys [2008-7-29 144128]
          R0 SDDToki;WinMagic SecureDoc Encryption Engine;c:\windows\system32\drivers\SDDToki.sys [2008-7-29 109696]
          R0 SDDVD;WinMagic SecureDoc Removable Media Encryptor;c:\windows\system32\drivers\SDDVD.sys [2008-7-29 67840]
          R0 SDUPC;WinMagic SecureDoc USB Driver;c:\windows\system32\drivers\SDUPC.sys [2007-12-12 9728]
          R0 TPDIGIMN;TPDIGIMN;c:\windows\system32\drivers\ApsHM86.sys [2009-10-9 20520]
          R0 vmscsi;vmscsi;c:\windows\system32\drivers\vmscsi.sys [2010-5-5 17584]
          R1 lenovo.smi;Lenovo System Interface Driver;c:\windows\system32\drivers\smiif32.sys [2009-7-8 13480]
          R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\sasdifsv.sys [2011-7-22 12880]
          R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2011-7-12 67664]
          R2 !SASCORE;SAS Core Service;c:\program files\superantispyware\SASCore.exe [2011-8-11 116608]
          R2 ccEvtMgr;Symantec Event Manager;c:\program files\common files\symantec shared\ccSvcHst.exe [2011-5-9 108456]
          R2 ccSetMgr;Symantec Settings Manager;c:\program files\common files\symantec shared\ccSvcHst.exe [2011-5-9 108456]
          R2 DozeSvc;Lenovo Doze Mode Service;c:\program files\thinkpad\utilities\DOZESVC.EXE [2010-6-30 132456]
          R2 EraserSvc11113;Symantec Eraser Service;c:\program files\common files\symantec shared\ccSvcHst.exe [2011-5-9 108456]
          R2 JuniperAccessService;Juniper Unified Network Service;c:\program files\common files\juniper networks\juns\dsAccessService.exe [2009-11-12 132392]
          R2 MBAMService;MBAMService;c:\program files\malwarebytes' anti-malware\mbamservice.exe [2011-11-8 366152]
          R2 Power Manager DBC Service;Power Manager DBC Service;c:\program files\thinkpad\utilities\PWMDBSVC.exe [2010-6-30 53248]
          R2 Symantec AntiVirus;Symantec Endpoint Protection;c:\program files\symantec\symantec endpoint protection\Rtvscan.exe [2011-5-9 1839888]
          R2 TPHKSVC;On Screen Display;c:\program files\lenovo\hotkey\TPHKSVC.exe [2010-4-8 63928]
          R2 WDDMService;WDDMService;c:\program files\western digital\wd smartware\wd drive manager\WDDMService.exe [2011-3-9 240640]
          R2 WDFME;WD File Management Engine;c:\program files\western digital\wd smartware\front parlor\wdfme\WDFME.exe [2011-3-9 1062912]
          R2 WinMagic SecureDoc Service;WinMagic SecureDoc Service;c:\program files\winmagic\securedoc-nt\SDService.exe [2008-9-12 212992]
          R3 e1yexpress;Intel(R) Gigabit Network Connections Driver;c:\windows\system32\drivers\e1y5132.sys [2010-6-30 238736]
          R3 EacService;Juniper TNC Endpoint Assessment;c:\program files\common files\juniper networks\tnc client\jTnccService.exe [2010-2-18 136560]
          R3 gttap1;GoTrusted TAP Adapter;c:\windows\system32\drivers\gttap1.sys [2008-3-18 20480]
          R3 jnprna;Juniper Network Agent Miniport;c:\windows\system32\drivers\jnprna.sys [2010-2-16 420264]
          R3 JnprVaMgr;Juniper Networks Virtual Adapter Manager Service;c:\windows\system32\drivers\jnprvamgr.sys [2010-2-16 29312]
          R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2011-11-8 22216]
          R3 NAVENG;NAVENG;c:\progra~1\common~1\symant~1\virusd~1\20111106.009\NAVENG.SYS [2011-11-6 86136]
          R3 NAVEX15;NAVEX15;c:\progra~1\common~1\symant~1\virusd~1\20111106.009\NAVEX15.SYS [2011-11-6 1576312]
          R3 Tp4Track;PS/2 TrackPoint Driver;c:\windows\system32\drivers\tp4track.sys [2010-6-30 22568]
          S0 fxlj;fxlj;c:\windows\system32\drivers\jrnrhj.sys --> c:\windows\system32\drivers\jrnrhj.sys [?]
          S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
          S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2010-9-4 136176]
          S2 LENOVO.MICMUTE;Lenovo Microphone Mute;c:\program files\lenovo\hotkey\micmute.exe [2010-4-8 45496]
          S2 SeagateDashboardService;Seagate Dashboard Service;c:\program files\seagate\seagate dashboard\seagatedashboardservice.exe --> c:\program files\seagate\seagate dashboard\SeagateDashboardService.exe [?]
          S2 WDSC;WD File Management Shadow Engine;"c:\program files\western digital\wd smartware\front parlor\wdsc.exe" --> c:\program files\western digital\wd smartware\front parlor\WDSC.exe [?]
          S3 A5AGU;D-Link USB Wireless Network Adapter Service;c:\windows\system32\drivers\A5AGU.sys [2006-9-21 347648]
          S3 gupdatem;Google Update Service (gupdatem);c:\program files\google\update\GoogleUpdate.exe [2010-9-4 136176]
          S3 jnprva;Juniper Networks Virtual Adapter Service;c:\windows\system32\drivers\jnprva.sys [2010-2-16 12288]
          S3 MBAMSwissArmy;MBAMSwissArmy;\??\c:\windows\system32\drivers\mbamswissarmy.sys --> c:\windows\system32\drivers\mbamswissarmy.sys [?]
          S3 tpflhlp;tpflhlp;\??\c:\windows\temp\jnprbi~1\tpflhlp.sys --> c:\windows\temp\jnprbi~1\tpflhlp.sys [?]
          S3 vmx_svga;vmx_svga;c:\windows\system32\drivers\vmx_svga.sys [2010-5-5 22448]
          S3 vmxnet;VMware Ethernet Adapter Driver;c:\windows\system32\drivers\vmxnet.sys [2010-5-5 29232]
          S3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\drivers\wdcsam.sys [2008-5-6 11520]
          S3 WinRM;Windows Remote Management (WS-Management);c:\windows\system32\svchost.exe -k WINRM [2010-5-5 14336]
          S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]
          .
          =============== File Associations ===============
          .
          vbefile\shell\open2\command=%SystemRoot%\System32\CScript.exe "%1" %*
          vbsfile\shell\open2\command=%SystemRoot%\System32\CScript.exe "%1" %*
          jsefile\shell\open2\command=%SystemRoot%\System32\CScript.exe "%1" %*
          .
          =============== Created Last 30 ================
          .
          2011-11-08 18:57:18   --------   d-----w-   c:\documents and settings\cturner\application data\Malwarebytes
          2011-11-08 18:56:50   --------   d-----w-   c:\documents and settings\all users\application data\Malwarebytes
          2011-11-08 18:56:46   22216   ----a-w-   c:\windows\system32\drivers\mbam.sys
          2011-11-08 18:56:44   --------   d-----w-   c:\program files\Malwarebytes' Anti-Malware
          2011-11-08 18:35:16   --------   d-----w-   c:\documents and settings\cturner\application data\SUPERAntiSpyware.com
          2011-11-08 18:34:47   --------   d-----w-   c:\program files\SUPERAntiSpyware
          2011-11-08 18:34:47   --------   d-----w-   c:\documents and settings\all users\application data\SUPERAntiSpyware.com
          2011-10-31 22:08:18   --------   d-----w-   c:\documents and settings\cturner\.swt
          2011-10-25 18:32:53   --------   d-----w-   c:\program files\iPod
          2011-10-25 18:24:40   --------   d-----w-   c:\program files\Bonjour
          2011-10-14 01:40:05   --------   d-----w-   c:\windows\ms
          2011-10-14 01:32:32   --------   d-----w-   c:\windows\system32\wbem\repository\FS
          2011-10-14 01:32:32   --------   d-----w-   c:\windows\system32\wbem\Repository
          .
          ==================== Find3M  ====================
          .
          2011-11-02 22:52:23   60808   ----a-w-   c:\windows\system32\S32EVNT1.DLL
          2011-11-02 22:52:23   125488   ----a-w-   c:\windows\system32\drivers\SYMEVENT.SYS
          2011-09-26 16:41:20   611328   ----a-w-   c:\windows\system32\uiautomationcore.dll
          2011-09-26 16:41:20   220160   ----a-w-   c:\windows\system32\oleacc.dll
          2011-09-26 16:41:14   20480   ----a-w-   c:\windows\system32\oleaccrc.dll
          2011-09-06 13:20:51   1858944   ----a-w-   c:\windows\system32\win32k.sys
          2011-09-03 10:17:37   599040   ----a-w-   c:\windows\system32\crypt32.dll
          2011-08-30 22:05:04   83816   ----a-w-   c:\windows\system32\dns-sd.exe
          2011-08-30 22:05:04   73064   ----a-w-   c:\windows\system32\dnssd.dll
          2011-08-30 22:05:04   50536   ----a-w-   c:\windows\system32\jdns_sd.dll
          2011-08-30 22:05:04   178536   ----a-w-   c:\windows\system32\dnssdX.dll
          2011-08-24 16:15:20   404640   ----a-w-   c:\windows\system32\FlashPlayerCPLApp.cpl
          2011-08-22 23:48:55   916480   ----a-w-   c:\windows\system32\wininet.dll
          2011-08-22 23:48:54   43520   ----a-w-   c:\windows\system32\licmgr10.dll
          2011-08-22 23:48:54   1469440   ----a-w-   c:\windows\system32\inetcpl.cpl
          2011-08-22 11:56:39   385024   ----a-w-   c:\windows\system32\html.iec
          2011-08-17 13:49:54   138496   ----a-w-   c:\windows\system32\drivers\afd.sys
          .
          ============= FINISH: 16:36:36.09 ===============

          attach.txt

          .
          UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
          IF REQUESTED, ZIP IT UP & ATTACH IT
          .
          DDS (Ver_2011-08-26.01)
          .
          Microsoft Windows XP Professional
          Boot Device: \Device\HarddiskVolume1
          Install Date: 6/30/2010 5:28:30 PM
          System Uptime: 11/8/2011 3:00:04 PM (1 hours ago)
          .
          Motherboard: LENOVO |  | 74592S6
          Processor: Intel Pentium III Xeon processor | None | 789/266mhz
          .
          ==== Disk Partitions =========================
          .
          C: is FIXED (NTFS) - 233 GiB total, 151.596 GiB free.
          D: is Removable
          H: is Removable
          I: is Removable
          .
          ==== Disabled Device Manager Items =============
          .
          Class GUID: {6BDD1FC6-810F-11D0-BEC7-08002BE2092F}
          Description: Photosmart C4700 series
          Device ID: ROOT\IMAGE\0000
          Manufacturer: HP
          Name: C4700,192.168.0.145
          PNP Device ID: ROOT\IMAGE\0000
          Service: StillCam
          .
          Class GUID: {4D36E971-E325-11CE-BFC1-08002BE10318}
          Description: HP LaserJet 4100 Series
          Device ID: ROOT\MULTIFUNCTION\0000
          Manufacturer: Hewlett-Packard
          Name: HP LaserJet 4100 Series
          PNP Device ID: ROOT\MULTIFUNCTION\0000
          Service:
          .
          Class GUID: {4D36E971-E325-11CE-BFC1-08002BE10318}
          Description: HP Color LaserJet 4550
          Device ID: ROOT\MULTIFUNCTION\0001
          Manufacturer: Hewlett-Packard
          Name: HP Color LaserJet 4550
          PNP Device ID: ROOT\MULTIFUNCTION\0001
          Service:
          .
          Class GUID: {4D36E971-E325-11CE-BFC1-08002BE10318}
          Description: Photosmart C4700 series
          Device ID: ROOT\MULTIFUNCTION\0002
          Manufacturer: HP
          Name: Photosmart C4700 series
          PNP Device ID: ROOT\MULTIFUNCTION\0002
          Service:
          .
          Class GUID: {4D36E971-E325-11CE-BFC1-08002BE10318}
          Description: HP LaserJet 5200
          Device ID: ROOT\MULTIFUNCTION\0003
          Manufacturer: Hewlett-Packard
          Name: HP LaserJet 5200
          PNP Device ID: ROOT\MULTIFUNCTION\0003
          Service:
          .
          Class GUID: {4D36E971-E325-11CE-BFC1-08002BE10318}
          Description: HP LaserJet 5200
          Device ID: ROOT\MULTIFUNCTION\0004
          Manufacturer: Hewlett-Packard
          Name: HP LaserJet 5200
          PNP Device ID: ROOT\MULTIFUNCTION\0004
          Service:
          .
          Class GUID: {4D36E971-E325-11CE-BFC1-08002BE10318}
          Description: HP LaserJet 8100 Series
          Device ID: ROOT\MULTIFUNCTION\0005
          Manufacturer: Hewlett-Packard
          Name: HP LaserJet 8100 Series
          PNP Device ID: ROOT\MULTIFUNCTION\0005
          Service:
          .
          Class GUID: {4D36E971-E325-11CE-BFC1-08002BE10318}
          Description: Photosmart D110 series
          Device ID: ROOT\MULTIFUNCTION\0006
          Manufacturer: HP
          Name: Photosmart D110 series
          PNP Device ID: ROOT\MULTIFUNCTION\0006
          Service:
          .
          Class GUID: {4D36E971-E325-11CE-BFC1-08002BE10318}
          Description: Photosmart C6300 series
          Device ID: ROOT\MULTIFUNCTION\0007
          Manufacturer: HP
          Name: Photosmart C6300 series
          PNP Device ID: ROOT\MULTIFUNCTION\0007
          Service:
          .
          Class GUID: {4D36E971-E325-11CE-BFC1-08002BE10318}
          Description: hp LaserJet 4250
          Device ID: ROOT\MULTIFUNCTION\0008
          Manufacturer: Hewlett-Packard
          Name: hp LaserJet 4250
          PNP Device ID: ROOT\MULTIFUNCTION\0008
          Service:
          .
          Class GUID: {4D36E971-E325-11CE-BFC1-08002BE10318}
          Description: DesignJet 1050C (C6074A)
          Device ID: ROOT\MULTIFUNCTION\0009
          Manufacturer: Hewlett-Packard
          Name: DesignJet 1050C (C6074A)
          PNP Device ID: ROOT\MULTIFUNCTION\0009
          Service:
          .
          Class GUID: {4D36E971-E325-11CE-BFC1-08002BE10318}
          Description: HP Color LaserJet 4700
          Device ID: ROOT\MULTIFUNCTION\0010
          Manufacturer: Hewlett-Packard
          Name: HP Color LaserJet 4700
          PNP Device ID: ROOT\MULTIFUNCTION\0010
          Service:
          .
          Class GUID: {4D36E971-E325-11CE-BFC1-08002BE10318}
          Description: hp LaserJet 2420
          Device ID: ROOT\MULTIFUNCTION\0011
          Manufacturer: Hewlett-Packard
          Name: hp LaserJet 2420
          PNP Device ID: ROOT\MULTIFUNCTION\0011
          Service:
          .
          Class GUID: {4D36E971-E325-11CE-BFC1-08002BE10318}
          Description: hp LaserJet 4250
          Device ID: ROOT\MULTIFUNCTION\0012
          Manufacturer: Hewlett-Packard
          Name: hp LaserJet 4250
          PNP Device ID: ROOT\MULTIFUNCTION\0012
          Service:
          .
          Class GUID: {4D36E971-E325-11CE-BFC1-08002BE10318}
          Description: Officejet Pro 8500 A910
          Device ID: ROOT\MULTIFUNCTION\0013
          Manufacturer: HP
          Name: Officejet Pro 8500 A910
          PNP Device ID: ROOT\MULTIFUNCTION\0013
          Service:
          .
          Class GUID: {4D36E971-E325-11CE-BFC1-08002BE10318}
          Description: Officejet 6500 E710n-z
          Device ID: ROOT\MULTIFUNCTION\0014
          Manufacturer: HP
          Name: Officejet 6500 E710n-z
          PNP Device ID: ROOT\MULTIFUNCTION\0014
          Service:
          .
          Class GUID: {4D36E971-E325-11CE-BFC1-08002BE10318}
          Description: HP LaserJet 8150 Series
          Device ID: ROOT\MULTIFUNCTION\0015
          Manufacturer: Hewlett-Packard
          Name: HP LaserJet 8150 Series
          PNP Device ID: ROOT\MULTIFUNCTION\0015
          Service:
          .
          Class GUID: {4D36E971-E325-11CE-BFC1-08002BE10318}
          Description: HP LaserJet 5200
          Device ID: ROOT\MULTIFUNCTION\0016
          Manufacturer: Hewlett-Packard
          Name: HP LaserJet 5200
          PNP Device ID: ROOT\MULTIFUNCTION\0016
          Service:
          .
          Class GUID: {4D36E971-E325-11CE-BFC1-08002BE10318}
          Description: HP Color LaserJet CP3525
          Device ID: ROOT\MULTIFUNCTION\0017
          Manufacturer: Hewlett-Packard
          Name: HP Color LaserJet CP3525
          PNP Device ID: ROOT\MULTIFUNCTION\0017
          Service:
          .
          Class GUID: {4D36E971-E325-11CE-BFC1-08002BE10318}
          Description: HP LaserJet 8100 Series
          Device ID: ROOT\MULTIFUNCTION\0018
          Manufacturer: Hewlett-Packard
          Name: HP LaserJet 8100 Series
          PNP Device ID: ROOT\MULTIFUNCTION\0018
          Service:
          .
          Class GUID: {4D36E971-E325-11CE-BFC1-08002BE10318}
          Description: HP LaserJet 8000 Series
          Device ID: ROOT\MULTIFUNCTION\0019
          Manufacturer: Hewlett-Packard
          Name: HP LaserJet 8000 Series
          PNP Device ID: ROOT\MULTIFUNCTION\0019
          Service:
          .
          ==== System Restore Points ===================
          .
          No restore point in system.
          .
          ==== Installed Programs ======================
          .
          .
          2007 Microsoft Office Suite Service Pack 2 (SP2)
          32 Bit HP CIO Components Installer
          Adobe AIR
          Adobe Flash Player 10 ActiveX
          Adobe Flash Player 10 Plugin
          Adobe Reader 9.4.4
          Adobe Shockwave Player
          Adobe Shockwave Player 11.5
          Apple Application Support
          Apple Mobile Device Support
          Apple Software Update
          BlackBerry Desktop Software 6.1
          Bonjour
          BufferChm
          C4700
          Conexant 20561 SmartAudio HD
          Configuration Manager Client
          CopyTrans Suite Remove Only
          Destinations
          DeviceDiscovery
          DivX Setup
          GlobalMeet
          Google Chrome
          Google Earth Plug-in
          Google Update Helper
          GoToMeeting 4.5.0.457
          GoTrusted Secure Tunnel v2.3.1.5
          GPBaseService2
          Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
          Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
          Hotfix for Office (KB2512788)
          Hotfix for Windows Media Format 11 SDK (KB929399)
          Hotfix for Windows Media Player 11 (KB939683)
          Hotfix for Windows XP (KB2158563)
          Hotfix for Windows XP (KB2443685)
          Hotfix for Windows XP (KB915800-v4)
          Hotfix for Windows XP (KB942288-v3)
          Hotfix for Windows XP (KB952287)
          Hotfix for Windows XP (KB954550-v5)
          Hotfix for Windows XP (KB961118)
          Hotfix for Windows XP (KB969084)
          Hotfix for Windows XP (KB976002-v5)
          Hotfix for Windows XP (KB979306)
          Hotfix for Windows XP (KB981793)
          HP Customer Participation Program 14.0
          HP Imaging Device Functions 14.0
          HP Photo Creations
          HP Photosmart C4700 All-in-One Driver Software 14.0 Rel. 6
          HP Smart Web Printing 4.60
          HP Solution Center 14.0
          HP Update
          HPDiagnosticAlert
          HPProductAssistant
          HPSSupply
          InterVideo Register Manager
          InterVideo WinDVD
          iPassConnect
          iTunes
          Java 2 Runtime Environment, SE v1.4.2
          Java Auto Updater
          Java(TM) 6 Update 25
          Juniper Networks Host Checker
          Juniper Networks Network Connect 6.5.0
          Juniper Networks Network Connect 7.0.0
          Juniper Networks Secure Meeting 6.5.0
          Juniper Networks Secure Meeting 7.0.0
          Juniper Networks Setup Client
          Juniper Odyssey Access Client 5.1
          junos_screensaver
          junos_screensaver_macv1
          Lenovo System Interface Driver
          LiveUpdate 3.3 (Symantec Corporation)
          Malwarebytes' Anti-Malware version 1.51.2.1300
          MarketResearch
          Microsoft .NET Framework 1.1
          Microsoft .NET Framework 1.1 Security Update (KB2572067)
          Microsoft .NET Framework 1.1 Security Update (KB979906)
          Microsoft .NET Framework 2.0 Service Pack 2
          Microsoft .NET Framework 3.0 Service Pack 2
          Microsoft .NET Framework 3.5 SP1
          Microsoft .NET Framework 4 Client Profile
          Microsoft Base Smart Card Cryptographic Service Provider Package
          Microsoft Compression Client Pack 1.0 for Windows XP
          Microsoft Kernel-Mode Driver Framework Feature Pack 1.7
          Microsoft Kernel-Mode Driver Framework Feature Pack 1.9
          Microsoft Office Access MUI (English) 2007
          Microsoft Office Access Setup Metadata MUI (English) 2007
          Microsoft Office Communicator 2005
          Microsoft Office Excel MUI (English) 2007
          Microsoft Office InfoPath MUI (English) 2007
          Microsoft Office Live Meeting 2007
          Microsoft Office Outlook MUI (English) 2007
          Microsoft Office PowerPoint MUI (English) 2007
          Microsoft Office Professional Plus 2007
          Microsoft Office Proof (English) 2007
          Microsoft Office Proof (French) 2007
          Microsoft Office Proof (Spanish) 2007
          Microsoft Office Proofing (English) 2007
          Microsoft Office Publisher MUI (English) 2007
          Microsoft Office Shared MUI (English) 2007
          Microsoft Office Shared Setup Metadata MUI (English) 2007
          Microsoft Office Visio Viewer 2007
          Microsoft Office Word MUI (English) 2007
          Microsoft Software Update for Web Folders  (English) 12
          Microsoft User-Mode Driver Framework Feature Pack 1.0
          Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
          Microsoft Visual C++ 2005 Redistributable
          Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
          Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
          Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
          Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
          MobileMe Control Panel
          Mozilla Firefox 7.0.1 (x86 en-US)
          MSXML 4.0 SP2 (KB954430)
          MSXML 4.0 SP2 (KB973688)
          Network
          OGA Notifier 2.0.0048.0
          On Screen Display
          PDFCreator
          Picasa 3
          Presentation Director
          PS_AIO_06_C4700_SW_Min
          QuickTime
          QuickTransfer
          RDC
          RealPlayer
          RSA Security - EAP - Uninstall
          Safari
          Scan
          ScreenTime for Flash 3.7.0 Demo
          Seagate Dashboard
          SecureDoc Disk Encryption
          Security Update for 2007 Microsoft Office System (KB2288621)
          Security Update for 2007 Microsoft Office System (KB2288931)
          Security Update for 2007 Microsoft Office System (KB2345043)
          Security Update for 2007 Microsoft Office System (KB2553074)
          Security Update for 2007 Microsoft Office System (KB2553089)
          Security Update for 2007 Microsoft Office System (KB2553090)
          Security Update for 2007 Microsoft Office System (KB2584063)
          Security Update for 2007 Microsoft Office System (KB969559)
          Security Update for 2007 Microsoft Office System (KB976321)
          Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473)
          Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)
          Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)
          Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
          Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)
          Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)
          Security Update for Microsoft Office Access 2007 (KB979440)
          Security Update for Microsoft Office Excel 2007 (KB2553073)
          Security Update for Microsoft Office InfoPath 2007 (KB2510061)
          Security Update for Microsoft Office InfoPath 2007 (KB979441)
          Security Update for Microsoft Office PowerPoint 2007 (KB2535818)
          Security Update for Microsoft Office PowerPoint Viewer 2007 (KB2464623)
          Security Update for Microsoft Office Publisher 2007 (KB2284697)
          Security Update for Microsoft Office system 2007 (972581)
          Security Update for Microsoft Office system 2007 (KB974234)
          Security Update for Microsoft Office Visio Viewer 2007 (KB973709)
          Security Update for Microsoft Office Word 2007 (KB2344993)
          Security Update for Microsoft Windows (KB2564958)
          Security Update for Windows Internet Explorer 8 (KB2482017)
          Security Update for Windows Internet Explorer 8 (KB2497640)
          Security Update for Windows Internet Explorer 8 (KB2510531)
          Security Update for Windows Internet Explorer 8 (KB2530548)
          Security Update for Windows Internet Explorer 8 (KB2544521)
          Security Update for Windows Internet Explorer 8 (KB2559049)
          Security Update for Windows Internet Explorer 8 (KB2586448)
          Security Update for Windows Media Player (KB2378111)
          Security Update for Windows Media Player (KB952069)
          Security Update for Windows Media Player (KB954155)
          Security Update for Windows Media Player (KB968816)
          Security Update for Windows Media Player (KB973540)
          Security Update for Windows Media Player (KB975558)
          Security Update for Windows Media Player (KB978695)
          Security Update for Windows Media Player 11 (KB954154)
          Security Update for Windows Search 4 - KB963093
          Security Update for Windows XP (KB2079403)
          Security Update for Windows XP (KB2115168)
          Security Update for Windows XP (KB2121546)
          Security Update for Windows XP (KB2160329)
          Security Update for Windows XP (KB2183461)
          Security Update for Windows XP (KB2229593)
          Security Update for Windows XP (KB2259922)
          Security Update for Windows XP (KB2279986)
          Security Update for Windows XP (KB2286198)
          Security Update for Windows XP (KB2296011)
          Security Update for Windows XP (KB2296199)
          Security Update for Windows XP (KB2347290)
          Security Update for Windows XP (KB2360131)
          Security Update for Windows XP (KB2360937)
          Security Update for Windows XP (KB2387149)
          Security Update for Windows XP (KB2393802)
          Security Update for Windows XP (KB2412687)
          Security Update for Windows XP (KB2416400)
          Security Update for Windows XP (KB2419632)
          Security Update for Windows XP (KB2423089)
          Security Update for Windows XP (KB2436673)
          Security Update for Windows XP (KB2440591)
          Security Update for Windows XP (KB2443105)
          Security Update for Windows XP (KB2476490)
          Security Update for Windows XP (KB2476687)
          Security Update for Windows XP (KB2478960)
          Security Update for Windows XP (KB2478971)
          Security Update for Windows XP (KB2479628)
          Security Update for Windows XP (KB2479943)
          Security Update for Windows XP (KB2482017)
          Security Update for Windows XP (KB2483185)
          Security Update for Windows XP (KB2483614)
          Security Update for Windows XP (KB2485376)
          Security Update for Windows XP (KB2485663)
          Security Update for Windows XP (KB2503658)
          Security Update for Windows XP (KB2503665)
          Security Update for Windows XP (KB2506212)
          Security Update for Windows XP (KB2506223)
          Security Update for Windows XP (KB2507618)
          Security Update for Windows XP (KB2507938)
          Security Update for Windows XP (KB2508272)
          Security Update for Windows XP (KB2508429)
          Security Update for Windows XP (KB2509553)
          Security Update for Windows XP (KB2511455)
          Security Update for Windows XP (KB2524375)
          Security Update for Windows XP (KB2535512)
          Security Update for Windows XP (KB2536276)
          Security Update for Windows XP (KB2544893)
          Security Update for Windows XP (KB2555917)
          Security Update for Windows XP (KB2566454)
          Security Update for Windows XP (KB2567053)
          Security Update for Windows XP (KB2567680)
          Security Update for Windows XP (KB2570222)
          Security Update for Windows XP (KB2570947)
          Security Update for Windows XP (KB2592799)
          Security Update for Windows XP (KB923561)
          Security Update for Windows XP (KB923789)
          Security Update for Windows XP (KB941569)
          Security Update for Windows XP (KB946648)
          Security Update for Windows XP (KB950760)
          Security Update for Windows XP (KB950762)
          Security Update for Windows XP (KB950974)
          Security Update for Windows XP (KB951066)
          Security Update for Windows XP (KB951376-v2)
          Security Update for Windows XP (KB951748)
          Security Update for Windows XP (KB952004)
          Security Update for Windows XP (KB952954)
          Security Update for Windows XP (KB954459)
          Security Update for Windows XP (KB955069)
          Security Update for Windows XP (KB956572)
          Security Update for Windows XP (KB956744)
          Security Update for Windows XP (KB956802)
          Security Update for Windows XP (KB956803)
          Security Update for Windows XP (KB956844)
          Security Update for Windows XP (KB958644)
          Security Update for Windows XP (KB958869)
          Security Update for Windows XP (KB959426)
          Security Update for Windows XP (KB960225)
          Security Update for Windows XP (KB960803)
          Security Update for Windows XP (KB960859)
          Security Update for Windows XP (KB961501)
          Security Update for Windows XP (KB969059)
          Security Update for Windows XP (KB969947)
          Security Update for Windows XP (KB970238)
          Security Update for Windows XP (KB970430)
          Security Update for Windows XP (KB971468)
          Security Update for Windows XP (KB971657)
          Security Update for Windows XP (KB971961)
          Security Update for Windows XP (KB972270)
          Security Update for Windows XP (KB973354)
          Security Update for Windows XP (KB973507)
          Security Update for Windows XP (KB973869)
          Security Update for Windows XP (KB973904)
          Security Update for Windows XP (KB974112)
          Security Update for Windows XP (KB974318)
          Security Update for Windows XP (KB974392)
          Security Update for Windows XP (KB974571)
          Security Update for Windows XP (KB975025)
          Security Update for Windows XP (KB975467)
          Security Update for Windows XP (KB975560)
          Security Update for Windows XP (KB975561)
          Security Update for Windows XP (KB975562)
          Security Update for Windows XP (KB975713)
          Security Update for Windows XP (KB977816)
          Security Update for Windows XP (KB977914)
          Security Update for Windows XP (KB978037)
          Security Update for Windows XP (KB978262)
          Security Update for Windows XP (KB978338)
          Security Update for Windows XP (KB978542)
          Security Update for Windows XP (KB978601)
          Security Update for Windows XP (KB978706)
          Security Update for Windows XP (KB979309)
          Security Update for Windows XP (KB979482)
          Security Update for Windows XP (KB979559)
          Security Update for Windows XP (KB979683)
          Security Update for Windows XP (KB979687)
          Security Update for Windows XP (KB980195)
          Security Update for Windows XP (KB980218)
          Security Update for Windows XP (KB980232)
          Security Update for Windows XP (KB980436)
          Security Update for Windows XP (KB981322)
          Security Update for Windows XP (KB981349)
          Security Update for Windows XP (KB981852)
          Security Update for Windows XP (KB981957)
          Security Update for Windows XP (KB981997)
          Security Update for Windows XP (KB982132)
          Security Update for Windows XP (KB982214)
          Security Update for Windows XP (KB982381)
          Security Update for Windows XP (KB982665)
          Security Update for Windows XP (KB982802)
          Shop for HP Supplies
          Skype Toolbars
          Skypeô 5.3
          SmartWebPrinting
          SolutionCenter
          Sonic RecordNow!
          Status
          SUPERAntiSpyware
          Symantec Endpoint Protection
          Symantec Enterprise Vault Outlook Add-In
          ThinkPad EasyEject Utility
          ThinkPad FullScreen Magnifier
          ThinkPad Hotkey Features Integration Setup
          ThinkPad Modem Adapter
          ThinkPad Power Management Driver
          ThinkPad Power Manager
          ThinkPad TrackPoint Driver
          ThinkVantage Active Protection System
          Toolbox
          TrayApp
          Update for 2007 Microsoft Office System (KB967642)
          Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
          Update for Microsoft Office 2007 Help for Common Features (KB963673)
          Update for Microsoft Office 2007 System (KB2539530)
          Update for Microsoft Office Access 2007 Help (KB963663)
          Update for Microsoft Office Excel 2007 Help (KB963678)
          Update for Microsoft Office Infopath 2007 Help (KB963662)
          Update for Microsoft Office Outlook 2007 Help (KB963677)
          Update for Microsoft Office Powerpoint 2007 Help (KB963669)
          Update for Microsoft Office Publisher 2007 Help (KB963667)
          Update for Microsoft Office Script Editor Help (KB963671)
          Update for Microsoft Office Word 2007 Help (KB963665)
          Update for Microsoft Windows (KB971513)
          Update for Outlook 2007 Junk Email Filter (KB2536413)
          Update for Windows Internet Explorer 8 (KB2447568)
          Update for Windows XP (KB2141007)
          Update for Windows XP (KB2345886)
          Update for Windows XP (KB2467659)
          Update for Windows XP (KB2492386)
          Update for Windows XP (KB2607712)
          Update for Windows XP (KB898461)
          Update for Windows XP (KB943729)
          Update for Windows XP (KB951978)
          Update for Windows XP (KB955759)
          Update for Windows XP (KB967715)
          Update for Windows XP (KB968389)
          Update for Windows XP (KB971029)
          Update for Windows XP (KB971737)
          Update for Windows XP (KB973687)
          Update for Windows XP (KB973815)
          Update for Windows XP (KB980182)
          VC80CRTRedist - 8.0.50727.4053
          VLC media player 1.1.5
          Vuze
          Vuze Remote Toolbar
          WD SmartWare
          WebFldrs XP
          WebReg
          WIMGAPI
          Windows Feature Pack for Storage (32-bit) - IMAPI update for Blu-Ray
          Windows Genuine Advantage Validation Tool (KB892130)
          Windows Internet Explorer 8
          Windows Management Framework Core
          Windows Media Format 11 runtime
          Windows Media Player 11
          Windows Search 4.0
          WinRAR 4.01 (32-bit)
          .
          ==== Event Viewer Messages From Past Week ========
          .
          11/8/2011 4:36:47 AM, error: W32Time [17]  - Time Provider NtpClient: An error occurred during DNS lookup of the manually configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup again in 480 minutes. The error was: A socket operation was attempted to an unreachable host. (0x80072751)
          11/8/2011 10:48:09 AM, error: Service Control Manager [7034]  - The ThinkPad PM Service service terminated unexpectedly.  It has done this 1 time(s).
          11/7/2011 8:08:28 AM, error: Service Control Manager [7011]  - Timeout (120000 milliseconds) waiting for a transaction response from the odClientService service.
          11/7/2011 5:09:42 PM, error: Service Control Manager [7031]  - The Symantec Endpoint Protection service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 10000 milliseconds: Restart the service.
          11/7/2011 4:11:41 PM, error: DCOM [10005]  - DCOM got error "%1084" attempting to start the service StiSvc with arguments "" in order to run the server: {A1F4E726-8CF1-11D1-BF92-0060081ED811}
          11/7/2011 4:03:35 PM, error: Service Control Manager [7026]  - The following boot-start or system-start driver(s) failed to load:  eeCtrl Fips intelppm lenovo.smi NetBT SRTSP SRTSPX SYMTDI TPHKDRV TPPWRIF TSMAPIP
          11/7/2011 4:01:57 PM, error: DCOM [10005]  - DCOM got error "%1068" attempting to start the service odClientService with arguments "-Service" in order to run the server: {801B616C-A8CE-4EDC-A7F0-AFE343D44A77}
          11/7/2011 3:58:46 PM, error: Service Control Manager [7026]  - The following boot-start or system-start driver(s) failed to load:  AFD eeCtrl Fips intelppm IPSec lenovo.smi MRxSmb NetBIOS NetBT RasAcd Rdbss SRTSP SRTSPX SYMTDI Tcpip TPHKDRV TPPWRIF TSMAPIP WPS
          11/7/2011 3:58:46 PM, error: Service Control Manager [7001]  - The TCP/IP NetBIOS Helper service depends on the AFD service which failed to start because of the following error:  A device attached to the system is not functioning.
          11/7/2011 3:58:46 PM, error: Service Control Manager [7001]  - The IPSEC Services service depends on the IPSEC driver service which failed to start because of the following error:  A device attached to the system is not functioning.
          11/7/2011 3:58:46 PM, error: Service Control Manager [7001]  - The DNS Client service depends on the TCP/IP Protocol Driver service which failed to start because of the following error:  A device attached to the system is not functioning.
          11/7/2011 3:58:46 PM, error: Service Control Manager [7001]  - The Bonjour Service service depends on the TCP/IP Protocol Driver service which failed to start because of the following error:  A device attached to the system is not functioning.
          11/7/2011 3:58:46 PM, error: Service Control Manager [7001]  - The Apple Mobile Device service depends on the TCP/IP Protocol Driver service which failed to start because of the following error:  A device attached to the system is not functioning.
          11/7/2011 3:58:03 PM, error: DCOM [10005]  - DCOM got error "%1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
          11/7/2011 2:52:05 PM, error: Service Control Manager [7026]  - The following boot-start or system-start driver(s) failed to load:  NetBT
          11/7/2011 2:52:05 PM, error: Service Control Manager [7023]  - The Symantec Endpoint Protection service terminated with the following error:  The environment is incorrect.
          11/7/2011 2:52:04 PM, error: Service Control Manager [7000]  - The WD File Management Shadow Engine service failed to start due to the following error:  The system cannot find the file specified.
          11/7/2011 2:52:02 PM, error: Service Control Manager [7000]  - The Seagate Dashboard Service service failed to start due to the following error:  The system cannot find the file specified.
          11/7/2011 2:52:01 PM, error: Service Control Manager [7000]  - The IviRegMgr service failed to start due to the following error:  The system cannot find the file specified.
          11/7/2011 2:51:59 PM, error: Service Control Manager [7001]  - The TCP/IP NetBIOS Helper service depends on the NetBios over Tcpip service which failed to start because of the following error:  A device attached to the system is not functioning.
          11/7/2011 2:51:58 PM, error: Service Control Manager [7001]  - The DHCP Client service depends on the NetBios over Tcpip service which failed to start because of the following error:  A device attached to the system is not functioning.
          11/7/2011 2:41:59 PM, error: Service Control Manager [7000]  - The Windows Search service failed to start due to the following error:  The system cannot find the file specified.
          11/7/2011 2:41:59 PM, error: DCOM [10005]  - DCOM got error "%2" attempting to start the service WSearch with arguments "" in order to run the server: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}
          11/7/2011 2:27:48 PM, error: Service Control Manager [7034]  - The Print Spooler service terminated unexpectedly.  It has done this 3 time(s).
          11/7/2011 2:24:48 PM, error: Service Control Manager [7031]  - The Print Spooler service terminated unexpectedly.  It has done this 2 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.
          11/7/2011 2:21:47 PM, error: Service Control Manager [7031]  - The Print Spooler service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.
          11/5/2011 2:37:54 PM, error: W32Time [17]  - Time Provider NtpClient: An error occurred during DNS lookup of the manually configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup again in 15 minutes. The error was: A socket operation was attempted to an unreachable host. (0x80072751)
          11/5/2011 11:41:21 AM, error: NETLOGON [5719]  - No Domain Controller is available for domain JNPR due to the following:  There are currently no logon servers available to service the logon request. . Make sure that the computer is connected to the network and try again. If the problem persists, please contact your domain administrator.
          11/5/2011 11:34:45 AM, error: W32Time [17]  - Time Provider NtpClient: An error occurred during DNS lookup of the manually configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup again in 30 minutes. The error was: A socket operation was attempted to an unreachable host. (0x80072751)
          11/4/2011 9:22:49 AM, error: W32Time [17]  - Time Provider NtpClient: An error occurred during DNS lookup of the manually configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup again in 120 minutes. The error was: A socket operation was attempted to an unreachable host. (0x80072751)
          11/4/2011 8:05:53 AM, error: Service Control Manager [7011]  - Timeout (120000 milliseconds) waiting for a transaction response from the WDSC service.
          11/4/2011 2:27:50 AM, error: W32Time [17]  - Time Provider NtpClient: An error occurred during DNS lookup of the manually configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup again in 240 minutes. The error was: A socket operation was attempted to an unreachable host. (0x80072751)
          11/4/2011 1:34:38 PM, error: W32Time [17]  - Time Provider NtpClient: An error occurred during DNS lookup of the manually configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup again in 60 minutes. The error was: A socket operation was attempted to an unreachable host. (0x80072751)
          11/4/2011 1:03:35 PM, error: Service Control Manager [7011]  - Timeout (120000 milliseconds) waiting for a transaction response from the CcmExec service.
          11/3/2011 10:42:31 PM, error: ipnathlp [32003]  - The Network Address Translator (NAT) was unable to request an operation of the kernel-mode translation module. This may indicate misconfiguration, insufficient resources, or an internal error. The data is the error code.
          11/3/2011 10:41:18 AM, error: Service Control Manager [7034]  - The iPassPeriodicUpdateApp service terminated unexpectedly.  It has done this 1 time(s).
          11/2/2011 6:44:38 AM, error: Service Control Manager [7011]  - Timeout (120000 milliseconds) waiting for a transaction response from the WDFME service.
          11/2/2011 5:45:43 PM, error: Dhcp [1002]  - The IP address lease 172.28.131.225 for the Network Card with network address 00FF98AC9F88 has been denied by the DHCP server 172.28.128.1 (The DHCP Server sent a DHCPNACK message).
          11/1/2011 9:39:01 PM, error: DCOM [10016]  - The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID  {24FF4FDC-1D9F-4195-8C79-0DA39248FF48}  to the user NT AUTHORITY\SYSTEM SID (S-1-5-18).  This security permission can be modified using the Component Services administrative tool.
          11/1/2011 9:33:47 PM, error: DCOM [10016]  - The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID  {7E89FF0B-F649-4F9A-A9C3-F05DFAAA3DA1}  to the user NT AUTHORITY\SYSTEM SID (S-1-5-18).  This security permission can be modified using the Component Services administrative tool.
          11/1/2011 9:32:50 PM, error: DCOM [10016]  - The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID  {DCBCA92E-7DBE-4EDA-8B7B-3AAEA4DD412B}  to the user NT AUTHORITY\SYSTEM SID (S-1-5-18).  This security permission can be modified using the Component Services administrative tool.
          11/1/2011 8:36:59 PM, error: Service Control Manager [7031]  - The Symantec Management Client service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 1000 milliseconds: Restart the service.
          11/1/2011 8:36:43 PM, error: Dhcp [1002]  - The IP address lease 172.28.131.225 for the Network Card with network address 00FF48DA4288 has been denied by the DHCP server 172.28.128.1 (The DHCP Server sent a DHCPNACK message).
          11/1/2011 6:28:15 AM, error: Service Control Manager [7011]  - Timeout (120000 milliseconds) waiting for a transaction response from the W32Time service.
          11/1/2011 6:28:14 AM, error: Service Control Manager [7011]  - Timeout (120000 milliseconds) waiting for a transaction response from the WZCSVC service.
          11/1/2011 6:28:14 AM, error: Service Control Manager [7011]  - Timeout (120000 milliseconds) waiting for a transaction response from the WSearch service.
          11/1/2011 6:28:14 AM, error: Service Control Manager [7011]  - Timeout (120000 milliseconds) waiting for a transaction response from the TPHKSVC service.
          11/1/2011 6:28:14 AM, error: Service Control Manager [7011]  - Timeout (120000 milliseconds) waiting for a transaction response from the Power Manager DBC Service service.
          11/1/2011 6:12:19 AM, error: Service Control Manager [7011]  - Timeout (120000 milliseconds) waiting for a transaction response from the Spooler service.
          11/1/2011 6:12:19 AM, error: Service Control Manager [7011]  - Timeout (120000 milliseconds) waiting for a transaction response from the HPSLPSVC service.
          .
          ==== End Of File ===========================
          Thanks!!
          Logged

          SuperDave

          • Malware Removal Specialist


            • Genius
            • Thanked: 1020
          • Certifications: List
          • Experience: Expert
          • OS: Windows 10
          Re: Virus/malware blocking Internet access
          « Reply #5 on: November 08, 2011, 04:24:12 PM »
          Please download MiniToolBox to Desktop and run it.



          Checkmark the following boxes:

            • Flush DNS
            • Report IE Proxy Settings
            • Reset IE Proxy Settings
            • List content of Hosts
            • List IP Configuration
            • Lst Last 10 Event Viewer Errors
            • List Users, Partitions and Memory Size
              • [/b]
            Click Go and copy/paste the log (Result.txt) into your next post.
            Logged
            Windows 8 and Windows 10 dual boot with two SSD's

            Crturn24

              Topic Starter


              Greenhorn

              • Experience: Beginner
              • OS: Unknown
              Re: Virus/malware blocking Internet access
              « Reply #6 on: November 08, 2011, 04:32:14 PM »
              minitoolbox results:


              MiniToolBox by Farbar
              Ran by cturner (administrator) on 08-11-2011 at 17:29:19
              Microsoft Windows XP Service Pack 3 (X86)

              ***************************************************************************

              ========================= Flush DNS: ===================================


              Windows IP Configuration



              Successfully flushed the DNS Resolver Cache.


              ========================= IE Proxy Settings: ==============================

              Proxy is enabled.
              No Proxy Server is set.

              "Reset IE Proxy Settings": IE Proxy Settings were reset.
              ========================= Hosts content: =================================


              127.0.0.1       localhost

              ========================= IP Configuration: ================================

              # ----------------------------------
              # Interface IP Configuration         
              # ----------------------------------
              pushd interface ip


              # Interface IP Configuration for "Wireless Network Connection"

              set address name="Wireless Network Connection" source=dhcp
              set dns name="Wireless Network Connection" source=dhcp register=PRIMARY
              set wins name="Wireless Network Connection" source=dhcp

              # Interface IP Configuration for "Local Area Connection"

              set address name="Local Area Connection" source=dhcp
              set dns name="Local Area Connection" source=dhcp register=PRIMARY
              set wins name="Local Area Connection" source=dhcp

              # Interface IP Configuration for "{7564E1B5-45FC-4EF4-848B-834E0B3AF82A}"

              set address name="{7564E1B5-45FC-4EF4-848B-834E0B3AF82A}" source=dhcp
              set dns name="{7564E1B5-45FC-4EF4-848B-834E0B3AF82A}" source=dhcp register=PRIMARY
              set wins name="{7564E1B5-45FC-4EF4-848B-834E0B3AF82A}" source=dhcp

              # Interface IP Configuration for "Network Connect Adapter"

              set address name="Network Connect Adapter" source=dhcp
              set dns name="Network Connect Adapter" source=dhcp register=PRIMARY
              set wins name="Network Connect Adapter" source=dhcp


              popd
              # End of interface IP configuration




              Windows IP Configuration



                      Host Name . . . . . . . . . . . . : CTURNER-X200

                      Primary Dns Suffix  . . . . . . . : jnpr.net

                      Node Type . . . . . . . . . . . . : Unknown

                      IP Routing Enabled. . . . . . . . : No

                      WINS Proxy Enabled. . . . . . . . : No



              Ethernet adapter Wireless Network Connection:



                      Connection-specific DNS Suffix  . :

                      Description . . . . . . . . . . . : Intel(R) WiFi Link 5100 AGN

                      Physical Address. . . . . . . . . : 00-1E-65-25-8B-7A

                      Dhcp Enabled. . . . . . . . . . . : Yes

                      Autoconfiguration Enabled . . . . : Yes

                      IP Address. . . . . . . . . . . . : 0.0.0.0

                      Subnet Mask . . . . . . . . . . . : 0.0.0.0

                      Default Gateway . . . . . . . . . :

                      DHCP Server . . . . . . . . . . . : 255.255.255.255

                      NetBIOS over Tcpip. . . . . . . . : Disabled



              Ethernet adapter Local Area Connection:



                      Media State . . . . . . . . . . . : Media disconnected

                      Description . . . . . . . . . . . : Intel(R) 82567LM Gigabit Network Connection

                      Physical Address. . . . . . . . . : 00-1F-16-21-AE-D6



              Ethernet adapter {7564E1B5-45FC-4EF4-848B-834E0B3AF82A}:



                      Media State . . . . . . . . . . . : Media disconnected

                      Description . . . . . . . . . . . : GoTrusted TAP Adapter - Teefer2 Miniport

                      Physical Address. . . . . . . . . : 00-FF-75-64-E1-B5



              Ethernet adapter Network Connect Adapter:



                      Media State . . . . . . . . . . . : Media disconnected

                      Description . . . . . . . . . . . : Juniper Network Connect Virtual Adapter

                      Physical Address. . . . . . . . . : 00-FF-98-9C-40-88

              Server:  UnKnown
              Address:  127.0.0.1

              Ping request could not find host google.com. Please check the name and try again.

              Server:  UnKnown
              Address:  127.0.0.1

              Ping request could not find host yahoo.com. Please check the name and try again.



              Pinging ¯ò with 32 bytes of data:



              Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

              Reply from 127.0.0.1: bytes=32 time<1ms TTL=128



              Ping statistics for    :

                  Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

              Approximate round trip times in milli-seconds:

                  Minimum = 0ms, Maximum = 0ms, Average = 0ms

              ===========================================================================
              Interface List
              0x1 ........................... MS TCP Loopback interface
              0x2 ...00 1e 65 25 8b 7a ...... Intel(R) WiFi Link 5100 AGN - Teefer2 Miniport
              0x3 ...00 1f 16 21 ae d6 ...... Intel(R) 82567LM Gigabit Network Connection - Teefer2 Miniport
              0x4 ...00 ff 75 64 e1 b5 ...... GoTrusted TAP Adapter - Teefer2 Miniport
              0x10006 ...00 ff 98 9c 40 88 ...... Juniper Network Connect Virtual Adapter - Teefer2 Miniport
              ===========================================================================
              ===========================================================================
              Active Routes:
              Network Destination        Netmask          Gateway       Interface  Metric
                      127.0.0.0        255.0.0.0        127.0.0.1       127.0.0.1     1
                255.255.255.255  255.255.255.255  255.255.255.255           10006     1
                255.255.255.255  255.255.255.255  255.255.255.255               2     1
                255.255.255.255  255.255.255.255  255.255.255.255               3     1
                255.255.255.255  255.255.255.255  255.255.255.255               4     1
              ===========================================================================
              Persistent Routes:
                None

              ========================= Event log errors: ===============================

              Application errors:
              ==================
              Error: (11/08/2011 04:52:49 PM) (Source: AutoEnrollment) (User: )
              Description: Automatic certificate enrollment for JNPR\cturner failed to contact the active directory (0x800704cf).  The network location cannot be reached. For information about network troubleshooting, see Windows Help.
                Enrollment will not be performed.

              Error: (11/08/2011 04:51:39 PM) (Source: UserInit) (User: )
              Description: Could not execute the following script \\jnpr.net\NETLOGON\ClientTechnologyGroup\CTG_UserLogonScript.vbs. The network location cannot be reached. For information about network troubleshooting, see Windows Help.
              .

              Error: (11/08/2011 04:51:37 PM) (Source: Userenv) (User: SYSTEM)SYSTEM
              Description: Windows cannot obtain the domain controller name for your computer network. (The network location cannot be reached. For information about network troubleshooting, see Windows Help. ). Group Policy processing aborted.

              Error: (11/08/2011 04:51:15 PM) (Source: AutoEnrollment) (User: )
              Description: Automatic certificate enrollment for local system failed to contact the active directory (0x800704cf).  The network location cannot be reached. For information about network troubleshooting, see Windows Help.
                Enrollment will not be performed.

              Error: (11/08/2011 04:51:15 PM) (Source: UserInit) (User: )
              Description: Could not execute the following script \\jnpr.net\NETLOGON\ClientTechnologyGroup\CTG_ComputerStartupScript.vbs. The network location cannot be reached. For information about network troubleshooting, see Windows Help.
              .

              Error: (11/08/2011 04:51:13 PM) (Source: Userenv) (User: SYSTEM)SYSTEM
              Description: Windows cannot obtain the domain controller name for your computer network. (The network location cannot be reached. For information about network troubleshooting, see Windows Help. ). Group Policy processing aborted.

              Error: (11/08/2011 04:50:58 PM) (Source: JavaQuickStarterService) (User: )
              Description: Unable to create JQS API server: socket() failed (Socket error 10091)

              Error: (11/08/2011 04:23:23 PM) (Source: AutoEnrollment) (User: )
              Description: Automatic certificate enrollment for JNPR\cturner failed to contact the active directory (0x8007054b).  The specified domain either does not exist or could not be contacted.
                Enrollment will not be performed.

              Error: (11/08/2011 04:22:09 PM) (Source: UserInit) (User: )
              Description: Could not execute the following script \\jnpr.net\NETLOGON\ClientTechnologyGroup\CTG_UserLogonScript.vbs. The network location cannot be reached. For information about network troubleshooting, see Windows Help.
              .

              Error: (11/08/2011 04:22:08 PM) (Source: Userenv) (User: SYSTEM)SYSTEM
              Description: Windows cannot obtain the domain controller name for your computer network. (The specified domain either does not exist or could not be contacted. ). Group Policy processing aborted.


              System errors:
              =============
              Error: (11/08/2011 04:55:43 PM) (Source: DCOM) (User: SYSTEM)
              Description: The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID
              {24FF4FDC-1D9F-4195-8C79-0DA39248FF48}
               to the user NT AUTHORITY\SYSTEM SID (S-1-5-18).  This security permission can be modified using the Component Services administrative tool.

              Error: (11/08/2011 04:54:16 PM) (Source: DCOM) (User: SYSTEM)
              Description: The server {4991D34B-80A1-4291-83B6-3328366B9097} did not register with DCOM within the required timeout.

              Error: (11/08/2011 04:53:46 PM) (Source: Service Control Manager) (User: )
              Description: The Background Intelligent Transfer Service service terminated with service-specific error 2147952491 (0x8007276B).

              Error: (11/08/2011 04:53:46 PM) (Source: DCOM) (User: SYSTEM)
              Description: The server {4991D34B-80A1-4291-83B6-3328366B9097} did not register with DCOM within the required timeout.

              Error: (11/08/2011 04:53:16 PM) (Source: Service Control Manager) (User: )
              Description: The Background Intelligent Transfer Service service terminated with service-specific error 2147952491 (0x8007276B).

              Error: (11/08/2011 04:53:16 PM) (Source: DCOM) (User: SYSTEM)
              Description: The server {4991D34B-80A1-4291-83B6-3328366B9097} did not register with DCOM within the required timeout.

              Error: (11/08/2011 04:52:46 PM) (Source: Service Control Manager) (User: )
              Description: The Background Intelligent Transfer Service service terminated with service-specific error 2147952491 (0x8007276B).

              Error: (11/08/2011 04:52:46 PM) (Source: DCOM) (User: SYSTEM)
              Description: The server {4991D34B-80A1-4291-83B6-3328366B9097} did not register with DCOM within the required timeout.

              Error: (11/08/2011 04:52:16 PM) (Source: Service Control Manager) (User: )
              Description: The Background Intelligent Transfer Service service terminated with service-specific error 2147952491 (0x8007276B).

              Error: (11/08/2011 04:52:16 PM) (Source: DCOM) (User: SYSTEM)
              Description: The server {4991D34B-80A1-4291-83B6-3328366B9097} did not register with DCOM within the required timeout.


              Microsoft Office Sessions:
              =========================
              Error: (09/30/2011 11:04:57 PM) (Source: Microsoft Office 12 Sessions)(User: )
              Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6557.5001, Microsoft Office Version: 12.0.6425.1000. This session lasted 25815 seconds with 600 seconds of active time.  This session ended with a crash.

              Error: (07/20/2011 08:15:35 AM) (Source: Microsoft Office 12 Sessions)(User: )
              Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6557.5001, Microsoft Office Version: 12.0.6425.1000. This session lasted 945 seconds with 120 seconds of active time.  This session ended with a crash.

              Error: (06/21/2011 05:51:43 PM) (Source: Microsoft Office 12 Sessions)(User: )
              Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6557.5001, Microsoft Office Version: 12.0.6425.1000. This session lasted 3572 seconds with 2100 seconds of active time.  This session ended with a crash.

              Error: (06/10/2011 10:08:20 AM) (Source: Microsoft Office 12 Sessions)(User: )
              Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 3269 seconds with 60 seconds of active time.  This session ended with a crash.

              Error: (06/02/2011 10:36:33 AM) (Source: Microsoft Office 12 Sessions)(User: )
              Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6557.5001, Microsoft Office Version: 12.0.6425.1000. This session lasted 95337 seconds with 7320 seconds of active time.  This session ended with a crash.

              Error: (06/01/2011 08:07:24 AM) (Source: Microsoft Office 12 Sessions)(User: )
              Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6557.5001, Microsoft Office Version: 12.0.6425.1000. This session lasted 5645 seconds with 3000 seconds of active time.  This session ended with a crash.

              Error: (04/13/2011 11:36:57 PM) (Source: Microsoft Office 12 Sessions)(User: )
              Description: ID: 3, Application Name: Microsoft Office PowerPoint, Application Version: 12.0.6500.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 261160 seconds with 7260 seconds of active time.  This session ended with a crash.

              Error: (03/27/2011 08:13:59 AM) (Source: Microsoft Office 12 Sessions)(User: )
              Description: ID: 3, Application Name: Microsoft Office PowerPoint, Application Version: 12.0.6500.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 4083 seconds with 3780 seconds of active time.  This session ended with a crash.

              Error: (03/11/2011 05:09:25 AM) (Source: Microsoft Office 12 Sessions)(User: )
              Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 239801 seconds with 2280 seconds of active time.  This session ended with a crash.

              Error: (02/07/2011 05:46:29 PM) (Source: Microsoft Office 12 Sessions)(User: )
              Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6550.5003, Microsoft Office Version: 12.0.6425.1000. This session lasted 735 seconds with 180 seconds of active time.  This session ended with a crash.


              ========================= Memory info: ===================================

              Percentage of memory in use: 56%
              Total physical RAM: 1943.92 MB
              Available physical RAM: 850.17 MB
              Total Pagefile: 3731.27 MB
              Available Pagefile: 2904.15 MB
              Total Virtual: 2047.88 MB
              Available Virtual: 1994.03 MB

              ========================= Partitions: =====================================

              1 Drive c: (Local Disk) (Fixed) (Total:232.88 GB) (Free:151.59 GB) NTFS
              2 Drive d: () (Removable) (Total:3.81 GB) (Free:3.74 GB) FAT32

              ========================= Users: ========================================

              User accounts for \\CTURNER-X200

              Administrator            ASPNET                   Guest                   
              HelpAssistant            jadmin                   SUPPORT_388945a0         


              **** End of log ****
              Logged

              Crturn24

                Topic Starter


                Greenhorn

                • Experience: Beginner
                • OS: Unknown
                Re: Virus/malware blocking Internet access
                « Reply #7 on: November 09, 2011, 11:05:25 AM »
                combofix log :


                ComboFix 11-11-08.02 - cturner 11/09/2011  10:35:29.1.2 - x86
                Microsoft Windows XP Professional  5.1.2600.3.1252.1.1033.18.1944.1385 [GMT -6:00]
                Running from: c:\documents and settings\cturner\Desktop\ComboFix.exe
                AV: Symantec Endpoint Protection *Enabled/Updated* {FB06448E-52B8-493A-90F3-E43226D3305C}
                FW: Symantec Endpoint Protection *Enabled* {BE898FE3-CD0B-4014-85A9-03DB9923DDB6}
                .
                .
                (((((((((((((((((((((((((((((((((((((((   Other Deletions   )))))))))))))))))))))))))))))))))))))))))))))))))
                .
                .
                c:\documents and settings\cturner\My Documents\~WRL1605.tmp
                c:\documents and settings\cturner\My Documents\ppt415.tmp
                c:\documents and settings\cturner\Recent\Thumbs.db
                C:\install.exe
                c:\program files\Search Toolbar
                c:\program files\Search Toolbar\icon.ico
                c:\program files\Search Toolbar\SearchToolbar.dll
                c:\program files\Search Toolbar\SearchToolbarUninstall.exe
                c:\program files\Search Toolbar\SearchToolbarUpdater.exe
                c:\windows\$NtUninstallKB42965$
                c:\windows\$NtUninstallKB42965$\2826694737\@
                c:\windows\$NtUninstallKB42965$\2826694737\L\pmouqyoi
                c:\windows\$NtUninstallKB42965$\2826694737\loader.tlb
                c:\windows\$NtUninstallKB42965$\2826694737\U\@00000001
                c:\windows\$NtUninstallKB42965$\2826694737\U\@000000c0
                c:\windows\$NtUninstallKB42965$\2826694737\U\@000000cb
                c:\windows\$NtUninstallKB42965$\2826694737\U\@000000cf
                c:\windows\$NtUninstallKB42965$\2826694737\U\@80000000
                c:\windows\$NtUninstallKB42965$\2826694737\U\@800000c0
                c:\windows\$NtUninstallKB42965$\2826694737\U\@800000cb
                c:\windows\$NtUninstallKB42965$\2826694737\U\@800000cf
                c:\windows\$NtUninstallKB42965$\541119706
                c:\windows\system32\
                .
                .
                (((((((((((((((((((((((((   Files Created from 2011-10-09 to 2011-11-09  )))))))))))))))))))))))))))))))
                .
                .
                2011-11-08 18:57 . 2011-11-08 18:57   --------   d-----w-   c:\documents and settings\cturner\Application Data\Malwarebytes
                2011-11-08 18:56 . 2011-11-08 18:56   --------   d-----w-   c:\documents and settings\All Users\Application Data\Malwarebytes
                2011-11-08 18:56 . 2011-08-31 23:00   22216   ----a-w-   c:\windows\system32\drivers\mbam.sys
                2011-11-08 18:56 . 2011-11-08 18:56   --------   d-----w-   c:\program files\Malwarebytes' Anti-Malware
                2011-11-08 18:35 . 2011-11-08 18:35   --------   d-----w-   c:\documents and settings\cturner\Application Data\SUPERAntiSpyware.com
                2011-11-08 18:34 . 2011-11-08 18:35   --------   d-----w-   c:\program files\SUPERAntiSpyware
                2011-11-08 18:34 . 2011-11-08 18:34   --------   d-----w-   c:\documents and settings\All Users\Application Data\SUPERAntiSpyware.com
                2011-11-07 22:50 . 2011-11-07 22:50   --------   d-----w-   c:\documents and settings\Administrator\Application Data\Windows Search
                2011-10-31 22:08 . 2011-10-31 22:08   --------   d-----w-   c:\documents and settings\cturner\.swt
                2011-10-25 18:32 . 2011-10-25 18:32   --------   d-----w-   c:\program files\iPod
                2011-10-25 18:24 . 2011-10-25 18:24   --------   d-----w-   c:\program files\Bonjour
                2011-10-14 01:40 . 2011-10-14 01:40   --------   d-----w-   c:\windows\ms
                2011-10-14 01:32 . 2011-10-14 01:32   --------   d-----w-   c:\windows\system32\wbem\Repository
                .
                .
                .
                ((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))
                .
                2011-11-02 22:52 . 2010-05-05 09:57   60808   ----a-w-   c:\windows\system32\S32EVNT1.DLL
                2011-11-02 22:52 . 2010-05-05 09:57   125488   ----a-w-   c:\windows\system32\drivers\SYMEVENT.SYS
                2011-09-26 16:41 . 2010-05-05 10:41   220160   ----a-w-   c:\windows\system32\oleacc.dll
                2011-09-26 16:41 . 2008-07-30 01:59   611328   ----a-w-   c:\windows\system32\uiautomationcore.dll
                2011-09-26 16:41 . 2010-05-05 10:41   20480   ----a-w-   c:\windows\system32\oleaccrc.dll
                2011-09-06 13:20 . 2010-05-05 10:41   1858944   ----a-w-   c:\windows\system32\win32k.sys
                2011-09-03 10:17 . 2010-05-05 10:40   599040   ----a-w-   c:\windows\system32\crypt32.dll
                2011-08-30 22:05 . 2011-08-30 22:05   83816   ----a-w-   c:\windows\system32\dns-sd.exe
                2011-08-30 22:05 . 2011-08-30 22:05   73064   ----a-w-   c:\windows\system32\dnssd.dll
                2011-08-30 22:05 . 2011-08-30 22:05   50536   ----a-w-   c:\windows\system32\jdns_sd.dll
                2011-08-30 22:05 . 2011-08-30 22:05   178536   ----a-w-   c:\windows\system32\dnssdX.dll
                2011-08-24 16:15 . 2011-05-20 22:24   404640   ----a-w-   c:\windows\system32\FlashPlayerCPLApp.cpl
                2011-08-22 23:48 . 2010-05-05 10:41   916480   ----a-w-   c:\windows\system32\wininet.dll
                2011-08-22 23:48 . 2010-05-05 10:40   43520   ----a-w-   c:\windows\system32\licmgr10.dll
                2011-08-22 23:48 . 2010-05-05 10:40   1469440   ----a-w-   c:\windows\system32\inetcpl.cpl
                2011-08-22 11:56 . 2010-05-05 10:40   385024   ----a-w-   c:\windows\system32\html.iec
                2011-08-17 13:49 . 2010-05-05 10:40   138496   ----a-w-   c:\windows\system32\drivers\afd.sys
                2011-10-04 02:57 . 2011-05-06 17:05   134104   ----a-w-   c:\program files\mozilla firefox\components\browsercomps.dll
                .
                .
                (((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))
                .
                .
                *Note* empty entries & legit default entries are not shown
                REGEDIT4
                .
                [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
                "{ba14329e-9550-4989-b3f2-9732e92d17cc}"= "c:\program files\Vuze_Remote\prxtbVuze.dll" [2011-01-17 175912]
                .
                [HKEY_CLASSES_ROOT\clsid\{ba14329e-9550-4989-b3f2-9732e92d17cc}]
                .
                [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{ba14329e-9550-4989-b3f2-9732e92d17cc}]
                2011-01-17 21:54   175912   ----a-w-   c:\program files\Vuze_Remote\prxtbVuze.dll
                .
                [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
                "{ba14329e-9550-4989-b3f2-9732e92d17cc}"= "c:\program files\Vuze_Remote\prxtbVuze.dll" [2011-01-17 175912]
                .
                [HKEY_CLASSES_ROOT\clsid\{ba14329e-9550-4989-b3f2-9732e92d17cc}]
                .
                [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
                "{BA14329E-9550-4989-B3F2-9732E92D17CC}"= "c:\program files\Vuze_Remote\prxtbVuze.dll" [2011-01-17 175912]
                .
                [HKEY_CLASSES_ROOT\clsid\{ba14329e-9550-4989-b3f2-9732e92d17cc}]
                .
                [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                "COMMUNICATOR"="c:\program files\Microsoft Office Communicator\Communicator.exe" [2007-12-06 3900936]
                "ISUSPM"="c:\program files\Common Files\InstallShield\UpdateService\ISUSPM.exe" [2007-08-30 205480]
                "SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2011-10-17 4615552]
                .
                [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                "PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2008-04-14 455168]
                "PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2008-04-14 455168]
                "TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2010-05-05 185896]
                "ccApp"="c:\program files\Common Files\Symantec Shared\ccApp.exe" [2011-05-09 115624]
                "TrackPointSrv"="c:\program files\Lenovo\TrackPoint\tp4serv.exe" [2008-03-04 92960]
                "MSPY2002"="c:\windows\system32\IME\PINTLGNT\ImScInst.exe" [2008-04-14 59392]
                "OdTray.exe"="c:\program files\Juniper Networks\Odyssey Access Client\OdTray.exe" [2010-02-19 955760]
                "TpShocks"="TpShocks.exe" [2009-12-11 337256]
                "PWRMGRTR"="c:\progra~1\ThinkPad\UTILIT~1\PWRMGRTR.DLL" [2010-03-03 513384]
                "TPFNF7"="c:\program files\Lenovo\NPDIRECT\TPFNF7SP.exe" [2009-04-16 61728]
                "TPHOTKEY"="c:\program files\Lenovo\HOTKEY\TPOSDSVC.exe" [2009-12-21 69568]
                "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-01-31 35760]
                "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-21 932288]
                "StartSecurDoc"="c:\program files\WinMagic\SecureDoc-NT\SDPin.exe" [2008-09-12 1945600]
                "Seagate Dashboard"="c:\program files\Seagate\Seagate Dashboard\MemeoLauncher.exe" [2011-06-01 79112]
                "EZEJMNAP"="c:\progra~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe" [2009-12-01 256576]
                "IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-12-03 136216]
                "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-12-03 170008]
                "Persistence"="c:\windows\system32\igfxpers.exe" [2010-12-03 145432]
                "DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2011-03-21 1230704]
                "RIMBBLaunchAgent.exe"="c:\program files\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe" [2011-02-18 79192]
                "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-01-07 253672]
                "HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2011-05-10 49208]
                "AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe" [2011-04-20 58656]
                "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2011-07-05 421888]
                "APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2011-09-27 59240]
                "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2011-10-09 421736]
                "Malwarebytes' Anti-Malware"="c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe" [2011-08-31 449608]
                .
                [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
                "Communicator"="c:\program files\Microsoft Office Communicator\Communicator.exe" [2007-12-06 3900936]
                "GoTrusted"="c:\program files\GoTrusted.com\GoTrusted Secure Tunnel v2.3.1.5\GoTrusted Secure Tunnel.exe" [2011-08-23 193096]
                .
                c:\documents and settings\All Users\Start Menu\Programs\Startup\
                HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2009-11-18 275072]
                WDDMStatus.lnk - c:\program files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe [2011-3-9 3986944]
                Windows Search.lnk - c:\program files\Windows Desktop Search\WindowsSearch.exe [2008-5-26 123904]
                .
                [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
                "MaxGPOScriptWait"= 300 (0x12c)
                .
                [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
                "NoWelcomeScreen"= 1 (0x1)
                .
                [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
                "NoSMMyPictures"= 1 (0x1)
                "NoResolveTrack"= 1 (0x1)
                "NoPropertiesRecycleBin"= 1 (0x1)
                "NoSimpleStartMenu"= 0 (0x0)
                "ForceStartMenuLogOff"= 1 (0x1)
                "NoWelcomeScreen"= 1 (0x1)
                "NoSMConfigurePrograms"= 1 (0x1)
                "NoSMBalloonTip"= 1 (0x1)
                "NoStartMenuMyMusic"= 1 (0x1)
                "NoPublishingWizard"= 1 (0x1)
                "NoWebServices"= 1 (0x1)
                "NoOnlinePrintsWizard"= 1 (0x1)
                .
                [hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
                "{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-25 304128]
                "{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2011-07-19 113024]
                .
                [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
                2011-05-04 17:54   551296   ----a-w-   c:\program files\SUPERAntiSpyware\SASWINLO.DLL
                .
                [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\OdysseyClient]
                2010-06-30 23:03   202096   ----a-w-   c:\windows\system32\odyEvent.dll
                .
                [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-1482476501-2000478354-682003330-197641\Scripts\Logon\0\0]
                "Script"=\\jnpr.net\NETLOGON\ClientTechnologyGroup\CTG_UserLogonScript.vbs
                .
                [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
                @=""
                .
                [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ccEvtMgr]
                @="Service"
                .
                [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ccSetMgr]
                @="Service"
                .
                [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Symantec Antivirus]
                @="Service"
                .
                [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
                @="Driver"
                .
                [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
                "DisableMonitoring"=dword:00000001
                .
                [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
                "EnableFirewall"= 0 (0x0)
                .
                [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
                "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
                "%windir%\\system32\\sessmgr.exe"=
                "c:\\Program Files\\Symantec\\Symantec Endpoint Protection\\Smc.exe"=
                "c:\\Program Files\\Symantec\\Symantec Endpoint Protection\\SNAC.EXE"=
                "c:\\Program Files\\Common Files\\Symantec Shared\\ccApp.exe"=
                "c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
                "c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
                "c:\\Program Files\\Google\\Google Earth\\plugin\\geplugin.exe"=
                "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
                "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
                "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
                "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
                "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfcCopy.exe"=
                "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
                "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpiscnapp.exe"=
                "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgplgtupl.exe"=
                "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgpc01.exe"=
                "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqusgm.exe"=
                "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqusgh.exe"=
                "c:\\Program Files\\HP\\HP Software Update\\hpwucli.exe"=
                "c:\\Program Files\\HP\\Digital Imaging\\smart web printing\\SmartWebPrintExe.exe"=
                "c:\\Program Files\\VideoLAN\\VLC\\vlc.exe"=
                "c:\\Program Files\\Skype\\Phone\\Skype.exe"=
                "c:\\Program Files\\Microsoft Office\\Live Meeting 8\\Console\\PWConsole.exe"=
                "c:\\Program Files\\Vuze\\Azureus.exe"=
                "c:\\Program Files\\Seagate\\Seagate Dashboard\\HipServAgent\\HipServAgent.exe"=
                "c:\\Program Files\\Common Files\\Apple\\Apple Application Support\\WebKit2WebProcess.exe"=
                "c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
                "c:\\Program Files\\iTunes\\iTunes.exe"=
                .
                R0 DozeHDD;DozeHDD;c:\windows\system32\drivers\DOZEHDD.SYS [6/30/2010 5:10 PM 24304]
                R0 mv64xx;mv64xx;c:\windows\system32\drivers\mv64xx.sys [5/5/2010 5:27 AM 277032]
                R0 odFips;odFips;c:\windows\system32\drivers\odFIPS.sys [2/18/2010 6:37 PM 9856]
                R0 odFips2;odFips2;c:\windows\system32\drivers\odFIPS2.sys [2/18/2010 6:37 PM 282496]
                R0 PinFile;PinFile;c:\windows\system32\drivers\PinFile.sys [10/30/2007 5:55 PM 11776]
                R0 SDDisk2K;WinMagic SecureDoc;c:\windows\system32\drivers\SDDisk2K.sys [7/29/2008 3:44 PM 144128]
                R0 SDDToki;WinMagic SecureDoc Encryption Engine;c:\windows\system32\drivers\SDDToki.sys [7/29/2008 2:41 PM 109696]
                R0 SDDVD;WinMagic SecureDoc Removable Media Encryptor;c:\windows\system32\drivers\SDDVD.sys [7/29/2008 2:41 PM 67840]
                R0 SDUPC;WinMagic SecureDoc USB Driver;c:\windows\system32\drivers\SDUPC.sys [12/12/2007 4:49 PM 9728]
                R0 TPDIGIMN;TPDIGIMN;c:\windows\system32\drivers\ApsHM86.sys [10/9/2009 1:10 PM 20520]
                R0 vmscsi;vmscsi;c:\windows\system32\drivers\vmscsi.sys [5/5/2010 4:41 AM 17584]
                R1 lenovo.smi;Lenovo System Interface Driver;c:\windows\system32\drivers\smiif32.sys [7/8/2009 11:41 AM 13480]
                R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [7/22/2011 10:27 AM 12880]
                R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [7/12/2011 3:55 PM 67664]
                R2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCore.exe [8/11/2011 5:38 PM 116608]
                R2 DozeSvc;Lenovo Doze Mode Service;c:\program files\ThinkPad\Utilities\DOZESVC.EXE [6/30/2010 5:10 PM 132456]
                R2 EraserSvc11113;Symantec Eraser Service;c:\program files\Common Files\Symantec Shared\ccSvcHst.exe [5/9/2011 9:30 AM 108456]
                R2 JuniperAccessService;Juniper Unified Network Service;c:\program files\Common Files\Juniper Networks\JUNS\dsAccessService.exe [11/12/2009 7:59 PM 132392]
                R2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [11/8/2011 12:56 PM 366152]
                R2 Power Manager DBC Service;Power Manager DBC Service;c:\program files\ThinkPad\Utilities\PWMDBSVC.exe [6/30/2010 5:10 PM 53248]
                R2 TPHKSVC;On Screen Display;c:\program files\Lenovo\HOTKEY\TPHKSVC.exe [4/8/2010 2:16 PM 63928]
                R2 WDDMService;WDDMService;c:\program files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe [3/9/2011 10:07 AM 240640]
                R2 WDFME;WD File Management Engine;c:\program files\Western Digital\WD SmartWare\Front Parlor\WDFME\WDFME.exe [3/9/2011 10:18 AM 1062912]
                R2 WinMagic SecureDoc Service;WinMagic SecureDoc Service;c:\program files\WinMagic\SecureDoc-NT\SDService.exe [9/12/2008 5:47 PM 212992]
                R3 e1yexpress;Intel(R) Gigabit Network Connections Driver;c:\windows\system32\drivers\e1y5132.sys [6/30/2010 5:10 PM 238736]
                R3 EacService;Juniper TNC Endpoint Assessment;c:\program files\Common Files\Juniper Networks\TNC Client\jTnccService.exe [2/18/2010 6:52 PM 136560]
                R3 gttap1;GoTrusted TAP Adapter;c:\windows\system32\drivers\gttap1.sys [3/18/2008 3:23 PM 20480]
                R3 jnprna;Juniper Network Agent Miniport;c:\windows\system32\drivers\jnprna.sys [2/16/2010 4:39 PM 420264]
                R3 JnprVaMgr;Juniper Networks Virtual Adapter Manager Service;c:\windows\system32\drivers\jnprvamgr.sys [2/16/2010 4:39 PM 29312]
                R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [11/8/2011 12:56 PM 22216]
                R3 Tp4Track;PS/2 TrackPoint Driver;c:\windows\system32\drivers\tp4track.sys [6/30/2010 5:09 PM 22568]
                S0 fxlj;fxlj;c:\windows\system32\drivers\jrnrhj.sys --> c:\windows\system32\drivers\jrnrhj.sys [?]
                S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [3/18/2010 2:16 PM 130384]
                S2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [9/4/2010 8:39 PM 136176]
                S2 LENOVO.MICMUTE;Lenovo Microphone Mute;c:\program files\Lenovo\HOTKEY\micmute.exe [4/8/2010 2:16 PM 45496]
                S2 SeagateDashboardService;Seagate Dashboard Service;c:\program files\Seagate\Seagate Dashboard\SeagateDashboardService.exe --> c:\program files\Seagate\Seagate Dashboard\SeagateDashboardService.exe [?]
                S2 WDSC;WD File Management Shadow Engine;"c:\program files\Western Digital\WD SmartWare\Front Parlor\WDSC.exe" --> c:\program files\Western Digital\WD SmartWare\Front Parlor\WDSC.exe [?]
                S3 A5AGU;D-Link USB Wireless Network Adapter Service;c:\windows\system32\drivers\A5AGU.sys [9/21/2006 9:19 AM 347648]
                S3 gupdatem;Google Update Service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [9/4/2010 8:39 PM 136176]
                S3 jnprva;Juniper Networks Virtual Adapter Service;c:\windows\system32\drivers\jnprva.sys [2/16/2010 4:39 PM 12288]
                S3 tpflhlp;tpflhlp;\??\c:\windows\Temp\JNPRBI~1\tpflhlp.sys --> c:\windows\Temp\JNPRBI~1\tpflhlp.sys [?]
                S3 vmx_svga;vmx_svga;c:\windows\system32\drivers\vmx_svga.sys [5/5/2010 4:38 AM 22448]
                S3 vmxnet;VMware Ethernet Adapter Driver;c:\windows\system32\drivers\vmxnet.sys [5/5/2010 4:38 AM 29232]
                S3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\drivers\wdcsam.sys [5/6/2008 3:06 PM 11520]
                S3 WinRM;Windows Remote Management (WS-Management);c:\windows\system32\svchost.exe -k WINRM [5/5/2010 4:41 AM 14336]
                S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [3/18/2010 2:16 PM 753504]
                .
                [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
                WINRM   REG_MULTI_SZ      WINRM
                HPZ12   REG_MULTI_SZ      Pml Driver HPZ12 Net Driver HPZ12
                HPService   REG_MULTI_SZ      HPSLPSVC
                hpdevmgmt   REG_MULTI_SZ      hpqcxs08 hpqddsvc
                .
                Contents of the 'Scheduled Tasks' folder
                .
                2011-11-04 c:\windows\Tasks\AppleSoftwareUpdate.job
                - c:\program files\Apple Software Update\SoftwareUpdate.exe [2009-10-22 22:57]
                .
                2011-11-09 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
                - c:\program files\Google\Update\GoogleUpdate.exe [2010-09-05 02:39]
                .
                2011-11-09 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
                - c:\program files\Google\Update\GoogleUpdate.exe [2010-09-05 02:39]
                .
                2011-11-09 c:\windows\Tasks\PMTask.job
                - c:\progra~1\ThinkPad\UTILIT~1\PWMIDTSK.EXE [2010-06-30 00:20]
                .
                2011-11-09 c:\windows\Tasks\User_Feed_Synchronization-{CD8B90E7-73A6-4B6C-A518-9731ECE6CE9D}.job
                - c:\windows\system32\msfeedssync.exe [2009-03-08 09:31]
                .
                .
                ------- Supplementary Scan -------
                .
                uStart Page = hxxp://www-int.juniper.net/
                uDefault_Search_URL = hxxp://www.google.com/ie
                uInternet Settings,ProxyOverride = *.local
                uSearchAssistant = hxxp://www.google.com/ie
                uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
                IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
                IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
                IE: {{c95fe080-8f5d-11d2-a20b-00aa003c157a}
                Trusted Zone: microsoft.com
                FF - ProfilePath - c:\documents and settings\cturner\Application Data\Mozilla\Firefox\Profiles\fk2rldz9.default\
                FF - prefs.js: browser.startup.homepage - hxxp://www.yahoo.com/
                FF - prefs.js: keyword.URL - chrome://browser-region/locale/region.properties
                FF - prefs.js: network.proxy.type - 1
                .
                .
                ------- File Associations -------
                .
                vbefile\shell\open2\command=%SystemRoot%\System32\CScript.exe "%1" %*
                vbsfile\shell\open2\command=%SystemRoot%\System32\CScript.exe "%1" %*
                jsefile\shell\open2\command=%SystemRoot%\System32\CScript.exe "%1" %*
                .
                - - - - ORPHANS REMOVED - - - -
                .
                Toolbar-Locked - (no file)
                WebBrowser-{4E7BD74F-2B8D-469E-85AB-AF21F3D9AE2F} - (no file)
                HKCU-Run-Privacy Protection - c:\documents and settings\All Users\Application Data\privacy.exe
                SafeBoot-Symantec Antvirus
                .
                .
                .
                **************************************************************************
                .
                catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
                Rootkit scan 2011-11-09 10:54
                Windows 5.1.2600 Service Pack 3 NTFS
                .
                scanning hidden processes ... 
                .
                scanning hidden autostart entries ...
                .
                scanning hidden files ... 
                .
                scan completed successfully
                hidden files: 0
                .
                **************************************************************************
                .
                --------------------- LOCKED REGISTRY KEYS ---------------------
                .
                [HKEY_LOCAL_MACHINE\software\Microsoft\DbgagD\1*]
                "value"="?\09\02\06\177\00?"
                .
                --------------------- DLLs Loaded Under Running Processes ---------------------
                .
                - - - - - - - > 'winlogon.exe'(1888)
                c:\windows\system32\odyGina.dll
                c:\program files\SUPERAntiSpyware\SASWINLO.DLL
                c:\windows\system32\WININET.dll
                c:\windows\system32\odyEvent.dll
                c:\windows\system32\msi.dll
                .
                - - - - - - - > 'explorer.exe'(3996)
                c:\windows\system32\WININET.dll
                c:\windows\system32\ieframe.dll
                c:\windows\system32\msi.dll
                c:\windows\system32\webcheck.dll
                c:\windows\system32\WPDShServiceObj.dll
                c:\windows\system32\PortableDeviceTypes.dll
                c:\windows\system32\PortableDeviceApi.dll
                .
                ------------------------ Other Running Processes ------------------------
                .
                c:\windows\system32\ibmpmsvc.exe
                c:\program files\Juniper Networks\Odyssey Access Client\odClientService.exe
                c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
                c:\program files\Bonjour\mDNSResponder.exe
                c:\windows\system32\CCM\CcmExec.exe
                c:\program files\Juniper Networks\Common Files\dsNcService.exe
                c:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
                c:\program files\iPass\iPassConnect\iPassPeriodicUpdateService.exe
                c:\program files\Java\jre6\bin\jqs.exe
                c:\program files\Symantec\Symantec Endpoint Protection\Rtvscan.exe
                c:\windows\system32\msiexec.exe
                c:\program files\iPass\iPassConnect\iPassPeriodicUpdateApp.exe
                c:\windows\system32\TpShocks.exe
                c:\windows\system32\rundll32.exe
                c:\program files\Lenovo\HOTKEY\TPONSCR.exe
                c:\program files\Lenovo\Zoom\TpScrex.exe
                c:\windows\system32\igfxext.exe
                c:\windows\system32\igfxsrvc.exe
                c:\program files\WinMagic\SecureDoc-NT\WMPUCmd.exe
                c:\program files\iPod\bin\iPodService.exe
                c:\program files\HP\Digital Imaging\bin\hpqSTE08.exe
                c:\program files\HP\Digital Imaging\bin\hpqbam08.exe
                c:\program files\HP\Digital Imaging\bin\hpqgpc01.exe
                .
                **************************************************************************
                .
                Completion time: 2011-11-09  11:01:09 - machine was rebooted
                ComboFix-quarantined-files.txt  2011-11-09 17:01
                .
                Pre-Run: 162,624,847,872 bytes free
                Post-Run: 163,043,237,888 bytes free
                .
                - - End Of File - - 296FE87F14CE2754220021FF7AC1FA77
                Logged

                SuperDave

                • Malware Removal Specialist


                  • Genius
                  • Thanked: 1020
                • Certifications: List
                • Experience: Expert
                • OS: Windows 10
                Re: Virus/malware blocking Internet access
                « Reply #8 on: November 09, 2011, 12:25:08 PM »
                I specifically asked you not to run any programs unless I ask for them. Please delete ComboFix from your desktop.

                P2P - I see you have P2P software installed on your machine. (Vuze) We are not here to pass judgment on file-sharing as a concept. However, we will warn you that engaging in this activity and having this kind of software installed on your machine will always make you more susceptible to re-infections. It is certainly contributing to your current situation.

                Please note: Even if you are using a "safe" P2P program, it is only the program that is safe. You will be sharing files from uncertified sources, and these are often infected. The bad guys use P2P filesharing as a major conduit to spread their wares.

                I would strongly recommend that you uninstall them, however that choice is up to you. If you choose to remove these programs, you can do so via Control Panel >> Add or Remove Programs.
                *******************************************
                Please go to Jotti's malware scan
                (If more than one file needs scanned they must be done separately and links posted for each one)

                * Copy the file path in the below Code box:

                Code: [Select]
                c:\windows\system32\drivers\jrnrhj.sys 
                * At the upload site, click once inside the window next to Browse.
                * Press Ctrl+V on the keyboard (both at the same time) to paste the file path into the window.
                * Next click Submit file
                * Your file will possibly be entered into a queue which normally takes less than a minute to clear.
                * This will perform a scan across multiple different virus scanning engines.
                * Important: Wait for all of the scanning engines to complete.
                * Once the scan is finished, Copy and then Paste the link in the address bar into your next reply.
                ************************************************************
                Please download ComboFix from BleepingComputer.com

                Alternate link: GeeksToGo.com

                and save it to your Desktop.
                It would be easiest to download using Internet Explorer.
                If you want to use Firefox, make sure that your download settings are as follows:

                * Tools->Options->Main tab
                * Set to "Always ask me where to Save the files".

                Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools A guide to do this can be found here
                Double click ComboFix.exe & follow the prompts.
                As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
                Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console

                Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

                Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:


                Click on Yes, to continue scanning for malware.
                When finished, it shall produce a log for you.  Please include the contents of C:\ComboFix.txt in your next reply.

                If you have problems with ComboFix usage, see How to use ComboFix
                Logged
                Windows 8 and Windows 10 dual boot with two SSD's

                Crturn24

                  Topic Starter


                  Greenhorn

                  • Experience: Beginner
                  • OS: Unknown
                  Re: Virus/malware blocking Internet access
                  « Reply #9 on: November 09, 2011, 01:01:05 PM »
                  SuperDave
                  P2p and CpmboFix deleted.

                  As for Jotti's site, Not sure I can do that. Remember I have no internet access on the machine with the virus.  I take it from the Combofix scan it was a "rootkill virus"???

                  So given that please advise the next step you want me to follow?

                  New download of the combofix then run it or is there an offline version of the Jotti program?
                  Thanks.
                  Logged

                  SuperDave

                  • Malware Removal Specialist


                    • Genius
                    • Thanked: 1020
                  • Certifications: List
                  • Experience: Expert
                  • OS: Windows 10
                  Re: Virus/malware blocking Internet access
                  « Reply #10 on: November 09, 2011, 05:29:56 PM »
                  Quote
                  So given that please advise the next step you want me to follow?

                  New download of the combofix then run it or is there an offline version of the Jotti program?
                  Sorry. The MiniToolBox showed that the signal is going through.
                  Please download and run ComboFix. Be sure to install the Recovery Console.
                  Logged
                  Windows 8 and Windows 10 dual boot with two SSD's
                  Pages: [1]   Go Up
                  « previous next »