Options
HJT Log FOR REVIEW PLEASE
Hello. I have been having some pretty severe problems with my computer over the past several weeks - I was hoping that someone might be able to help me figure out what is going on. The HJT log is pasted below. I will also describe some of the issues that I have encountered:
-Computer simply freezes - can't even <Ctrl - Alt - Del>. Must restart.
-When restarting computer, the date / time are occassionally lost and must be reset.
-Twice have received a blue error screen with the message "Driver_IRQL_not_less_or_equal"
(I'm not sure if that's exactly right, but it's pretty close to the message. The computer shuts off shortly after!)
These problems do not occur all of the time - if I restart enough, the computer will eventually work.
Please let me know if you have any advice. Thanks in advance for your time!
____________________________________________
Logfile of HijackThis v1.99.1
Scan saved at 2:59:57 PM, on 11/7/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\S24EvMon.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\ZCfgSvc.exe
C:\WINDOWS\System32\1XConfig.exe
C:\Program Files\Network ICE\BlackICE\blackd.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\WINDOWS\system32\acstp\icserv.exe
C:\Program Files\iPass\iPassConnect\iPCAgent.exe
C:\WINDOWS\system32\acstp\wake_up.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
c:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\mnmsrvc.exe
C:\WINDOWS\System32\RegSrvc.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\WINDOWS\System32\wltrysvc.exe
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\carpserv.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\Apoint\Apoint.exe
C:\Program Files\Intel\NCS\PROSet\PRONoMgr.exe
C:\Progra~1\Support.com\bin\tgcmd.exe
C:\Program Files\RSA Security\Web PassPort\Plug-In\system\sdtray.exe
C:\Program Files\RSA Security\Web PassPort\Plug-In\System\sdlss.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Accenture Connection\9341989\Program\Accenture Connection.exe
C:\Program Files\Apoint\Apntex.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\iPass\iPassConnect\downloader\ipccheck.exe
C:\PROGRA~1\SYMANT~1\VPTray.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\System32\RunDLL32.exe
C:\Program Files\Messenger\MSMSGS.EXE
C:\Program Files\Secway\SimpPro\SimpPro.exe
C:\Program Files\Microsoft Office\OFFICE11\ONENOTEM.EXE
C:\Program Files\Sony Corporation\Picture Package\Picture Package Menu\SonyTray.exe
C:\Program Files\Sony Corporation\Picture Package\Picture Package Applications\Residence.exe
C:\Program Files\Network ICE\BlackICE\blackice.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\AIM\aim.exe
C:\PROGRA~1\MICROS~2\OFFICE11\OUTLOOK.EXE
C:\Program Files\notes\NLNOTES.EXE
C:\Program Files\notes\ntaskldr.EXE
C:\WINDOWS\system32\cidaemon.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\brian.j.retson\Desktop\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://portal.accenture.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = https://portal.accenture.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = http://proxy.cat.com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = amrpx2101.accenture.com:8080
R3 - URLSearchHook: (no name) - _{9368D063-44BE-49B9-BD14-BB9663FD38FC} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Viewpoint Toolbar BHO - {A7327C09-B521-4EDB-8509-7D2660C9EC98} - C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBarBHO.dll
O3 - Toolbar: AIM Search - {40D41A8B-D79B-43d7-99A7-9EE0F344C385} - C:\Program Files\AIM Toolbar\AIMBar.dll
O3 - Toolbar: Viewpoint Toolbar - {F8AD5AA5-D966-4667-9DAF-2561D68B2012} - C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBar.dll
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [PCTVOICE] pctspk.exe
O4 - HKLM\..\Run: [CARPService] carpserv.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [PRONoMgr.exe] C:\Program Files\Intel\NCS\PROSet\PRONoMgr.exe
O4 - HKLM\..\Run: [tgcmd] "C:\Progra~1\Support.com\bin\tgcmd.exe " /nosystray
O4 - HKLM\..\Run: [SDTray] "C:\Program Files\RSA Security\Web PassPort\Plug-In\system\sdtray.exe"
O4 - HKLM\..\Run: [policy56] C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\policy56.exe
O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
O4 - HKLM\..\Run: [Accenture Connection] "C:\Program Files\Accenture Connection\9341989\Program\Accenture Connection.exe"
O4 - HKLM\..\Run: [MindDrives] "C:\Program Files\Mango\Mind\utilities\drives.exe" -offlinecheck
O4 - HKLM\..\Run: [MindNoticeBoard] "C:\Program Files\Mango\Mind\utilities\noticebd.exe" -newnotices
O4 - HKLM\..\Run: [o.exe] C:\documents and settings\brian.j.retson\local settings\temp\o.exe
O4 - HKLM\..\Run: [xkJd53MC] C:\WINDOWS\wmjglyph.exe
O4 - HKLM\..\Run: [¢‰¸K0¨4W
}ïÁzî[8C:\Program Files\ISTsvc\istsvc.exe] C:\WINDOWS\wmjglyph.exe
O4 - HKLM\..\Run: [¢‰¸K0¨4W
}ïÁzîžigÝC:\Program Files\ISTsvc\istsvc.exe] C:\WINDOWS\wmjglyph.exe
O4 - HKLM\..\Run: [¢‰¸K0Ô@ÔÁß]§ú"ü‰¸K0C:\Program Files\ISTsvc\istsvc.exe] C:\WINDOWS\wmjglyph.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\RunOnce: [!CleanupNetMeetingDispDriver] "C:\WINDOWS\system32\rundll32.exe" msconf.dll,CleanupNetMeetingDispDriver 0
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [OfotoNow USB Detection] C:\WINDOWS\System32\RunDLL32.exe C:\PROGRA~1\Ofoto\OfotoNow\OFUSBS.DLL,WatchForConnection OfotoNow
O4 - HKCU\..\Run: [MSMSGS] C:\Program Files\Messenger\MSMSGS.EXE /background
O4 - HKCU\..\Run: [Simp] C:\Program Files\Secway\SimpPro\SimpPro.exe
O4 - Startup: Microsoft Office OneNote 2003 Quick Launch.lnk = C:\Program Files\Microsoft Office\OFFICE11\ONENOTEM.EXE
O4 - Startup: W6Intro.lnk = C:\Program Files\Performance Support\W6Intro.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office OneNote 2003 Quick Launch.lnk = C:\Program Files\Microsoft Office\OFFICE11\ONENOTEM.EXE
O4 - Global Startup: Picture Package Menu.lnk = ?
O4 - Global Startup: Picture Package VCD Maker.lnk = ?
O4 - Global Startup: RealSecure(r) Desktop Protector.lnk = ?
O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm
O8 - Extra context menu item: &Viewpoint Search - res://C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBar.dll/CXTSEARCH.HTML
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=https://portal.accenture.com
O15 - Trusted Zone: *.accenture.com
O15 - Trusted Zone: *.americanexpress.com
O15 - Trusted Zone: *.cnn.com
O15 - Trusted Zone: *.espn.com
O15 - Trusted Zone: http://www.gmail.com
O15 - Trusted Zone: *.espn.go.com
O15 - Trusted Zone: *.rivals.com
O15 - Trusted Zone: *.united.com
O15 - Trusted Zone: *.weather.com
O15 - Trusted Zone: *.accenture.com (HKLM)
O15 - ProtocolDefaults: 'http' protocol is in My Computer Zone, should be Internet Zone
O16 - DPF: {036F8A56-0BC8-4607-8F98-D3231E6FF5ED} (CentraUpdaterAxCtl Class) - https://virtualclassroomext.accenture.com/SiteRoots/main/Install/win32/CentraUpdaterAx.cab
O16 - DPF: {1416D7C8-8A28-11CF-9236-444553540000} (Infragistics Data Explorer Control) - https://mylearning-lms1.accenture.com/docent/lms/pvxplore8.cab
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://appldnld.m7z.net/content.info.apple.com/iTunes4/WW/win/019-0312.20050111.MmVrT/iTunesSetup.exe
O16 - DPF: {42442236-3673-4054-89C0-A7408BC51EFC} (SDLNSrvr.clsNotes) - https://methodology.accenture.com/codebase/SDLnSrvr_ChainMaster.cab
O16 - DPF: {55E63588-BA86-11D2-8693-0008C702A31D} (PIEWAPI.PIEWAPIControl) - https://escheduling.accenture.com/CBT/codebase/PieWAPI.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1144168178827
O16 - DPF: {6E74D0AA-70A3-4FB0-82AE-7BA450289027} (LNServer.LNServerCTL) - https://escheduling.accenture.com/CBT/codebase/LnServer.cab
O16 - DPF: {6F750200-1362-4815-A476-88533DE61D0C} (Ofoto Upload Manager Class) - http://www.kodakgallery.com/downloads/BUM/BUM_WIN_IE_1/axofupld.cab
O16 - DPF: {7F20D162-171B-11D4-BBBE-DC597E5B664F} (cSTAOCX.Coordinator) - https://escheduling.accenture.com/CBT/codebase/csta.cab
O16 - DPF: {8463A31A-7FB5-4D38-B269-57F4FEFDBB09} (SDData.clsData) - https://mylearning.accenture.com/codebase/SDData.cab
O16 - DPF: {A2001DD0-C7BD-11D4-A3E1-00C04FA32518} - http://t3ias02.solar.cat.com/dev6/plugin/jinit1183.exe
O16 - DPF: {AAF15A90-F3EC-4FEE-9A00-F65B25B83D05} - http://sports.espn.go.com/ncf/scoreboard
O16 - DPF: {CAFECAFE-0013-0001-0022-ABCDEFABCDEF} (JInitiator 1.3.1.22) - http://t3ias02.solar.cat.com/dev6/plugin/jinit13122.exe
O16 - DPF: {D3B8B8A0-4FA3-44EB-86C7-5BEA866CEA57} (SDAICC.clsAICC) - https://mylearning.accenture.com/codebase/SDAICC.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} - http://download.games.yahoo.com/games/web_games/popcap/bejeweled2/popcaploader_v6.cab
O16 - DPF: {FE507B78-691A-4DAA-BE3D-793C86592506} (SDWAPI.clsWAPI) - https://mylearning.accenture.com/codebase/SDWAPI.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = Accenture.com
O17 - HKLM\Software\..\Telephony: DomainName = Accenture.com
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = Accenture.com
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: SearchList = internal.accenture.com,accenture.com,dir.svc.accenture.com,solar.cat.com,cat.com
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = Accenture.com
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: SearchList = internal.accenture.com,accenture.com,dir.svc.accenture.com,solar.cat.com,cat.com
O17 - HKLM\System\CS3\Services\Tcpip\Parameters: Domain = Accenture.com
O17 - HKLM\System\CS3\Services\Tcpip\Parameters: SearchList = internal.accenture.com,accenture.com,dir.svc.accenture.com,solar.cat.com,cat.com
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: SearchList = internal.accenture.com,accenture.com,dir.svc.accenture.com,solar.cat.com,cat.com
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll
O20 - Winlogon Notify: Sebring - C:\WINDOWS\System32\LgNotify.dll
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: BlackICE - Internet Security Systems, Inc. - C:\Program Files\Network ICE\BlackICE\blackd.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: MC/Empower i.collect Service (iCollectService) - Unknown owner - C:\WINDOWS\system32\acstp\icserv.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: IgniteService - Unknown owner - C:\Program Files\Accenture Connection\9341989\Program\IgniteService.exe" -Service (file missing)
O23 - Service: iPassConnectEngine - iPass - C:\Program Files\iPass\iPassConnect\iPassConnectEngine.exe
O23 - Service: iPCAgent - iPass, Inc. - C:\Program Files\iPass\iPassConnect\iPCAgent.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Mangomind Drive Repair (MindRepair) - Mangosoft - C:\Program Files\Mango\Mind\Utilities\dirtcon.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\NCS\Sync\NetSvc.exe
O23 - Service: RapApp - Internet Security Systems, Inc. - C:\Program Files\Network ICE\BlackICE\RapApp.exe
O23 - Service: RegSrvc - Intel Corporation - C:\WINDOWS\System32\RegSrvc.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\WINDOWS\System32\S24EvMon.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe
O23 - Service: WLTRYSVC - Unknown owner - C:\WINDOWS\System32\wltrysvc.exe
-Computer simply freezes - can't even <Ctrl - Alt - Del>. Must restart.
-When restarting computer, the date / time are occassionally lost and must be reset.
-Twice have received a blue error screen with the message "Driver_IRQL_not_less_or_equal"
(I'm not sure if that's exactly right, but it's pretty close to the message. The computer shuts off shortly after!)
These problems do not occur all of the time - if I restart enough, the computer will eventually work.
Please let me know if you have any advice. Thanks in advance for your time!
____________________________________________
Logfile of HijackThis v1.99.1
Scan saved at 2:59:57 PM, on 11/7/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\S24EvMon.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\ZCfgSvc.exe
C:\WINDOWS\System32\1XConfig.exe
C:\Program Files\Network ICE\BlackICE\blackd.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\WINDOWS\system32\acstp\icserv.exe
C:\Program Files\iPass\iPassConnect\iPCAgent.exe
C:\WINDOWS\system32\acstp\wake_up.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
c:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\mnmsrvc.exe
C:\WINDOWS\System32\RegSrvc.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\WINDOWS\System32\wltrysvc.exe
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\carpserv.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\Apoint\Apoint.exe
C:\Program Files\Intel\NCS\PROSet\PRONoMgr.exe
C:\Progra~1\Support.com\bin\tgcmd.exe
C:\Program Files\RSA Security\Web PassPort\Plug-In\system\sdtray.exe
C:\Program Files\RSA Security\Web PassPort\Plug-In\System\sdlss.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Accenture Connection\9341989\Program\Accenture Connection.exe
C:\Program Files\Apoint\Apntex.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\iPass\iPassConnect\downloader\ipccheck.exe
C:\PROGRA~1\SYMANT~1\VPTray.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\System32\RunDLL32.exe
C:\Program Files\Messenger\MSMSGS.EXE
C:\Program Files\Secway\SimpPro\SimpPro.exe
C:\Program Files\Microsoft Office\OFFICE11\ONENOTEM.EXE
C:\Program Files\Sony Corporation\Picture Package\Picture Package Menu\SonyTray.exe
C:\Program Files\Sony Corporation\Picture Package\Picture Package Applications\Residence.exe
C:\Program Files\Network ICE\BlackICE\blackice.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\AIM\aim.exe
C:\PROGRA~1\MICROS~2\OFFICE11\OUTLOOK.EXE
C:\Program Files\notes\NLNOTES.EXE
C:\Program Files\notes\ntaskldr.EXE
C:\WINDOWS\system32\cidaemon.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\brian.j.retson\Desktop\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://portal.accenture.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = https://portal.accenture.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = http://proxy.cat.com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = amrpx2101.accenture.com:8080
R3 - URLSearchHook: (no name) - _{9368D063-44BE-49B9-BD14-BB9663FD38FC} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Viewpoint Toolbar BHO - {A7327C09-B521-4EDB-8509-7D2660C9EC98} - C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBarBHO.dll
O3 - Toolbar: AIM Search - {40D41A8B-D79B-43d7-99A7-9EE0F344C385} - C:\Program Files\AIM Toolbar\AIMBar.dll
O3 - Toolbar: Viewpoint Toolbar - {F8AD5AA5-D966-4667-9DAF-2561D68B2012} - C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBar.dll
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [PCTVOICE] pctspk.exe
O4 - HKLM\..\Run: [CARPService] carpserv.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [PRONoMgr.exe] C:\Program Files\Intel\NCS\PROSet\PRONoMgr.exe
O4 - HKLM\..\Run: [tgcmd] "C:\Progra~1\Support.com\bin\tgcmd.exe " /nosystray
O4 - HKLM\..\Run: [SDTray] "C:\Program Files\RSA Security\Web PassPort\Plug-In\system\sdtray.exe"
O4 - HKLM\..\Run: [policy56] C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\policy56.exe
O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
O4 - HKLM\..\Run: [Accenture Connection] "C:\Program Files\Accenture Connection\9341989\Program\Accenture Connection.exe"
O4 - HKLM\..\Run: [MindDrives] "C:\Program Files\Mango\Mind\utilities\drives.exe" -offlinecheck
O4 - HKLM\..\Run: [MindNoticeBoard] "C:\Program Files\Mango\Mind\utilities\noticebd.exe" -newnotices
O4 - HKLM\..\Run: [o.exe] C:\documents and settings\brian.j.retson\local settings\temp\o.exe
O4 - HKLM\..\Run: [xkJd53MC] C:\WINDOWS\wmjglyph.exe
O4 - HKLM\..\Run: [¢‰¸K0¨4W
}ïÁzî[8C:\Program Files\ISTsvc\istsvc.exe] C:\WINDOWS\wmjglyph.exe
O4 - HKLM\..\Run: [¢‰¸K0¨4W
}ïÁzîžigÝC:\Program Files\ISTsvc\istsvc.exe] C:\WINDOWS\wmjglyph.exe
O4 - HKLM\..\Run: [¢‰¸K0Ô@ÔÁß]§ú"ü‰¸K0C:\Program Files\ISTsvc\istsvc.exe] C:\WINDOWS\wmjglyph.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\RunOnce: [!CleanupNetMeetingDispDriver] "C:\WINDOWS\system32\rundll32.exe" msconf.dll,CleanupNetMeetingDispDriver 0
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [OfotoNow USB Detection] C:\WINDOWS\System32\RunDLL32.exe C:\PROGRA~1\Ofoto\OfotoNow\OFUSBS.DLL,WatchForConnection OfotoNow
O4 - HKCU\..\Run: [MSMSGS] C:\Program Files\Messenger\MSMSGS.EXE /background
O4 - HKCU\..\Run: [Simp] C:\Program Files\Secway\SimpPro\SimpPro.exe
O4 - Startup: Microsoft Office OneNote 2003 Quick Launch.lnk = C:\Program Files\Microsoft Office\OFFICE11\ONENOTEM.EXE
O4 - Startup: W6Intro.lnk = C:\Program Files\Performance Support\W6Intro.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office OneNote 2003 Quick Launch.lnk = C:\Program Files\Microsoft Office\OFFICE11\ONENOTEM.EXE
O4 - Global Startup: Picture Package Menu.lnk = ?
O4 - Global Startup: Picture Package VCD Maker.lnk = ?
O4 - Global Startup: RealSecure(r) Desktop Protector.lnk = ?
O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm
O8 - Extra context menu item: &Viewpoint Search - res://C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBar.dll/CXTSEARCH.HTML
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=https://portal.accenture.com
O15 - Trusted Zone: *.accenture.com
O15 - Trusted Zone: *.americanexpress.com
O15 - Trusted Zone: *.cnn.com
O15 - Trusted Zone: *.espn.com
O15 - Trusted Zone: http://www.gmail.com
O15 - Trusted Zone: *.espn.go.com
O15 - Trusted Zone: *.rivals.com
O15 - Trusted Zone: *.united.com
O15 - Trusted Zone: *.weather.com
O15 - Trusted Zone: *.accenture.com (HKLM)
O15 - ProtocolDefaults: 'http' protocol is in My Computer Zone, should be Internet Zone
O16 - DPF: {036F8A56-0BC8-4607-8F98-D3231E6FF5ED} (CentraUpdaterAxCtl Class) - https://virtualclassroomext.accenture.com/SiteRoots/main/Install/win32/CentraUpdaterAx.cab
O16 - DPF: {1416D7C8-8A28-11CF-9236-444553540000} (Infragistics Data Explorer Control) - https://mylearning-lms1.accenture.com/docent/lms/pvxplore8.cab
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://appldnld.m7z.net/content.info.apple.com/iTunes4/WW/win/019-0312.20050111.MmVrT/iTunesSetup.exe
O16 - DPF: {42442236-3673-4054-89C0-A7408BC51EFC} (SDLNSrvr.clsNotes) - https://methodology.accenture.com/codebase/SDLnSrvr_ChainMaster.cab
O16 - DPF: {55E63588-BA86-11D2-8693-0008C702A31D} (PIEWAPI.PIEWAPIControl) - https://escheduling.accenture.com/CBT/codebase/PieWAPI.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1144168178827
O16 - DPF: {6E74D0AA-70A3-4FB0-82AE-7BA450289027} (LNServer.LNServerCTL) - https://escheduling.accenture.com/CBT/codebase/LnServer.cab
O16 - DPF: {6F750200-1362-4815-A476-88533DE61D0C} (Ofoto Upload Manager Class) - http://www.kodakgallery.com/downloads/BUM/BUM_WIN_IE_1/axofupld.cab
O16 - DPF: {7F20D162-171B-11D4-BBBE-DC597E5B664F} (cSTAOCX.Coordinator) - https://escheduling.accenture.com/CBT/codebase/csta.cab
O16 - DPF: {8463A31A-7FB5-4D38-B269-57F4FEFDBB09} (SDData.clsData) - https://mylearning.accenture.com/codebase/SDData.cab
O16 - DPF: {A2001DD0-C7BD-11D4-A3E1-00C04FA32518} - http://t3ias02.solar.cat.com/dev6/plugin/jinit1183.exe
O16 - DPF: {AAF15A90-F3EC-4FEE-9A00-F65B25B83D05} - http://sports.espn.go.com/ncf/scoreboard
O16 - DPF: {CAFECAFE-0013-0001-0022-ABCDEFABCDEF} (JInitiator 1.3.1.22) - http://t3ias02.solar.cat.com/dev6/plugin/jinit13122.exe
O16 - DPF: {D3B8B8A0-4FA3-44EB-86C7-5BEA866CEA57} (SDAICC.clsAICC) - https://mylearning.accenture.com/codebase/SDAICC.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} - http://download.games.yahoo.com/games/web_games/popcap/bejeweled2/popcaploader_v6.cab
O16 - DPF: {FE507B78-691A-4DAA-BE3D-793C86592506} (SDWAPI.clsWAPI) - https://mylearning.accenture.com/codebase/SDWAPI.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = Accenture.com
O17 - HKLM\Software\..\Telephony: DomainName = Accenture.com
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = Accenture.com
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: SearchList = internal.accenture.com,accenture.com,dir.svc.accenture.com,solar.cat.com,cat.com
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = Accenture.com
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: SearchList = internal.accenture.com,accenture.com,dir.svc.accenture.com,solar.cat.com,cat.com
O17 - HKLM\System\CS3\Services\Tcpip\Parameters: Domain = Accenture.com
O17 - HKLM\System\CS3\Services\Tcpip\Parameters: SearchList = internal.accenture.com,accenture.com,dir.svc.accenture.com,solar.cat.com,cat.com
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: SearchList = internal.accenture.com,accenture.com,dir.svc.accenture.com,solar.cat.com,cat.com
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll
O20 - Winlogon Notify: Sebring - C:\WINDOWS\System32\LgNotify.dll
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: BlackICE - Internet Security Systems, Inc. - C:\Program Files\Network ICE\BlackICE\blackd.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: MC/Empower i.collect Service (iCollectService) - Unknown owner - C:\WINDOWS\system32\acstp\icserv.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: IgniteService - Unknown owner - C:\Program Files\Accenture Connection\9341989\Program\IgniteService.exe" -Service (file missing)
O23 - Service: iPassConnectEngine - iPass - C:\Program Files\iPass\iPassConnect\iPassConnectEngine.exe
O23 - Service: iPCAgent - iPass, Inc. - C:\Program Files\iPass\iPassConnect\iPCAgent.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Mangomind Drive Repair (MindRepair) - Mangosoft - C:\Program Files\Mango\Mind\Utilities\dirtcon.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\NCS\Sync\NetSvc.exe
O23 - Service: RapApp - Internet Security Systems, Inc. - C:\Program Files\Network ICE\BlackICE\RapApp.exe
O23 - Service: RegSrvc - Intel Corporation - C:\WINDOWS\System32\RegSrvc.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\WINDOWS\System32\S24EvMon.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe
O23 - Service: WLTRYSVC - Unknown owner - C:\WINDOWS\System32\wltrysvc.exe
0
Comments
===============
Scan with HijackThis and then place a check next to all the following, if present:
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = about:blank
R3 - URLSearchHook: (no name) - _{9368D063-44BE-49B9-BD14-BB9663FD38FC} - (no file)
O4 - HKLM\..\Run: [policy56] C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\policy56.exe
O4 - HKLM\..\Run: [o.exe] C:\documents and settings\brian.j.retson\local settings\temp\o.exe
O4 - HKLM\..\Run: [xkJd53MC] C:\WINDOWS\wmjglyph.exe
O4 - HKLM\..\Run: [¢‰¸K0¨4W
O4 - HKLM\..\Run: [¢‰¸K0¨4W
O4 - HKLM\..\Run: [¢‰¸K0Ô@ÔÁß]§ú"ü‰¸K0C:\Program Files\ISTsvc\istsvc.exe] C:\WINDOWS\wmjglyph.exe
O4 - Global Startup: Picture Package Menu.lnk = ?
O4 - Global Startup: Picture Package VCD Maker.lnk = ?
O4 - Global Startup: RealSecure(r) Desktop Protector.lnk = ?
O15 - ProtocolDefaults: 'http' protocol is in My Computer Zone, should be Internet Zone
Now, close all instances of Internet Explorer and any other windows you have open except HiJackThis, click "Fix checked".
===============
Locate and delete the following item(s), if present. Make sure you are able to view system and hidden files/ folders:
folders...
ü‰¸K0C:\Program Files\ISTsvc
files...
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\policy56.exe
C:\documents and settings\brian.j.retson\local settings\temp\o.exe
C:\WINDOWS\wmjglyph.exe
-
Note that some of these file(s)/folder(s) may or may not be present. If present, and cannot be deleted because they're 'in use', try deleting them in Safe Mode by doing the following:
- Restart your computer
- After hearing your computer beep once during startup, but before the Windows icon appears, press F8.
- Instead of Windows loading as normal, a menu should appear.
Select the first option to run Windows in Safe Mode hit enter.-
Reboot.
===============
Please download and install AVG antispyware tool
- Close all other Applications Select language click Ok
- Click I Agree
- Click next
- Click Install
- Click Finish
- Wait and AVG antispyware will open to the main screen automatically.
- Wait again a few minutes and AVG antispyware Should Auto update itself. If it doesn't click update at top of screen.
- This is very important to get updates
- When updating has finished. Close AVG antispyware.
If you have an "always on" connection to the internet, physically disconnect that connection until you are finished with Safe Mode and have rebooted back into normal mode.- Next, please reboot your computer in Safe Mode by doing the following:
- Restart your computer
- After hearing your computer beep once during startup, but before the Windows icon appears, press F8.
- Instead of Windows loading as normal, a menu should appear use arrow up to highlight
- Select the first option, to run Windows in Safe Mode hit enter.
- For additional help in booting into Safe Mode, see the following site: HERE
Make sure to close all open windows/programs/folders. Have nothing else open while AVG antispyware performs its scan!You MUST manage to get into Safe Mode for the fix to work.
- Open AVG antispyware.
- Click on scanner at top of AVG antispyware sceen.
- Click on Settings.
- Under How to Act click on Recommended Action and choose Quarantine.
- Under How to scan all boxes should be selected.
- Under Possibly unwanted software all boxes should be selected.
- On right side under Reports: click on Automatically generate report after every scan.
- Under What to scan select scan every file.
- Click On scan Tab.
- Click on Complete system scan.
- Let the program scan the machine It can take awhile give it time.
- When scan has finished at bottom of screen click Apply all Actions.
- Click Save report
- Click Save Report as (Save as window's screen should pop up.)
- Click desktop.
- Click Save.
- Exit AVG antispyware.
Reboot back to normal mode.Post the log here.
After rebooting, rescan with hijackthis and post back a new log. Please let me know how your pc is now.
Thanks for getting back to me. I followed the steps that you outlined (none of the files / folders for deletion were present). The anti-spyware scan detected about 260 issues! Unfortunately, it looks like I am still having the same issues. Please let me know if you have any other suggestions?
New HijackThis Log
Logfile of HijackThis v1.99.1
Scan saved at 1:31:53 PM, on 11/8/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\S24EvMon.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\ZCfgSvc.exe
C:\WINDOWS\System32\1XConfig.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Network ICE\BlackICE\blackd.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\WINDOWS\system32\acstp\icserv.exe
C:\Program Files\iPass\iPassConnect\iPCAgent.exe
C:\WINDOWS\system32\acstp\wake_up.exe
c:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\mnmsrvc.exe
C:\WINDOWS\System32\RegSrvc.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\wltrysvc.exe
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\carpserv.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\Apoint\Apoint.exe
C:\Program Files\Intel\NCS\PROSet\PRONoMgr.exe
C:\Program Files\Apoint\Apntex.exe
C:\Progra~1\Support.com\bin\tgcmd.exe
C:\Program Files\RSA Security\Web PassPort\Plug-In\system\sdtray.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\RSA Security\Web PassPort\Plug-In\System\sdlss.exe
C:\Program Files\Accenture Connection\9341989\Program\Accenture Connection.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\PROGRA~1\SYMANT~1\VPTray.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\iPass\iPassConnect\downloader\ipccheck.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\System32\RunDLL32.exe
C:\Program Files\Messenger\MSMSGS.EXE
C:\Program Files\Secway\SimpPro\SimpPro.exe
C:\Program Files\Microsoft Office\OFFICE11\ONENOTEM.EXE
C:\Program Files\AIM\aim.exe
C:\PROGRA~1\MICROS~2\OFFICE11\OUTLOOK.EXE
C:\Program Files\notes\NLNOTES.EXE
C:\Program Files\notes\ntaskldr.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\cidaemon.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Documents and Settings\brian.j.retson\Desktop\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://portal.accenture.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = https://portal.accenture.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = http://proxy.cat.com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = amrpx2101.accenture.com:8080
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Viewpoint Toolbar BHO - {A7327C09-B521-4EDB-8509-7D2660C9EC98} - C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBarBHO.dll
O3 - Toolbar: AIM Search - {40D41A8B-D79B-43d7-99A7-9EE0F344C385} - C:\Program Files\AIM Toolbar\AIMBar.dll
O3 - Toolbar: Viewpoint Toolbar - {F8AD5AA5-D966-4667-9DAF-2561D68B2012} - C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBar.dll
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [PCTVOICE] pctspk.exe
O4 - HKLM\..\Run: [CARPService] carpserv.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [PRONoMgr.exe] C:\Program Files\Intel\NCS\PROSet\PRONoMgr.exe
O4 - HKLM\..\Run: [tgcmd] "C:\Progra~1\Support.com\bin\tgcmd.exe " /nosystray
O4 - HKLM\..\Run: [SDTray] "C:\Program Files\RSA Security\Web PassPort\Plug-In\system\sdtray.exe"
O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
O4 - HKLM\..\Run: [Accenture Connection] "C:\Program Files\Accenture Connection\9341989\Program\Accenture Connection.exe"
O4 - HKLM\..\Run: [MindDrives] "C:\Program Files\Mango\Mind\utilities\drives.exe" -offlinecheck
O4 - HKLM\..\Run: [MindNoticeBoard] "C:\Program Files\Mango\Mind\utilities\noticebd.exe" -newnotices
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [OfotoNow USB Detection] C:\WINDOWS\System32\RunDLL32.exe C:\PROGRA~1\Ofoto\OfotoNow\OFUSBS.DLL,WatchForConnection OfotoNow
O4 - HKCU\..\Run: [MSMSGS] C:\Program Files\Messenger\MSMSGS.EXE /background
O4 - HKCU\..\Run: [Simp] C:\Program Files\Secway\SimpPro\SimpPro.exe
O4 - Startup: Microsoft Office OneNote 2003 Quick Launch.lnk = C:\Program Files\Microsoft Office\OFFICE11\ONENOTEM.EXE
O4 - Startup: W6Intro.lnk = C:\Program Files\Performance Support\W6Intro.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office OneNote 2003 Quick Launch.lnk = C:\Program Files\Microsoft Office\OFFICE11\ONENOTEM.EXE
O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm
O8 - Extra context menu item: &Viewpoint Search - res://C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBar.dll/CXTSEARCH.HTML
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=https://portal.accenture.com
O15 - Trusted Zone: *.accenture.com
O15 - Trusted Zone: *.americanexpress.com
O15 - Trusted Zone: *.cnn.com
O15 - Trusted Zone: *.espn.com
O15 - Trusted Zone: http://www.gmail.com
O15 - Trusted Zone: *.espn.go.com
O15 - Trusted Zone: *.rivals.com
O15 - Trusted Zone: *.united.com
O15 - Trusted Zone: *.weather.com
O15 - Trusted Zone: *.accenture.com (HKLM)
O16 - DPF: {036F8A56-0BC8-4607-8F98-D3231E6FF5ED} (CentraUpdaterAxCtl Class) - https://virtualclassroomext.accenture.com/SiteRoots/main/Install/win32/CentraUpdaterAx.cab
O16 - DPF: {1416D7C8-8A28-11CF-9236-444553540000} (Infragistics Data Explorer Control) - https://mylearning-lms1.accenture.com/docent/lms/pvxplore8.cab
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://appldnld.m7z.net/content.info.apple.com/iTunes4/WW/win/019-0312.20050111.MmVrT/iTunesSetup.exe
O16 - DPF: {42442236-3673-4054-89C0-A7408BC51EFC} (SDLNSrvr.clsNotes) - https://methodology.accenture.com/codebase/SDLnSrvr_ChainMaster.cab
O16 - DPF: {55E63588-BA86-11D2-8693-0008C702A31D} (PIEWAPI.PIEWAPIControl) - https://escheduling.accenture.com/CBT/codebase/PieWAPI.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1144168178827
O16 - DPF: {6E74D0AA-70A3-4FB0-82AE-7BA450289027} (LNServer.LNServerCTL) - https://escheduling.accenture.com/CBT/codebase/LnServer.cab
O16 - DPF: {6F750200-1362-4815-A476-88533DE61D0C} (Ofoto Upload Manager Class) - http://www.kodakgallery.com/downloads/BUM/BUM_WIN_IE_1/axofupld.cab
O16 - DPF: {7F20D162-171B-11D4-BBBE-DC597E5B664F} (cSTAOCX.Coordinator) - https://escheduling.accenture.com/CBT/codebase/csta.cab
O16 - DPF: {8463A31A-7FB5-4D38-B269-57F4FEFDBB09} (SDData.clsData) - https://mylearning.accenture.com/codebase/SDData.cab
O16 - DPF: {A2001DD0-C7BD-11D4-A3E1-00C04FA32518} - http://t3ias02.solar.cat.com/dev6/plugin/jinit1183.exe
O16 - DPF: {AAF15A90-F3EC-4FEE-9A00-F65B25B83D05} - http://sports.espn.go.com/ncf/scoreboard
O16 - DPF: {CAFECAFE-0013-0001-0022-ABCDEFABCDEF} (JInitiator 1.3.1.22) - http://t3ias02.solar.cat.com/dev6/plugin/jinit13122.exe
O16 - DPF: {D3B8B8A0-4FA3-44EB-86C7-5BEA866CEA57} (SDAICC.clsAICC) - https://mylearning.accenture.com/codebase/SDAICC.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} - http://download.games.yahoo.com/games/web_games/popcap/bejeweled2/popcaploader_v6.cab
O16 - DPF: {FE507B78-691A-4DAA-BE3D-793C86592506} (SDWAPI.clsWAPI) - https://mylearning.accenture.com/codebase/SDWAPI.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = Accenture.com
O17 - HKLM\Software\..\Telephony: DomainName = Accenture.com
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = Accenture.com
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: SearchList = internal.accenture.com,accenture.com,dir.svc.accenture.com,solar.cat.com,cat.com
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = Accenture.com
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: SearchList = internal.accenture.com,accenture.com,dir.svc.accenture.com,solar.cat.com,cat.com
O17 - HKLM\System\CS3\Services\Tcpip\Parameters: Domain = Accenture.com
O17 - HKLM\System\CS3\Services\Tcpip\Parameters: SearchList = internal.accenture.com,accenture.com,dir.svc.accenture.com,solar.cat.com,cat.com
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: SearchList = internal.accenture.com,accenture.com,dir.svc.accenture.com,solar.cat.com,cat.com
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll
O20 - Winlogon Notify: Sebring - C:\WINDOWS\System32\LgNotify.dll
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: BlackICE - Internet Security Systems, Inc. - C:\Program Files\Network ICE\BlackICE\blackd.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: MC/Empower i.collect Service (iCollectService) - Unknown owner - C:\WINDOWS\system32\acstp\icserv.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: IgniteService - Unknown owner - C:\Program Files\Accenture Connection\9341989\Program\IgniteService.exe" -Service (file missing)
O23 - Service: iPassConnectEngine - iPass - C:\Program Files\iPass\iPassConnect\iPassConnectEngine.exe
O23 - Service: iPCAgent - iPass, Inc. - C:\Program Files\iPass\iPassConnect\iPCAgent.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Mangomind Drive Repair (MindRepair) - Mangosoft - C:\Program Files\Mango\Mind\Utilities\dirtcon.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\NCS\Sync\NetSvc.exe
O23 - Service: RapApp - Internet Security Systems, Inc. - C:\Program Files\Network ICE\BlackICE\RapApp.exe
O23 - Service: RegSrvc - Intel Corporation - C:\WINDOWS\System32\RegSrvc.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\WINDOWS\System32\S24EvMon.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe
O23 - Service: WLTRYSVC - Unknown owner - C:\WINDOWS\System32\wltrysvc.exe
AVG Anti-Spyware Log
AVG Anti-Spyware - Scan Report
+ Created at: 11:34:34 AM 11/8/2006
+ Scan result:
C:\Program Files\AWS\WeatherBug\MiniBugTransporter.dll -> Adware.Aws : Cleaned with backup (quarantined).
HKU\S-1-5-21-2487233359-3978578782-1755836626-1019\Software\dsktb -> Adware.IEPlugin : Cleaned with backup (quarantined).
HKU\S-1-5-21-2487233359-3978578782-1755836626-1019\Software\dsktb\DesktopToolbar -> Adware.IEPlugin : Cleaned with backup (quarantined).
HKLM\SOFTWARE\SearchRelevancy -> Adware.SearchRelevancy : Cleaned with backup (quarantined).
HKLM\SOFTWARE\SearchRelevancy\Update -> Adware.SearchRelevancy : Cleaned with backup (quarantined).
:mozilla.113:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.21:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.320:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.39:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.40:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.41:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.42:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.43:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.44:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.45:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.46:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.47:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.48:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.49:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.50:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.51:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.528:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.52:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.53:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.54:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.55:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.56:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.57:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.580:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.58:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.59:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.60:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.61:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.62:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.63:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.64:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.65:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.66:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.67:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.68:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.69:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.70:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.71:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.72:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.73:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.74:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.75:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.76:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.77:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.78:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.79:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.80:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.81:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.82:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.83:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.84:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.85:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.86:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\brian.j.retson\Cookies\brian.j.retson@2o7[2].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\brian.j.retson\Cookies\brian.j.retson@cnn.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\brian.j.retson\Desktop\Backup Windows\_Copy of WD Sync 11-07-2006\C\Documents and Settings\brian.j.retson\Cookies\brian.j.retson@cnn.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.375:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Addynamix : Cleaned.
:mozilla.376:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Addynamix : Cleaned.
:mozilla.617:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.622:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.623:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.625:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.626:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.627:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.628:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.629:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.716:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Adserver : Cleaned.
:mozilla.720:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Adserver : Cleaned.
:mozilla.103:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.104:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.105:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.106:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.107:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.108:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.109:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
C:\Documents and Settings\brian.j.retson\Cookies\brian.j.retson@advertising[2].txt -> TrackingCookie.Advertising : Cleaned.
C:\Documents and Settings\brian.j.retson\Desktop\Backup Windows\_Copy of WD Sync 11-07-2006\C\Documents and Settings\brian.j.retson\Cookies\brian.j.retson@advertising[2].txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.29:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.30:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.31:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.32:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.33:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.34:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.35:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.36:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.37:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.38:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
C:\Documents and Settings\brian.j.retson\Cookies\brian.j.retson@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned.
C:\Documents and Settings\brian.j.retson\Desktop\Backup Windows\_Copy of WD Sync 11-07-2006\C\Documents and Settings\brian.j.retson\Cookies\brian.j.retson@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.721:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Bfast : Cleaned.
:mozilla.642:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Bluestreak : Cleaned.
:mozilla.347:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Burstbeacon : Cleaned.
:mozilla.160:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.165:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.166:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.167:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.168:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.201:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.202:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.203:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.204:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.205:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.206:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.207:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.208:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.209:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.210:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.735:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Com : Cleaned.
:mozilla.545:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Coremetrics : Cleaned.
:mozilla.641:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Coremetrics : Cleaned.
:mozilla.695:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.88:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.89:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
C:\Documents and Settings\brian.j.retson\Cookies\brian.j.retson@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned.
C:\Documents and Settings\brian.j.retson\Desktop\Backup Windows\_Copy of WD Sync 11-07-2006\C\Documents and Settings\brian.j.retson\Cookies\brian.j.retson@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.650:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
:mozilla.651:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
:mozilla.652:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
:mozilla.653:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
:mozilla.654:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
:mozilla.591:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.592:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.593:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.594:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.595:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.717:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.718:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.719:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.269:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.270:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.271:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.272:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.273:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.274:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.275:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.276:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.277:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.279:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.280:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.281:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.282:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.283:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.284:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.285:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.286:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.287:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.750:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.775:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
C:\Documents and Settings\brian.j.retson\Cookies\brian.j.retson@ehg-dig.hitbox[2].txt -> TrackingCookie.Hitbox : Cleaned.
C:\Documents and Settings\brian.j.retson\Cookies\brian.j.retson@hitbox[2].txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.760:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Hitslink : Cleaned.
:mozilla.769:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.770:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.771:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.93:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.94:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.358:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Myaffiliateprogram : Cleaned.
:mozilla.349:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
:mozilla.350:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
:mozilla.351:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
:mozilla.686:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
C:\Documents and Settings\brian.j.retson\Cookies\brian.j.retson@data3.perf.overture[2].txt -> TrackingCookie.Overture : Cleaned.
C:\Documents and Settings\brian.j.retson\Desktop\Backup Windows\_Copy of WD Sync 11-07-2006\C\Documents and Settings\brian.j.retson\Cookies\brian.j.retson@data3.perf.overture[2].txt -> TrackingCookie.Overture : Cleaned.
:mozilla.558:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.559:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.560:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.561:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.562:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.563:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.100:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.101:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.102:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.95:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.96:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.97:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.98:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.99:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
C:\Documents and Settings\brian.j.retson\Cookies\brian.j.retson@questionmarket[2].txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.321:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.322:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.323:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.324:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.325:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.326:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.327:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.328:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.329:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.330:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.331:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.332:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.333:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.334:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.335:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.547:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.548:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.549:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.550:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.551:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.552:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.553:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.554:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.575:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.576:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.577:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.578:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.579:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
C:\Documents and Settings\brian.j.retson\Cookies\brian.j.retson@adopt.specificclick[1].txt -> TrackingCookie.Specificclick : Cleaned.
C:\Documents and Settings\brian.j.retson\Desktop\Backup Windows\_Copy of WD Sync 11-07-2006\C\Documents and Settings\brian.j.retson\Cookies\brian.j.retson@adopt.specificclick[1].txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.478:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.479:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.480:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.481:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.482:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.483:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.485:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.486:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.490:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.161:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.162:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.163:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.164:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
C:\Documents and Settings\brian.j.retson\Cookies\brian.j.retson@tacoda[2].txt -> TrackingCookie.Tacoda : Cleaned.
C:\Documents and Settings\brian.j.retson\Desktop\Backup Windows\_Copy of WD Sync 11-07-2006\C\Documents and Settings\brian.j.retson\Cookies\brian.j.retson@tacoda[2].txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.470:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.383:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.384:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.385:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.386:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.387:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.388:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.389:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.390:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.391:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.453:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.454:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.624:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Valueclick : Cleaned.
:mozilla.630:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Valueclick : Cleaned.
:mozilla.377:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.378:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.379:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.380:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.381:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.382:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.392:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.393:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.394:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.395:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.396:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.397:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.398:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.399:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.400:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.233:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.234:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.235:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.236:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.237:C:\Documents and Settings\brian.j.retson\Application Data\Mozilla\Firefox\Profiles\psq45uwk.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
::Report end
You may want to try closing down all files related to that program using task manager and see how your pc is then. You can prevent them from starting with Windows by using msconfig.
Start>Run and type in msconfig and hit ok. Go to the startup Tab and uncheck all entries elated to Notes.