SpyWareNukerXT

  1. #1
    genihanna is offline Full Member

    Unhappy SpyWareNukerXT

    What is SpyWareNukerXt? Tonight AdAware found it in 3 regkeys.
    1) HKEY_CLASSES_ROOT: clsid\{700016cf-23e4-16cb-912e-730a000091e1}\
    2) HKEY_LOCAL_MACHINE:system\controlset0001\services\ axpshook11\
    3) " " " " \currentcontrolset\services\axpshook11\

    But I had AdAware remove them (along with the negligilbe objects and the tracking cookies) and re-ran Adaware and it turned up "clean".

    I also ran Spybot (no threats found) and immunized.

    Should I still be concerned though? Better to ask ya'll and be safe than not, huh?

    Here's my HiJack Log just in case:

    Logfile of HijackThis v1.99.1
    Scan saved at 1:04:12 AM, on 6/1/2006
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\ehome\ehtray.exe
    C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\Program Files\HP Wireless Keyboard\KMaestro.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\ePrompter\ePrompter.exe
    C:\Program Files\SpywareGuard\sgmain.exe
    C:\Program Files\SpywareGuard\sgbhp.exe
    C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\WINDOWS\system32\cisvc.exe
    C:\Program Files\Executive Software\DiskeeperLite\DKService.exe
    C:\WINDOWS\eHome\ehRecvr.exe
    C:\WINDOWS\eHome\ehSched.exe
    C:\Program Files\Common Files\LightScribe\LSSrvc.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\dllhost.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\WINDOWS\eHome\ehmsas.exe
    C:\HP\KBD\KBD.EXE
    C:\WINDOWS\ALCXMNTR.EXE
    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    c:\windows\system\hpsysdrv.exe
    C:\Program Files\Java\jre1.5.0\bin\jusched.exe
    C:\Program Files\Common Files\Real\Update_OB\realsched.exe
    C:\Program Files\Java\jre1.5.0_06\bin\javaw.exe
    C:\Program Files\Java\jre1.5.0_06\bin\javaw.exe
    C:\Program Files\Java\jre1.5.0_06\bin\javaw.exe
    C:\Program Files\Java\jre1.5.0_06\bin\javaw.exe
    C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
    C:\WINDOWS\system32\cidaemon.exe
    C:\Documents and Settings\HP_Administrator\My

    Documents\Unzipped\hijackthis\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =

    http://ie.redirect.hp.com/svs/rdr?TY...le=EN_US&c=Q40

    5&bd=pavilion&pf=desktop&parm1=seconduser
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =

    http://www.comcast.net/
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext =

    http://www.symantec.com/techsupp/ser...s?module=5004&

    error=1003&language=English&product=Norton+Interne t+Security&version=8.3
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft

    Internet Explorer presented by Comcast
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet

    Settings,ProxyServer = :0
    O2 - BHO: AcroIEHlprObj Class -

    {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program

    Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: SpywareGuard Download Protection -

    {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program

    Files\SpywareGuard\dlprotect.dll
    O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot

    Optimizer\HPBootOp.exe" /run
    O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
    O4 - HKLM\..\Run: [WinPatrol] C:\Program Files\BillP

    Studios\WinPatrol\winpatrol.exe
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [BtcMaestro] "C:\Program Files\HP Wireless

    Keyboard\KMaestro.exe"
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - Startup: ePrompter.lnk = C:\Program Files\ePrompter\ePrompter.exe
    O4 - Startup: SpywareGuard.lnk = C:\Program

    Files\SpywareGuard\sgmain.exe
    O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program

    Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501}

    - C:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console -

    {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program

    Files\Java\jre1.5.0_06\bin\npjpi150_06.dll
    O9 - Extra button: ComcastHSI -

    {669B269B-0D4E-41FB-A3D8-FD67CA94F646} - http://www.comcast.net/ (file

    missing)
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} -

    %windir%\bdoscandel.exe (file missing)
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 -

    {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file

    missing)
    O9 - Extra button: Help - {97809617-3937-4F84-B335-9BB05EF1A8D4} -

    http://online.comcast.net/help/ (file missing)
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine

    Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
    O16 - DPF: {49232000-16E4-426C-A231-62846947304B} -

    http://ipgweb.cce.hp.com/rdqcpc/downloads/sysinfo.cab
    O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} -

    http://download.mcafee.com/molbin/sh...1/mcinsctl.cab
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE

    Control) - http://download.bitdefender.com/reso...an8/oscan8.cab
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl

    Class) -

    http://update.microsoft.com/microsof...86/client/muwe

    b_site.cab?1136904502010
    O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan

    Installer Class) - http://acs.pandasoftware.com/actives...ree/asinst.cab
    O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) -

    http://cdn2.zone.msn.com/binFramewor...o.cab34246.cab
    O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} -

    http://download.mcafee.com/molbin/sh...26/mcgdmgr.cab
    O16 - DPF: {BE71A78B-77DB-451C-A761-59B37022D544} -

    http://pictures.aolcdn.com/ap/Resour...ns.10.1.0.0.ca

    b
    O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} (HeartbeatCtl

    Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
    O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
    O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
    O21 - SSODL: WPDShServiceObj -

    {AAA288BA-9A4C-45B0-95D7-94D524869DB5} -

    C:\WINDOWS\system32\WPDShServiceObj.dll
    O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis -

    C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner -

    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. -

    C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil

    Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil

    Software\Avast4\ashMaiSv.exe" /service (file missing)
    O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil

    Software\Avast4\ashWebSv.exe" /service (file missing)
    O23 - Service: Diskeeper - Executive Software International, Inc. - C:\Program

    Files\Executive Software\DiskeeperLite\DKService.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation -

    C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: LightScribeService Direct Disc Labeling Service

    (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common

    Files\LightScribe\LSSrvc.exe



    Thank you in advance for your patience and expertise!

    Geni


  2. #2
    Neal is offline Dedicated Member
    Welcome back,


    That program is a rogue program that is on a list of bad spyware programs.


    Hijackthis is difficult to read like it is so...


    I need you to post a new log single spaced as it makes things easier to read:

    To remove the double spacing in your log, please do the following:
    • Please go to Start >> Run... and type notepad.exe
    • Hit OK.
    • Now go to Format and uncheck WordWrap.
    • Close Notepad.
    • Then post a new HijackThis log.


    Also...




    Open Hijackthis.

    Click the "Open the Misc Tools" section Button.

    Click the "Open Uninstall Manager" Button.

    Click the "Save list..." Button.

    Save it to your desktop. Copy and paste the contents into your reply.

    Thanks.

  3. #3
    genihanna is offline Full Member
    Hi Neal - here are the two lists you asked for. Also, I can't find the thread, but you instructed me to run SpySweeper in SAFE mode and print that log too - so here's that too (at the end)



    Logfile of HijackThis v1.99.1
    Scan saved at 11:49:34 AM, on 6/9/2006
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\PCHealth\HelpCtr\Binaries\HelpSvc.exe
    C:\Documents and Settings\HP_Administrator\My Documents\Unzipped\hijackthis\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TY...rm1=seconduser
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.symantec.com/techsupp/ser...ty&version=8.3
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer presented by Comcast
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll
    O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run
    O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
    O4 - HKLM\..\Run: [WinPatrol] C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [BtcMaestro] C:\Program Files\HP Wireless Keyboard\Kmaestro.exe
    O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /startintray
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - Startup: ePrompter.lnk = C:\Program Files\ePrompter\ePrompter.exe
    O4 - Startup: SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe
    O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dll
    O9 - Extra button: ComcastHSI - {669B269B-0D4E-41FB-A3D8-FD67CA94F646} - http://www.comcast.net/ (file missing)
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra button: Help - {97809617-3937-4F84-B335-9BB05EF1A8D4} - http://online.comcast.net/help/ (file missing)
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
    O16 - DPF: {49232000-16E4-426C-A231-62846947304B} - http://ipgweb.cce.hp.com/rdqcpc/downloads/sysinfo.cab
    O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.mcafee.com/molbin/sh...1/mcinsctl.cab
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/reso...an8/oscan8.cab
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsof...?1136904502010
    O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/actives...ree/asinst.cab
    O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://cdn2.zone.msn.com/binFramewor...o.cab34246.cab
    O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - http://download.mcafee.com/molbin/sh...26/mcgdmgr.cab
    O16 - DPF: {BE71A78B-77DB-451C-A761-59B37022D544} - http://pictures.aolcdn.com/ap/Resour...s.10.1.0.0.cab
    O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
    O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
    O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
    O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
    O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
    O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
    O23 - Service: Diskeeper - Executive Software International, Inc. - C:\Program Files\Executive Software\DiskeeperLite\DKService.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
    O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe



    "AbiWord 2.4.4 (remove only)"
    AbiWord's Tools Plugins (remove only)
    Acronis True Image Home
    Ad-Aware SE Personal
    Adobe Reader 7.0.5
    ATI Control Panel
    ATI Display Driver
    avast! Antivirus
    Bug Doctor 3.0.3.8
    CCleaner (remove only)
    Data Fax SoftModem with SmartCP
    Diskeeper Lite
    ePrompter
    FastStone Photo Resizer 1.4
    High Definition Audio Driver Package - KB888111
    HijackThis 1.99.1
    Hotfix for Windows Media Format SDK (KB902344)
    Hotfix for Windows Media Player 10 (KB903157)
    Hotfix for Windows XP (KB888795)
    Hotfix for Windows XP (KB891593)
    Hotfix for Windows XP (KB895961)
    Hotfix for Windows XP (KB896344)
    Hotfix for Windows XP (KB899337)
    Hotfix for Windows XP (KB899510)
    Hotfix for Windows XP (KB902841)
    Hotfix for Windows XP (KB912024)
    HP Boot Optimizer
    HP Deskjet 5400 series
    HP DigitalMedia Archive
    HP Extended Capabilities 5.0
    HP Image Zone Express
    HP Imaging Device Functions 5.0
    HP Multimedia Keyboard Software
    HP Software Update
    HP Wireless Keyboard Driver V1.7 (2.0.W-127AU MUL)
    InterVideo WinDVD Player
    IrfanView (remove only)
    J2SE Runtime Environment 5.0
    J2SE Runtime Environment 5.0 Update 6
    Macromedia Flash Player 8
    Macromedia Flash Player 8
    Macromedia Shockwave Player
    Microsoft .NET Framework 1.0 Hotfix (KB887998)
    Microsoft .NET Framework 1.1
    Microsoft .NET Framework 1.1
    Microsoft .NET Framework 1.1 Hotfix (KB886903)
    Microsoft .NET Framework 2.0
    Microsoft Base Smart Card Cryptographic Service Provider Package
    Microsoft Plus! Digital Media Edition Installer
    Microsoft User-Mode Driver Framework Feature Pack 1.0.0 (Pre-Release 5348)
    MP3Rocket
    muvee autoProducer 4.0
    Netscape Browser (remove only)
    Pop-Up Stopper Free Edition
    PS2
    RealPlayer
    RegBlock
    Security Update for Step By Step Interactive Training (KB898458)
    Security Update for Windows Media Player 10 (KB911565)
    Security Update for Windows XP (KB883939)
    Security Update for Windows XP (KB890046)
    Security Update for Windows XP (KB893756)
    Security Update for Windows XP (KB896358)
    Security Update for Windows XP (KB896422)
    Security Update for Windows XP (KB896423)
    Security Update for Windows XP (KB896424)
    Security Update for Windows XP (KB896428)
    Security Update for Windows XP (KB899587)
    Security Update for Windows XP (KB899589)
    Security Update for Windows XP (KB899591)
    Security Update for Windows XP (KB900725)
    Security Update for Windows XP (KB901017)
    Security Update for Windows XP (KB901214)
    Security Update for Windows XP (KB902400)
    Security Update for Windows XP (KB904706)
    Security Update for Windows XP (KB905414)
    Security Update for Windows XP (KB905749)
    Security Update for Windows XP (KB905915)
    Security Update for Windows XP (KB908519)
    Security Update for Windows XP (KB908531)
    Security Update for Windows XP (KB911562)
    Security Update for Windows XP (KB911567)
    Security Update for Windows XP (KB911927)
    Security Update for Windows XP (KB912812)
    Security Update for Windows XP (KB912919)
    Security Update for Windows XP (KB913446)
    Security Update for Windows XP (KB913580)
    Sonic Encoders
    Sonic Express Labeler
    Sonic MyDVD Plus
    Sonic RecordNow Audio
    Sonic RecordNow Copy
    Sonic RecordNow Data
    Sonic Update Manager
    Spy Sweeper
    Spybot - Search & Destroy 1.4
    SpywareBlaster v3.5.1
    SpywareGuard v2.2
    Update for Windows Media Player 10 (KB910393)
    Update for Windows Media Player 10 (KB913800)
    Update for Windows XP (KB894391)
    Update for Windows XP (KB898461)
    Update for Windows XP (KB900485)
    Update for Windows XP (KB900930)
    Update for Windows XP (KB904942)
    Update for Windows XP (KB910437)
    Update for Windows XP (KB912945)
    Update Rollup 2 for Windows XP Media Center Edition 2005
    Updates from HP (remove only)
    Windows Backup Utility
    Windows Defender Signatures
    Windows Genuine Advantage v1.3.0254.0
    Windows Installer 3.1 (KB893803)
    Windows Media Connect
    Windows Media Format 11 runtime
    Windows Media Format 11 runtime
    Windows Media Player 10 Hotfix [See KB889858 for more information]
    Windows Media Player 11
    Windows Media Player 11
    Windows XP Hotfix - KB873339
    Windows XP Hotfix - KB883667
    Windows XP Hotfix - KB885250
    Windows XP Hotfix - KB885354
    Windows XP Hotfix - KB885835
    Windows XP Hotfix - KB885836
    Windows XP Hotfix - KB886185
    Windows XP Hotfix - KB887472
    Windows XP Hotfix - KB887742
    Windows XP Hotfix - KB887797
    Windows XP Hotfix - KB888113
    Windows XP Hotfix - KB888302
    Windows XP Hotfix - KB890175
    Windows XP Hotfix - KB890859
    Windows XP Hotfix - KB891220
    Windows XP Hotfix - KB891781
    Windows XP Hotfix - KB893066
    Windows XP Media Center Edition 2005 KB888316
    Windows XP Media Center Edition 2005 KB895678
    Windows XP Media Center Edition 2005 KB908250
    Windows XP Media Center Edition 2005 KB912067
    WinPatrol
    Yahoo! Mail Quick Select Tool (PhotoMail)



    ss-safe mode

    ********
    12:23 AM: | Start of Session, Friday, June 09, 2006 |
    12:23 AM: Spy Sweeper started
    12:23 AM: Sweep initiated using definitions version 694
    12:23 AM: Starting Memory Sweep
    12:25 AM: Memory Sweep Complete, Elapsed Time: 00:01:23
    12:25 AM: Starting Registry Sweep
    12:25 AM: Registry Sweep Complete, Elapsed Time:00:00:12
    12:25 AM: Starting Cookie Sweep
    12:25 AM: Cookie Sweep Complete, Elapsed Time: 00:00:00
    12:25 AM: Starting File Sweep
    12:57 AM: Warning: Failed to open file "c:\documents and settings\hp_administrator\my documents\my music\comedy\". The system cannot find the path specified
    1:04 AM: File Sweep Complete, Elapsed Time: 00:38:16
    1:04 AM: Full Sweep has completed. Elapsed time 00:40:08
    1:04 AM: Traces Found: 0
    11:50 AM: Program Version 4.5.9 (Build 709) Using Spyware Definitions 694
    ********
    8:50 PM: | Start of Session, Thursday, June 08, 2006 |
    8:50 PM: Spy Sweeper started
    8:50 PM: Sweep initiated using definitions version 694
    8:50 PM: Starting Memory Sweep
    8:53 PM: Memory Sweep Complete, Elapsed Time: 00:02:58
    8:53 PM: Starting Registry Sweep
    8:53 PM: Registry Sweep Complete, Elapsed Time:00:00:10
    8:53 PM: Starting Cookie Sweep
    8:53 PM: Cookie Sweep Complete, Elapsed Time: 00:00:00
    8:53 PM: Starting File Sweep
    9:10 PM: Warning: Failed to open file "c:\documents and settings\hp_administrator\my documents\my music\comedy\". The system cannot find the path specified
    9:13 PM: File Sweep Complete, Elapsed Time: 00:20:13
    9:13 PM: Full Sweep has completed. Elapsed time 00:23:24
    9:13 PM: Traces Found: 0
    9:15 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    9:15 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    9:15 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    9:15 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    9:15 PM: IE Tracking Cookies Shield: Removed ru4 cookie
    9:17 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    9:17 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    9:18 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    9:18 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    9:20 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    9:20 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    9:20 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    9:21 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    9:21 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    9:21 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    9:22 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    9:23 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    9:23 PM: IE Tracking Cookies Shield: Removed falkag cookie
    9:23 PM: IE Tracking Cookies Shield: Removed realmedia cookie
    9:23 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    9:24 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    9:42 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    9:46 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    9:46 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    9:46 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    9:52 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    9:52 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    9:58 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    9:59 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    10:01 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    10:01 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    10:01 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    10:02 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    10:02 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    10:02 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    10:02 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    10:02 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    10:02 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    10:05 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    10:11 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    10:11 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    10:17 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    10:18 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    10:18 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    10:38 PM: IE Tracking Cookies Shield: Removed nextag cookie
    10:38 PM: IE Tracking Cookies Shield: Removed nextag cookie
    10:38 PM: IE Tracking Cookies Shield: Removed nextag cookie
    10:42 PM: IE Tracking Cookies Shield: Removed pointroll cookie
    10:43 PM: IE Tracking Cookies Shield: Removed nextag cookie
    10:43 PM: IE Tracking Cookies Shield: Removed nextag cookie
    10:43 PM: IE Tracking Cookies Shield: Removed nextag cookie
    10:43 PM: IE Tracking Cookies Shield: Removed nextag cookie
    10:58 PM: IE Tracking Cookies Shield: Removed nextag cookie
    10:58 PM: IE Tracking Cookies Shield: Removed nextag cookie
    10:58 PM: IE Tracking Cookies Shield: Removed nextag cookie
    10:58 PM: IE Tracking Cookies Shield: Removed nextag cookie
    10:59 PM: IE Tracking Cookies Shield: Removed nextag cookie
    10:59 PM: IE Tracking Cookies Shield: Removed nextag cookie
    10:59 PM: IE Tracking Cookies Shield: Removed nextag cookie
    10:59 PM: IE Tracking Cookies Shield: Removed nextag cookie
    11:25 PM: IE Tracking Cookies Shield: Removed nextag cookie
    11:25 PM: IE Tracking Cookies Shield: Removed nextag cookie
    11:25 PM: IE Tracking Cookies Shield: Removed nextag cookie
    11:25 PM: IE Tracking Cookies Shield: Removed nextag cookie
    11:25 PM: IE Tracking Cookies Shield: Removed nextag cookie
    11:25 PM: IE Tracking Cookies Shield: Removed nextag cookie
    11:25 PM: IE Tracking Cookies Shield: Removed nextag cookie
    11:25 PM: IE Tracking Cookies Shield: Removed nextag cookie
    11:27 PM: IE Tracking Cookies Shield: Removed nextag cookie
    11:27 PM: IE Tracking Cookies Shield: Removed nextag cookie
    11:27 PM: IE Tracking Cookies Shield: Removed nextag cookie
    11:27 PM: IE Tracking Cookies Shield: Removed nextag cookie
    11:27 PM: IE Tracking Cookies Shield: Removed nextag cookie
    11:27 PM: IE Tracking Cookies Shield: Removed nextag cookie
    11:27 PM: IE Tracking Cookies Shield: Removed nextag cookie
    11:27 PM: IE Tracking Cookies Shield: Removed nextag cookie
    11:46 PM: IE Tracking Cookies Shield: Removed specificclick.com cookie
    11:56 PM: IE Tracking Cookies Shield: Removed yieldmanager cookie
    12:01 AM: IE Tracking Cookies Shield: Removed yieldmanager cookie
    12:06 AM: IE Tracking Cookies Shield: Removed yieldmanager cookie
    12:13 AM: IE Tracking Cookies Shield: Removed onestat.com cookie
    12:23 AM: Program Version 4.5.9 (Build 709) Using Spyware Definitions 694
    12:23 AM: | End of Session, Friday, June 09, 2006 |
    ********
    11:37 PM: | Start of Session, Tuesday, June 06, 2006 |
    11:37 PM: Spy Sweeper started
    11:37 PM: Sweep initiated using definitions version 692
    11:38 PM: Starting Memory Sweep
    11:40 PM: Memory Sweep Complete, Elapsed Time: 00:02:52
    11:40 PM: Starting Registry Sweep
    11:41 PM: Registry Sweep Complete, Elapsed Time:00:00:10
    11:41 PM: Starting Cookie Sweep
    11:41 PM: Cookie Sweep Complete, Elapsed Time: 00:00:00
    11:41 PM: Starting File Sweep
    11:58 PM: Warning: Failed to open file "c:\documents and settings\hp_administrator\my documents\my music\comedy\". The system cannot find the path specified
    12:01 AM: File Sweep Complete, Elapsed Time: 00:20:35
    12:01 AM: Full Sweep has completed. Elapsed time 00:23:39
    12:01 AM: Traces Found: 0
    1:35 AM: Processing Startup Alerts
    1:35 AM: Removed Startup entry: TkBellExe
    1:35 AM: Removed Startup entry: ISUSPM Startup
    1:36 AM: Processing Startup Alerts
    1:36 AM: Removed Startup entry: TkBellExe
    1:36 AM: Processing Startup Alerts
    1:36 AM: Removed Startup entry: ISUSPM Startup
    3:19 AM: Processing Startup Alerts
    3:19 AM: Removed Startup entry: TkBellExe
    3:19 AM: Removed Startup entry: ISUSPM Startup
    7:13 AM: Processing Startup Alerts
    7:13 AM: Removed Startup entry: TkBellExe
    7:13 AM: Removed Startup entry: ISUSPM Startup
    7:39 AM: Processing Startup Alerts
    7:39 AM: Removed Startup entry: TkBellExe
    7:39 AM: Processing Startup Alerts
    7:39 AM: Removed Startup entry: ISUSPM Startup
    7:49 AM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    7:49 AM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    7:49 AM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    7:49 AM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    7:49 AM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    7:49 AM: IE Tracking Cookies Shield: Removed ru4 cookie
    7:50 AM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    7:50 AM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    7:50 AM: IE Tracking Cookies Shield: Removed ru4 cookie
    7:51 AM: IE Tracking Cookies Shield: Removed zedo cookie
    7:51 AM: IE Tracking Cookies Shield: Removed zedo cookie
    7:51 AM: IE Tracking Cookies Shield: Removed zedo cookie
    7:52 AM: Processing Startup Alerts
    7:52 AM: Removed Startup entry: ppupdstub
    7:52 AM: IE Tracking Cookies Shield: Removed zedo cookie
    7:52 AM: IE Tracking Cookies Shield: Removed belnk cookie
    7:55 AM: IE Tracking Cookies Shield: Removed adecn cookie
    7:55 AM: IE Tracking Cookies Shield: Removed zedo cookie
    8:09 AM: IE Tracking Cookies Shield: Removed specificclick.com cookie
    8:09 AM: IE Tracking Cookies Shield: Removed specificclick.com cookie
    8:11 AM: IE Tracking Cookies Shield: Removed specificclick.com cookie
    8:29 AM: IE Tracking Cookies Shield: Removed specificclick.com cookie
    8:29 AM: IE Tracking Cookies Shield: Removed specificclick.com cookie
    8:45 AM: IE Tracking Cookies Shield: Removed specificclick.com cookie
    9:05 AM: IE Tracking Cookies Shield: Removed yieldmanager cookie
    9:07 AM: IE Tracking Cookies Shield: Removed yieldmanager cookie
    9:07 AM: IE Tracking Cookies Shield: Removed yieldmanager cookie
    9:12 AM: IE Tracking Cookies Shield: Removed yieldmanager cookie
    9:12 AM: IE Tracking Cookies Shield: Removed zedo cookie
    9:12 AM: IE Tracking Cookies Shield: Removed zedo cookie
    9:17 AM: IE Tracking Cookies Shield: Removed yieldmanager cookie
    9:30 AM: IE Tracking Cookies Shield: Removed yieldmanager cookie
    9:31 AM: IE Tracking Cookies Shield: Removed adecn cookie
    12:59 PM: IE Tracking Cookies Shield: Removed zedo cookie
    1:12 PM: IE Tracking Cookies Shield: Removed yieldmanager cookie
    1:12 PM: IE Tracking Cookies Shield: Removed yieldmanager cookie
    1:36 PM: IE Tracking Cookies Shield: Removed adecn cookie
    1:36 PM: IE Tracking Cookies Shield: Removed adecn cookie
    1:36 PM: IE Tracking Cookies Shield: Removed adecn cookie
    1:40 PM: IE Tracking Cookies Shield: Removed adecn cookie
    1:41 PM: IE Tracking Cookies Shield: Removed zedo cookie
    1:41 PM: IE Tracking Cookies Shield: Removed zedo cookie
    1:41 PM: IE Tracking Cookies Shield: Removed zedo cookie
    1:41 PM: IE Tracking Cookies Shield: Removed zedo cookie
    3:29 PM: IE Tracking Cookies Shield: Removed adecn cookie
    3:59 PM: IE Tracking Cookies Shield: Removed adecn cookie
    4:29 PM: IE Tracking Cookies Shield: Removed adecn cookie
    4:29 PM: IE Tracking Cookies Shield: Removed adecn cookie
    6:38 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    6:38 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    6:38 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    6:38 PM: IE Tracking Cookies Shield: Removed ru4 cookie
    6:42 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    6:43 PM: IE Tracking Cookies Shield: Removed server.iad.liveperson cookie
    6:43 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    6:43 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    7:53 PM: IE Tracking Cookies Shield: Removed nextag cookie
    7:57 PM: IE Tracking Cookies Shield: Removed nextag cookie
    7:58 PM: IE Tracking Cookies Shield: Removed nextag cookie
    8:02 PM: IE Tracking Cookies Shield: Removed nextag cookie
    8:02 PM: IE Tracking Cookies Shield: Removed nextag cookie
    8:10 PM: IE Tracking Cookies Shield: Removed nextag cookie
    8:11 PM: IE Tracking Cookies Shield: Removed nextag cookie
    8:17 PM: IE Tracking Cookies Shield: Removed nextag cookie
    8:17 PM: IE Tracking Cookies Shield: Removed nextag cookie
    8:22 PM: IE Tracking Cookies Shield: Removed nextag cookie
    8:23 PM: IE Tracking Cookies Shield: Removed nextag cookie
    8:41 PM: IE Tracking Cookies Shield: Removed nextag cookie
    8:41 PM: IE Tracking Cookies Shield: Removed nextag cookie
    8:41 PM: IE Tracking Cookies Shield: Removed nextag cookie
    8:41 PM: IE Tracking Cookies Shield: Removed nextag cookie
    9:21 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    9:21 PM: IE Tracking Cookies Shield: Removed ru4 cookie
    9:22 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:22 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:26 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:26 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:26 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:27 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:27 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:27 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:28 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:28 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:28 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:28 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:28 PM: IE Tracking Cookies Shield: Removed adrevolver cookie
    9:28 PM: IE Tracking Cookies Shield: Removed adrevolver cookie
    9:28 PM: IE Tracking Cookies Shield: Removed adrevolver cookie
    9:28 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:28 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:28 PM: IE Tracking Cookies Shield: Removed adknowledge cookie
    9:28 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:30 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:39 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:40 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:41 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:43 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:44 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:44 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:45 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:45 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:45 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:45 PM: IE Tracking Cookies Shield: Removed adknowledge cookie
    9:45 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:45 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:45 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:45 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:46 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:46 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:47 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:48 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:48 PM: IE Tracking Cookies Shield: Removed yieldmanager cookie
    9:48 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:48 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:48 PM: IE Tracking Cookies Shield: Removed realmedia cookie
    9:48 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:48 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:48 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:53 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    9:53 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    9:53 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    9:53 PM: IE Tracking Cookies Shield: Removed ru4 cookie
    9:53 PM: IE Tracking Cookies Shield: Removed commission junction cookie
    9:53 PM: IE Tracking Cookies Shield: Removed commission junction cookie
    9:53 PM: IE Tracking Cookies Shield: Removed commission junction cookie
    9:54 PM: IE Tracking Cookies Shield: Removed commission junction cookie
    11:02 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:02 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:02 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:02 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:03 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:03 PM: IE Tracking Cookies Shield: Removed yieldmanager cookie
    11:03 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:03 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:03 PM: IE Tracking Cookies Shield: Removed adrevolver cookie
    11:03 PM: IE Tracking Cookies Shield: Removed adrevolver cookie
    11:03 PM: IE Tracking Cookies Shield: Removed adknowledge cookie
    11:03 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:03 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:03 PM: IE Tracking Cookies Shield: Removed adrevolver cookie
    11:03 PM: IE Tracking Cookies Shield: Removed adrevolver cookie
    11:03 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:03 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:03 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:03 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:03 PM: IE Tracking Cookies Shield: Removed valuead cookie
    11:03 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:03 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:03 PM: IE Tracking Cookies Shield: Removed adknowledge cookie
    11:03 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:04 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:04 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:04 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:04 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:04 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:04 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:08 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:09 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:09 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:10 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:10 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:10 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:10 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:16 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:16 PM: IE Tracking Cookies Shield: Removed adknowledge cookie
    11:16 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:17 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:17 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:18 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:18 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:18 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:18 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:19 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:19 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:19 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:19 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:20 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:20 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:21 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:21 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:22 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:22 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:24 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:27 PM: IE Tracking Cookies Shield: Removed statcounter cookie
    11:27 PM: IE Tracking Cookies Shield: Removed statcounter cookie
    11:28 PM: IE Tracking Cookies Shield: Removed statcounter cookie
    11:28 PM: IE Tracking Cookies Shield: Removed statcounter cookie
    11:28 PM: IE Tracking Cookies Shield: Removed statcounter cookie
    11:29 PM: IE Tracking Cookies Shield: Removed statcounter cookie
    11:29 PM: IE Tracking Cookies Shield: Removed statcounter cookie
    11:29 PM: IE Tracking Cookies Shield: Removed statcounter cookie
    11:29 PM: IE Tracking Cookies Shield: Removed statcounter cookie
    11:29 PM: IE Tracking Cookies Shield: Removed statcounter cookie
    11:29 PM: IE Tracking Cookies Shield: Removed statcounter cookie
    11:31 PM: IE Tracking Cookies Shield: Removed statcounter cookie
    11:31 PM: IE Tracking Cookies Shield: Removed statcounter cookie
    11:31 PM: IE Tracking Cookies Shield: Removed statcounter cookie
    11:31 PM: IE Tracking Cookies Shield: Removed statcounter cookie
    11:32 PM: IE Tracking Cookies Shield: Removed statcounter cookie
    11:32 PM: IE Tracking Cookies Shield: Removed statcounter cookie
    11:32 PM: IE Tracking Cookies Shield: Removed statcounter cookie
    11:32 PM: IE Tracking Cookies Shield: Removed statcounter cookie
    11:32 PM: IE Tracking Cookies Shield: Removed statcounter cookie
    11:33 PM: IE Tracking Cookies Shield: Removed statcounter cookie
    11:33 PM: IE Tracking Cookies Shield: Removed statcounter cookie
    11:33 PM: IE Tracking Cookies Shield: Removed statcounter cookie
    11:33 PM: IE Tracking Cookies Shield: Removed statcounter cookie
    11:34 PM: IE Tracking Cookies Shield: Removed statcounter cookie
    11:34 PM: IE Tracking Cookies Shield: Removed statcounter cookie
    11:35 PM: IE Tracking Cookies Shield: Removed statcounter cookie
    11:36 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:36 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:36 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:37 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:37 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:37 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:37 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:39 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:39 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:39 PM: IE Tracking Cookies Shield: Removed adrevolver cookie
    11:39 PM: IE Tracking Cookies Shield: Removed adrevolver cookie
    11:39 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:41 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:42 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:42 PM: IE Tracking Cookies Shield: Removed valuead cookie
    11:42 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:42 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:42 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:42 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:42 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:42 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:44 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:44 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:50 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:50 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:53 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:53 PM: IE Tracking Cookies Shield: Removed adknowledge cookie
    11:53 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:53 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:53 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:54 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:54 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:54 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:54 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:55 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:55 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:55 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:55 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:55 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:55 PM: IE Tracking Cookies Shield: Removed adknowledge cookie
    11:55 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:56 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:57 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:57 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:57 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:57 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:58 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:58 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:58 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:58 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:59 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:59 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:59 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:59 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:59 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:59 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:59 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    11:59 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    12:00 AM: IE Tracking Cookies Shield: Removed bravenet cookie
    12:00 AM: IE Tracking Cookies Shield: Removed bravenet cookie
    12:00 AM: IE Tracking Cookies Shield: Removed adknowledge cookie
    12:00 AM: IE Tracking Cookies Shield: Removed bravenet cookie
    12:00 AM: IE Tracking Cookies Shield: Removed bravenet cookie
    12:00 AM: IE Tracking Cookies Shield: Removed bravenet cookie
    12:00 AM: IE Tracking Cookies Shield: Removed bravenet cookie
    12:00 AM: IE Tracking Cookies Shield: Removed adknowledge cookie
    12:00 AM: IE Tracking Cookies Shield: Removed bravenet cookie
    12:02 AM: IE Tracking Cookies Shield: Removed bravenet cookie
    12:02 AM: IE Tracking Cookies Shield: Removed bravenet cookie
    12:02 AM: IE Tracking Cookies Shield: Removed adknowledge cookie
    12:02 AM: IE Tracking Cookies Shield: Removed bravenet cookie
    12:02 AM: IE Tracking Cookies Shield: Removed bravenet cookie
    12:02 AM: IE Tracking Cookies Shield: Removed bravenet cookie
    12:03 AM: IE Tracking Cookies Shield: Removed bravenet cookie
    12:03 AM: IE Tracking Cookies Shield: Removed bravenet cookie
    12:03 AM: IE Tracking Cookies Shield: Removed bravenet cookie
    12:03 AM: IE Tracking Cookies Shield: Removed adrevolver cookie
    12:03 AM: IE Tracking Cookies Shield: Removed adrevolver cookie
    12:03 AM: IE Tracking Cookies Shield: Removed bravenet cookie
    12:03 AM: IE Tracking Cookies Shield: Removed bravenet cookie
    12:03 AM: IE Tracking Cookies Shield: Removed bravenet cookie
    12:03 AM: IE Tracking Cookies Shield: Removed bravenet cookie
    12:09 AM: IE Tracking Cookies Shield: Removed bravenet cookie
    12:09 AM: IE Tracking Cookies Shield: Removed bravenet cookie
    12:09 AM: IE Tracking Cookies Shield: Removed bravenet cookie
    12:11 AM: IE Tracking Cookies Shield: Removed bravenet cookie
    12:11 AM: IE Tracking Cookies Shield: Removed bravenet cookie
    12:14 AM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    12:14 AM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    12:14 AM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    12:14 AM: IE Tracking Cookies Shield: Removed ru4 cookie
    12:14 AM: IE Tracking Cookies Shield: Removed bravenet cookie
    12:14 AM: IE Tracking Cookies Shield: Removed bravenet cookie
    12:14 AM: IE Tracking Cookies Shield: Removed bravenet cookie
    12:14 AM: IE Tracking Cookies Shield: Removed bravenet cookie
    12:15 AM: IE Tracking Cookies Shield: Removed bravenet cookie
    12:15 AM: IE Tracking Cookies Shield: Removed bravenet cookie
    12:15 AM: IE Tracking Cookies Shield: Removed adrevolver cookie
    12:15 AM: IE Tracking Cookies Shield: Removed adrevolver cookie
    12:15 AM: IE Tracking Cookies Shield: Removed bravenet cookie
    12:15 AM: IE Tracking Cookies Shield: Removed bravenet cookie
    12:15 AM: IE Tracking Cookies Shield: Removed bravenet cookie
    12:15 AM: IE Tracking Cookies Shield: Removed bravenet cookie
    12:16 AM: IE Tracking Cookies Shield: Removed bravenet cookie
    12:16 AM: IE Tracking Cookies Shield: Removed bravenet cookie
    12:16 AM: IE Tracking Cookies Shield: Removed bravenet cookie
    12:16 AM: IE Tracking Cookies Shield: Removed bravenet cookie
    12:16 AM: IE Tracking Cookies Shield: Removed bravenet cookie
    12:16 AM: IE Tracking Cookies Shield: Removed bravenet cookie
    12:59 AM: IE Tracking Cookies Shield: Removed bravenet cookie
    12:59 AM: IE Tracking Cookies Shield: Removed bravenet cookie
    12:59 AM: IE Tracking Cookies Shield: Removed bravenet cookie
    1:06 AM: IE Tracking Cookies Shield: Removed bravenet cookie
    1:06 AM: IE Tracking Cookies Shield: Removed adknowledge cookie
    1:07 AM: IE Tracking Cookies Shield: Removed bravenet cookie
    1:07 AM: IE Tracking Cookies Shield: Removed bravenet cookie
    1:07 AM: IE Tracking Cookies Shield: Removed bravenet cookie
    1:24 AM: IE Tracking Cookies Shield: Removed commission junction cookie
    1:24 AM: IE Tracking Cookies Shield: Removed commission junction cookie
    1:25 AM: IE Tracking Cookies Shield: Removed commission junction cookie
    2:06 AM: Your spyware definitions have been updated.
    2:15 PM: Processing Internet Explorer Favorites Alerts
    2:15 PM: Removed IE Favorite: JHS - Events
    2:16 PM: Processing Startup Alerts
    2:16 PM: Removed Startup entry: TkBellExe
    2:16 PM: Processing Startup Alerts
    2:16 PM: Removed Startup entry: ISUSPM Startup
    2:17 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    2:17 PM: IE Tracking Cookies Shield: Removed ru4 cookie
    2:19 PM: IE Tracking Cookies Shield: Removed tacoda cookie
    2:50 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    2:50 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    2:50 PM: IE Tracking Cookies Shield: Removed ru4 cookie
    3:21 PM: Processing Startup Alerts
    3:21 PM: Removed Startup entry: TkBellExe
    3:21 PM: Processing Startup Alerts
    3:21 PM: Removed Startup entry: ISUSPM Startup
    5:25 PM: Processing Startup Alerts
    5:25 PM: Allowed Startup entry: TkBellExe
    5:25 PM: Processing Startup Alerts
    5:25 PM: Allowed Startup entry: ISUSPM Startup
    5:29 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    5:29 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    5:29 PM: IE Tracking Cookies Shield: Removed ru4 cookie
    5:32 PM: Processing Startup Alerts
    5:32 PM: Removed Startup entry: MSMSGS
    6:38 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    6:38 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    6:39 PM: IE Tracking Cookies Shield: Removed ru4 cookie
    6:42 PM: IE Tracking Cookies Shield: Removed realmedia cookie
    6:42 PM: IE Tracking Cookies Shield: Removed realmedia cookie
    6:42 PM: IE Tracking Cookies Shield: Removed realmedia cookie
    6:42 PM: IE Tracking Cookies Shield: Removed realmedia cookie
    6:42 PM: IE Tracking Cookies Shield: Removed realmedia cookie
    6:43 PM: IE Tracking Cookies Shield: Removed realmedia cookie
    6:43 PM: IE Tracking Cookies Shield: Removed realmedia cookie
    6:43 PM: IE Tracking Cookies Shield: Removed realmedia cookie
    6:44 PM: IE Tracking Cookies Shield: Removed realmedia cookie
    6:44 PM: IE Tracking Cookies Shield: Removed realmedia cookie
    6:44 PM: IE Tracking Cookies Shield: Removed realmedia cookie
    6:46 PM: IE Tracking Cookies Shield: Removed realmedia cookie
    6:46 PM: IE Tracking Cookies Shield: Removed realmedia cookie
    6:46 PM: IE Tracking Cookies Shield: Removed realmedia cookie
    6:46 PM: IE Tracking Cookies Shield: Removed realmedia cookie
    6:47 PM: IE Tracking Cookies Shield: Removed realmedia cookie
    6:47 PM: IE Tracking Cookies Shield: Removed realmedia cookie
    7:13 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    7:13 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    7:13 PM: IE Tracking Cookies Shield: Removed 2o7.net cookie
    7:13 PM: IE Tracking Cookies Shield: Removed ru4 cookie
    7:15 PM: IE Tracking Cookies Shield: Removed zedo cookie
    7:15 PM: IE Tracking Cookies Shield: Removed zedo cookie
    7:15 PM: IE Tracking Cookies Shield: Removed zedo cookie
    7:15 PM: IE Tracking Cookies Shield: Removed zedo cookie
    7:16 PM: IE Tracking Cookies Shield: Removed zedo cookie
    7:16 PM: IE Tracking Cookies Shield: Removed zedo cookie
    7:21 PM: IE Tracking Cookies Shield: Removed zedo cookie
    7:21 PM: IE Tracking Cookies Shield: Removed belnk cookie
    7:21 PM: IE Tracking Cookies Shield: Removed zedo cookie
    7:36 PM: IE Tracking Cookies Shield: Removed zedo cookie
    8:16 PM: IE Tracking Cookies Shield: Removed specificclick.com cookie
    8:27 PM: IE Tracking Cookies Shield: Removed specificclick.com cookie
    8:32 PM: IE Tracking Cookies Shield: Removed specificclick.com cookie
    8:35 PM: IE Tracking Cookies Shield: Removed specificclick.com cookie
    8:35 PM: IE Tracking Cookies Shield: Removed specificclick.com cookie
    ********
    3:27 PM: | Start of Session, Monday, June 05, 2006 |
    3:27 PM: Spy Sweeper started
    3:27 PM: Sweep initiated using definitions version 691
    3:27 PM: Starting Memory Sweep
    3:27 PM: Sweep Canceled
    3:27 PM: Memory Sweep Complete, Elapsed Time: 00:00:03
    3:27 PM: Traces Found: 0
    3:28 PM: Processing Startup Alerts
    3:28 PM: Allowed Startup entry: TkBellExe
    3:28 PM: Allowed Startup entry: ISUSPM Startup
    4:06 PM: IE Tracking Cookies Shield: Removed zedo cookie
    4:06 PM: IE Tracking Cookies Shield: Removed belnk cookie
    4:06 PM: IE Tracking Cookies Shield: Removed zedo cookie
    4:06 PM: IE Tracking Cookies Shield: Removed zedo cookie
    4:11 PM: IE Tracking Cookies Shield: Removed zedo cookie
    4:18 PM: IE Tracking Cookies Shield: Removed zedo cookie
    4:18 PM: IE Tracking Cookies Shield: Removed zedo cookie
    4:19 PM: IE Tracking Cookies Shield: Removed specificclick.com cookie
    4:28 PM: IE Tracking Cookies Shield: Removed specificclick.com cookie
    4:29 PM: IE Tracking Cookies Shield: Removed specificclick.com cookie
    4:29 PM: IE Tracking Cookies Shield: Removed specificclick.com cookie
    4:30 PM: IE Tracking Cookies Shield: Removed adecn cookie
    4:49 PM: IE Tracking Cookies Shield: Removed specificclick.com cookie
    4:54 PM: IE Tracking Cookies Shield: Removed specificclick.com cookie
    5:04 PM: IE Tracking Cookies Shield: Removed yieldmanager cookie
    5:09 PM: IE Tracking Cookies Shield: Removed yieldmanager cookie
    5:14 PM: IE Tracking Cookies Shield: Removed yieldmanager cookie
    8:26 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:26 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:26 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:26 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:26 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:26 PM: IE Tracking Cookies Shield: Removed adrevolver cookie
    8:26 PM: IE Tracking Cookies Shield: Removed adrevolver cookie
    8:26 PM: IE Tracking Cookies Shield: Removed valuead cookie
    8:26 PM: IE Tracking Cookies Shield: Removed valuead cookie
    8:26 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:26 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:27 PM: IE Tracking Cookies Shield: Removed adknowledge cookie
    8:27 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:27 PM: IE Tracking Cookies Shield: Removed yieldmanager cookie
    8:27 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:27 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:27 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:27 PM: IE Tracking Cookies Shield: Removed adknowledge cookie
    8:27 PM: IE Tracking Cookies Shield: Removed adknowledge cookie
    8:27 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:30 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:30 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:34 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:17 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:17 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    12:30 AM: IE Tracking Cookies Shield: Removed nextag cookie
    1:09 AM: IE Tracking Cookies Shield: Removed pointroll cookie
    1:11 AM: IE Tracking Cookies Shield: Removed yieldmanager cookie
    1:12 AM: IE Tracking Cookies Shield: Removed pointroll cookie
    1:28 AM: IE Tracking Cookies Shield: Removed statcounter cookie
    1:30 AM: IE Tracking Cookies Shield: Removed statcounter cookie
    1:37 AM: IE Tracking Cookies Shield: Removed adecn cookie
    1:38 AM: IE Tracking Cookies Shield: Removed adecn cookie
    1:38 AM: IE Tracking Cookies Shield: Removed adecn cookie
    2:01 AM: Your spyware definitions have been updated.
    2:29 AM: IE Tracking Cookies Shield: Removed zedo cookie
    2:29 AM: IE Tracking Cookies Shield: Removed zedo cookie
    2:44 AM: IE Tracking Cookies Shield: Removed yieldmanager cookie
    2:44 AM: IE Tracking Cookies Shield: Removed yieldmanager cookie
    2:45 AM: IE Tracking Cookies Shield: Removed yieldmanager cookie
    5:08 AM: IE Tracking Cookies Shield: Removed yieldmanager cookie
    4:13 PM: IE Tracking Cookies Shield: Removed nextag cookie
    4:13 PM: IE Tracking Cookies Shield: Removed nextag cookie
    4:15 PM: IE Tracking Cookies Shield: Removed nextag cookie
    4:16 PM: IE Tracking Cookies Shield: Removed nextag cookie
    4:16 PM: IE Tracking Cookies Shield: Removed zedo cookie
    4:16 PM: IE Tracking Cookies Shield: Removed zedo cookie
    4:17 PM: IE Tracking Cookies Shield: Removed nextag cookie
    4:21 PM: IE Tracking Cookies Shield: Removed zedo cookie
    4:23 PM: IE Tracking Cookies Shield: Removed zedo cookie
    4:54 PM: IE Tracking Cookies Shield: Removed zedo cookie
    4:55 PM: IE Tracking Cookies Shield: Removed specificclick.com cookie
    4:55 PM: IE Tracking Cookies Shield: Removed specificclick.com cookie
    5:05 PM: IE Tracking Cookies Shield: Removed specificclick.com cookie
    5:10 PM: IE Tracking Cookies Shield: Removed specificclick.com cookie
    5:30 PM: IE Tracking Cookies Shield: Removed specificclick.com cookie
    5:40 PM: IE Tracking Cookies Shield: Removed yieldmanager cookie
    5:45 PM: IE Tracking Cookies Shield: Removed yieldmanager cookie
    5:50 PM: IE Tracking Cookies Shield: Removed yieldmanager cookie
    7:46 PM: IE Tracking Cookies Shield: Removed specificclick.com cookie
    8:15 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:15 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:15 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:15 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:15 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:15 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:15 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:15 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:15 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:15 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:15 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:16 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:16 PM: IE Tracking Cookies Shield: Removed adknowledge cookie
    8:16 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:16 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:16 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:16 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:17 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:19 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:21 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:21 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:21 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:22 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:22 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:22 PM: IE Tracking Cookies Shield: Removed adrevolver cookie
    8:22 PM: IE Tracking Cookies Shield: Removed adrevolver cookie
    8:22 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:22 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:22 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:23 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:23 PM: IE Tracking Cookies Shield: Removed adknowledge cookie
    8:23 PM: IE Tracking Cookies Shield: Removed adrevolver cookie
    8:23 PM: IE Tracking Cookies Shield: Removed adrevolver cookie
    8:23 PM: IE Tracking Cookies Shield: Removed adrevolver cookie
    8:23 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:23 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:23 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:23 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:23 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:24 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:25 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:25 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:25 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:25 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:26 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:26 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:26 PM: IE Tracking Cookies Shield: Removed cydoor cookie
    8:26 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:27 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:27 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:27 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:28 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:29 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:29 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:29 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:30 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:30 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:30 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:37 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:37 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:37 PM: IE Tracking Cookies Shield: Removed realmedia cookie
    8:37 PM: IE Tracking Cookies Shield: Removed adknowledge cookie
    8:37 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:37 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:37 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:37 PM: IE Tracking Cookies Shield: Removed adknowledge cookie
    8:38 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:38 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:38 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:38 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:38 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:43 PM: IE Tracking Cookies Shield: Removed commission junction cookie
    8:43 PM: IE Tracking Cookies Shield: Removed commission junction cookie
    8:43 PM: IE Tracking Cookies Shield: Removed commission junction cookie
    8:44 PM: IE Tracking Cookies Shield: Removed commission junction cookie
    8:49 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:49 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:49 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:49 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:50 PM: IE Tracking Cookies Shield: Removed valuead cookie
    8:50 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:50 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:50 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:50 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:50 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:50 PM: IE Tracking Cookies Shield: Removed adknowledge cookie
    8:50 PM: IE Tracking Cookies Shield: Removed adknowledge cookie
    8:50 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:50 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:51 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:51 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:51 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:51 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:52 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:52 PM: IE Tracking Cookies Shield: Removed adknowledge cookie
    8:52 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:52 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:52 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:52 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:52 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    8:53 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:12 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:12 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:12 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:12 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:12 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:12 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:12 PM: IE Tracking Cookies Shield: Removed yieldmanager cookie
    9:12 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:12 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:12 PM: IE Tracking Cookies Shield: Removed adknowledge cookie
    9:12 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:12 PM: IE Tracking Cookies Shield: Removed yieldmanager cookie
    9:12 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:12 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:12 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:12 PM: IE Tracking Cookies Shield: Removed adknowledge cookie
    9:13 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:13 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:13 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:13 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:14 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:14 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:14 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:14 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:14 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:15 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:15 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:23 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:24 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:24 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:24 PM: IE Tracking Cookies Shield: Removed adrevolver cookie
    9:24 PM: IE Tracking Cookies Shield: Removed adrevolver cookie
    9:24 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:24 PM: IE Tracking Cookies Shield: Removed adknowledge cookie
    9:24 PM: IE Tracking Cookies Shield: Removed adrevolver cookie
    9:24 PM: IE Tracking Cookies Shield: Removed adrevolver cookie
    9:25 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:25 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:25 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:26 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:26 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:26 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:26 PM: IE Tracking Cookies Shield: Removed adrevolver cookie
    9:26 PM: IE Tracking Cookies Shield: Removed adrevolver cookie
    9:26 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:26 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:26 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:27 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:27 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:27 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:27 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:28 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:28 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:28 PM: IE Tracking Cookies Shield: Removed adknowledge cookie
    9:28 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:28 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:28 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:28 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:28 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:29 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:29 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:29 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:29 PM: IE Tracking Cookies Shield: Removed adknowledge cookie
    9:29 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:30 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:30 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:30 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:30 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:30 PM: IE Tracking Cookies Shield: Removed adknowledge cookie
    9:31 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:31 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:31 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:31 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:31 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:31 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:31 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:32 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:32 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:32 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:32 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:32 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:32 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:32 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:32 PM: IE Tracking Cookies Shield: Removed adknowledge cookie
    9:32 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:32 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:33 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:33 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:33 PM: IE Tracking Cookies Shield: Removed adknowledge cookie
    9:33 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:35 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:35 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:35 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:35 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:35 PM: IE Tracking Cookies Shield: Removed addynamix cookie
    9:35 PM: IE Tracking Cookies Shield: Removed valuead cookie
    9:35 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:35 PM: IE Tracking Cookies Shield: Removed adknowledge cookie
    9:35 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:35 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:35 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:35 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:35 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:36 PM: IE Tracking Cookies Shield: Removed adknowledge cookie
    9:36 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:37 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:37 PM: IE Tracking Cookies Shield: Removed valuead cookie
    9:37 PM: IE Tracking Cookies Shield: Removed addynamix cookie
    9:37 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:37 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:37 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:38 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:38 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:38 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:38 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:38 PM: IE Tracking Cookies Shield: Removed adknowledge cookie
    9:38 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:38 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:38 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:39 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:39 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:39 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:39 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:40 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:40 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:40 PM: IE Tracking Cookies Shield: Removed adknowledge cookie
    9:40 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:40 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:40 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:40 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:41 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:41 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:41 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:41 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:41 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:41 PM: IE Tracking Cookies Shield: Removed valuead cookie
    9:41 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:42 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:42 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:42 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:43 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:43 PM: IE Tracking Cookies Shield: Removed adknowledge cookie
    9:43 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:43 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:43 PM: IE Tracking Cookies Shield: Removed adknowledge cookie
    9:43 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:44 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:44 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:44 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:44 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:44 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:44 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:44 PM: IE Tracking Cookies Shield: Removed adknowledge cookie
    9:44 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:45 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:45 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:45 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:45 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:46 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:46 PM: IE Tracking Cookies Shield: Removed adrevolver cookie
    9:46 PM: IE Tracking Cookies Shield: Removed adrevolver cookie
    9:46 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:51 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:52 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:52 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:52 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:52 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:52 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:52 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:52 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:53 PM: IE Tracking Cookies Shield: Removed adknowledge cookie
    9:53 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:53 PM: IE Tracking Cookies Shield: Removed adknowledge cookie
    9:53 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:53 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:53 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:53 PM: IE Tracking Cookies Shield: Removed adknowledge cookie
    9:53 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:54 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:54 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:54 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:54 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:55 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:55 PM: IE Tracking Cookies Shield: Removed adknowledge cookie
    9:55 PM: IE Tracking Cookies Shield: Removed addynamix cookie
    9:55 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:55 PM: IE Tracking Cookies Shield: Removed valuead cookie
    9:55 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:55 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:56 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:56 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:56 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:56 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    9:57 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    10:00 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    10:00 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    10:04 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    10:05 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    10:05 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    10:08 PM: IE Tracking Cookies Shield: Removed commission junction cookie
    10:10 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    10:10 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    10:14 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    10:25 PM: IE Tracking Cookies Shield: Removed commission junction cookie
    10:25 PM: IE Tracking Cookies Shield: Removed commission junction cookie
    10:26 PM: IE Tracking Cookies Shield: Removed commission junction cookie
    11:05 PM: IE Tracking Cookies Shield: Removed commission junction cookie
    11:06 PM: IE Tracking Cookies Shield: Removed commission junction cookie
    11:11 PM: IE Tracking Cookies Shield: Removed commission junction cookie
    11:12 PM: IE Tracking Cookies Shield: Removed realmedia cookie
    11:13 PM: IE Tracking Cookies Shield: Removed realmedia cookie
    11:13 PM: IE Tracking Cookies Shield: Removed realmedia cookie
    11:13 PM: IE Tracking Cookies Shield: Removed realmedia cookie
    11:13 PM: IE Tracking Cookies Shield: Removed realmedia cookie
    11:13 PM: IE Tracking Cookies Shield: Removed realmedia cookie
    11:13 PM: IE Tracking Cookies Shield: Removed realmedia cookie
    11:14 PM: IE Tracking Cookies Shield: Removed realmedia cookie
    11:14 PM: IE Tracking Cookies Shield: Removed realmedia cookie
    11:14 PM: IE Tracking Cookies Shield: Removed realmedia cookie
    11:14 PM: IE Tracking Cookies Shield: Removed realmedia cookie
    11:14 PM: IE Tracking Cookies Shield: Removed realmedia cookie
    11:15 PM: IE Tracking Cookies Shield: Removed realmedia cookie
    11:36 PM: Processing Startup Alerts
    11:36 PM: Removed Startup entry: TkBellExe
    11:36 PM: Removed Startup entry: ISUSPM Startup
    11:37 PM: | End of Session, Tuesday, June 06, 2006 |
    ********
    2:35 AM: | Start of Session, Monday, June 05, 2006 |
    2:35 AM: Spy Sweeper started
    2:43 AM: IE Tracking Cookies Shield: Removed tribalfusion cookie
    2:43 AM: IE Tracking Cookies Shield: Removed tribalfusion cookie
    2:43 AM: IE Tracking Cookies Shield: Removed tribalfusion cookie
    2:43 AM: IE Tracking Cookies Shield: Removed casalemedia cookie
    2:43 AM: IE Tracking Cookies Shield: Removed tribalfusion cookie
    2:43 AM: IE Tracking Cookies Shield: Removed tribalfusion cookie
    2:43 AM: IE Tracking Cookies Shield: Removed bluestreak cookie
    2:44 AM: IE Tracking Cookies Shield: Removed specificclick.com cookie
    2:44 AM: IE Tracking Cookies Shield: Removed bluestreak cookie
    2:45 AM: IE Tracking Cookies Shield: Removed yieldmanager cookie
    2:50 AM: IE Tracking Cookies Shield: Removed specificclick.com cookie
    2:55 AM: IE Tracking Cookies Shield: Removed trafficmp cookie
    2:55 AM: IE Tracking Cookies Shield: Removed trafficmp cookie
    2:58 AM: IE Tracking Cookies Shield: Removed adecn cookie
    2:58 AM: IE Tracking Cookies Shield: Removed specificclick.com cookie
    2:58 AM: IE Tracking Cookies Shield: Removed questionmarket cookie
    3:03 AM: IE Tracking Cookies Shield: Removed casalemedia cookie
    3:04 AM: IE Tracking Cookies Shield: Removed yieldmanager cookie
    3:04 AM: IE Tracking Cookies Shield: Removed trafficmp cookie
    3:04 AM: IE Tracking Cookies Shield: Removed trafficmp cookie
    3:04 AM: IE Tracking Cookies Shield: Removed bluestreak cookie
    3:09 AM: IE Tracking Cookies Shield: Removed trafficmp cookie
    3:14 AM: IE Tracking Cookies Shield: Removed trafficmp cookie
    3:14 AM: IE Tracking Cookies Shield: Removed trafficmp cookie
    3:19 AM: IE Tracking Cookies Shield: Removed trafficmp cookie
    3:19 AM: IE Tracking Cookies Shield: Removed trafficmp cookie
    3:24 AM: IE Tracking Cookies Shield: Removed yieldmanager cookie
    3:29 AM: IE Tracking Cookies Shield: Removed yieldmanager cookie
    3:34 AM: IE Tracking Cookies Shield: Removed yieldmanager cookie
    3:39 AM: IE Tracking Cookies Shield: Removed advertising cookie
    3:44 AM: IE Tracking Cookies Shield: Removed bluestreak cookie
    3:49 AM: IE Tracking Cookies Shield: Removed casalemedia cookie
    3:54 AM: IE Tracking Cookies Shield: Removed casalemedia cookie
    3:59 AM: IE Tracking Cookies Shield: Removed casalemedia cookie
    4:02 AM: IE Tracking Cookies Shield: Removed adecn cookie
    4:02 AM: IE Tracking Cookies Shield: Removed casalemedia cookie
    4:02 AM: IE Tracking Cookies Shield: Removed questionmarket cookie
    4:02 AM: IE Tracking Cookies Shield: Removed adecn cookie
    4:02 AM: IE Tracking Cookies Shield: Removed questionmarket cookie
    4:02 AM: IE Tracking Cookies Shield: Removed casalemedia cookie
    4:02 AM: IE Tracking Cookies Shield: Removed adecn cookie
    4:02 AM: IE Tracking Cookies Shield: Removed questionmarket cookie
    4:02 AM: IE Tracking Cookies Shield: Removed casalemedia cookie
    4:03 AM: IE Tracking Cookies Shield: Removed casalemedia cookie
    4:03 AM: IE Tracking Cookies Shield: Removed casalemedia cookie
    4:03 AM: IE Tracking Cookies Shield: Removed yieldmanager cookie
    4:03 AM: IE Tracking Cookies Shield: Removed casalemedia cookie
    12:44 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    12:44 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    12:47 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    12:47 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    12:47 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    12:47 PM: IE Tracking Cookies Shield: Removed atlas dmt cookie
    12:47 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    12:47 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    12:47 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    12:47 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    12:47 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    12:47 PM: IE Tracking Cookies Shield: Removed atlas dmt cookie
    12:47 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    12:47 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    12:47 PM: IE Tracking Cookies Shield: Removed adrevolver cookie
    12:47 PM: IE Tracking Cookies Shield: Removed adrevolver cookie
    12:47 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    12:52 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    12:57 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    1:37 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    1:38 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    1:38 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    1:39 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    1:39 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    1:42 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    1:43 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    1:43 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    1:43 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    1:44 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    1:45 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    1:45 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    1:45 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    1:45 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    1:45 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    1:45 PM: IE Tracking Cookies Shield: Removed mediaplex cookie
    1:45 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    1:46 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    1:46 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    1:56 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    1:56 PM: IE Tracking Cookies Shield: Removed bravenet cookie
    1:59 PM: IE Tracking Cookies Shield: Removed statcounter cookie
    2:00 PM: IE Tracking Cookies Shield: Removed statcounter cookie
    2:01 PM: IE Tracking Cookies Shield: Removed statcounter cookie
    2:02 PM: IE Tracking Cookies Shield: Removed statcounter cookie
    2:03 PM: IE Tracking Cookies Shield: Removed overture cookie
    2:03 PM: IE Tracking Cookies Shield: Removed statcounter cookie
    2:05 PM: IE Tracking Cookies Shield: Removed realmedia cookie
    2:05 PM: IE Tracking Cookies Shield: Removed realmedia cookie
    2:05 PM: IE Tracking Cookies Shield: Removed realmedia cookie
    2:05 PM: IE Tracking Cookies Shield: Removed realmedia cookie
    2:05 PM: IE Tracking Cookies Shield: Removed realmedia cookie
    2:06 PM: IE Tracking Cookies Shield: Removed realmedia cookie
    2:06 PM: IE Tracking Cookies Shield: Removed realmedia cookie
    2:07 PM: IE Tracking Cookies Shield: Removed realmedia cookie
    2:07 PM: IE Tracking Cookies Shield: Removed realmedia cookie
    2:07 PM: IE Tracking Cookies Shield: Removed realmedia cookie
    2:07 PM: IE Tracking Cookies Shield: Removed realmedia cookie
    2:07 PM: IE Tracking Cookies Shield: Removed zedo cookie
    2:07 PM: IE Tracking Cookies Shield: Removed realmedia cookie
    2:07 PM: IE Tracking Cookies Shield: Removed realmedia cookie
    2:08 PM: IE Tracking Cookies Shield: Removed statcounter cookie
    2:08 PM: IE Tracking Cookies Shield: Removed statcounter cookie
    2:09 PM: IE Tracking Cookies Shield: Removed statcounter cookie
    2:10 PM: IE Tracking Cookies Shield: Removed statcounter cookie
    2:10 PM: IE Tracking Cookies Shield: Removed statcounter cookie
    2:12 PM: IE Tracking Cookies Shield: Removed realmedia cookie
    2:12 PM: IE Tracking Cookies Shield: Removed realmedia cookie
    2:12 PM: IE Tracking Cookies Shield: Removed bluestreak cookie


    Thank you soooooooo much for your help! Hopefully, we're helping others too!

    Geni

  4. #4
    genihanna is offline Full Member
    Just out of curiousity, in the HJT log - are the 09s and the 021 bad stuff?

  5. #5
    Neal is offline Dedicated Member
    No not always bad.


    Please post a hijackthis log from normal mode instead of safe mode. Thanks.

  6. #6
    genihanna is offline Full Member
    Hi Neal - sorry about sending you the wrong HJT log - here's the regular-mode one: (If I forget to express my gratitude, please take these thanks in advance!)

    Logfile of HijackThis v1.99.1
    Scan saved at 7:43:09 PM, on 6/10/2006
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\ehome\ehtray.exe
    C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\ePrompter\ePrompter.exe
    C:\Program Files\SpywareGuard\sgmain.exe
    C:\Program Files\SpywareGuard\sgbhp.exe
    C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\WINDOWS\system32\cisvc.exe
    C:\Program Files\Executive Software\DiskeeperLite\DKService.exe
    C:\WINDOWS\eHome\ehRecvr.exe
    C:\WINDOWS\eHome\ehSched.exe
    C:\Program Files\Common Files\LightScribe\LSSrvc.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
    C:\WINDOWS\system32\dllhost.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\WINDOWS\eHome\ehmsas.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\HP\KBD\KBD.EXE
    C:\WINDOWS\ALCXMNTR.EXE
    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    c:\windows\system\hpsysdrv.exe
    C:\Program Files\Java\jre1.5.0\bin\jusched.exe
    C:\Program Files\Common Files\Real\Update_OB\realsched.exe
    C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
    C:\WINDOWS\system32\cidaemon.exe
    C:\WINDOWS\explorer.exe
    C:\PROGRA~1\Netscape\NETSCA~1\netscape.exe
    C:\Documents and Settings\HP_Administrator\My Documents\Unzipped\hijackthis\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TY...rm1=seconduser
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.symantec.com/techsupp/ser...ty&version=8.3
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer presented by Comcast
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll
    O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run
    O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
    O4 - HKLM\..\Run: [WinPatrol] C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [BtcMaestro] C:\Program Files\HP Wireless Keyboard\Kmaestro.exe
    O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /startintray
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - Startup: ePrompter.lnk = C:\Program Files\ePrompter\ePrompter.exe
    O4 - Startup: SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe
    O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dll
    O9 - Extra button: ComcastHSI - {669B269B-0D4E-41FB-A3D8-FD67CA94F646} - http://www.comcast.net/ (file missing)
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra button: Help - {97809617-3937-4F84-B335-9BB05EF1A8D4} - http://online.comcast.net/help/ (file missing)
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
    O16 - DPF: {49232000-16E4-426C-A231-62846947304B} - http://ipgweb.cce.hp.com/rdqcpc/downloads/sysinfo.cab
    O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.mcafee.com/molbin/sh...1/mcinsctl.cab
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/reso...an8/oscan8.cab
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsof...?1136904502010
    O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/actives...ree/asinst.cab
    O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://cdn2.zone.msn.com/binFramewor...o.cab34246.cab
    O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - http://download.mcafee.com/molbin/sh...26/mcgdmgr.cab
    O16 - DPF: {BE71A78B-77DB-451C-A761-59B37022D544} - http://pictures.aolcdn.com/ap/Resour...s.10.1.0.0.cab
    O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
    O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
    O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
    O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
    O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
    O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
    O23 - Service: Diskeeper - Executive Software International, Inc. - C:\Program Files\Executive Software\DiskeeperLite\DKService.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
    O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe

    Thanks!

  7. #7
    Neal is offline Dedicated Member
    Log is clean how is she behaving now?

  8. #8
    genihanna is offline Full Member
    This is one of those good news/bad news scenarios-

    Today after running Diskeeper Lite, I got the following error:

    DDE Server Window: mmc.exe - Application error. The instruction at "ox7c91203c" referenced memory at "ox0008017e." The memory could not be written. Click OK to terminate or CANCEL to debug."

    I clicked cancel, restarted and called HP immediately. This, in addition to the 25 times I've called them and the Stop errors I got trying to restore/recover, has finally gotten HP to do the right thing and absorb all of the costs to "totally repair" my system. Of course, they're just going to do the destructive restore/recovery - but that's okay because I couldn't do it due to the number of corrupt files!

    So bad new, more errors - good news, getting back a "new" PC - bad news in 2 weeks!

    It'll be a couple of days till I get the materials I need to ship it to them - so I'll be cautiously lingering around!

    Geni

  9. #9
    Neal is offline Dedicated Member
    Save 20% on AVG Internet Security 2012 Suite!
    OK, good luck.

+ Reply to Thread