Tracking cookies w/ HJT Log

[zergkilla]

I have cookies that keep on installing themselves in. I'm 95% sure it's not from the net. But from a program in my computer. 3 cookies...

 

 

 

 

 

 

 

Here's the log.

 

 

 

 

 

 

 

Logfile of HijackThis v1.99.1

 

 

 

Scan saved at 3:09:39 PM, on 3/16/2006

 

 

 

Platform: Windows XP SP2 (WinNT 5.01.2600)

 

 

 

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

 

 

 

 

 

 

 

Running processes:

 

 

 

C:\WINDOWS\System32\smss[Caution: ExecutableFile]

 

 

 

C:\WINDOWS\system32\csrss[Caution: ExecutableFile]

 

 

 

C:\WINDOWS\system32\winlogon[Caution: ExecutableFile]

 

 

 

C:\WINDOWS\system32\services[Caution: ExecutableFile]

 

 

 

C:\WINDOWS\system32\lsass[Caution: ExecutableFile]

 

 

 

C:\WINDOWS\system32\svchost[Caution: ExecutableFile]

 

 

 

C:\WINDOWS\system32\svchost[Caution: ExecutableFile]

 

 

 

C:\WINDOWS\System32\svchost[Caution: ExecutableFile]

 

 

 

C:\WINDOWS\System32\svchost[Caution: ExecutableFile]

 

 

 

C:\WINDOWS\System32\svchost[Caution: ExecutableFile]

 

 

 

C:\WINDOWS\system32\spoolsv[Caution: ExecutableFile]

 

 

 

C:\Program Files\APC\APC PowerChute Personal Edition\mainserv[Caution: ExecutableFile]

 

 

 

C:\WINDOWS\System32\CTsvcCDA[Caution: ExecutableFile]

 

 

 

C:\WINDOWS\system32\nvsvc32[Caution: ExecutableFile]

 

 

 

C:\WINDOWS\System32\svchost[Caution: ExecutableFile]

 

 

 

C:\WINDOWS\system32\wdfmgr[Caution: ExecutableFile]

 

 

 

C:\WINDOWS\System32\MsPMSPSv[Caution: ExecutableFile]

 

 

 

C:\WINDOWS\System32\alg[Caution: ExecutableFile]

 

 

 

C:\WINDOWS\Explorer[Caution: ExecutableFile]

 

 

 

C:\Program Files\Roxio\Easy CD Creator 6\DragToDisc\DrgToDsc[Caution: ExecutableFile]

 

 

 

C:\Program Files\Roxio\Easy CD Creator 6\AudioCentral\RxMon[Caution: ExecutableFile]

 

 

 

C:\WINDOWS\BCMSMMSG[Caution: ExecutableFile]

 

 

 

C:\Program Files\Common Files\Logitech\QCDriver2\LVCOMS[Caution: ExecutableFile]

 

 

 

C:\WINDOWS\system32\RUNDLL32[Caution: ExecutableFile]

 

 

 

C:\Program Files\HP\HP Software Update\HPWuSchd2[Caution: ExecutableFile]

 

 

 

C:\Program Files\Java\jre1.5.0_06\bin\jusched[Caution: ExecutableFile]

 

 

 

C:\Program Files\D-Link AirPlus G\AirPlus[Caution: ExecutableFile]

 

 

 

C:\Program Files\HP\Digital Imaging\bin\hpqtra08[Caution: ExecutableFile]

 

 

 

C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem[Caution: ExecutableFile]

 

 

 

C:\Program Files\Roxio\Easy CD Creator 6\AudioCentral\Playlist[Caution: ExecutableFile]

 

 

 

C:\Program Files\Creative\SBLive\Diagnostics\diagent[Caution: ExecutableFile]

 

 

 

C:\Program Files\APC\APC PowerChute Personal Edition\apcsystray[Caution: ExecutableFile]

 

 

 

C:\Program Files\HP\Digital Imaging\bin\hpqgalry[Caution: ExecutableFile]

 

 

 

C:\Program Files\Xfire\Xfire[Caution: ExecutableFile]

 

 

 

C:\Program Files\Steam\steam[Caution: ExecutableFile]

 

 

 

C:\Program Files\Common Files\AOL\1137879885\ee\aolsoftware[Caution: ExecutableFile]

 

 

 

c:\program files\common files\aol\1137879885\ee\aim6[Caution: ExecutableFile]

 

 

 

C:\Program Files\Mozilla Firefox\firefox[Caution: ExecutableFile]

 

 

 

C:\Program Files\WinRAR\WinRAR[Caution: ExecutableFile]

 

 

 

C:\Program Files\Hijackthis\HijackThis[Caution: ExecutableFile]

 

 

 

 

 

 

 

F1 - win.ini: run= C:\C&C\INSTICON[Caution: ExecutableFile]

 

 

 

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

 

 

 

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll

 

 

 

O4 - HKLM\..\Run: [updReg] C:\WINDOWS\UpdReg[Caution: ExecutableFile]

 

 

 

O4 - HKLM\..\Run: [RoxioEngineUtility] "C:\Program Files\Common Files\Roxio Shared\System\EngUtil[Caution: ExecutableFile]"

 

 

 

O4 - HKLM\..\Run: [RoxioDragToDisc] "C:\Program Files\Roxio\Easy CD Creator 6\DragToDisc\DrgToDsc[Caution: ExecutableFile]"

 

 

 

O4 - HKLM\..\Run: [RoxioAudioCentral] "C:\Program Files\Roxio\Easy CD Creator 6\AudioCentral\RxMon[Caution: ExecutableFile]"

 

 

 

O4 - HKLM\..\Run: [diagent] "C:\Program Files\Creative\SBLive\Diagnostics\diagent[Caution: ExecutableFile]" startup

 

 

 

O4 - HKLM\..\Run: [bCMSMMSG] BCMSMMSG[Caution: ExecutableFile]

 

 

 

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32[Caution: ExecutableFile] C:\WINDOWS\system32\NvCpl.dll,NvStartup

 

 

 

O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1137879885\ee\AOLSoftware[Caution: ExecutableFile]

 

 

 

O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Common Files\Logitech\QCDriver2\LVCOMS[Caution: ExecutableFile]

 

 

 

O4 - HKLM\..\Run: [LogitechGalleryRepair] C:\Program Files\Logitech\ImageStudio\ISStart[Caution: ExecutableFile]

 

 

 

O4 - HKLM\..\Run: [LogitechImageStudioTray] C:\Program Files\Logitech\ImageStudio\LogiTray[Caution: ExecutableFile]

 

 

 

O4 - HKLM\..\Run: [nwiz] nwiz[Caution: ExecutableFile] /install

 

 

 

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32[Caution: ExecutableFile] C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

 

 

 

O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2[Caution: ExecutableFile]

 

 

 

O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched[Caution: ExecutableFile]

 

 

 

O4 - HKCU\..\Run: [steam] "C:\Program Files\Steam\Steam[Caution: ExecutableFile]" -silent

 

 

 

O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader[Caution: ExecutableFile]

 

 

 

O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl[Caution: ExecutableFile]

 

 

 

O4 - Global Startup: APC UPS Status.lnk = ?

 

 

 

O4 - Global Startup: D-Link AirPlus G Configuration Utility.lnk = ?

 

 

 

O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08[Caution: ExecutableFile]

 

 

 

O4 - Global Startup: HP Image Zone Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08[Caution: ExecutableFile]

 

 

 

O4 - Global Startup: Microsoft Works Calendar Reminders.lnk = ?

 

 

 

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll

 

 

 

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll

 

 

 

O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll

 

 

 

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs[Caution: ExecutableFile]

 

 

 

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs[Caution: ExecutableFile]

 

 

 

O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll

 

 

 

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftup ... 8770949759

 

 

 

O16 - DPF: {AECD14A8-F662-11D1-A395-00805F535788} (Plotwon Control) - http://www.investors.com/member/ocx/plotwon.ocx

 

 

 

O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc[Caution: ExecutableFile]

 

 

 

O23 - Service: APC UPS Service - American Power Conversion Corporation - C:\Program Files\APC\APC PowerChute Personal Edition\mainserv[Caution: ExecutableFile]

 

 

 

O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA[Caution: ExecutableFile]

 

 

 

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32[Caution: ExecutableFile]

 

 

 

O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12[Caution: ExecutableFile]

[Vape]

There's nothing wrong with cookies in 99% of cases. Cookies are useful (aswell as being delicious.)

 

 

 

 

 

 

 

What are the 3 cookies that you're worried about called?