Post by carlislemom on Jun 25, 2017 17:52:37 GMT -8
After running this I can see that I need to delete a lot of internet cookies!
HitmanPro 3.7.20.286
www.hitmanpro.com
Computer name . . . . : MOM-LAPTOP
Windows . . . . . . . : 10.0.0.15063.X64/4
User name . . . . . . : MOM-LAPTOP\carli
UAC . . . . . . . . . : Enabled
License . . . . . . . : Free
Scan date . . . . . . : 2017-06-25 21:35:13
Scan mode . . . . . . : Normal
Scan duration . . . . : 14m 6s
Disk access mode . . : Direct disk access (SRB)
Cloud . . . . . . . . : Internet
Reboot . . . . . . . : No
Threats . . . . . . . : 0
Traces . . . . . . . : 149
Objects scanned . . . : 3,313,778
Files scanned . . . . : 152,618
Remnants scanned . . : 836,019 files / 2,325,141 keys
Suspicious files ____________________________________________________________
C:\Users\carli\Desktop\Virus screening\FRST-OlderVersion\frst64.exe
Size . . . . . . . : 2,439,680 bytes
Age . . . . . . . : 5.4 days (2017-06-20 11:37:20)
Entropy . . . . . : 7.6
SHA-256 . . . . . : 8FB28D0BE9AE350D9DAA94D6364D119E449437BACA6699560FFCA861B7CA7741
Needs elevation . : Yes
Fuzzy . . . . . . : 24.0
Program has no publisher information but prompts the user for permission elevation.
Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
Authors name is missing in version info. This is not common to most programs.
Version control is missing. This file is probably created by an individual. This is not typical for most programs.
Time indicates that the file appeared recently on this computer.
Forensic Cluster
0.0s C:\Users\carli\Desktop\Virus screening\FRST-OlderVersion\frst64.exe
0.0s C:\Users\carli\Desktop\Virus screening\frst64.exe
C:\Users\carli\Desktop\Virus screening\frst64.exe
Size . . . . . . . : 2,439,680 bytes
Age . . . . . . . : 5.4 days (2017-06-20 11:37:20)
Entropy . . . . . : 7.6
SHA-256 . . . . . : 93C0E880C81683F2D387CB6C896C4E99C17782DF560D2937A0E4E047AF9A8CF2
Needs elevation . : Yes
Fuzzy . . . . . . : 24.0
Program has no publisher information but prompts the user for permission elevation.
Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
Authors name is missing in version info. This is not common to most programs.
Version control is missing. This file is probably created by an individual. This is not typical for most programs.
Time indicates that the file appeared recently on this computer.
Forensic Cluster
0.0s C:\Users\carli\Desktop\Virus screening\FRST-OlderVersion\frst64.exe
0.0s C:\Users\carli\Desktop\Virus screening\frst64.exe
Potential Unwanted Programs _________________________________________________
C:\ods.exe.config (Yontoo)
ask search
C:\Users\carli\AppData\Local\Google\Chrome\User Data\Default\Web Data
search.conduit.com_
C:\Users\carli\AppData\Local\Google\Chrome\User Data\Default\Web Data
HKLM\SOFTWARE\Classes\AppID\{001fce23-84d0-4886-971c-050baeb0b99d}\ (Yontoo)
HKLM\SOFTWARE\Classes\AppID\{515d609e-9243-4edc-9fe7-2e923ecc94b0}\ (Yontoo)
HKLM\SOFTWARE\Classes\WOW6432Node\AppID\{001fce23-84d0-4886-971c-050baeb0b99d}\ (Yontoo)
HKLM\SOFTWARE\Classes\WOW6432Node\AppID\{515d609e-9243-4edc-9fe7-2e923ecc94b0}\ (Yontoo)
HKLM\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\SearchScopes\{2f23ab71-4ac6-41f2-a955-ea576e553146}\ (SaleCharger)
HKU\S-1-5-21-3108268573-3636454435-3323596111-1001\Software\Microsoft\Internet Explorer\DOMStorage\ask.com\ (MindSpark)
HKU\S-1-5-21-3108268573-3636454435-3323596111-1001\Software\Microsoft\Internet Explorer\DOMStorage\iminent.com\ (Iminent)
HKU\S-1-5-21-3108268573-3636454435-3323596111-1001\Software\Microsoft\Internet Explorer\DOMStorage\onlinemapfinder.com\ (MindSpark)
HKU\S-1-5-21-3108268573-3636454435-3323596111-1001\Software\Microsoft\Internet Explorer\DOMStorage\yourtemplatefinder.com\ (MindSpark)
HKU\S-1-5-21-3108268573-3636454435-3323596111-1001\Software\Microsoft\Internet Explorer\SearchScopes\{2f23ab71-4ac6-41f2-a955-ea576e553146}\ (SaleCharger)
HKU\S-1-5-21-3108268573-3636454435-3323596111-1001\Software\ProductSetup\1I1T1Q1S\ (TreasureTrack)
Cookies _____________________________________________________________________
C:\Users\carli\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!002\MicrosoftEdge\Cookies\2TYP7AP5.cookie
C:\Users\carli\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!002\MicrosoftEdge\Cookies\4CQQNN3K.cookie
C:\Users\carli\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!002\MicrosoftEdge\Cookies\6JDB9SBU.cookie
C:\Users\carli\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!002\MicrosoftEdge\Cookies\GL0K3BQM.cookie
C:\Users\carli\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!002\MicrosoftEdge\Cookies\M0YHJO5F.cookie
C:\Users\carli\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!002\MicrosoftEdge\Cookies\OZK9Z93V.cookie
C:\Users\carli\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!002\MicrosoftEdge\Cookies\P7IKU1TZ.cookie
C:\Users\carli\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!002\MicrosoftEdge\Cookies\QWOA08AF.cookie
C:\Users\carli\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!002\MicrosoftEdge\Cookies\TIAUT84A.cookie
C:\Users\carli\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\#!002\MicrosoftEdge\Cookies\YPLP0RY2.cookie
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:254a.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:abmr.net
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:acuityplatform.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:ad.360yield.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:adaptv.advertising.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:adbrn.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:addthis.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:adfarm1.adition.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:adform.net
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:adgrx.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:adhigh.net
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:adnxs.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:ads.avocet.io
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:ads.creative-serving.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:ads.deliverimp.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:ads.linkedin.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:ads.proboards.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:ads.pubmatic.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:ads.stickyadstv.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:ads.yieldmo.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:adsrvr.org
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:adsymptotic.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:adtechus.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:advertising.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:agkn.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:amgdgt.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:angsrvr.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:atdmt.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:atemda.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:attservicesinc.tt.omtrdc.net
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:basebanner.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:beacon-us-iad3.rubiconproject.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:bidr.io
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:bidswitch.net
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:bizrate.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:bluekai.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:bs.serving-sys.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:casalemedia.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:comcast.demdex.net
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:comcastresidentialservices.tt.omtrdc.net
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:connexity.net
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:contextweb.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:crwdcntrl.net
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:csync.smartadserver.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:cw.addthis.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:demdex.net
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:dmtry.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:domdex.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:dotomi.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:doubleclick.net
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:dpclk.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:dpm.demdex.net
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:dsp.linksynergy.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:emjcd.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:erne.co
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:ero-advertising.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:everesttech.net
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:exoclick.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:eyereturn.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:eyeviewads.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:fastclick.net
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:flashtalking.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:go.sonobi.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:gwallet.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:ib.mookie1.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:imrworldwide.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:ipredictive.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:korrelate.net
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:krxd.net
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:lijit.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:linksynergy.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:match.adsby.bidtheatre.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:match.rundsp.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:mathtag.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:media6degrees.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:mediaplex.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:ml314.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:monster.demdex.net
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:mookie1.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:mxptint.net
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:nexac.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:openx.net
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:optimatic.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:outbrain.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:owneriq.net
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:partners.tremorhub.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:pixel.rubiconproject.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:po.st
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:pool.admedo.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:pornhub.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:postrelease.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:pubmatic.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:revsci.net
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:rfihub.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:rlcdn.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:ru4.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:rubiconproject.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:scorecardresearch.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:serving-sys.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:simpli.fi
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:sitescout.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:skimresources.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:smartadserver.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:statse.webtrendslive.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:sundaysky-partners.tremorhub.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:switchadhub.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:taboola.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:tap-secure.rubiconproject.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:tap.rubiconproject.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:tapad.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:tidaltv.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:tremorhub.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:tribalfusion.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:turn.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:u3s.mathtag.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:undertone.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:univide.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:vindicosuite.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:virool.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:visualdna.com
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:w55c.net
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:weborama.fr
C:\Users\carli\AppData\Roaming\Mozilla\Firefox\Profiles\rw32hxdv.default-1448554984935\cookies.sqlite:wtp101.com