1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Trojan creating IE popups - AVG Anti-spyware doesn't remove

Discussion in 'Malware and Virus Removal Archive' started by Hezron7, 2008/03/11.

  1. 2008/03/11
    Hezron7

    Hezron7 Inactive Thread Starter

    Joined:
    2008/03/11
    Messages:
    15
    Likes Received:
    0
    I keep getting popups in IE that send me to sites like searchfeed.com and malware alarm etc. It eventually creates so many popups that IE freezes and then none of my browsers work. Firefox seems to run fine with no popups if you start it right after boot up. But my PC is dragging now and I get random C++ error popups. I know I have a trojan but I can't seem to remove it with any anti-spyware progs (I've run windows defender and AVG Anti-spyware in normal and safe-mode, and all it's found is 39 tracer cookies - nothing in safe-mode).

    Any ideas anyone? Any help is MUCH appreciated!

    Here's my Hijack This Log:

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 9:33:18 AM, on 3/11/2008
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16608)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Windows Defender\MsMpEng.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\LEXBCES.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\LEXPPS.EXE
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\Anvshell.exe
    C:\Program Files\Lexmark 1200 Series\lxczbmgr.exe
    C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
    C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\Google\Google Talk\googletalk.exe
    C:\Program Files\Lexmark 1200 Series\lxczbmon.exe
    C:\WINDOWS\system32\RUNDLL32.EXE
    C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe
    C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
    C:\Program Files\Windows Defender\MSASCui.exe
    C:\WINDOWS\system32\Rundll32.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
    C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\GE Security Supra\SyncInfoApp.exe
    C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
    C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
    C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
    C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    c:\program files\ge security supra\syncservice.exe
    C:\WINDOWS\system32\nvsvc32.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\GE Security Supra\ProxyDaemon.exe
    C:\SSL\stunnel-4.10.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
    O3 - Toolbar: SteapandCheap - {ae07101b-46d4-4a98-af68-0333ea26e113} - mscoree.dll (file missing)
    O4 - HKLM\..\Run: [Anvshell] C:\WINDOWS\Anvshell.exe
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [Lexmark 1200 Series] "C:\Program Files\Lexmark 1200 Series\lxczbmgr.exe "
    O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
    O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe "
    O4 - HKLM\..\Run: [googletalk] C:\Program Files\Google\Google Talk\googletalk.exe /autostart
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe "
    O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe "
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe "
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
    O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
    O4 - HKLM\..\Run: [BMaff84224] Rundll32.exe "C:\WINDOWS\system32\rmtikdve.dll ",s
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'NETWORK SERVICE')
    O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Default user')
    O4 - Startup: Stardock ObjectDock.lnk = C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
    O4 - Global Startup: DisplayKEY eSYNC Info.lnk = C:\Program Files\GE Security Supra\SyncInfoApp.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
    O8 - Extra context menu item: Append to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
    O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
    O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
    O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
    O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
    O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
    O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
    O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
    O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: Web-Based Email Tools - http://email.secureserver.net/Download.CAB
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
    O16 - DPF: {FFBB3F3B-0A5A-4106-BE53-DFE1E2340CB1} (DownloadManager Control) - http://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.1.6.cab
    O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL,wbsys.dll
    O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
    O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
    O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
    O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: DkeySync - GE Security Supra - c:\program files\ge security supra\syncservice.exe
    O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
    O23 - Service: Google Desktop Manager 5.7.801.1629 (GoogleDesktopManager-010108-205858) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
    O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

    --
    End of file - 8806 bytes
     
    Hezron7,
    #1
  2. 2008/03/11
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    Welcome to WindowsBBS Hezron7 :)

    Lets get a better look at some things. Download Deckard's System Scanner (dss.exe) and save it to your desktop.
    • Close all applications and windows.
    • Double click on dss.exe to run it and follow the prompts.
    • When the scan is complete, two text files will open; main.txt, which will be maximized and extra.txt, which will be minimized.
    Post the contents of main.txt only for now.
     
    noahdfear,
    #2


  3. to hide this advert.

  4. 2008/03/12
    Hezron7

    Hezron7 Inactive Thread Starter

    Joined:
    2008/03/11
    Messages:
    15
    Likes Received:
    0
    Thanks a lot noahdfear. I really appreciate the reply. Anyway, I tried a few things this afternoon after my post: I uninstalled IE7 and went back to IE6 which didn't solve anything (still getting the popups), I upgraded to the new Firefox 3 beta which is running fine with no popup issues, and I ran Uniblue Registry Cleaner which has drastically increased the speed of my comp but I still notice slowness when browsing websites on both browsers, and the popup issue which leads to freezing in IE.

    I just ran the DSS scanner as you requested, and here is the 'main.txt' log: (looking forward to your reply)

    Deckard's System Scanner v20071014.68
    Run by Casey & Katelyn on 2008-03-11 22:14:34
    Computer is in Normal Mode.
    --------------------------------------------------------------------------------

    -- System Restore --------------------------------------------------------------

    Successfully created a Deckard's System Scanner Restore Point.


    -- Last 5 Restore Point(s) --
    97: 2008-03-12 05:14:43 UTC - RP97 - Deckard's System Scanner Restore Point
    96: 2008-03-12 00:45:13 UTC - RP96 - Software Distribution Service 3.0
    95: 2008-03-11 23:18:30 UTC - RP95 - Uniblue RegistryBooster
    94: 2008-03-11 22:54:16 UTC - RP94 - Software Distribution Service 3.0
    93: 2008-03-11 22:10:37 UTC - RP93 - Removed Sony DVD Architect Pro 4.5a


    -- First Restore Point --
    1: 2008-03-07 04:56:35 UTC - RP1 - System Checkpoint


    Backed up registry hives.
    Performed disk cleanup.



    -- HijackThis (run as Casey & Katelyn.exe) -------------------------------------

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 10:15:55 PM, on 3/11/2008
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Windows Defender\MsMpEng.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\LEXBCES.EXE
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\LEXPPS.EXE
    C:\WINDOWS\Anvshell.exe
    C:\Program Files\Lexmark 1200 Series\lxczbmgr.exe
    C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
    C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\Google\Google Talk\googletalk.exe
    C:\WINDOWS\system32\RUNDLL32.EXE
    C:\Program Files\Lexmark 1200 Series\lxczbmon.exe
    C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
    C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe
    C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
    C:\Program Files\Windows Defender\MSASCui.exe
    C:\WINDOWS\system32\Rundll32.exe
    C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
    C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    c:\program files\ge security supra\syncservice.exe
    C:\Program Files\GE Security Supra\SyncInfoApp.exe
    C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
    C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
    C:\WINDOWS\system32\nvsvc32.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\GE Security Supra\ProxyDaemon.exe
    C:\SSL\stunnel-4.10.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\Documents and Settings\Casey & Katelyn\Desktop\dss.exe
    C:\PROGRA~1\TRENDM~1\HIJACK~1\Casey & Katelyn.exe

    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {06E39B23-D5E1-4501-BE79-68D237FDE7AB} - C:\WINDOWS\system32\pmnno.dll
    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O2 - BHO: SorcimToolBar.InitToolbarBHO - {8df5ab9d-f4ac-4f14-8700-0652b98fd98b} - mscoree.dll (file missing)
    O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
    O2 - BHO: (no name) - {FBD29C3C-C642-4843-A627-6E54A947B511} - C:\WINDOWS\system32\urqpopm.dll
    O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
    O3 - Toolbar: SteapandCheap - {ae07101b-46d4-4a98-af68-0333ea26e113} - mscoree.dll (file missing)
    O4 - HKLM\..\Run: [Anvshell] C:\WINDOWS\Anvshell.exe
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [Lexmark 1200 Series] "C:\Program Files\Lexmark 1200 Series\lxczbmgr.exe "
    O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
    O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe "
    O4 - HKLM\..\Run: [googletalk] C:\Program Files\Google\Google Talk\googletalk.exe /autostart
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe "
    O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe "
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe "
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
    O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
    O4 - HKLM\..\Run: [BMaff84224] Rundll32.exe "C:\WINDOWS\system32\dnrlrkvd.dll ",s
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'NETWORK SERVICE')
    O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Default user')
    O4 - Startup: Stardock ObjectDock.lnk = C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
    O4 - Global Startup: DisplayKEY eSYNC Info.lnk = C:\Program Files\GE Security Supra\SyncInfoApp.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
    O8 - Extra context menu item: Append to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
    O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
    O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
    O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
    O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
    O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
    O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
    O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: Web-Based Email Tools - http://email.secureserver.net/Download.CAB
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
    O16 - DPF: {FFBB3F3B-0A5A-4106-BE53-DFE1E2340CB1} (DownloadManager Control) - http://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.1.6.cab
    O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL,wbsys.dll
    O20 - Winlogon Notify: urqpopm - C:\WINDOWS\SYSTEM32\urqpopm.dll
    O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
    O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
    O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
    O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: DkeySync - GE Security Supra - c:\program files\ge security supra\syncservice.exe
    O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
    O23 - Service: Google Desktop Manager 5.7.801.1629 (GoogleDesktopManager-010108-205858) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
    O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

    --
    End of file - 9920 bytes

    -- File Associations -----------------------------------------------------------

    .bat - batfile - DefaultIcon - C:\Program Files\Stardock\Object Desktop\IconPackager\Themes\Aluminium\Aluminium.icl,63
    .chm - chm.file - DefaultIcon - C:\Program Files\Stardock\Object Desktop\IconPackager\Themes\Aluminium\Aluminium.icl,69
    .inf - inffile - DefaultIcon - C:\Program Files\Stardock\Object Desktop\IconPackager\Themes\Aluminium\Aluminium.icl,55
    .ini - inifile - DefaultIcon - C:\Program Files\Stardock\Object Desktop\IconPackager\Themes\Aluminium\Aluminium.icl,55
    .js - jsfile - DefaultIcon - "C:\Program Files\Adobe\Adobe Dreamweaver CS3\Dreamweaver.exe ",7
    .js - jsfile - shell\open\command - "C:\Program Files\Adobe\Adobe Dreamweaver CS3\Dreamweaver.exe ", "%1 "
    .txt - txtfile - DefaultIcon - C:\Program Files\Stardock\Object Desktop\IconPackager\Themes\Aluminium\Aluminium.icl,57


    -- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------

    R1 SCDEmu - c:\windows\system32\drivers\scdemu.sys <Not Verified; PowerISO Computing, Inc.; scdemu>
    R3 EIO - c:\windows\system32\drivers\eio.sys <Not Verified; ASUSTeK Computer Inc.; ASUS Kernel Mode Driver for NT>

    S3 pcouffin (VSO Software pcouffin) - c:\windows\system32\drivers\pcouffin.sys <Not Verified; VSO Software; Patin couffin engine>


    -- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------

    R2 Apple Mobile Device - "c:\program files\common files\apple\mobile device support\bin\applemobiledeviceservice.exe" <Not Verified; Apple, Inc.; Apple Mobile Device Service>
    R2 Bonjour Service - "c:\program files\bonjour\mdnsresponder.exe" <Not Verified; Apple Inc.; Bonjour>
    R2 DkeySync - c:\program files\ge security supra\syncservice.exe <Not Verified; GE Security Supra; DisplayKEY eSYNC>

    S3 FLEXnet Licensing Service - "c:\program files\common files\macrovision shared\flexnet publisher\fnplicensingservice.exe" <Not Verified; Macrovision Europe Ltd.; FLEXnet Publisher (32 bit)>


    -- Device Manager: Disabled ----------------------------------------------------

    No disabled devices found.


    -- Scheduled Tasks -------------------------------------------------------------

    2008-03-11 22:05:46 330 --ah----- C:\WINDOWS\Tasks\MP Scheduled Scan.job


    -- Files created between 2008-02-11 and 2008-03-11 -----------------------------

    2008-03-11 16:07:16 0 d-------- C:\Documents and Settings\Casey & Katelyn\Application Data\Uniblue
    2008-03-11 16:07:08 0 d-------- C:\Program Files\Uniblue
    2008-03-11 15:44:33 0 d-------- C:\Program Files\Mozilla Firefox 3 Beta 4
    2008-03-11 14:03:22 0 d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
    2008-03-11 10:00:13 90688 --a------ C:\WINDOWS\system32\dnrlrkvd.dll
    2008-03-11 09:32:59 0 d-------- C:\Program Files\Trend Micro
    2008-03-10 10:45:09 0 d-------- C:\Program Files\Windows Defender
    2008-03-10 09:59:39 89152 --a------ C:\WINDOWS\system32\rmtikdve.dll
    2008-03-10 09:59:22 0 d-------- C:\Documents and Settings\Casey & Katelyn\Application Data\Grisoft
    2008-03-09 10:01:10 89664 --a------ C:\WINDOWS\system32\pulamsvw.dll
    2008-03-08 23:19:33 0 d-------- C:\Documents and Settings\Casey & Katelyn\Application Data\TrojanHunter
    2008-03-08 23:17:49 0 d-------- C:\Program Files\TrojanHunter 5.0
    2008-03-08 23:05:34 0 d-------- C:\WINDOWS\pss
    2008-03-08 09:59:24 88640 --a------ C:\WINDOWS\system32\moixdypl.dll
    2008-03-07 09:58:14 88640 --a------ C:\WINDOWS\system32\htlemilx.dll
    2008-03-06 21:56:25 291057 --ahs---- C:\WINDOWS\system32\onnmp.ini2
    2008-03-06 21:56:18 292352 --a------ C:\WINDOWS\system32\pmnno.dll
    2008-03-06 21:53:31 42496 --a------ C:\WINDOWS\system32\jkkiiii.dll
    2008-03-06 21:53:25 42496 --a------ C:\WINDOWS\system32\xxyxxyw.dll
    2008-03-06 21:51:16 42496 --a------ C:\WINDOWS\system32\urqpopm.dll
    2008-03-06 13:48:51 0 d-------- C:\v2d
    2008-03-06 13:48:40 0 d-------- C:\Program Files\Total Video2DVD Author
    2008-03-06 13:48:23 0 d-------- C:\Program Files\Common Files\Download Manager
    2008-03-05 17:25:32 0 d-------- C:\Program Files\The KMPlayer
    2008-03-05 17:18:29 0 d-------- C:\Documents and Settings\Casey & Katelyn\Application Data\Media Player Classic
    2008-03-05 13:05:39 0 d-------- C:\Program Files\Combined Community Codec Pack
    2008-03-04 18:11:49 0 d-------- C:\Documents and Settings\All Users\Application Data\vsosdk
    2008-03-04 15:08:12 47360 --a------ C:\WINDOWS\system32\drivers\pcouffin.sys <Not Verified; VSO Software; Patin couffin engine>
    2008-03-04 15:08:12 47360 --a------ C:\Documents and Settings\Casey & Katelyn\Application Data\pcouffin.sys <Not Verified; VSO Software; Patin couffin engine>
    2008-03-04 15:08:11 0 d-------- C:\Documents and Settings\Casey & Katelyn\Application Data\Vso
    2008-03-04 15:08:07 0 d-------- C:\Program Files\VSO
    2008-03-03 14:50:07 0 d-------- C:\WINDOWS\steepandcheap
    2008-03-02 22:55:16 0 d-------- C:\Program Files\SteepAndCheap
    2008-02-22 07:37:29 0 d-------- C:\Program Files\DIFX
    2008-02-21 15:43:46 0 d-------- C:\Program Files\InstallShield Installation Information
    2008-02-21 10:28:09 0 d-------- C:\Program Files\Xilisoft
    2008-02-18 10:50:00 0 d-------- C:\78d10007fc5ca0dce5
    2008-02-17 23:38:13 0 d-------- C:\WINDOWS\Cache
    2008-02-17 23:38:12 0 d-------- C:\Program Files\Coupons
    2008-02-11 13:36:52 0 d-------- C:\WINDOWS\network diagnostic


    -- Find3M Report ---------------------------------------------------------------

    2008-03-11 22:04:29 0 d-------- C:\Program Files\GE Security Supra
    2008-03-11 16:14:46 0 d-------- C:\Documents and Settings\Casey & Katelyn\Application Data\uTorrent
    2008-03-11 15:44:52 0 d-------- C:\Documents and Settings\Casey & Katelyn\Application Data\Mozilla
    2008-03-11 13:52:23 0 d-------- C:\Program Files\Java
    2008-03-11 13:44:39 1348 --a------ C:\WINDOWS\mozver.dat
    2008-03-11 08:00:06 0 d-------- C:\Documents and Settings\Casey & Katelyn\Application Data\AVG7
    2008-03-07 13:50:53 0 d-------- C:\Program Files\Lexmark 1200 Series
    2008-03-06 13:48:23 0 d-------- C:\Program Files\Common Files
    2008-03-06 13:14:16 0 d-------- C:\Program Files\Windows Media Connect 2
    2008-03-05 08:33:25 33 --a------ C:\Documents and Settings\Casey & Katelyn\Application Data\pcouffin.log
    2008-03-05 08:33:24 1144 --a------ C:\Documents and Settings\Casey & Katelyn\Application Data\pcouffin.inf
    2008-03-05 08:33:24 7887 --a------ C:\Documents and Settings\Casey & Katelyn\Application Data\pcouffin.cat
    2008-02-26 14:10:42 0 d-------- C:\Program Files\PeerGuardian2
    2008-02-22 07:41:26 0 d-------- C:\Program Files\Bonjour
    2008-02-21 10:11:59 0 d-------- C:\Program Files\QuickTime
    2008-02-09 11:08:25 0 d-------- C:\Documents and Settings\Casey & Katelyn\Application Data\Sony
    2008-02-09 10:53:31 0 d-------- C:\Program Files\Sony
    2008-02-09 10:53:05 0 d-------- C:\Program Files\Sony Setup
    2008-02-09 10:32:57 0 d-------- C:\Documents and Settings\Casey & Katelyn\Application Data\Publish Providers
    2008-02-05 19:42:04 0 d-------- C:\Program Files\Vstplugins
    2008-02-05 19:40:10 0 d-------- C:\Program Files\MSBuild
    2008-02-05 19:35:27 0 d-------- C:\Program Files\Reference Assemblies
    2008-02-05 19:33:09 0 d-------- C:\Documents and Settings\Casey & Katelyn\Application Data\Sony Setup
    2008-02-05 19:19:52 0 d-------- C:\Program Files\PowerISO
    2008-02-05 11:15:06 0 d-------- C:\Program Files\Stardock
    2008-02-05 00:44:24 664 --a------ C:\WINDOWS\system32\d3d9caps.dat
    2008-02-04 23:37:18 0 d-------- C:\Documents and Settings\Casey & Katelyn\Application Data\Adobe
    2008-02-04 23:19:55 0 d-------- C:\Program Files\Common Files\Adobe
    2008-02-04 23:10:59 159744 --a------ C:\WINDOWS\system32\libssl32.dll
    2008-02-04 23:10:53 0 d-------- C:\Program Files\SiLabs
    2008-02-04 12:34:12 0 d-------- C:\Program Files\uTorrent
    2008-02-04 10:24:47 0 d-------- C:\Documents and Settings\Casey & Katelyn\Application Data\Download Manager
    2008-02-04 09:47:00 0 d-------- C:\Program Files\Common Files\Stardock
    2008-01-30 17:30:42 0 d-------- C:\Documents and Settings\Casey & Katelyn\Application Data\LimeWire
    2008-01-30 09:58:36 0 d-------- C:\Documents and Settings\Casey & Katelyn\Application Data\Sun
    2008-01-29 15:36:14 0 d-------- C:\Program Files\LimeWire
    2008-01-29 15:35:24 0 d-------- C:\Program Files\Common Files\Java
    2008-01-24 14:35:56 0 d-------- C:\Program Files\Common Files\Macrovision Shared
    2008-01-24 13:42:00 0 d-------- C:\Program Files\Xvid
    2008-01-24 08:33:00 0 d-------- C:\Program Files\Common Files\InstallShield
    2008-01-24 08:20:29 0 d-------- C:\Documents and Settings\Casey & Katelyn\Application Data\Apple Computer
    2008-01-22 15:38:41 0 d-------- C:\Program Files\PokerStars
    2008-01-20 23:05:22 0 d-------- C:\Program Files\Messenger
    2008-01-20 22:35:44 0 d-------- C:\Program Files\MSXML 6.0
    2008-01-18 13:20:04 0 d-------- C:\Program Files\Google
    2008-01-16 14:15:01 0 d-------- C:\Program Files\iTunes
    2008-01-16 14:14:52 0 d-------- C:\Program Files\iPod
    2008-01-16 14:13:53 0 d-------- C:\Program Files\Apple Software Update
    2008-01-16 14:13:35 0 d-------- C:\Program Files\Common Files\Apple
    2008-01-16 14:10:48 0 d--h----- C:\Program Files\WindowsUpdate
    2008-01-16 12:19:48 2 -rahs---- C:\$drvmig$
    2008-01-16 08:48:55 0 d-------- C:\Program Files\MagicISO
    2008-01-16 08:47:02 0 d-------- C:\Documents and Settings\Casey & Katelyn\Application Data\WinRAR
    2008-01-15 22:49:03 0 d-------- C:\Program Files\VIA Technologies, Inc
    2008-01-15 14:31:08 0 d-------- C:\Documents and Settings\Casey & Katelyn\Application Data\Macromedia
    2008-01-15 14:29:15 0 --a------ C:\WINDOWS\nsreg.dat
    2008-01-15 13:50:31 0 d-------- C:\Documents and Settings\Casey & Katelyn\Application Data\Microsoft Web Folders
    2008-01-15 13:29:58 0 d-------- C:\Program Files\ABBYY FineReader 6.0
    2008-01-15 12:45:30 0 d-------- C:\Program Files\Movie Maker
    2008-01-15 12:43:54 0 d-------- C:\Program Files\Windows NT
    2008-01-15 12:29:39 0 d-------- C:\Documents and Settings\Casey & Katelyn\Application Data\Identities
    2008-01-15 12:28:57 0 d-------- C:\Program Files\microsoft frontpage
    2008-01-15 12:28:41 0 -rahs---- C:\MSDOS.SYS
    2008-01-15 12:28:41 0 -rahs---- C:\IO.SYS
    2008-01-15 12:28:41 0 --a------ C:\CONFIG.SYS
    2008-01-15 12:28:41 0 --a------ C:\AUTOEXEC.BAT
    2008-01-15 12:27:48 0 d-------- C:\Program Files\Online Services
    2008-01-15 12:26:50 0 d-------- C:\Program Files\Common Files\MSSoap
    2008-01-15 12:26:21 21640 --a------ C:\WINDOWS\system32\emptyregdb.dat
    2008-01-15 12:25:54 0 d-------- C:\Program Files\MSN Gaming Zone
    2008-01-15 05:08:56 0 d-------- C:\Program Files\Common Files\ODBC
    2008-01-15 05:08:53 0 d-------- C:\Program Files\Common Files\SpeechEngines
    2008-01-15 05:08:32 62 --ahs---- C:\Documents and Settings\Casey & Katelyn\Application Data\desktop.ini


    -- Registry Dump ---------------------------------------------------------------

    *Note* empty entries & legit default entries are not shown


    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{06E39B23-D5E1-4501-BE79-68D237FDE7AB}]
    03/06/2008 09:56 PM 292352 --a------ C:\WINDOWS\system32\pmnno.dll

    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{8df5ab9d-f4ac-4f14-8700-0652b98fd98b}]

    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{FBD29C3C-C642-4843-A627-6E54A947B511}]
    03/06/2008 09:51 PM 42496 --a------ C:\WINDOWS\system32\urqpopm.dll

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "Anvshell "= "C:\WINDOWS\Anvshell.exe" [10/21/2002 11:45 PM]
    "NvCplDaemon "= "C:\WINDOWS\system32\NvCpl.dll" [12/05/2007 01:41 AM]
    "nwiz "= "nwiz.exe" [12/05/2007 01:41 AM C:\WINDOWS\system32\nwiz.exe]
    "Lexmark 1200 Series "= "C:\Program Files\Lexmark 1200 Series\lxczbmgr.exe" [03/16/2006 12:07 AM]
    "AVG7_CC "= "C:\PROGRA~1\Grisoft\AVG7\avgcc.exe" [01/15/2008 02:25 PM]
    "Google Desktop Search "= "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" [01/15/2008 03:04 PM]
    "iTunesHelper "= "C:\Program Files\iTunes\iTunesHelper.exe" [01/15/2008 03:22 AM]
    "googletalk "= "C:\Program Files\Google\Google Talk\googletalk.exe" [01/01/2007 02:22 PM]
    "NvMediaCenter "= "C:\WINDOWS\system32\NvMcTray.dll" [12/05/2007 01:41 AM]
    "SunJavaUpdateSched "= "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [02/22/2008 04:25 AM]
    "Acrobat Assistant 8.0 "= "C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe" [01/11/2008 07:54 PM]
    "@ "=" " []
    "Adobe Reader Speed Launcher "= "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [01/11/2008 10:16 PM]
    "QuickTime Task "= "C:\Program Files\QuickTime\qttask.exe" [01/31/2008 11:13 PM]
    "!AVG Anti-Spyware "= "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [03/10/2008 04:43 PM]
    "Windows Defender "= "C:\Program Files\Windows Defender\MSASCui.exe" [11/03/2006 07:20 PM]
    "BMaff84224 "= "C:\WINDOWS\system32\dnrlrkvd.dll" [03/11/2008 10:00 AM]

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "ctfmon.exe "= "C:\WINDOWS\system32\ctfmon.exe" [08/04/2004 12:56 AM]
    "SpybotSD TeaTimer "= "C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [01/28/2008 11:43 AM]

    C:\Documents and Settings\Casey & Katelyn\Start Menu\Programs\Startup\
    Stardock ObjectDock.lnk - C:\Program Files\Stardock\ObjectDock\ObjectDock.exe [1/30/2008 5:44:45 PM]

    C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
    DisplayKEY eSYNC Info.lnk - C:\Program Files\GE Security Supra\SyncInfoApp.exe [2/4/2008 11:09:10 PM]
    Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office\OSA9.EXE [1/21/2000 1:15:54 AM]

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
    "DisableRegistryTools "=0 (0x0)

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    "{FBD29C3C-C642-4843-A627-6E54A947B511} "= C:\WINDOWS\system32\urqpopm.dll [03/06/2008 09:51 PM 42496]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\MCPClient]
    C:\Program Files\Common Files\Stardock\mcpstub.dll

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\urqpopm]
    urqpopm.dll 03/06/2008 09:51 PM 42496 C:\WINDOWS\system32\urqpopm.dll

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\WBSrv]
    C:\PROGRA~1\Stardock\OBJECT~2\WINDOW~1\wbsrv.dll 01/30/2008 06:06 PM 176128 C:\PROGRA~1\Stardock\OBJECT~2\WINDOW~1\WbSrv.dll

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
    "appinit_dlls "=C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL,wbsys.dll

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
    "Authentication Packages "= msv1_0 C:\WINDOWS\system32\pmnno.dll

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vds]
    @= "Service "

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]
    @= "Volume shadow copy "




    -- Hosts -----------------------------------------------------------------------

    127.0.0.1 www.007guard.com
    127.0.0.1 007guard.com
    127.0.0.1 008i.com
    127.0.0.1 www.008k.com
    127.0.0.1 008k.com
    127.0.0.1 www.00hq.com
    127.0.0.1 00hq.com
    127.0.0.1 010402.com
    127.0.0.1 www.032439.com
    127.0.0.1 032439.com

    8004 more entries in hosts file.


    -- End of Deckard's System Scanner: finished at 2008-03-11 22:16:36 ------------
     
    Hezron7,
    #3
  5. 2008/03/12
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    P2P - I see you have P2P software ([color= "Red"]Limewire, uTorrent [/color]) installed on your machine. We are not here to pass judgment on file-sharing as a concept. However, we will warn you that engaging in this activity and having this kind of software installed on your machine will always make you more susceptible to re-infections. It may be contributing to your current situation. This page will give you further information.

    Please note: Even if you are using a "safe" P2P program, it is only the program that is safe. You will be sharing files from uncertified sources, and these are often infected. The bad guys use P2P filesharing as a major conduit to spread their wares.

    References for the risk of these programs are here,
    here and here.

    I would strongly recommend that you uninstall them, however that choice is up to you. If you choose to remove these programs, you can do so via Control Panel >> Add or Remove Programs.


    Now, on to fixing. ;)


    Download ComboFix by sUBs from here, saving the file to your desktop.

    Please disable realtime protection applications as they sometime interfere with the tool. Check this link for your applicable programs (AVG Anti-Spyware, Spybot's TeaTimer and Windows Defender).

    • Close all open programs and windows
    • Double click combofix.exe and follow the prompts.
    • It may reboot your computer and resume running when you logon. Wait for it to complete. When finished, it will open a log for you. Post that log and a new HijackThis log in your next reply.
    Note: Do not mouseclick combofix's window while its running. That may cause it to stall
     
    noahdfear,
    #4
  6. 2008/03/12
    Hezron7

    Hezron7 Inactive Thread Starter

    Joined:
    2008/03/11
    Messages:
    15
    Likes Received:
    0
    That seems to have fixed it!! I can't thank you enough.

    I've been browsing for the last 20 minutes with no popups!!! Seems the main problem file was BMaff84224.xml. It was trying to access my registry and Spybot S&D was flagging it so I blacklisted it. Sure enough, combofix caught it and deleted it.

    One question though, the combofix log below says I don't have the recovery console installed?! Should I find and install it?

    Here are my combofix and hijackthis logs:

    ComboFix 08-03-10.1 - Casey & Katelyn 2008-03-12 17:06:44.1 - NTFSx86
    Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.373 [GMT -7:00]
    Running from: C:\Documents and Settings\Casey & Katelyn\Desktop\ComboFix.exe
    * Created a new restore point

    WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
    .

    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    C:\WINDOWS\BMaff84224.xml
    C:\WINDOWS\pskt.ini
    C:\WINDOWS\system32\ccncqslc.dll
    C:\WINDOWS\system32\dnrlrkvd.dll
    C:\WINDOWS\system32\htlemilx.dll
    C:\WINDOWS\system32\jkkiiii.dll
    C:\WINDOWS\system32\mcrh.tmp
    C:\WINDOWS\system32\moixdypl.dll
    C:\WINDOWS\system32\onnmp.ini
    C:\WINDOWS\system32\onnmp.ini2
    C:\WINDOWS\system32\pmnno.dll
    C:\WINDOWS\system32\pulamsvw.dll
    C:\WINDOWS\system32\rmtikdve.dll
    C:\WINDOWS\system32\urqpopm.dll
    C:\WINDOWS\system32\xxyxxyw.dll

    .
    ((((((((((((((((((((((((( Files Created from 2008-02-13 to 2008-03-13 )))))))))))))))))))))))))))))))
    .

    2008-03-12 08:35 . 2008-03-12 17:15 54,156 --ah----- C:\WINDOWS\QTFont.qfn
    2008-03-12 08:35 . 2008-03-12 08:35 1,409 --a------ C:\WINDOWS\QTFont.for
    2008-03-12 08:33 . 2008-03-12 08:33 <DIR> d-------- C:\Program Files\iPod
    2008-03-12 08:32 . 2008-03-12 08:33 <DIR> d-------- C:\Program Files\iTunes
    2008-03-11 22:14 . 2008-03-11 22:14 <DIR> d-------- C:\Deckard
    2008-03-11 16:07 . 2008-03-11 16:07 <DIR> d-------- C:\Program Files\Uniblue
    2008-03-11 16:07 . 2008-03-11 16:07 <DIR> d-------- C:\Documents and Settings\Casey & Katelyn\Application Data\Uniblue
    2008-03-11 15:44 . 2008-03-12 14:30 <DIR> d-------- C:\Program Files\Mozilla Firefox 3 Beta 4
    2008-03-11 15:18 . 2008-03-11 15:18 230 --a------ C:\WINDOWS\system32\spupdsvc.inf
    2008-03-11 14:03 . 2008-03-11 14:03 <DIR> d-------- C:\Program Files\Spybot - Search & Destroy
    2008-03-11 14:03 . 2008-03-11 14:47 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
    2008-03-11 09:51 . 2007-08-09 12:36 2,056,192 --a------ C:\ctp.bak
    2008-03-11 09:32 . 2008-03-11 09:32 <DIR> d-------- C:\Program Files\Trend Micro
    2008-03-10 10:45 . 2008-03-10 10:45 <DIR> d-------- C:\Program Files\Windows Defender
    2008-03-10 09:59 . 2008-03-10 09:59 <DIR> d-------- C:\Documents and Settings\Casey & Katelyn\Application Data\Grisoft
    2008-03-10 09:59 . 2007-05-30 05:10 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
    2008-03-08 23:19 . 2008-03-08 23:19 <DIR> d-------- C:\Documents and Settings\Casey & Katelyn\Application Data\TrojanHunter
    2008-03-08 23:17 . 2008-03-08 23:21 <DIR> d-------- C:\Program Files\TrojanHunter 5.0
    2008-03-07 00:51 . 2008-03-11 10:13 28 --a------ C:\WINDOWS\v2d.INI
    2008-03-06 13:48 . 2008-03-11 10:03 <DIR> d-------- C:\v2d
    2008-03-06 13:48 . 2008-03-11 10:11 <DIR> d-------- C:\Program Files\Total Video2DVD Author
    2008-03-06 13:48 . 2008-03-06 13:48 <DIR> d-------- C:\Program Files\Common Files\Download Manager
    2008-03-05 17:25 . 2008-03-06 12:58 <DIR> d-------- C:\Program Files\The KMPlayer
    2008-03-05 17:18 . 2008-03-05 17:18 <DIR> d-------- C:\Documents and Settings\Casey & Katelyn\Application Data\Media Player Classic
    2008-03-05 13:05 . 2008-03-05 13:05 <DIR> d-------- C:\Program Files\Combined Community Codec Pack
    2008-03-04 18:11 . 2008-03-04 18:11 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\vsosdk
    2008-03-04 15:20 . 2008-03-10 09:45 9,728 --ahs---- C:\Thumbs.db
    2008-03-04 15:20 . 2008-03-12 10:04 7,680 --ahs---- C:\WINDOWS\Thumbs.db
    2008-03-04 15:08 . 2008-03-05 08:33 <DIR> d-------- C:\Program Files\VSO
    2008-03-04 15:08 . 2008-03-05 08:33 <DIR> d-------- C:\Documents and Settings\Casey & Katelyn\Application Data\Vso
    2008-03-04 15:08 . 2008-03-05 08:33 87,608 --a------ C:\Documents and Settings\Casey & Katelyn\Application Data\inst.exe
    2008-03-04 15:08 . 2008-03-04 15:08 47,360 --a------ C:\WINDOWS\system32\drivers\pcouffin.sys
    2008-03-04 15:08 . 2008-03-05 08:33 47,360 --a------ C:\Documents and Settings\Casey & Katelyn\Application Data\pcouffin.sys
    2008-03-03 14:52 . 2008-03-08 23:02 11,560 --a------ C:\image.jpg
    2008-03-03 14:50 . 2008-03-03 14:50 <DIR> d-------- C:\WINDOWS\steepandcheap
    2008-03-02 22:55 . 2008-03-03 14:50 <DIR> d-------- C:\Program Files\SteepAndCheap
    2008-02-22 07:37 . 2008-02-22 07:37 <DIR> d-------- C:\Program Files\DIFX
    2008-02-21 15:43 . 2008-02-21 15:43 <DIR> d-------- C:\Program Files\InstallShield Installation Information
    2008-02-21 15:43 . 2007-07-19 18:14 3,727,720 --a------ C:\WINDOWS\system32\d3dx9_35.dll
    2008-02-21 15:43 . 2007-03-12 16:42 3,495,784 --a------ C:\WINDOWS\system32\d3dx9_33.dll
    2008-02-21 15:43 . 2007-07-19 18:14 1,358,192 --a------ C:\WINDOWS\system32\D3DCompiler_35.dll
    2008-02-21 15:43 . 2007-03-12 16:42 1,123,696 --a------ C:\WINDOWS\system32\D3DCompiler_33.dll
    2008-02-21 15:43 . 2007-07-19 18:14 444,776 --a------ C:\WINDOWS\system32\d3dx10_35.dll
    2008-02-21 15:43 . 2007-03-15 16:57 443,752 --a------ C:\WINDOWS\system32\d3dx10_33.dll
    2008-02-21 15:43 . 2006-09-28 16:05 237,848 --a------ C:\WINDOWS\system32\xactengine2_4.dll
    2008-02-21 15:43 . 2007-04-04 18:53 81,768 --a------ C:\WINDOWS\system32\xinput1_3.dll
    2008-02-21 15:43 . 2006-09-28 16:03 15,128 --a------ C:\WINDOWS\system32\x3daudio1_1.dll
    2008-02-21 10:28 . 2008-02-21 10:28 <DIR> d-------- C:\Program Files\Xilisoft
    2008-02-17 23:38 . 2008-02-17 23:38 <DIR> d-------- C:\WINDOWS\Cache
    2008-02-17 23:38 . 2008-02-18 07:35 <DIR> d-------- C:\Program Files\Coupons
    2008-02-17 23:38 . 2008-02-17 23:38 193,880 -rah----- C:\WINDOWS\system32\cpnprt2.cid

    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2008-03-13 00:15 --------- d-----w C:\Program Files\GE Security Supra
    2008-03-12 17:05 --------- d-----w C:\Documents and Settings\Casey & Katelyn\Application Data\AVG7
    2008-03-11 23:14 --------- d-----w C:\Documents and Settings\Casey & Katelyn\Application Data\uTorrent
    2008-03-11 20:52 --------- d-----w C:\Program Files\Java
    2008-03-07 20:50 --------- d-----w C:\Program Files\Lexmark 1200 Series
    2008-03-06 20:14 --------- d-----w C:\Program Files\Windows Media Connect 2
    2008-02-26 21:10 --------- d-----w C:\Program Files\PeerGuardian2
    2008-02-22 14:41 --------- d-----w C:\Program Files\Bonjour
    2008-02-21 17:11 --------- d-----w C:\Program Files\QuickTime
    2008-02-20 05:36 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP
    2008-02-09 18:08 --------- d-----w C:\Documents and Settings\Casey & Katelyn\Application Data\Sony
    2008-02-09 17:53 --------- d-----w C:\Program Files\Sony Setup
    2008-02-09 17:53 --------- d-----w C:\Program Files\Sony
    2008-02-09 17:32 --------- d-----w C:\Documents and Settings\Casey & Katelyn\Application Data\Publish Providers
    2008-02-06 02:42 --------- d-----w C:\Program Files\Vstplugins
    2008-02-06 02:42 --------- d-----w C:\Documents and Settings\All Users\Application Data\Sony
    2008-02-06 02:40 --------- d-----w C:\Program Files\MSBuild
    2008-02-06 02:35 --------- d-----w C:\Program Files\Reference Assemblies
    2008-02-06 02:33 --------- d-----w C:\Documents and Settings\Casey & Katelyn\Application Data\Sony Setup
    2008-02-06 02:19 --------- d-----w C:\Program Files\PowerISO
    2008-02-05 18:15 --------- d-----w C:\Program Files\Stardock
    2008-02-05 06:33 --------- d-----w C:\Documents and Settings\All Users\Application Data\ALM
    2008-02-05 06:19 --------- d-----w C:\Program Files\Common Files\Adobe
    2008-02-05 06:10 --------- d-----w C:\Program Files\SiLabs
    2008-02-04 19:34 --------- d-----w C:\Program Files\uTorrent
    2008-02-04 17:24 --------- d-----w C:\Documents and Settings\Casey & Katelyn\Application Data\Download Manager
    2008-02-04 16:47 --------- d-----w C:\Program Files\Common Files\Stardock
    2008-02-04 16:45 --------- d-----w C:\Documents and Settings\All Users\Application Data\Microsoft Corporation
    2008-02-03 00:52 --------- d-----w C:\Documents and Settings\All Users\Application Data\Grisoft
    2008-01-31 00:30 --------- d-----w C:\Documents and Settings\Casey & Katelyn\Application Data\LimeWire
    2008-01-29 22:35 --------- d-----w C:\Program Files\Common Files\Java
    2008-01-25 05:34 --------- d-----w C:\Documents and Settings\All Users\Application Data\FLEXnet
    2008-01-24 22:52 92,160 ----a-w C:\WINDOWS\Help\ADOBE CS3 FLASH KEYGEN.EXE
    2008-01-24 21:35 --------- d-----w C:\Program Files\Common Files\Macrovision Shared
    2008-01-24 20:42 --------- d-----w C:\Program Files\Xvid
    2008-01-24 15:33 --------- d-----w C:\Program Files\Common Files\InstallShield
    2008-01-24 15:20 --------- d-----w C:\Documents and Settings\Casey & Katelyn\Application Data\Apple Computer
    2008-01-22 22:38 --------- d-----w C:\Program Files\PokerStars
    2008-01-21 05:35 --------- d-----w C:\Program Files\MSXML 6.0
    2008-01-20 07:07 33,292 ----a-w C:\WINDOWS\system32\drivers\scdemu.sys
    2008-01-18 20:20 --------- d-----w C:\Program Files\Google
    2008-01-16 21:14 --------- d-----w C:\Documents and Settings\All Users\Application Data\Apple Computer
    2008-01-16 21:13 --------- d-----w C:\Program Files\Common Files\Apple
    2008-01-16 21:13 --------- d-----w C:\Program Files\Apple Software Update
    2008-01-16 21:13 --------- d-----w C:\Documents and Settings\All Users\Application Data\Apple
    2008-01-16 15:48 --------- d-----w C:\Program Files\MagicISO
    2008-01-16 15:00 --------- d-----w C:\Documents and Settings\All Users\Application Data\avg7
    2008-01-16 05:49 --------- d-----w C:\Program Files\VIA Technologies, Inc
    2008-01-15 21:25 --------- d-----w C:\Documents and Settings\LocalService\Application Data\AVG7
    2008-01-15 20:50 --------- d-----w C:\Documents and Settings\Casey & Katelyn\Application Data\Microsoft Web Folders
    2008-01-15 20:29 --------- d-----w C:\Program Files\ABBYY FineReader 6.0
    2008-01-15 19:28 --------- d-----w C:\Program Files\microsoft frontpage
    .

    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4

    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{8df5ab9d-f4ac-4f14-8700-0652b98fd98b}]

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "ctfmon.exe "= "C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 00:56 15360]
    "SpybotSD TeaTimer "= "C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2008-01-28 11:43 2097488]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "Anvshell "= "C:\WINDOWS\Anvshell.exe" [2002-10-21 23:45 331776]
    "NvCplDaemon "= "C:\WINDOWS\system32\NvCpl.dll" [2007-12-05 01:41 8523776]
    "nwiz "= "nwiz.exe" [2007-12-05 01:41 1626112 C:\WINDOWS\system32\nwiz.exe]
    "Lexmark 1200 Series "= "C:\Program Files\Lexmark 1200 Series\lxczbmgr.exe" [2006-03-16 00:07 57344]
    "AVG7_CC "= "C:\PROGRA~1\Grisoft\AVG7\avgcc.exe" [2008-01-15 14:25 579072]
    "Google Desktop Search "= "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" [2008-01-15 15:04 29744]
    "googletalk "= "C:\Program Files\Google\Google Talk\googletalk.exe" [2007-01-01 14:22 3739648]
    "NvMediaCenter "= "C:\WINDOWS\system32\NvMcTray.dll" [2007-12-05 01:41 81920]
    "SunJavaUpdateSched "= "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 04:25 144784]
    "Acrobat Assistant 8.0 "= "C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe" [2008-01-11 19:54 623992]
    "Adobe Reader Speed Launcher "= "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 22:16 39792]
    "QuickTime Task "= "C:\Program Files\QuickTime\QTTask.exe" [2008-01-31 23:13 385024]
    "!AVG Anti-Spyware "= "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2008-03-10 16:43 6731312]
    "Windows Defender "= "C:\Program Files\Windows Defender\MSASCui.exe" [2006-11-03 19:20 866584]
    "iTunesHelper "= "C:\Program Files\iTunes\iTunesHelper.exe" [2008-02-19 13:10 267048]

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
    "AVG7_Run "= "C:\PROGRA~1\Grisoft\AVG7\avgw.exe" [2008-01-15 14:25 219136]

    C:\Documents and Settings\Casey & Katelyn\Start Menu\Programs\Startup\
    Stardock ObjectDock.lnk - C:\Program Files\Stardock\ObjectDock\ObjectDock.exe [2008-01-30 17:44:45 3450608]

    C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
    DisplayKEY eSYNC Info.lnk - C:\Program Files\GE Security Supra\SyncInfoApp.exe [2008-02-04 23:09:10 102400]
    Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office\OSA9.EXE [2000-01-21 01:15:54 65588]

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
    "DisableRegistryTools "= 0 (0x0)

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\MCPClient]
    C:\Program Files\Common Files\Stardock\mcpstub.dll

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\urqpopm]
    urqpopm.dll

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\WBSrv]
    C:\PROGRA~1\Stardock\OBJECT~2\WINDOW~1\wbsrv.dll 2008-01-30 18:06 176128 C:\PROGRA~1\Stardock\OBJECT~2\WINDOW~1\WbSrv.dll

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
    "AppInit_DLLs "=C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL,wbsys.dll

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\system32\\sessmgr.exe "=
    "C:\\Program Files\\uTorrent\\uTorrent.exe "=
    "C:\\Program Files\\Grisoft\\AVG7\\avginet.exe "=
    "C:\\Program Files\\Grisoft\\AVG7\\avgamsvr.exe "=
    "C:\\Program Files\\Grisoft\\AVG7\\avgcc.exe "=
    "C:\\Program Files\\Grisoft\\AVG7\\avgemc.exe "=
    "C:\\Program Files\\Bonjour\\mDNSResponder.exe "=
    "C:\\Program Files\\Google\\Google Talk\\googletalk.exe "=
    "%windir%\\Network Diagnostic\\xpnetdiag.exe "=
    "C:\\Program Files\\iTunes\\iTunes.exe "=

    S3 GoogleDesktopManager-010108-205858;Google Desktop Manager 5.7.801.1629; "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" [2008-01-15 15:04]

    .
    Contents of the 'Scheduled Tasks' folder
    "2008-03-13 00:18:11 C:\WINDOWS\Tasks\MP Scheduled Scan.job "
    - C:\Program Files\Windows Defender\MpCmdRun.exe
    .
    **************************************************************************

    catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2008-03-12 17:15:29
    Windows 5.1.2600 Service Pack 2 NTFS

    scanning hidden processes ...

    scanning hidden autostart entries ...

    scanning hidden files ...

    scan completed successfully
    hidden files: 0

    **************************************************************************
    .
    --------------------- DLLs Loaded Under Running Processes ---------------------

    PROCESS: C:\WINDOWS\explorer.exe [6.00.2900.3156]
    -> C:\Program Files\Stardock\ObjectDock\DockShellHook.dll
    -> C:\Program Files\Stardock\Object Desktop\WindowBlinds\tray.dll
    .
    ------------------------ Other Running Processes ------------------------
    .
    C:\Program Files\Windows Defender\MsMpEng.exe
    C:\WINDOWS\system32\LEXBCES.EXE
    C:\WINDOWS\system32\LEXPPS.EXE
    C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
    C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
    C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    c:\program files\ge security supra\syncservice.exe
    C:\WINDOWS\system32\nvsvc32.exe
    C:\Program Files\GE Security Supra\ProxyDaemon.exe
    C:\SSL\stunnel-4.10.exe
    C:\WINDOWS\system32\RUNDLL32.EXE
    C:\Program Files\Lexmark 1200 Series\lxczbmon.exe
    C:\Program Files\iPod\bin\iPodService.exe
    .
    **************************************************************************
    .
    Completion time: 2008-03-12 17:20:13 - machine was rebooted
    ComboFix-quarantined-files.txt 2008-03-13 00:20:10
    .
    2008-03-12 00:46:28 --- E O F ---


    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 5:36:56 PM, on 3/12/2008
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Windows Defender\MsMpEng.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\LEXBCES.EXE
    C:\WINDOWS\system32\LEXPPS.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
    C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
    C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    c:\program files\ge security supra\syncservice.exe
    C:\WINDOWS\system32\nvsvc32.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\GE Security Supra\ProxyDaemon.exe
    C:\SSL\stunnel-4.10.exe
    C:\WINDOWS\Anvshell.exe
    C:\Program Files\Lexmark 1200 Series\lxczbmgr.exe
    C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
    C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
    C:\Program Files\Google\Google Talk\googletalk.exe
    C:\WINDOWS\system32\RUNDLL32.EXE
    C:\Program Files\Lexmark 1200 Series\lxczbmon.exe
    C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
    C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe
    C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
    C:\Program Files\Windows Defender\MSASCui.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    C:\Program Files\GE Security Supra\SyncInfoApp.exe
    C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
    C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\WINDOWS\explorer.exe
    C:\Program Files\Mozilla Firefox 3 Beta 4\firefox.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O2 - BHO: SorcimToolBar.InitToolbarBHO - {8df5ab9d-f4ac-4f14-8700-0652b98fd98b} - mscoree.dll (file missing)
    O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
    O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
    O3 - Toolbar: SteapandCheap - {ae07101b-46d4-4a98-af68-0333ea26e113} - mscoree.dll (file missing)
    O4 - HKLM\..\Run: [Anvshell] C:\WINDOWS\Anvshell.exe
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [Lexmark 1200 Series] "C:\Program Files\Lexmark 1200 Series\lxczbmgr.exe "
    O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
    O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
    O4 - HKLM\..\Run: [googletalk] C:\Program Files\Google\Google Talk\googletalk.exe /autostart
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe "
    O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe "
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe "
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
    O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe "
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'NETWORK SERVICE')
    O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Default user')
    O4 - Startup: Stardock ObjectDock.lnk = C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
    O4 - Global Startup: DisplayKEY eSYNC Info.lnk = C:\Program Files\GE Security Supra\SyncInfoApp.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
    O8 - Extra context menu item: Append to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
    O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
    O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
    O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
    O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
    O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
    O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
    O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: Web-Based Email Tools - http://email.secureserver.net/Download.CAB
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
    O16 - DPF: {FFBB3F3B-0A5A-4106-BE53-DFE1E2340CB1} (DownloadManager Control) - http://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.1.6.cab
    O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL,wbsys.dll
    O20 - Winlogon Notify: urqpopm - urqpopm.dll (file missing)
    O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
    O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
    O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
    O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: DkeySync - GE Security Supra - c:\program files\ge security supra\syncservice.exe
    O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
    O23 - Service: Google Desktop Manager 5.7.801.1629 (GoogleDesktopManager-010108-205858) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
    O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

    --
    End of file - 9924 bytes
     
    Hezron7,
    #5
  7. 2008/03/13
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    Again, it's best to disable Realtime protections prior to running ComboFix.

    Highlight and copy the contents of the code box below and paste it into a blank notepad, then save it to your desktop as;

    Filename: CFScript.txt
    Save As Type: All Files (*.*)

    Code:
    File::
C:\WINDOWS\system32\cpnprt2.cid
Folder::
C:\Program Files\Coupons
C:\Program Files\microsoft frontpage
Registry::
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{8df5ab9d-f4ac-4f14-8700-0652b98fd98b}]
[-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\urqpopm]
FileLook::
C:\ctp.bak
    Close all other windows and programs. Now drag the CFScript.txt onto ComboFix.exe and drop it, using the left mouse button. Combofix should run and may reboot the computer when it's done. A log will open when it's complete. Post the contents of that log and a fresh HijackThis log

    Please do not click on the ComboFix window while it is running a scan. This can cause it to stall.
     
    noahdfear,
    #6
  8. 2008/03/14
    Hezron7

    Hezron7 Inactive Thread Starter

    Joined:
    2008/03/11
    Messages:
    15
    Likes Received:
    0
    Okay here's my new log. It still says that I don't have the recovery console installed. What is that?

    ComboFix 08-03-10.1 - Casey & Katelyn 2008-03-13 22:38:19.2 - NTFSx86
    Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.368 [GMT -7:00]
    Running from: C:\Documents and Settings\Casey & Katelyn\Desktop\ComboFix.exe
    Command switches used :: C:\Documents and Settings\Casey & Katelyn\Desktop\CFScript.txt
    * Created a new restore point

    WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!

    FILE ::
    C:\WINDOWS\system32\cpnprt2.cid
    .

    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    C:\Documents and Settings\Casey & Katelyn\Application Data\inst.exe
    C:\Program Files\Coupons
    C:\Program Files\Coupons\uninstall.exe
    C:\Program Files\microsoft frontpage\version3.0\bin\fp98sadm.exe
    C:\Program Files\microsoft frontpage\version3.0\bin\fp98swin.exe
    C:\Program Files\microsoft frontpage\version3.0\bin\FPSRVADM.EXE
    C:\Program Files\microsoft frontpage\version3.0\bin\FPSRVWIN.EXE
    C:\WINDOWS\system32\cpnprt2.cid
    C:\Program Files\microsoft frontpage . . . . failed to delete

    .
    ((((((((((((((((((((((((( Files Created from 2008-02-14 to 2008-03-14 )))))))))))))))))))))))))))))))
    .

    2008-03-12 08:35 . 2008-03-13 22:45 54,156 --ah----- C:\WINDOWS\QTFont.qfn
    2008-03-12 08:35 . 2008-03-12 08:35 1,409 --a------ C:\WINDOWS\QTFont.for
    2008-03-12 08:33 . 2008-03-12 08:33 <DIR> d-------- C:\Program Files\iPod
    2008-03-12 08:32 . 2008-03-12 08:33 <DIR> d-------- C:\Program Files\iTunes
    2008-03-11 22:14 . 2008-03-11 22:14 <DIR> d-------- C:\Deckard
    2008-03-11 16:07 . 2008-03-11 16:07 <DIR> d-------- C:\Program Files\Uniblue
    2008-03-11 16:07 . 2008-03-11 16:07 <DIR> d-------- C:\Documents and Settings\Casey & Katelyn\Application Data\Uniblue
    2008-03-11 15:44 . 2008-03-13 22:26 <DIR> d-------- C:\Program Files\Mozilla Firefox 3 Beta 4
    2008-03-11 15:18 . 2008-03-11 15:18 230 --a------ C:\WINDOWS\system32\spupdsvc.inf
    2008-03-11 14:03 . 2008-03-11 14:03 <DIR> d-------- C:\Program Files\Spybot - Search & Destroy
    2008-03-11 14:03 . 2008-03-11 14:47 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
    2008-03-11 09:51 . 2007-08-09 12:36 2,056,192 --a------ C:\ctp.bak
    2008-03-11 09:32 . 2008-03-11 09:32 <DIR> d-------- C:\Program Files\Trend Micro
    2008-03-10 10:45 . 2008-03-10 10:45 <DIR> d-------- C:\Program Files\Windows Defender
    2008-03-10 09:59 . 2008-03-10 09:59 <DIR> d-------- C:\Documents and Settings\Casey & Katelyn\Application Data\Grisoft
    2008-03-10 09:59 . 2007-05-30 05:10 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
    2008-03-08 23:19 . 2008-03-08 23:19 <DIR> d-------- C:\Documents and Settings\Casey & Katelyn\Application Data\TrojanHunter
    2008-03-08 23:17 . 2008-03-08 23:21 <DIR> d-------- C:\Program Files\TrojanHunter 5.0
    2008-03-07 00:51 . 2008-03-11 10:13 28 --a------ C:\WINDOWS\v2d.INI
    2008-03-06 13:48 . 2008-03-11 10:03 <DIR> d-------- C:\v2d
    2008-03-06 13:48 . 2008-03-11 10:11 <DIR> d-------- C:\Program Files\Total Video2DVD Author
    2008-03-06 13:48 . 2008-03-06 13:48 <DIR> d-------- C:\Program Files\Common Files\Download Manager
    2008-03-05 17:25 . 2008-03-06 12:58 <DIR> d-------- C:\Program Files\The KMPlayer
    2008-03-05 17:18 . 2008-03-05 17:18 <DIR> d-------- C:\Documents and Settings\Casey & Katelyn\Application Data\Media Player Classic
    2008-03-05 13:05 . 2008-03-05 13:05 <DIR> d-------- C:\Program Files\Combined Community Codec Pack
    2008-03-04 18:11 . 2008-03-04 18:11 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\vsosdk
    2008-03-04 15:20 . 2008-03-10 09:45 9,728 --ahs---- C:\Thumbs.db
    2008-03-04 15:20 . 2008-03-12 17:45 7,680 --ahs---- C:\WINDOWS\Thumbs.db
    2008-03-04 15:08 . 2008-03-05 08:33 <DIR> d-------- C:\Program Files\VSO
    2008-03-04 15:08 . 2008-03-05 08:33 <DIR> d-------- C:\Documents and Settings\Casey & Katelyn\Application Data\Vso
    2008-03-04 15:08 . 2008-03-04 15:08 47,360 --a------ C:\WINDOWS\system32\drivers\pcouffin.sys
    2008-03-04 15:08 . 2008-03-05 08:33 47,360 --a------ C:\Documents and Settings\Casey & Katelyn\Application Data\pcouffin.sys
    2008-03-03 14:52 . 2008-03-08 23:02 11,560 --a------ C:\image.jpg
    2008-03-03 14:50 . 2008-03-03 14:50 <DIR> d-------- C:\WINDOWS\steepandcheap
    2008-03-02 22:55 . 2008-03-03 14:50 <DIR> d-------- C:\Program Files\SteepAndCheap
    2008-02-22 07:37 . 2008-02-22 07:37 <DIR> d-------- C:\Program Files\DIFX
    2008-02-21 15:43 . 2008-02-21 15:43 <DIR> d-------- C:\Program Files\InstallShield Installation Information
    2008-02-21 15:43 . 2007-07-19 18:14 3,727,720 --a------ C:\WINDOWS\system32\d3dx9_35.dll
    2008-02-21 15:43 . 2007-03-12 16:42 3,495,784 --a------ C:\WINDOWS\system32\d3dx9_33.dll
    2008-02-21 15:43 . 2007-07-19 18:14 1,358,192 --a------ C:\WINDOWS\system32\D3DCompiler_35.dll
    2008-02-21 15:43 . 2007-03-12 16:42 1,123,696 --a------ C:\WINDOWS\system32\D3DCompiler_33.dll
    2008-02-21 15:43 . 2007-07-19 18:14 444,776 --a------ C:\WINDOWS\system32\d3dx10_35.dll
    2008-02-21 15:43 . 2007-03-15 16:57 443,752 --a------ C:\WINDOWS\system32\d3dx10_33.dll
    2008-02-21 15:43 . 2006-09-28 16:05 237,848 --a------ C:\WINDOWS\system32\xactengine2_4.dll
    2008-02-21 15:43 . 2007-04-04 18:53 81,768 --a------ C:\WINDOWS\system32\xinput1_3.dll
    2008-02-21 15:43 . 2006-09-28 16:03 15,128 --a------ C:\WINDOWS\system32\x3daudio1_1.dll
    2008-02-21 10:28 . 2008-02-21 10:28 <DIR> d-------- C:\Program Files\Xilisoft
    2008-02-17 23:38 . 2008-02-17 23:38 <DIR> d-------- C:\WINDOWS\Cache

    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2008-03-14 05:46 --------- d-----w C:\Program Files\PeerGuardian2
    2008-03-14 05:45 --------- d-----w C:\Program Files\GE Security Supra
    2008-03-13 22:58 --------- d-----w C:\Program Files\Lexmark 1200 Series
    2008-03-13 15:00 --------- d-----w C:\Documents and Settings\Casey & Katelyn\Application Data\AVG7
    2008-03-11 23:14 --------- d-----w C:\Documents and Settings\Casey & Katelyn\Application Data\uTorrent
    2008-03-11 20:52 --------- d-----w C:\Program Files\Java
    2008-03-06 20:14 --------- d-----w C:\Program Files\Windows Media Connect 2
    2008-02-22 14:41 --------- d-----w C:\Program Files\Bonjour
    2008-02-21 17:11 --------- d-----w C:\Program Files\QuickTime
    2008-02-20 05:36 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP
    2008-02-09 18:08 --------- d-----w C:\Documents and Settings\Casey & Katelyn\Application Data\Sony
    2008-02-09 17:53 --------- d-----w C:\Program Files\Sony Setup
    2008-02-09 17:53 --------- d-----w C:\Program Files\Sony
    2008-02-09 17:32 --------- d-----w C:\Documents and Settings\Casey & Katelyn\Application Data\Publish Providers
    2008-02-06 02:42 --------- d-----w C:\Program Files\Vstplugins
    2008-02-06 02:42 --------- d-----w C:\Documents and Settings\All Users\Application Data\Sony
    2008-02-06 02:40 --------- d-----w C:\Program Files\MSBuild
    2008-02-06 02:35 --------- d-----w C:\Program Files\Reference Assemblies
    2008-02-06 02:33 --------- d-----w C:\Documents and Settings\Casey & Katelyn\Application Data\Sony Setup
    2008-02-06 02:19 --------- d-----w C:\Program Files\PowerISO
    2008-02-05 18:15 --------- d-----w C:\Program Files\Stardock
    2008-02-05 06:33 --------- d-----w C:\Documents and Settings\All Users\Application Data\ALM
    2008-02-05 06:19 --------- d-----w C:\Program Files\Common Files\Adobe
    2008-02-05 06:10 --------- d-----w C:\Program Files\SiLabs
    2008-02-04 19:34 --------- d-----w C:\Program Files\uTorrent
    2008-02-04 17:24 --------- d-----w C:\Documents and Settings\Casey & Katelyn\Application Data\Download Manager
    2008-02-04 16:47 --------- d-----w C:\Program Files\Common Files\Stardock
    2008-02-04 16:45 --------- d-----w C:\Documents and Settings\All Users\Application Data\Microsoft Corporation
    2008-02-03 00:52 --------- d-----w C:\Documents and Settings\All Users\Application Data\Grisoft
    2008-01-31 00:30 --------- d-----w C:\Documents and Settings\Casey & Katelyn\Application Data\LimeWire
    2008-01-29 22:35 --------- d-----w C:\Program Files\Common Files\Java
    2008-01-25 05:34 --------- d-----w C:\Documents and Settings\All Users\Application Data\FLEXnet
    2008-01-24 22:52 92,160 ----a-w C:\WINDOWS\Help\ADOBE CS3 FLASH KEYGEN.EXE
    2008-01-24 21:35 --------- d-----w C:\Program Files\Common Files\Macrovision Shared
    2008-01-24 20:42 --------- d-----w C:\Program Files\Xvid
    2008-01-24 15:33 --------- d-----w C:\Program Files\Common Files\InstallShield
    2008-01-24 15:20 --------- d-----w C:\Documents and Settings\Casey & Katelyn\Application Data\Apple Computer
    2008-01-22 22:38 --------- d-----w C:\Program Files\PokerStars
    2008-01-21 05:35 --------- d-----w C:\Program Files\MSXML 6.0
    2008-01-20 07:07 33,292 ----a-w C:\WINDOWS\system32\drivers\scdemu.sys
    2008-01-18 20:20 --------- d-----w C:\Program Files\Google
    2008-01-16 21:14 --------- d-----w C:\Documents and Settings\All Users\Application Data\Apple Computer
    2008-01-16 21:13 --------- d-----w C:\Program Files\Common Files\Apple
    2008-01-16 21:13 --------- d-----w C:\Program Files\Apple Software Update
    2008-01-16 21:13 --------- d-----w C:\Documents and Settings\All Users\Application Data\Apple
    2008-01-16 15:48 --------- d-----w C:\Program Files\MagicISO
    2008-01-16 15:00 --------- d-----w C:\Documents and Settings\All Users\Application Data\avg7
    2008-01-16 05:49 --------- d-----w C:\Program Files\VIA Technologies, Inc
    2008-01-15 21:25 --------- d-----w C:\Documents and Settings\LocalService\Application Data\AVG7
    2008-01-15 20:50 --------- d-----w C:\Documents and Settings\Casey & Katelyn\Application Data\Microsoft Web Folders
    2008-01-15 20:29 --------- d-----w C:\Program Files\ABBYY FineReader 6.0
    2008-01-15 19:28 --------- d-----w C:\Program Files\microsoft frontpage
    .

    (((((((((((((((((((((((((((((((((((((((((((( Look )))))))))))))))))))))))))))))))))))))))))))))))))))))))))
    .

    ---- C:\ctp.bak ----

    Company:
    File Description: Total Video2DVD Author
    File Version: 2, 0, 7, 808
    Product Name: Total Video2DVD Author
    Copyright: Copyright (C) 2006-2007 v2d team
    Original file name: Total Video2DVD Author


    ((((((((((((((((((((((((((((( snapshot@2008-03-12_17.19.56.04 )))))))))))))))))))))))))))))))))))))))))
    .
    - 2008-03-13 00:15:24 40,960 ----a-w C:\WINDOWS\TEMP\rtdrvmon.exe
    + 2008-03-14 05:45:19 40,960 ----a-w C:\WINDOWS\TEMP\rtdrvmon.exe
    .
    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "ctfmon.exe "= "C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 00:56 15360]
    "SpybotSD TeaTimer "= "C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2008-01-28 11:43 2097488]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "Anvshell "= "C:\WINDOWS\Anvshell.exe" [2002-10-21 23:45 331776]
    "NvCplDaemon "= "C:\WINDOWS\system32\NvCpl.dll" [2007-12-05 01:41 8523776]
    "nwiz "= "nwiz.exe" [2007-12-05 01:41 1626112 C:\WINDOWS\system32\nwiz.exe]
    "Lexmark 1200 Series "= "C:\Program Files\Lexmark 1200 Series\lxczbmgr.exe" [2006-03-16 00:07 57344]
    "AVG7_CC "= "C:\PROGRA~1\Grisoft\AVG7\avgcc.exe" [2008-01-15 14:25 579072]
    "Google Desktop Search "= "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" [2008-01-15 15:04 29744]
    "googletalk "= "C:\Program Files\Google\Google Talk\googletalk.exe" [2007-01-01 14:22 3739648]
    "NvMediaCenter "= "C:\WINDOWS\system32\NvMcTray.dll" [2007-12-05 01:41 81920]
    "SunJavaUpdateSched "= "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 04:25 144784]
    "Acrobat Assistant 8.0 "= "C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe" [2008-01-11 19:54 623992]
    "Adobe Reader Speed Launcher "= "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 22:16 39792]
    "QuickTime Task "= "C:\Program Files\QuickTime\QTTask.exe" [2008-01-31 23:13 385024]
    "!AVG Anti-Spyware "= "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2008-03-10 16:43 6731312]
    "Windows Defender "= "C:\Program Files\Windows Defender\MSASCui.exe" [2006-11-03 19:20 866584]
    "iTunesHelper "= "C:\Program Files\iTunes\iTunesHelper.exe" [2008-02-19 13:10 267048]

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
    "AVG7_Run "= "C:\PROGRA~1\Grisoft\AVG7\avgw.exe" [2008-01-15 14:25 219136]

    C:\Documents and Settings\Casey & Katelyn\Start Menu\Programs\Startup\
    Stardock ObjectDock.lnk - C:\Program Files\Stardock\ObjectDock\ObjectDock.exe [2008-01-30 17:44:45 3450608]

    C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
    DisplayKEY eSYNC Info.lnk - C:\Program Files\GE Security Supra\SyncInfoApp.exe [2008-02-04 23:09:10 102400]
    Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office\OSA9.EXE [2000-01-21 01:15:54 65588]
    PeerGuardian.lnk - C:\Program Files\PeerGuardian2\pg2.exe [2008-01-15 14:16:45 1421824]

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
    "DisableRegistryTools "= 0 (0x0)

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\MCPClient]
    C:\Program Files\Common Files\Stardock\mcpstub.dll

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\WBSrv]
    C:\PROGRA~1\Stardock\OBJECT~2\WINDOW~1\wbsrv.dll 2008-01-30 18:06 176128 C:\PROGRA~1\Stardock\OBJECT~2\WINDOW~1\WbSrv.dll

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
    "AppInit_DLLs "=C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL,wbsys.dll

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\system32\\sessmgr.exe "=
    "C:\\Program Files\\uTorrent\\uTorrent.exe "=
    "C:\\Program Files\\Grisoft\\AVG7\\avginet.exe "=
    "C:\\Program Files\\Grisoft\\AVG7\\avgamsvr.exe "=
    "C:\\Program Files\\Grisoft\\AVG7\\avgcc.exe "=
    "C:\\Program Files\\Grisoft\\AVG7\\avgemc.exe "=
    "C:\\Program Files\\Bonjour\\mDNSResponder.exe "=
    "C:\\Program Files\\Google\\Google Talk\\googletalk.exe "=
    "%windir%\\Network Diagnostic\\xpnetdiag.exe "=
    "C:\\Program Files\\iTunes\\iTunes.exe "=

    S3 GoogleDesktopManager-010108-205858;Google Desktop Manager 5.7.801.1629; "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" [2008-01-15 15:04]

    *Newly Created Service* - PGFILTER
    .
    Contents of the 'Scheduled Tasks' folder
    "2008-03-14 05:48:06 C:\WINDOWS\Tasks\MP Scheduled Scan.job "
    - C:\Program Files\Windows Defender\MpCmdRun.exe
    .
    **************************************************************************

    catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2008-03-13 22:45:28
    Windows 5.1.2600 Service Pack 2 NTFS

    scanning hidden processes ...

    scanning hidden autostart entries ...

    scanning hidden files ...

    scan completed successfully
    hidden files: 0

    **************************************************************************
    .
    --------------------- DLLs Loaded Under Running Processes ---------------------

    PROCESS: C:\WINDOWS\explorer.exe [6.00.2900.3156]
    -> C:\Program Files\Stardock\ObjectDock\DockShellHook.dll
    -> C:\Program Files\Stardock\Object Desktop\WindowBlinds\tray.dll
    .
    ------------------------ Other Running Processes ------------------------
    .
    C:\Program Files\Windows Defender\MsMpEng.exe
    C:\WINDOWS\system32\LEXBCES.EXE
    C:\WINDOWS\system32\LEXPPS.EXE
    C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
    C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
    C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    c:\program files\ge security supra\syncservice.exe
    C:\WINDOWS\system32\nvsvc32.exe
    C:\Program Files\GE Security Supra\ProxyDaemon.exe
    C:\SSL\stunnel-4.10.exe
    C:\WINDOWS\system32\RUNDLL32.EXE
    C:\Program Files\Lexmark 1200 Series\lxczbmon.exe
    C:\Program Files\iPod\bin\iPodService.exe
    .
    **************************************************************************
    .
    Completion time: 2008-03-13 22:50:28 - machine was rebooted
    ComboFix-quarantined-files.txt 2008-03-14 05:50:25
    ComboFix2.txt 2008-03-13 00:20:15
    .
    2008-03-12 00:46:28 --- E O F ---

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 11:01:10 PM, on 3/13/2008
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Windows Defender\MsMpEng.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\LEXBCES.EXE
    C:\WINDOWS\system32\LEXPPS.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
    C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
    C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    c:\program files\ge security supra\syncservice.exe
    C:\WINDOWS\system32\nvsvc32.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\GE Security Supra\ProxyDaemon.exe
    C:\SSL\stunnel-4.10.exe
    C:\WINDOWS\Anvshell.exe
    C:\Program Files\Lexmark 1200 Series\lxczbmgr.exe
    C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
    C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
    C:\Program Files\Google\Google Talk\googletalk.exe
    C:\WINDOWS\system32\RUNDLL32.EXE
    C:\Program Files\Lexmark 1200 Series\lxczbmon.exe
    C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
    C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
    C:\Program Files\Windows Defender\MSASCui.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    C:\Program Files\GE Security Supra\SyncInfoApp.exe
    C:\Program Files\PeerGuardian2\pg2.exe
    C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
    C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\WINDOWS\explorer.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\Program Files\Mozilla Firefox 3 Beta 4\firefox.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
    O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
    O3 - Toolbar: SteapandCheap - {ae07101b-46d4-4a98-af68-0333ea26e113} - mscoree.dll (file missing)
    O4 - HKLM\..\Run: [Anvshell] C:\WINDOWS\Anvshell.exe
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [Lexmark 1200 Series] "C:\Program Files\Lexmark 1200 Series\lxczbmgr.exe "
    O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
    O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
    O4 - HKLM\..\Run: [googletalk] C:\Program Files\Google\Google Talk\googletalk.exe /autostart
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe "
    O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe "
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe "
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
    O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe "
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'NETWORK SERVICE')
    O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Default user')
    O4 - Startup: Stardock ObjectDock.lnk = C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
    O4 - Global Startup: DisplayKEY eSYNC Info.lnk = C:\Program Files\GE Security Supra\SyncInfoApp.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
    O4 - Global Startup: PeerGuardian.lnk = C:\Program Files\PeerGuardian2\pg2.exe
    O8 - Extra context menu item: Append to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
    O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
    O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
    O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
    O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
    O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
    O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
    O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: Web-Based Email Tools - http://email.secureserver.net/Download.CAB
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
    O16 - DPF: {FFBB3F3B-0A5A-4106-BE53-DFE1E2340CB1} (DownloadManager Control) - http://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.1.6.cab
    O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL,wbsys.dll
    O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
    O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
    O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
    O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: DkeySync - GE Security Supra - c:\program files\ge security supra\syncservice.exe
    O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
    O23 - Service: Google Desktop Manager 5.7.801.1629 (GoogleDesktopManager-010108-205858) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
    O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

    --
    End of file - 9907 bytes
     
    Hezron7,
    #7
  9. 2008/03/15
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    Log looks good. :) The Recovery Console is a command window based utility that allows you to access the operating system files without loading Windows, used primarily for attempting to repair a non-bootable machine. ComboFix checks to see if it's installed. The Recovery Console is also available from your operating system CD, if you have one.

    Lets do an online scan now to see if we've missed anything. Please do an online scan with Kaspersky WebScanner

    Click Scan Now and accept the agreement. You will be promted to install an ActiveX component from Kaspersky, Click Yes.
    • The program will launch and then begin downloading the latest definition files:
    • Once the files have been downloaded click on NEXT
    • Now click on Scan Settings
    • In the scan settings make that the following are selected:
      • Scan using the following Anti-Virus database:
      • Extended (if available otherwise Standard)
      • Scan Options:
      • Scan Archives
        Scan Mail Bases
    • Click OK
    • Now under select a target to scan:
      • Select My Computer
    • This will program will start and scan your system.
    • The scan will take a while so be patient and let it run.
    • Once the scan is complete it will display if your system has been infected.
      • Now click on the Save as Text button:
    • Save the file to your desktop.

    Post the Kaspersky log here.
     
    noahdfear,
    #8
  10. 2008/03/15
    Hezron7

    Hezron7 Inactive Thread Starter

    Joined:
    2008/03/11
    Messages:
    15
    Likes Received:
    0
    Okay, Kaspersky virus scanner found some more viruses/trojans.

    Here's the log it generated:

    Saturday, March 15, 2008 9:41:37 PM
    Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
    Kaspersky Online Scanner version: 5.0.98.0
    Kaspersky Anti-Virus database last update: 15/03/2008
    Kaspersky Anti-Virus database records: 630959
    Scan Settings
    Scan using the following antivirus database extended
    Scan Archives true
    Scan Mail Bases true
    Scan Target My Computer
    C:\
    D:\
    E:\
    Scan Statistics
    Total number of scanned objects 177966
    Number of viruses found 6
    Number of infected objects 23
    Number of suspicious objects 0
    Duration of the scan process 03:05:19

    Infected Object Name Virus Name Last Action
    C:\Documents and Settings\All Users\Application Data\avg7\Log\emc.log Object is locked skipped
    C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\avg7log.log Object is locked skipped
    C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\avg7log.log.lck Object is locked skipped
    C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped
    C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped
    C:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\Support\MPLog-03122008-171512.log Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Cookies\index.dat Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Application Data\ApplicationHistory\SyncInfoApp.exe.df6d11f9.ini.inuse Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Application Data\Google\Google Desktop\b2c2e7827cb3\dbc2e.ht1 Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Application Data\Google\Google Desktop\b2c2e7827cb3\dbdam Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Application Data\Google\Google Desktop\b2c2e7827cb3\dbdao Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Application Data\Google\Google Desktop\b2c2e7827cb3\dbeam Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Application Data\Google\Google Desktop\b2c2e7827cb3\dbeao Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Application Data\Google\Google Desktop\b2c2e7827cb3\dbm Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Application Data\Google\Google Desktop\b2c2e7827cb3\dbu2d.ht1 Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Application Data\Google\Google Desktop\b2c2e7827cb3\dbvm.cf1 Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Application Data\Google\Google Desktop\b2c2e7827cb3\dbvmh.ht1 Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Application Data\Google\Google Desktop\b2c2e7827cb3\fii.cf1 Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Application Data\Google\Google Desktop\b2c2e7827cb3\fiih.ht1 Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Application Data\Google\Google Desktop\b2c2e7827cb3\hp Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Application Data\Google\Google Desktop\b2c2e7827cb3\hpt2i.ht1 Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Application Data\Google\Google Desktop\b2c2e7827cb3\rpm.cf1 Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Application Data\Google\Google Desktop\b2c2e7827cb3\rpm1m.cf1 Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Application Data\Google\Google Desktop\b2c2e7827cb3\rpm1mh.ht1 Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Application Data\Google\Google Desktop\b2c2e7827cb3\rpmh.ht1 Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Application Data\Google\Google Desktop\b2c2e7827cb3\safeweb\goog-black-enchashm.cf1 Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Application Data\Google\Google Desktop\b2c2e7827cb3\safeweb\goog-black-enchashmh.ht1 Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Application Data\Google\Google Desktop\b2c2e7827cb3\safeweb\goog-black-urlm.cf1 Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Application Data\Google\Google Desktop\b2c2e7827cb3\safeweb\goog-black-urlmh.ht1 Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Application Data\Google\Google Desktop\b2c2e7827cb3\safeweb\goog-malware-domainm.cf1 Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Application Data\Google\Google Desktop\b2c2e7827cb3\safeweb\goog-malware-domainmh.ht1 Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Application Data\Google\Google Desktop\b2c2e7827cb3\safeweb\goog-white-domainm.cf1 Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Application Data\Google\Google Desktop\b2c2e7827cb3\safeweb\goog-white-domainmh.ht1 Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Application Data\Microsoft\Windows Defender\FileTracker\{DD779DF9-1D52-456F-A6FC-BAE46CF6A3F9} Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\History\History.IE5\index.dat Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Temp\Perflib_Perfdata_8b0.dat Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Temp\~DF6954.tmp Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Temp\~DFB9F0.tmp Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\NTUSER.DAT Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\NTUSER.DAT.LOG Object is locked skipped
    C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
    C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
    C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
    C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped
    C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
    C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
    C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
    C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
    C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
    C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
    C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
    C:\Program Files\GE Security Supra\DaemonLog.txt Object is locked skipped
    C:\Program Files\GE Security Supra\SyncLog.txt Object is locked skipped
    C:\Program Files\PeerGuardian2\history.db Object is locked skipped
    C:\QooBox\Quarantine\C\WINDOWS\system32\jkkiiii.dll.vir Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
    C:\QooBox\Quarantine\C\WINDOWS\system32\xxyxxyw.dll.vir Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
    C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
    C:\System Volume Information\_restore{6871AF9E-C58B-4AEC-AF81-D4016F128980}\RP102\change.log Object is locked skipped
    C:\System Volume Information\_restore{6871AF9E-C58B-4AEC-AF81-D4016F128980}\RP31\A0007749.exe Infected: Trojan.Win32.Dialer.yz skipped
    C:\System Volume Information\_restore{6871AF9E-C58B-4AEC-AF81-D4016F128980}\RP33\A0008048.exe Infected: not-a-virus:AdWare.Win32.Virtumonde.giq skipped
    C:\System Volume Information\_restore{6871AF9E-C58B-4AEC-AF81-D4016F128980}\RP82\A0015321.exe Infected: Trojan-Downloader.Win32.Agent.krh skipped
    C:\System Volume Information\_restore{6871AF9E-C58B-4AEC-AF81-D4016F128980}\RP83\A0015344.exe/data.rar/crack.exe Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
    C:\System Volume Information\_restore{6871AF9E-C58B-4AEC-AF81-D4016F128980}\RP83\A0015344.exe/data.rar/keygen.exe Infected: Trojan-Downloader.Win32.Small.iui skipped
    C:\System Volume Information\_restore{6871AF9E-C58B-4AEC-AF81-D4016F128980}\RP83\A0015344.exe/data.rar/serial.exe Infected: Trojan-Downloader.Win32.Small.snf skipped
    C:\System Volume Information\_restore{6871AF9E-C58B-4AEC-AF81-D4016F128980}\RP83\A0015344.exe/data.rar Infected: Trojan-Downloader.Win32.Small.snf skipped
    C:\System Volume Information\_restore{6871AF9E-C58B-4AEC-AF81-D4016F128980}\RP83\A0015344.exe RarSFX: infected - 4 skipped
    C:\System Volume Information\_restore{6871AF9E-C58B-4AEC-AF81-D4016F128980}\RP83\A0015345.exe Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
    C:\System Volume Information\_restore{6871AF9E-C58B-4AEC-AF81-D4016F128980}\RP83\A0015384.exe Infected: Trojan-Downloader.Win32.Agent.krh skipped
    C:\System Volume Information\_restore{6871AF9E-C58B-4AEC-AF81-D4016F128980}\RP83\A0015385.exe Infected: Trojan-Downloader.Win32.Agent.krh skipped
    C:\System Volume Information\_restore{6871AF9E-C58B-4AEC-AF81-D4016F128980}\RP86\A0015422.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
    C:\System Volume Information\_restore{6871AF9E-C58B-4AEC-AF81-D4016F128980}\RP86\A0015446.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
    C:\System Volume Information\_restore{6871AF9E-C58B-4AEC-AF81-D4016F128980}\RP98\A0018508.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
    C:\System Volume Information\_restore{6871AF9E-C58B-4AEC-AF81-D4016F128980}\RP98\A0018509.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
    C:\System Volume Information\_restore{6871AF9E-C58B-4AEC-AF81-D4016F128980}\RP98\A0018510.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
    C:\System Volume Information\_restore{6871AF9E-C58B-4AEC-AF81-D4016F128980}\RP98\A0018511.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
    C:\System Volume Information\_restore{6871AF9E-C58B-4AEC-AF81-D4016F128980}\RP98\A0018512.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
    C:\System Volume Information\_restore{6871AF9E-C58B-4AEC-AF81-D4016F128980}\RP98\A0018513.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
    C:\System Volume Information\_restore{6871AF9E-C58B-4AEC-AF81-D4016F128980}\RP98\A0018514.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
    C:\System Volume Information\_restore{6871AF9E-C58B-4AEC-AF81-D4016F128980}\RP98\A0018515.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped

    That's all it found that were infected. I tried to paste the rest of the log but this website hit the 'character max'

    Let me know what you think I should do next to disinfect! THanks again for all this help.
     
    Hezron7,
    #9
  11. 2008/03/16
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    Please post the remainder of the Kaspersky log in another post.
     
    noahdfear,
    #10
  12. 2008/03/20
    Hezron7

    Hezron7 Inactive Thread Starter

    Joined:
    2008/03/11
    Messages:
    15
    Likes Received:
    0
    Okay, I have to cut it in thirds for it all to fit but here is the whole Kaspersky Log:

    -------------------------------------------------------------------------------
    KASPERSKY ONLINE SCANNER REPORT
    Thursday, March 20, 2008 8:04:33 AM
    Operating System: Microsoft Windows XP Professional, Service Pack 3, v.3311 (Build 2600)
    Kaspersky Online Scanner version: 5.0.98.0
    Kaspersky Anti-Virus database last update: 20/03/2008
    Kaspersky Anti-Virus database records: 643511
    -------------------------------------------------------------------------------

    Scan Settings:
    Scan using the following antivirus database: extended
    Scan Archives: true
    Scan Mail Bases: true

    Scan Target - My Computer:
    C:\
    D:\
    E:\

    Scan Statistics:
    Total number of scanned objects: 184986
    Number of viruses found: 3
    Number of infected objects: 9
    Number of suspicious objects: 0
    Duration of the scan process: 03:25:30

    Infected Object Name / Virus Name / Last Action
    C:\Documents and Settings\All Users\Application Data\avg7\Log\emc.log Object is locked skipped
    C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\avg7log.log Object is locked skipped
    C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\avg7log.log.lck Object is locked skipped
    C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped
    C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped
    C:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\Support\MPLog-03122008-171512.log Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Cookies\index.dat Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Application Data\ApplicationHistory\SyncInfoApp.exe.df6d11f9.ini.inuse Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Application Data\Google\Google Desktop\b2c2e7827cb3\dbc2e.ht1 Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Application Data\Google\Google Desktop\b2c2e7827cb3\dbdam Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Application Data\Google\Google Desktop\b2c2e7827cb3\dbdao Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Application Data\Google\Google Desktop\b2c2e7827cb3\dbeam Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Application Data\Google\Google Desktop\b2c2e7827cb3\dbeao Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Application Data\Google\Google Desktop\b2c2e7827cb3\dbm Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Application Data\Google\Google Desktop\b2c2e7827cb3\dbu2d.ht1 Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Application Data\Google\Google Desktop\b2c2e7827cb3\dbvm.cf1 Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Application Data\Google\Google Desktop\b2c2e7827cb3\dbvmh.ht1 Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Application Data\Google\Google Desktop\b2c2e7827cb3\fii.cf1 Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Application Data\Google\Google Desktop\b2c2e7827cb3\fiih.ht1 Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Application Data\Google\Google Desktop\b2c2e7827cb3\hp Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Application Data\Google\Google Desktop\b2c2e7827cb3\hpt2i.ht1 Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Application Data\Google\Google Desktop\b2c2e7827cb3\rpm.cf1 Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Application Data\Google\Google Desktop\b2c2e7827cb3\rpm1m.cf1 Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Application Data\Google\Google Desktop\b2c2e7827cb3\rpm1mh.ht1 Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Application Data\Google\Google Desktop\b2c2e7827cb3\rpmh.ht1 Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Application Data\Google\Google Desktop\b2c2e7827cb3\safeweb\goog-black-enchashm.cf1 Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Application Data\Google\Google Desktop\b2c2e7827cb3\safeweb\goog-black-enchashmh.ht1 Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Application Data\Google\Google Desktop\b2c2e7827cb3\safeweb\goog-black-urlm.cf1 Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Application Data\Google\Google Desktop\b2c2e7827cb3\safeweb\goog-black-urlmh.ht1 Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Application Data\Google\Google Desktop\b2c2e7827cb3\safeweb\goog-malware-domainm.cf1 Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Application Data\Google\Google Desktop\b2c2e7827cb3\safeweb\goog-malware-domainmh.ht1 Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Application Data\Google\Google Desktop\b2c2e7827cb3\safeweb\goog-white-domainm.cf1 Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Application Data\Google\Google Desktop\b2c2e7827cb3\safeweb\goog-white-domainmh.ht1 Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Application Data\Microsoft\Windows Defender\FileTracker\{29FACBAD-EA78-4E1A-BDBC-B752F85221F6} Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\History\History.IE5\index.dat Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\History\History.IE5\MSHist012008031920080320\index.dat Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Temp\Perflib_Perfdata_15c.dat Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Temp\~DF9D5B.tmp Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Temp\~DFF39A.tmp Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\NTUSER.DAT Object is locked skipped
    C:\Documents and Settings\Casey & Katelyn\NTUSER.DAT.LOG Object is locked skipped
    C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
    C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
    C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
    C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped
    C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
    C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
    C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
    C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
    C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
    C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
    C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
    C:\Program Files\GE Security Supra\DaemonLog.txt Object is locked skipped
    C:\Program Files\GE Security Supra\SyncLog.txt Object is locked skipped
    C:\Program Files\PeerGuardian2\history.db Object is locked skipped
    C:\QooBox\Quarantine\C\WINDOWS\system32\jkkiiii.dll.vir Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
    C:\QooBox\Quarantine\C\WINDOWS\system32\xxyxxyw.dll.vir Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
    C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
    C:\System Volume Information\_restore{6871AF9E-C58B-4AEC-AF81-D4016F128980}\RP107\change.log Object is locked skipped
    C:\System Volume Information\_restore{6871AF9E-C58B-4AEC-AF81-D4016F128980}\RP31\A0007749.exe Object is locked skipped
    C:\System Volume Information\_restore{6871AF9E-C58B-4AEC-AF81-D4016F128980}\RP33\A0008048.exe Object is locked skipped
    C:\System Volume Information\_restore{6871AF9E-C58B-4AEC-AF81-D4016F128980}\RP33\A0008085.exe Object is locked skipped
    C:\System Volume Information\_restore{6871AF9E-C58B-4AEC-AF81-D4016F128980}\RP33\A0008088.exe Object is locked skipped
    C:\System Volume Information\_restore{6871AF9E-C58B-4AEC-AF81-D4016F128980}\RP82\A0015321.exe Object is locked skipped
    C:\System Volume Information\_restore{6871AF9E-C58B-4AEC-AF81-D4016F128980}\RP83\A0015344.exe/data.rar/crack.exe Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
    C:\System Volume Information\_restore{6871AF9E-C58B-4AEC-AF81-D4016F128980}\RP83\A0015344.exe/data.rar/keygen.exe Infected: Trojan-Downloader.Win32.Small.iui skipped
    C:\System Volume Information\_restore{6871AF9E-C58B-4AEC-AF81-D4016F128980}\RP83\A0015344.exe/data.rar/serial.exe Infected: Trojan-Downloader.Win32.Small.snf skipped
    C:\System Volume Information\_restore{6871AF9E-C58B-4AEC-AF81-D4016F128980}\RP83\A0015344.exe/data.rar Infected: Trojan-Downloader.Win32.Small.snf skipped
    C:\System Volume Information\_restore{6871AF9E-C58B-4AEC-AF81-D4016F128980}\RP83\A0015344.exe RarSFX: infected - 4 skipped
    C:\System Volume Information\_restore{6871AF9E-C58B-4AEC-AF81-D4016F128980}\RP83\A0015345.exe Object is locked skipped
    C:\System Volume Information\_restore{6871AF9E-C58B-4AEC-AF81-D4016F128980}\RP83\A0015384.exe Object is locked skipped
    C:\System Volume Information\_restore{6871AF9E-C58B-4AEC-AF81-D4016F128980}\RP83\A0015385.exe Object is locked skipped
    C:\System Volume Information\_restore{6871AF9E-C58B-4AEC-AF81-D4016F128980}\RP86\A0015422.dll Object is locked skipped
    C:\System Volume Information\_restore{6871AF9E-C58B-4AEC-AF81-D4016F128980}\RP86\A0015446.dll Object is locked skipped
    C:\System Volume Information\_restore{6871AF9E-C58B-4AEC-AF81-D4016F128980}\RP98\A0018508.dll Object is locked skipped
    C:\System Volume Information\_restore{6871AF9E-C58B-4AEC-AF81-D4016F128980}\RP98\A0018509.dll Object is locked skipped
    C:\System Volume Information\_restore{6871AF9E-C58B-4AEC-AF81-D4016F128980}\RP98\A0018510.dll Object is locked skipped
    C:\System Volume Information\_restore{6871AF9E-C58B-4AEC-AF81-D4016F128980}\RP98\A0018511.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
    C:\System Volume Information\_restore{6871AF9E-C58B-4AEC-AF81-D4016F128980}\RP98\A0018512.dll Object is locked skipped
    C:\System Volume Information\_restore{6871AF9E-C58B-4AEC-AF81-D4016F128980}\RP98\A0018513.dll Object is locked skipped
    C:\System Volume Information\_restore{6871AF9E-C58B-4AEC-AF81-D4016F128980}\RP98\A0018514.dll Object is locked skipped
    C:\System Volume Information\_restore{6871AF9E-C58B-4AEC-AF81-D4016F128980}\RP98\A0018515.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
    C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
    C:\WINDOWS\SchedLgU.Txt Object is locked skipped
    C:\WINDOWS\SoftwareDistribution\EventCache\{0757AB3C-DB18-43BF-94C1-6D00A68D6497}.bin Object is locked skipped
    C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
    C:\WINDOWS\Sti_Trace.log Object is locked skipped
    C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
    C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
    C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
    C:\WINDOWS\system32\config\default Object is locked skipped
    C:\WINDOWS\system32\config\default.LOG Object is locked skipped
    C:\WINDOWS\system32\config\Internet.evt Object is locked skipped
    C:\WINDOWS\system32\config\SAM Object is locked skipped
    C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
    C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
    C:\WINDOWS\system32\config\SECURITY Object is locked skipped
    C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
    C:\WINDOWS\system32\config\software Object is locked skipped
    C:\WINDOWS\system32\config\software.LOG Object is locked skipped
    C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
    C:\WINDOWS\system32\config\system Object is locked skipped
    C:\WINDOWS\system32\config\system.LOG Object is locked skipped
    C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
    C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
    C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
    C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
    C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
    C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
    C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
    C:\WINDOWS\wiadebug.log Object is locked skipped
    C:\WINDOWS\wiaservc.log Object is locked skipped
    C:\WINDOWS\WindowsUpdate.log Object is locked skipped
    D:\Documents\My Music\iTunes\iTunes Library.itl Object is locked skipped
    D:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
    D:\System Volume Information\_restore{6871AF9E-C58B-4AEC-AF81-D4016F128980}\RP107\change.log Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP11\A0000317.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP11\A0000318.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP11\A0000319.sys Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP11\A0000320.cat Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP11\A0000321.inf Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP11\A0000322.ver Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP11\A0000323.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP11\A0000324.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP11\A0000325.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP11\A0000326.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP11\A0000327.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP11\A0000328.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP11\A0000329.ver Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP11\A0000330.inf Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP11\A0000331.cat Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP11\A0000332.sys Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP11\A0000333.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP11\A0000334.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP11\A0000335.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP11\A0000336.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP11\A0000337.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP12\A0000349.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP12\A0000350.ocx Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP12\A0000351.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP12\A0000352.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP12\A0000353.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP12\A0000354.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP12\A0000355.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP12\A0000356.cat Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP12\A0000357.inf Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP12\A0000358.ver Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP12\A0000359.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP12\A0000360.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP12\A0000361.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP12\A0000362.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP12\A0000363.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP12\A0000364.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP12\A0000365.ver Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP12\A0000366.inf Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP12\A0000367.cat Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP12\A0000368.ocx Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP12\A0000369.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP12\A0000370.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP12\A0000371.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP12\A0000372.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP12\A0000373.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP12\A0000374.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP12\A0000375.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP12\A0000376.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP12\A0000377.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP13\A0000384.sys Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP13\A0000385.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP13\A0000386.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP13\A0000387.cat Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP13\A0000388.inf Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP13\A0000389.ver Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP13\A0000390.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP13\A0000391.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP13\A0000392.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP13\A0000393.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP13\A0000394.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP13\A0000395.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP13\A0000396.ver Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP13\A0000397.inf Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP13\A0000398.cat Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP13\A0000399.sys Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP13\A0000400.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP13\A0000401.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP13\A0000402.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP13\A0000403.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP13\A0000404.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP14\A0000414.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP14\A0000415.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP14\A0000416.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP14\A0000417.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP14\A0000418.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP14\A0000419.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP14\A0000420.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP14\A0000421.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP14\A0000422.ver Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP14\A0000423.ver Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP14\A0000424.cat Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP14\A0000425.cat Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP14\A0000426.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP14\A0000427.inf Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP14\A0000428.inf Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP14\A0000429.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP14\A0000430.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP14\A0000431.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP14\A0000432.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP14\A0000433.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP14\A0000434.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP15\A0000441.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP15\A0000442.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP15\A0000443.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP15\A0000444.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP15\A0000445.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP15\A0000446.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP15\A0000447.dll Object is locked skipped
     
    Hezron7,
    #11
  13. 2008/03/20
    Hezron7

    Hezron7 Inactive Thread Starter

    Joined:
    2008/03/11
    Messages:
    15
    Likes Received:
    0
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP15\A0000448.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP15\A0000449.ver Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP15\A0000450.inf Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP15\A0000451.cat Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP15\A0000452.cat Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP15\A0000453.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP15\A0000454.ver Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP15\A0000455.inf Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP15\A0000456.cat Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP15\A0000457.cat Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP15\A0000458.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP15\A0000459.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP15\A0000460.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP15\A0000461.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP15\A0000462.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP15\A0000463.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP16\A0000471.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP16\A0000472.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP16\A0000473.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP16\A0000474.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP16\A0000475.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP16\A0000476.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP16\A0000477.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP16\A0000478.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP16\A0000479.ver Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP16\A0000480.inf Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP16\A0000481.cat Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP16\A0000482.sys Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP16\A0000483.ver Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP16\A0000484.inf Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP16\A0000485.cat Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP16\A0000486.sys Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP16\A0000487.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP16\A0000488.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP16\A0000489.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP16\A0000490.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP16\A0000491.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP17\A0000498.ver Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP17\A0000499.inf Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP17\A0000500.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP17\A0000501.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP17\A0000502.cat Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP17\A0000503.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP17\A0000504.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP17\A0000505.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP17\A0000506.cnv Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP19\A0000553.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP19\A0000554.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP19\A0000555.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP19\A0000556.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP19\A0000557.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP19\A0000558.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP19\A0000559.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP19\A0000560.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP19\A0000561.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP19\A0000562.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP19\A0000563.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP19\A0000564.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP19\A0000565.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP19\A0000566.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP19\A0000567.inf Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP19\A0000568.inf Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP19\A0000569.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP19\A0000570.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP19\A0000571.cat Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP19\A0000572.cat Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP19\A0000573.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP19\A0000574.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP19\A0000575.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP19\A0000576.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP19\A0000577.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP19\A0000578.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP19\A0000579.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP19\A0000580.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP19\A0000581.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP19\A0000582.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP19\A0000583.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP19\A0000584.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP19\A0000585.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP19\A0000586.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP19\A0000587.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP19\A0000588.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP19\A0000589.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP19\A0000590.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP19\A0000591.ver Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP19\A0000592.ver Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP19\A0000593.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP19\A0000594.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP19\A0000595.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP19\A0000596.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP19\A0000597.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP19\A0000598.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP19\A0000599.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP19\A0000600.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP19\A0000601.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP19\A0000602.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP19\A0000603.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP19\A0000604.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP19\A0000605.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP19\A0000606.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP19\A0000607.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP19\A0000608.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP19\A0000609.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP19\A0000611.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP19\A0000612.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP20\A0000749.ver Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP20\A0000750.inf Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP20\A0000751.inf Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP20\A0000753.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP20\A0000754.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP20\A0000755.cat Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP20\A0000756.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP20\A0000757.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP20\A0000758.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP20\A0000759.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP20\A0000760.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP20\A0000761.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP20\A0000762.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP20\A0000763.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP20\A0000764.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP20\A0000766.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP20\A0000767.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP20\A0000768.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP20\A0000769.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP20\A0000770.cat Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP21\A0000798.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP21\A0000799.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP21\A0000800.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP21\A0000801.cat Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP21\A0000802.inf Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP21\A0000803.ver Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP21\A0000804.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP21\A0000805.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP21\A0000806.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP21\A0000807.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP21\A0000808.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP21\A0000809.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP21\A0000810.ver Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP21\A0000811.inf Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP21\A0000812.cat Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP21\A0000813.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP21\A0000814.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP21\A0000815.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP21\A0000816.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP21\A0000817.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP21\A0000818.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP22\A0000857.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP22\A0000858.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP22\A0000859.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP22\A0000860.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP22\A0000861.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP22\A0000862.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP22\A0000863.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP22\A0000864.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP22\A0000865.inf Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP22\A0000866.inf Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP22\A0000867.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP22\A0000868.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP22\A0000869.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP22\A0000870.cat Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP22\A0000871.cat Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP22\A0000872.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP22\A0000873.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP22\A0000874.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP22\A0000875.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP22\A0000876.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP22\A0000877.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP22\A0000878.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP22\A0000879.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP22\A0000880.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP22\A0000881.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP22\A0000882.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP22\A0000883.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP22\A0000884.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP22\A0000885.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP22\A0000886.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP22\A0000887.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP22\A0000888.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP22\A0000889.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP22\A0000890.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP22\A0000891.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP22\A0000892.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP22\A0000893.tsp Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP22\A0000894.TSP Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP22\A0000895.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP22\A0000896.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP22\A0000897.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP22\A0000898.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP22\A0000899.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP22\A0000900.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP22\A0000901.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP22\A0000902.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP22\A0000903.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP22\A0000904.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP22\A0000905.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP22\A0000906.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP22\A0000907.ver Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP22\A0000908.ver Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP22\A0000909.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP23\A0000914.ver Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP23\A0000915.inf Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP23\A0000916.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP23\A0000917.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP23\A0000918.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP23\A0000919.cat Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP23\A0000920.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP23\A0000921.exe Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP23\A0000922.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP23\A0000923.dll Object is locked skipped
    D:\System Volume Information\_restore{93D15B9D-D040-40E4-9FBE-62C8BC4670C7}\RP23\A0000924.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP29\A0000588.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP29\A0000589.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP29\A0000590.sys Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP29\A0000591.cat Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP29\A0000592.inf Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP29\A0000593.ver Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP29\A0000594.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP29\A0000595.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP29\A0000596.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP29\A0000597.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP29\A0000598.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP29\A0000599.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP29\A0000600.ver Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP29\A0000601.inf Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP29\A0000602.cat Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP29\A0000603.sys Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP29\A0000604.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP29\A0000605.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP29\A0000606.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP29\A0000607.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP29\A0000608.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP30\A0000621.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP30\A0000622.ocx Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP30\A0000623.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP30\A0000624.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP30\A0000625.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP30\A0000626.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP30\A0000627.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP30\A0000628.cat Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP30\A0000629.inf Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP30\A0000630.ver Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP30\A0000631.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP30\A0000632.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP30\A0000633.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP30\A0000634.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP30\A0000635.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP30\A0000636.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP30\A0000637.ver Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP30\A0000638.inf Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP30\A0000639.cat Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP30\A0000640.ocx Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP30\A0000641.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP30\A0000642.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP30\A0000643.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP30\A0000644.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP30\A0000645.exe Object is locked skipped
     
    Hezron7,
    #12
  14. 2008/03/20
    Hezron7

    Hezron7 Inactive Thread Starter

    Joined:
    2008/03/11
    Messages:
    15
    Likes Received:
    0
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP30\A0000646.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP30\A0000647.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP30\A0000648.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP30\A0000649.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP31\A0000657.sys Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP31\A0000658.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP31\A0000659.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP31\A0000660.cat Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP31\A0000661.inf Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP31\A0000662.ver Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP31\A0000663.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP31\A0000664.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP31\A0000665.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP31\A0000666.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP31\A0000667.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP31\A0000668.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP31\A0000669.ver Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP31\A0000670.inf Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP31\A0000671.cat Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP31\A0000672.sys Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP31\A0000673.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP31\A0000674.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP31\A0000675.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP31\A0000676.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP31\A0000677.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP32\A0000685.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP32\A0000686.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP32\A0000687.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP32\A0000688.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP32\A0000689.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP32\A0000690.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP32\A0000691.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP32\A0000692.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP32\A0000693.ver Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP32\A0000694.ver Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP32\A0000695.cat Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP32\A0000696.cat Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP32\A0000697.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP32\A0000698.inf Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP32\A0000699.inf Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP32\A0000700.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP32\A0000701.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP32\A0000702.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP32\A0000703.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP32\A0000704.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP32\A0000705.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP33\A0000714.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP33\A0000715.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP33\A0000716.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP33\A0000717.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP33\A0000718.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP33\A0000719.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP33\A0000720.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP33\A0000721.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP33\A0000722.ver Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP33\A0000723.inf Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP33\A0000724.cat Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP33\A0000725.sys Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP33\A0000726.ver Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP33\A0000727.inf Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP33\A0000728.cat Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP33\A0000729.sys Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP33\A0000730.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP33\A0000731.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP33\A0000732.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP33\A0000733.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP33\A0000734.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP34\A0000742.ver Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP34\A0000743.inf Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP34\A0000744.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP34\A0000745.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP34\A0000746.cat Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP34\A0000747.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP34\A0000748.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP34\A0000749.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP34\A0000750.cnv Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP35\A0000797.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP35\A0000798.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP35\A0000799.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP35\A0000800.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP35\A0000801.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP35\A0000802.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP35\A0000803.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP35\A0000804.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP35\A0000805.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP35\A0000806.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP35\A0000807.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP35\A0000808.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP35\A0000809.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP35\A0000810.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP35\A0000811.inf Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP35\A0000812.inf Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP35\A0000813.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP35\A0000814.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP35\A0000815.cat Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP35\A0000816.cat Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP35\A0000817.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP35\A0000818.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP35\A0000819.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP35\A0000820.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP35\A0000821.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP35\A0000822.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP35\A0000823.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP35\A0000824.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP35\A0000825.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP35\A0000826.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP35\A0000827.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP35\A0000828.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP35\A0000829.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP35\A0000830.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP35\A0000831.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP35\A0000832.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP35\A0000833.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP35\A0000834.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP35\A0000835.ver Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP35\A0000836.ver Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP35\A0000837.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP35\A0000838.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP35\A0000839.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP35\A0000840.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP35\A0000841.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP35\A0000842.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP35\A0000843.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP35\A0000844.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP35\A0000845.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP35\A0000846.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP35\A0000847.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP35\A0000848.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP35\A0000849.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP35\A0000850.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP35\A0000851.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP35\A0000852.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP35\A0000853.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP35\A0000854.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP35\A0000855.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP36\A0000883.ver Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP36\A0000884.inf Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP36\A0000885.inf Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP36\A0000886.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP36\A0000887.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP36\A0000888.cat Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP36\A0000889.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP36\A0000890.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP36\A0000891.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP36\A0000892.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP36\A0000893.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP36\A0000894.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP36\A0000895.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP36\A0000896.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP36\A0000897.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP36\A0000898.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP36\A0000899.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP36\A0000900.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP36\A0000901.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP36\A0000902.cat Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP37\A0000910.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP37\A0000911.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP37\A0000912.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP37\A0000913.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP37\A0000914.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP37\A0000915.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP37\A0000916.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP37\A0000917.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP37\A0000918.cat Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP37\A0000919.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP37\A0000920.cat Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP37\A0000921.cat Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP37\A0000922.cat Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP37\A0000923.cat Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP37\A0000924.cat Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP37\A0000925.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP37\A0000926.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP37\A0000927.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP37\A0000928.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP37\A0000929.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP37\A0000930.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP37\A0000931.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP37\A0000932.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP37\A0000933.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP37\A0000934.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP37\A0000935.inf Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP37\A0000936.ver Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP37\A0000937.ver Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP37\A0000938.inf Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP38\A0000946.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP38\A0000947.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP38\A0000948.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP38\A0000949.cat Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP38\A0000950.inf Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP38\A0000951.ver Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP38\A0000952.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP38\A0000953.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP38\A0000954.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP38\A0000955.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP38\A0000956.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP38\A0000957.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP38\A0000958.ver Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP38\A0000959.inf Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP38\A0000960.cat Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP38\A0000961.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP38\A0000962.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP38\A0000963.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP38\A0000964.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP38\A0000965.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP38\A0000966.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP40\A0001025.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP40\A0001026.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP40\A0001027.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP40\A0001028.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP40\A0001029.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP40\A0001030.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP40\A0001031.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP40\A0001032.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP40\A0001033.inf Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP40\A0001034.inf Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP40\A0001035.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP40\A0001036.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP40\A0001037.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP40\A0001038.cat Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP40\A0001039.cat Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP40\A0001040.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP40\A0001041.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP40\A0001042.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP40\A0001043.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP40\A0001044.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP40\A0001045.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP40\A0001046.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP40\A0001047.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP40\A0001048.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP40\A0001049.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP40\A0001050.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP40\A0001051.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP40\A0001052.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP40\A0001053.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP40\A0001054.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP40\A0001055.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP40\A0001056.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP40\A0001057.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP40\A0001058.exe Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP40\A0001059.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP40\A0001060.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP40\A0001061.tsp Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP40\A0001062.TSP Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP40\A0001063.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP40\A0001064.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP40\A0001065.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP40\A0001066.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP40\A0001067.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP40\A0001068.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP40\A0001069.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP40\A0001070.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP40\A0001071.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP40\A0001072.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP40\A0001073.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP40\A0001074.dll Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP40\A0001075.ver Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP40\A0001076.ver Object is locked skipped
    D:\System Volume Information\_restore{F7B5E41E-7F0C-424C-AA47-E3D77C0F6A11}\RP40\A0001077.dll Object is locked skipped

    Scan process completed.
     
    Hezron7,
    #13
  15. 2008/03/22
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    The infected items are eithered quarantined by ComboFix or in System Restore points. This next step will take care of all of them.

    Click Start>Run and type ComboFix /u then hit Enter to uninstall ComboFix and remove the files it has quarantined. This action will also reset the System Restore points, removing the infected files there as well. The C:\Deckard's folder will also be removed. You can delete any logs that were created/saved too.

    Note - Combofix makes some changes when run to prevent autorun/autoplay of ALL CDs, floppies and USB devices, to assist with malware removal & increase security. If this is an issue or makes it difficult for you to use those devices, please ask how to reset it.

    That should wrap things up. Everything seem to be OK now?
     
    noahdfear,
    #14
  16. 2008/03/22
    Hezron7

    Hezron7 Inactive Thread Starter

    Joined:
    2008/03/11
    Messages:
    15
    Likes Received:
    0
    Great everything is running smoothly. I really appreciate your help!
     
    Hezron7,
    #15
  17. 2008/03/22
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    noahdfear,
    #16

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...