1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Solved Blue Screen of Death

Discussion in 'Malware and Virus Removal Archive' started by rkim, 2010/07/27.

Page 1 of 3
  1. 2010/07/27
    rkim

    rkim Inactive Thread Starter

    Joined:
    2010/07/09
    Messages:
    33
    Likes Received:
    0
    [Resolved] Blue Screen of Death

    I am trying to fix a friend's computer. She downloaded a virus but doesn't remember what it was called. After a few minutes, she told me her screen turned blue and the computer restarted. When it rebooted, she entered her password and it immediately restarted again.

    I then started her computer under safe mode and tried a system restore but she had no saved points. I was therefor unable to download the bbs log and run it. After awhile a window appeared that stated windows had recovered from an unexpected shutdown and gave me this info:

    problem signature
    problem event name: bluescreen
    os version:6.0.6000.2.0.0768.3
    locale id: 1033
    additional info about problem
    bccode: 1000007f
    bcp1: 00000008
    bcp2: 8014e000
    bcp3: 00000000
    bcp4: 00000000

    os version: 6_0_600
    Service Pack: 0_0
    Product: 768_1

    Files that help describe the problem:
    C:\windows\minidump\mini070910-03.dmp
    c:\users\user\appdata\local\temp\wer-67720-0.sysdata.xml
    C:\users\user\appdata\local\temp\wer9c2f.tmp.version.txt
     
    rkim,
    #1
  2. 2010/07/27
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Is the computer operable in Safe Mode with Networking?
     
    broni,
    #2


  3. to hide this advert.

  4. 2010/07/28
    rkim

    rkim Inactive Thread Starter

    Joined:
    2010/07/09
    Messages:
    33
    Likes Received:
    0
    yes it is.
     
    rkim,
    #3
  5. 2010/07/28
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Please, read this post, then post the requested log(s).
     
    broni,
    #4
  6. 2010/07/28
    rkim

    rkim Inactive Thread Starter

    Joined:
    2010/07/09
    Messages:
    33
    Likes Received:
    0
    I tried running DDS and when it's complete it says the logs are open but the logs do not appear on screen and I cannot click the links to open them either.
     
    rkim,
    #5
  7. 2010/07/28
    rkim

    rkim Inactive Thread Starter

    Joined:
    2010/07/09
    Messages:
    33
    Likes Received:
    0
    I downloaded and ran DDS. When it was completed it said it opened the two logs but they didn't come up
     
    rkim,
    #6
  8. 2010/07/28
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Skip DDS for now....

    Please download ComboFix from [color= "Red"]Here[/color] or [color= "#FF0000"]Here[/color] to your Desktop.

    [color= "Blue"]**Note: In the event you already have Combofix, this is a new version that I need you to download. It is important that it is saved directly to your desktop**[/color]
    1. Please, never rename Combofix unless instructed.
    2. Close any open browsers.
    3. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
      • Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results ".
      • Click on [color= "Red"]this link[/color] to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.
      NOTE1. If Combofix asks you to install Recovery Console, please allow it.
      NOTE 2. If Combofix asks you to update the program, always do so.
      • Close any open browsers.
      • [color= "Red"]WARNING:[/color] Combofix will disconnect your machine from the Internet as soon as it starts
      • Please do not attempt to re-connect your machine back to the Internet until Combofix has completely finished.
      • If there is no internet connection after running Combofix, then restart your computer to restore back your connection.
    4. Double click on combofix.exe & follow the prompts.
    5. When finished, it will produce a report for you.
    6. Please post the "C:\ComboFix.txt"
    **Note: Do not mouseclick combofix's window while it's running. That may cause it to stall**

    Make sure, you re-enable your security programs, when you're done with Combofix.

    DO NOT make any other changes to your computer (like installing programs, using other cleaning tools, etc.), until it's officially declared clean!!!
     
    broni,
    #7
  9. 2010/07/28
    rkim

    rkim Inactive Thread Starter

    Joined:
    2010/07/09
    Messages:
    33
    Likes Received:
    0
    ComboFix 10-07-27.05 - User 07/28/2010 18:06:14.1.2 - x86 NETWORK
    Microsoft® Windows Vistaâ„¢ Home Premium 6.0.6000.0.1252.1.1033.18.2037.1484 [GMT -7:00]
    Running from: c:\users\User\Desktop\ComboFix.exe
    AV: Norton Internet Security *On-access scanning enabled* (Outdated) {E10A9785-9598-4754-B552-92431C1C35F8}
    FW: Norton Internet Security *enabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220}
    SP: Norton Internet Security *enabled* (Outdated) {CBB7EE13-8244-4DAB-8B55-D5C7AA91E59A}
    SP: Windows Defender *disabled* (Outdated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
    * Created a new restore point
    .

    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    c:\users\User\AppData\Local\{6E6A8F91-6413-82DC-B46D4AC08152}
    c:\users\User\AppData\Local\{6E6A8F91-6413-40D3-82DC-B46D4AC08152}\chrome.manifest
    c:\users\User\AppData\Local\{6E6A8F91-6413-40D3-82DC-B46D4AC08152}\chrome\content\_cfg.js
    c:\users\User\AppData\Local\{6E6A8F91-6413-40D3-82DC-B46D4AC08152}\chrome\content\overlay.xul
    c:\users\User\AppData\Local\{6E6A8F91-6413-40D3-82DC-B46D4AC08152}\install.rdf
    c:\users\User\AppData\Local\plsteras.dll
    c:\users\User\AppData\Local\utilasejada.dll
    c:\users\User\AppData\Local\utllfqfrv
    c:\users\User\AppData\Local\utllfqfrv\godytdptssd.exe
    c:\users\User\AppData\Roaming\13ece091.exe
    c:\users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\scand.dll
    c:\users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\scand.lnk
    c:\users\User\igkcomka….exe
    c:\users\User\ntl.dll
    c:\windows\Tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job

    .
    ((((((((((((((((((((((((( Files Created from 2010-06-28 to 2010-07-29 )))))))))))))))))))))))))))))))
    .

    2010-07-29 01:11 . 2010-07-29 01:12 -------- d-----w- c:\users\User\AppData\Local\temp
    2010-07-29 01:11 . 2010-07-29 01:11 -------- d-----w- c:\users\Guest\AppData\Local\temp
    2010-07-29 01:11 . 2010-07-29 01:11 -------- d-----w- c:\users\Default\AppData\Local\temp
    2010-07-09 19:15 . 2010-07-09 19:50 4713737214 ----a-w- C:\Backup.zip
    2010-07-09 02:23 . 2010-06-28 20:37 165456 ----a-w- c:\windows\system32\drivers\aswSP.sys
    2010-07-09 02:23 . 2010-06-28 20:32 17744 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
    2010-07-09 02:23 . 2010-06-28 20:33 23376 ----a-w- c:\windows\system32\drivers\aswRdr.sys
    2010-07-09 02:23 . 2010-06-28 20:37 46672 ----a-w- c:\windows\system32\drivers\aswTdi.sys
    2010-07-09 02:23 . 2010-06-28 20:32 50256 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
    2010-07-09 02:23 . 2010-06-28 20:57 38848 ----a-w- c:\windows\avastSS.scr
    2010-07-09 02:23 . 2010-06-28 20:57 165032 ----a-w- c:\windows\system32\aswBoot.exe
    2010-07-09 02:22 . 2010-07-09 02:22 -------- d-----w- c:\programdata\Alwil Software
    2010-07-09 02:22 . 2010-07-09 02:22 -------- d-----w- c:\program files\Alwil Software
    2010-07-09 02:06 . 2010-07-29 01:12 767488 ----a-w- c:\windows\system32\drivers\muikt.sys
    2010-07-09 02:05 . 2010-07-09 02:05 120 ----a-w- c:\users\User\AppData\Local\Fdocu.dat
    2010-07-09 02:05 . 2010-07-09 02:05 0 ----a-w- c:\users\User\AppData\Local\Ffeloyo.bin

    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2010-07-09 18:54 . 2007-05-10 22:38 1356 ----a-w- c:\users\User\AppData\Local\d3d9caps.dat
    2010-07-09 02:31 . 2007-03-29 03:40 -------- d-----w- c:\program files\Common Files\AOL
    2010-07-09 02:30 . 2007-03-17 02:40 -------- d-----w- c:\programdata\AOL
    2010-06-27 18:48 . 2006-12-18 04:05 12 ----a-w- c:\windows\bthservsdp.dat
    2010-06-18 17:14 . 2010-06-12 05:11 -------- d-----w- c:\programdata\DivX
    2010-06-15 19:11 . 2006-12-18 04:57 -------- d-----w- c:\program files\HP Games
    2010-06-15 19:02 . 2006-12-18 05:02 -------- d-----w- c:\programdata\WildTangent
    2010-06-15 18:58 . 2006-12-18 04:26 -------- d--h--w- c:\program files\InstallShield Installation Information
    2010-06-15 18:58 . 2007-07-03 23:45 -------- d-----w- c:\program files\HOTALBUMMyBOX
    2010-06-14 01:42 . 2010-06-14 01:42 -------- d-----w- c:\program files\AviSynth 2.5
    2010-06-12 23:59 . 2009-09-20 23:31 -------- d-----w- c:\program files\Microsoft Silverlight
    2010-06-12 08:12 . 2009-12-14 23:38 -------- d-----w- c:\programdata\Norton
    2010-06-12 08:12 . 2010-06-12 08:12 -------- d-----w- c:\program files\Norton Security Scan
    2010-06-12 08:12 . 2006-12-18 04:37 -------- d-----w- c:\programdata\Symantec
    2010-06-12 08:12 . 2010-06-12 08:12 -------- d-----w- c:\programdata\NortonInstaller
    2010-06-12 08:12 . 2010-06-12 08:12 -------- d-----w- c:\program files\NortonInstaller
    2010-06-12 07:00 . 2009-01-01 16:37 -------- d-----w- c:\users\User\AppData\Roaming\DivX
    2010-06-12 05:19 . 2010-06-12 05:19 57344 ----a-w- c:\programdata\DivX\RunAsUser\RUNASUSERPROCESS.dll
    2010-06-12 05:17 . 2006-12-18 05:12 -------- d-----w- c:\program files\DivX
    2010-06-12 05:17 . 2010-06-12 05:17 56765 ----a-w- c:\programdata\DivX\DivXPlusShortcuts\Uninstaller.exe
    2010-06-12 05:17 . 2010-06-12 05:17 56997 ----a-w- c:\programdata\DivX\WebPlayer\Uninstaller.exe
    2010-06-12 05:17 . 2010-06-12 05:17 53600 ----a-w- c:\programdata\DivX\Update\Uninstaller.exe
    2010-06-12 05:17 . 2010-06-12 05:17 57715 ----a-w- c:\programdata\DivX\Player\Uninstaller.exe
    2010-06-12 05:16 . 2010-06-12 05:16 84062 ----a-w- c:\programdata\DivX\TransferWizard\Uninstaller.exe
    2010-06-12 05:16 . 2007-08-05 20:11 -------- d-----w- c:\program files\Common Files\PX Storage Engine
    2010-06-12 05:16 . 2010-06-12 05:16 57054 ----a-w- c:\programdata\DivX\DSDesktopComponents\Uninstaller.exe
    2010-06-12 05:16 . 2010-06-12 05:16 54166 ----a-w- c:\programdata\DivX\DSAVCDecoder\Uninstaller.exe
    2010-06-12 05:16 . 2010-06-12 05:16 57532 ----a-w- c:\programdata\DivX\DSASPDecoder\Uninstaller.exe
    2010-06-12 05:16 . 2010-06-12 05:16 56458 ----a-w- c:\programdata\DivX\DivXDecoderShortcut\Uninstaller.exe
    2010-06-12 05:16 . 2010-06-12 05:16 54174 ----a-w- c:\programdata\DivX\DSAACDecoder\Uninstaller.exe
    2010-06-12 05:16 . 2010-06-12 05:16 54153 ----a-w- c:\programdata\DivX\DFXPlugin\Uninstaller.exe
    2010-06-12 05:16 . 2010-06-12 05:16 54128 ----a-w- c:\programdata\DivX\Converter\Uninstaller.exe
    2010-06-12 05:16 . 2010-06-12 05:16 54644 ----a-w- c:\programdata\DivX\TranscodeEngine\Uninstaller.exe
    2010-06-12 05:15 . 2010-06-12 05:15 54101 ----a-w- c:\programdata\DivX\MPEG2Plugin\Uninstaller.exe
    2010-06-12 05:15 . 2010-06-12 05:15 57409 ----a-w- c:\programdata\DivX\ControlPanel\Uninstaller.exe
    2010-06-12 05:15 . 2010-06-12 05:15 52963 ----a-w- c:\programdata\DivX\MSVC80CRTRedist\Uninstaller.exe
    2010-06-12 05:15 . 2010-06-12 05:15 -------- d-----w- c:\program files\Common Files\DivX Shared
    2010-06-12 05:15 . 2010-06-12 05:15 54073 ----a-w- c:\programdata\DivX\Qt4.5\Uninstaller.exe
    2010-06-12 05:15 . 2010-06-12 05:15 56969 ----a-w- c:\programdata\DivX\ASPEncoder\Uninstaller.exe
    2010-06-12 05:11 . 2010-06-12 05:17 1062184 ----a-w- c:\programdata\DivX\Setup\Resource.dll
    2010-06-12 05:10 . 2010-06-12 05:17 895256 ----a-w- c:\programdata\DivX\Setup\DivXSetup.exe
    2010-06-09 10:35 . 2006-12-18 04:50 -------- d-----w- c:\programdata\Microsoft Help
    2010-06-09 08:06 . 2010-06-09 08:06 976832 ----a-w- c:\programdata\Adobe\Reader\8.2\ARM\6685\AdobeARM.exe
    2010-06-09 08:06 . 2010-06-09 08:06 976832 ----a-w- c:\programdata\Adobe\Reader\8.2\ARM\16562\AdobeARM.exe
    2010-06-09 08:06 . 2010-06-09 08:06 70584 ----a-w- c:\programdata\Adobe\Reader\8.2\ARM\6685\AdobeExtractFiles.dll
    2010-06-09 08:06 . 2010-06-09 08:06 70584 ----a-w- c:\programdata\Adobe\Reader\8.2\ARM\16562\AdobeExtractFiles.dll
    2010-06-09 08:06 . 2010-06-09 08:06 331176 ----a-w- c:\programdata\Adobe\Reader\8.2\ARM\6685\ReaderUpdater.exe
    2010-06-09 08:06 . 2010-06-09 08:06 331176 ----a-w- c:\programdata\Adobe\Reader\8.2\ARM\6685\AcrobatUpdater.exe
    2010-06-09 08:06 . 2010-06-09 08:06 331176 ----a-w- c:\programdata\Adobe\Reader\8.2\ARM\16562\ReaderUpdater.exe
    2010-06-09 08:06 . 2010-06-09 08:06 331176 ----a-w- c:\programdata\Adobe\Reader\8.2\ARM\16562\AcrobatUpdater.exe
    2010-06-03 02:41 . 2010-06-03 02:41 3600384 ----a-w- c:\windows\system32\GPhotos.scr
    2010-05-21 21:14 . 2009-10-03 07:27 221568 ------w- c:\windows\system32\MpSigStub.exe
    2010-05-07 19:55 . 2010-05-07 19:55 255472 ----a-w- c:\users\User\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll
    .

    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "Sidebar "= "c:\program files\Windows Sidebar\sidebar.exe" [2008-01-11 1232896]
    "HPAdvisor "= "c:\program files\Hewlett-Packard\HP Advisor\HPAdvisor.exe" [2006-11-22 1474560]
    "WindowsWelcomeCenter "= "oobefldr.dll" [2006-11-02 2159104]
    "ehTray.exe "= "c:\windows\ehome\ehTray.exe" [2006-11-02 125440]
    "Skype "= "c:\program files\Skype\Phone\Skype.exe" [2007-03-12 25590312]
    "Google Update "= "c:\users\User\AppData\Local\Google\Update\GoogleUpdate.exe" [2009-03-01 133104]
    "msnmsgr "= "c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-07-26 3883856]
    "WMPNSCFG "= "c:\program files\Windows Media Player\WMPNSCFG.exe" [2006-11-02 201728]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "Windows Defender "= "c:\program files\Windows Defender\MSASCui.exe" [2007-04-17 1006264]
    "SynTPEnh "= "c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2006-11-15 815104]
    "IgfxTray "= "c:\windows\system32\igfxtray.exe" [2006-11-06 98304]
    "HotKeysCmds "= "c:\windows\system32\hkcmd.exe" [2006-11-06 106496]
    "Persistence "= "c:\windows\system32\igfxpers.exe" [2006-11-06 81920]
    "ccApp "= "c:\program files\Common Files\Symantec Shared\ccApp.exe" [2006-10-25 107112]
    "osCheck "= "c:\program files\Norton Internet Security\osCheck.exe" [2006-10-27 22696]
    "QPService "= "c:\program files\HP\QuickPlay\QPService.exe" [2006-11-24 167936]
    "HP Software Update "= "c:\program files\Hp\HP Software Update\HPWuSchd2.exe" [2005-02-17 49152]
    "QlbCtrl "= "c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2006-11-06 159744]
    "HP Health Check Scheduler "= "c:\program files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe" [2006-11-28 46704]
    "WAWifiMessage "= "c:\program files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe" [2006-10-18 317152]
    "hpWirelessAssistant "= "c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2006-10-18 472800]
    "SunJavaUpdateSched "= "c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-01-11 246504]
    "WPCUMI "= "c:\windows\system32\WpcUmi.exe" [2006-11-02 176128]
    "CanonMyPrinter "= "c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2006-03-22 1191936]
    "SSBkgdUpdate "= "c:\program files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [2003-09-30 155648]
    "OpwareSE4 "= "c:\program files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe" [2006-03-21 69632]
    "Symantec PIF AlertEng "= "c:\program files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" [2008-01-30 583048]
    "QuickTime Task "= "c:\program files\QuickTime\QTTask.exe" [2009-11-11 417792]
    "iTunesHelper "= "c:\program files\iTunes\iTunesHelper.exe" [2010-01-23 141608]
    "Adobe Reader Speed Launcher "= "c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2009-12-18 40368]
    "Adobe ARM "= "c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2009-12-11 948672]
    "DivXUpdate "= "c:\program files\DivX\DivX Update\DivXUpdate.exe" [2010-06-03 1144104]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
    "GrpConv "= "grpconv -o" [X]

    c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
    Audible Download Manager.lnk - c:\program files\Audible\Bin\AudibleDownloadHelper.exe [2008-6-13 1754456]
    HP Connections.lnk - c:\program files\HP Connections\6811507\Program\HP Connections.exe [2006-12-17 34520]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
    "AppInit_DLLs "=c:\progra~1\Google\GOOGLE~1\GOEC62~1.DLL

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
    "aux "=wdmaud.drv

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
    @= "Service "

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
    "DisableMonitoring "=dword:00000001

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
    "DisableMonitoring "=dword:00000001

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
    "DisableMonitoring "=dword:00000001

    R1 aswSP;aswSP; [x]
    R1 IDSvix86;Symantec Intrusion Prevention Driver;c:\progra~2\Symantec\DEFINI~1\SymcData\idsdefs\20070612.005\IDSvix86.sys [2007-05-30 212280]
    R2 aswFsBlk;aswFsBlk; [x]
    R2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2010-06-28 50256]
    R2 Viewpoint Manager Service;Viewpoint Manager Service;c:\program files\Viewpoint\Common\ViewpointService.exe [2007-01-04 24652]
    R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2007-04-05 106808]
    R3 ICDUSB2;Sony IC Recorder (P);c:\windows\system32\Drivers\ICDUSB2.sys [2002-11-29 39048]
    R3 R5U870FLx86;R5U870 UVC Lower Filter ;c:\windows\system32\Drivers\R5U870FLx86.sys [2006-12-19 73472]
    R3 R5U870FUx86;R5U870 UVC Upper Filter ;c:\windows\system32\Drivers\R5U870FUx86.sys [2006-12-19 43904]
    R3 SYMNDISV;SYMNDISV;c:\windows\System32\Drivers\SYMNDISV.SYS [2006-10-25 37008]
    S0 PzWDM;PzWDM;c:\windows\system32\Drivers\PzWDM.sys [2007-07-03 15172]


    --- Other Services/Drivers In Memory ---

    *NewlyCreated* - COMHOST
    *Deregistered* - muikt

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
    bthsvcs REG_MULTI_SZ BthServ
    HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
    .
    Contents of the 'Scheduled Tasks' folder

    2010-07-08 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-107199264-59685293-546543122-1000Core.job
    - c:\users\User\AppData\Local\Google\Update\GoogleUpdate.exe [2009-03-01 22:50]

    2010-07-09 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-107199264-59685293-546543122-1000UA.job
    - c:\users\User\AppData\Local\Google\Update\GoogleUpdate.exe [2009-03-01 22:50]

    2010-06-12 c:\windows\Tasks\HPCeeScheduleForUser.job
    - c:\program files\Hewlett-Packard\SDP\Ceement\HPCEE.exe [2006-12-18 00:08]

    2010-06-19 c:\windows\Tasks\Norton Internet Security - Run Full System Scan - User.job
    - c:\progra~1\NORTON~1\NORTON~1\Navw32.exe [2006-11-08 07:48]

    2010-07-09 c:\windows\Tasks\Norton Security Scan for User.job
    - c:\program files\Norton Security Scan\Engine\2.7.3.34\Nss.exe [2010-06-12 16:48]

    2010-07-09 c:\windows\Tasks\User_Feed_Synchronization-{297E9270-95A0-4BF0-BB95-726FE08D846F}.job
    - c:\windows\system32\msfeedssync.exe [2006-11-02 09:45]

    2010-07-08 c:\windows\Tasks\User_Feed_Synchronization-{C4D2EA17-D19B-450E-AE3F-404E3BBD2D96}.job
    - c:\windows\system32\msfeedssync.exe [2006-11-02 09:45]
    .
    .
    ------- Supplementary Scan -------
    .
    uStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=71&bd=Pavilion&pf=laptop
    uDefault_Search_URL = hxxp://www.google.com/ie
    mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=71&bd=Pavilion&pf=laptop
    uInternet Settings,ProxyOverride = <local>
    uInternet Settings,ProxyServer = http=127.0.0.1:5577
    uSearchAssistant = hxxp://www.google.com/ie
    uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
    IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
    IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
    IE: Easy-WebPrint Add To Print List - c:\program files\Canon\Easy-WebPrint\Toolband.dll/RC_AddToList.html
    IE: Easy-WebPrint High Speed Print - c:\program files\Canon\Easy-WebPrint\Toolband.dll/RC_HSPrint.html
    IE: Easy-WebPrint Preview - c:\program files\Canon\Easy-WebPrint\Toolband.dll/RC_Preview.html
    IE: Easy-WebPrint Print - c:\program files\Canon\Easy-WebPrint\Toolband.dll/RC_Print.html
    LSP: c:\windows\system32\wpclsp.dll
    Handler: gameboxchrome - {494D4E3B-FA53-4487-8AF6-3F50FE1167A9} -
    FF - ProfilePath - c:\users\User\AppData\Roaming\Mozilla\Firefox\Profiles\z77dif15.default\
    FF - plugin: c:\program files\DivX\DivX Plus Web Player\npdivx32.dll
    FF - plugin: c:\program files\Google\Picasa3\npPicasa3.dll
    FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
    FF - plugin: c:\program files\Mozilla Firefox\plugins\npJoostPlugin.dll
    FF - plugin: c:\program files\Mozilla Firefox\plugins\npViewpoint.dll
    FF - plugin: c:\program files\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll
    FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll
    FF - plugin: c:\users\User\AppData\Local\Google\Update\1.2.183.29\npGoogleOneClick8.dll
    FF - plugin: c:\users\User\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll
    FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
    .
    - - - - ORPHANS REMOVED - - - -

    BHO-{0FEF2D2C-CDA6-45E4-B2ED-9DF7C50C95FF} - c:\program files\GameBox\gamebox_toolbar.dll
    Toolbar-{0FEF2D2C-CDA6-45E4-B2ED-9DF7C50C95FF} - c:\program files\GameBox\gamebox_toolbar.dll
    HKCU-Run-Kgobiyovupo - c:\users\User\AppData\Local\plsteras.dll
    HKCU-Run-ohdwvnjx - c:\users\User\AppData\Local\utllfqfrv\godytdptssd.exe
    HKCU-Run-igkcomka… - c:\users\User\igkcomka….exe
    HKCU-Run-note - c:\users\User\ntl.dll
    HKCU-Run-Uqeti - c:\users\User\AppData\Local\utilasejada.dll
    HKLM-RunOnce-<NO NAME> - (no file)
    AddRemove-{7B63B2922B174135AFC0E1377DD81EC2} - c:\program files\DivX\DivXCodecUninstall.exe



    **************************************************************************

    catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2010-07-28 18:12
    Windows 6.0.6000 NTFS

    scanning hidden processes ...

    scanning hidden autostart entries ...

    scanning hidden files ...

    scan completed successfully
    hidden files: 0

    **************************************************************************

    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\muikt]

    .
    --------------------- LOCKED REGISTRY KEYS ---------------------

    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
    @Denied: (A) (Users)
    @Denied: (A) (Everyone)
    @Allowed: (B 1 2 3 4 5) (S-1-5-20)
    "BlindDial "=dword:00000000
    .
    --------------------- DLLs Loaded Under Running Processes ---------------------

    - - - - - - - > 'Explorer.exe'(1152)
    c:\program files\Hewlett-Packard\HP Advisor\Pillars\Market\MLDeskBand.dll
    .
    Completion time: 2010-07-28 18:14:04
    ComboFix-quarantined-files.txt 2010-07-29 01:14

    Pre-Run: 77,071,425,536 bytes free
    Post-Run: 80,373,792,768 bytes free

    - - End Of File - - 482C3AB656E921BB74E2A2DC90DB274E
     
    rkim,
    #8
  10. 2010/07/28
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Are you running two AV programs? Norton and Avast?

    Try to restart in normal mode and see, what happens.
    If still no good, run following steps from Safe Mode with Networking again.

    1. Please open Notepad
    • Click Start , then Run
    • Type notepad .exe in the Run Box.

    2. Now copy/paste the entire content of the codebox below into the Notepad window:

    Code:
    File::
c:\windows\system32\drivers\muikt.sys
c:\users\User\AppData\Local\Fdocu.dat
c:\users\User\AppData\Local\Ffeloyo.bin


DDS::
uInternet Settings,ProxyOverride = <local>
uInternet Settings,ProxyServer = http=127.0.0.1:5577

Registry::
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
 "GrpConv "=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\muikt]

    3. Save the above as CFScript.txt

    4. Close/disable all anti virus and anti malware programs again, so they do not interfere with the running of ComboFix.

    5. Then drag the CFScript.txt into ComboFix.exe as depicted in the animation below. This will start ComboFix again.

    [​IMG]


    6. After reboot, (in case it asks to reboot), please post the following reports/logs into your next reply:
    • Combofix.txt
     
    broni,
    #9
  11. 2010/07/28
    rkim

    rkim Inactive Thread Starter

    Joined:
    2010/07/09
    Messages:
    33
    Likes Received:
    0
    It is only supposed to being running Avast. Norton was supposed to be deleted but for some reason it wasn't.

    No luck starting the computer normally so here is the log:

    ComboFix 10-07-27.05 - User 07/28/2010 18:51:30.1.2 - x86 NETWORK
    Microsoft® Windows Vista™ Home Premium 6.0.6000.0.1252.1.1033.18.2037.1451 [GMT -7:00]
    Running from: c:\users\User\Desktop\ComboFix.exe
    Command switches used :: c:\users\User\Desktop\CFScript.txt
    AV: Norton Internet Security *On-access scanning enabled* (Outdated) {E10A9785-9598-4754-B552-92431C1C35F8}
    FW: Norton Internet Security *enabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220}
    SP: Norton Internet Security *enabled* (Outdated) {CBB7EE13-8244-4DAB-8B55-D5C7AA91E59A}
    SP: Windows Defender *disabled* (Outdated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
    * Created a new restore point

    FILE ::
    "c:\users\User\AppData\Local\Fdocu.dat "
    "c:\users\User\AppData\Local\Ffeloyo.bin "
    "c:\windows\system32\drivers\muikt.sys "
    .

    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    c:\users\User\AppData\Local\Fdocu.dat
    c:\users\User\AppData\Local\Ffeloyo.bin
    c:\windows\system32\drivers\muikt.sys . . . . failed to delete

    .
    ((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    -------\Legacy_muikt
    -------\Service_muikt


    ((((((((((((((((((((((((( Files Created from 2010-06-28 to 2010-07-29 )))))))))))))))))))))))))))))))
    .

    2010-07-29 02:00 . 2010-07-29 02:04 -------- d-----w- c:\users\User\AppData\Local\temp
    2010-07-29 02:00 . 2010-07-29 02:00 -------- d-----w- c:\users\Public\AppData\Local\temp
    2010-07-29 02:00 . 2010-07-29 02:00 -------- d-----w- c:\users\Guest\AppData\Local\temp
    2010-07-29 02:00 . 2010-07-29 02:00 -------- d-----w- c:\users\Default\AppData\Local\temp
    2010-07-29 01:49 . 2010-07-29 01:50 -------- d-----w- C:\32788R22FWJFW
    2010-07-09 19:15 . 2010-07-09 19:50 4713737214 ----a-w- C:\Backup.zip
    2010-07-09 02:23 . 2010-06-28 20:37 165456 ----a-w- c:\windows\system32\drivers\aswSP.sys
    2010-07-09 02:23 . 2010-06-28 20:32 17744 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
    2010-07-09 02:23 . 2010-06-28 20:33 23376 ----a-w- c:\windows\system32\drivers\aswRdr.sys
    2010-07-09 02:23 . 2010-06-28 20:37 46672 ----a-w- c:\windows\system32\drivers\aswTdi.sys
    2010-07-09 02:23 . 2010-06-28 20:32 50256 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
    2010-07-09 02:23 . 2010-06-28 20:57 38848 ----a-w- c:\windows\avastSS.scr
    2010-07-09 02:23 . 2010-06-28 20:57 165032 ----a-w- c:\windows\system32\aswBoot.exe
    2010-07-09 02:22 . 2010-07-09 02:22 -------- d-----w- c:\programdata\Alwil Software
    2010-07-09 02:22 . 2010-07-09 02:22 -------- d-----w- c:\program files\Alwil Software
    2010-07-09 02:06 . 2010-07-29 02:04 767488 ----a-w- c:\windows\system32\drivers\muikt.sys

    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2010-07-09 18:54 . 2007-05-10 22:38 1356 ----a-w- c:\users\User\AppData\Local\d3d9caps.dat
    2010-07-09 02:31 . 2007-03-29 03:40 -------- d-----w- c:\program files\Common Files\AOL
    2010-07-09 02:30 . 2007-03-17 02:40 -------- d-----w- c:\programdata\AOL
    2010-06-27 18:48 . 2006-12-18 04:05 12 ----a-w- c:\windows\bthservsdp.dat
    2010-06-18 17:14 . 2010-06-12 05:11 -------- d-----w- c:\programdata\DivX
    2010-06-15 19:11 . 2006-12-18 04:57 -------- d-----w- c:\program files\HP Games
    2010-06-15 19:02 . 2006-12-18 05:02 -------- d-----w- c:\programdata\WildTangent
    2010-06-15 18:58 . 2006-12-18 04:26 -------- d--h--w- c:\program files\InstallShield Installation Information
    2010-06-15 18:58 . 2007-07-03 23:45 -------- d-----w- c:\program files\HOTALBUMMyBOX
    2010-06-14 01:42 . 2010-06-14 01:42 -------- d-----w- c:\program files\AviSynth 2.5
    2010-06-12 23:59 . 2009-09-20 23:31 -------- d-----w- c:\program files\Microsoft Silverlight
    2010-06-12 08:12 . 2009-12-14 23:38 -------- d-----w- c:\programdata\Norton
    2010-06-12 08:12 . 2010-06-12 08:12 -------- d-----w- c:\program files\Norton Security Scan
    2010-06-12 08:12 . 2006-12-18 04:37 -------- d-----w- c:\programdata\Symantec
    2010-06-12 08:12 . 2010-06-12 08:12 -------- d-----w- c:\programdata\NortonInstaller
    2010-06-12 08:12 . 2010-06-12 08:12 -------- d-----w- c:\program files\NortonInstaller
    2010-06-12 07:00 . 2009-01-01 16:37 -------- d-----w- c:\users\User\AppData\Roaming\DivX
    2010-06-12 05:19 . 2010-06-12 05:19 57344 ----a-w- c:\programdata\DivX\RunAsUser\RUNASUSERPROCESS.dll
    2010-06-12 05:17 . 2006-12-18 05:12 -------- d-----w- c:\program files\DivX
    2010-06-12 05:17 . 2010-06-12 05:17 56765 ----a-w- c:\programdata\DivX\DivXPlusShortcuts\Uninstaller.exe
    2010-06-12 05:17 . 2010-06-12 05:17 56997 ----a-w- c:\programdata\DivX\WebPlayer\Uninstaller.exe
    2010-06-12 05:17 . 2010-06-12 05:17 53600 ----a-w- c:\programdata\DivX\Update\Uninstaller.exe
    2010-06-12 05:17 . 2010-06-12 05:17 57715 ----a-w- c:\programdata\DivX\Player\Uninstaller.exe
    2010-06-12 05:16 . 2010-06-12 05:16 84062 ----a-w- c:\programdata\DivX\TransferWizard\Uninstaller.exe
    2010-06-12 05:16 . 2007-08-05 20:11 -------- d-----w- c:\program files\Common Files\PX Storage Engine
    2010-06-12 05:16 . 2010-06-12 05:16 57054 ----a-w- c:\programdata\DivX\DSDesktopComponents\Uninstaller.exe
    2010-06-12 05:16 . 2010-06-12 05:16 54166 ----a-w- c:\programdata\DivX\DSAVCDecoder\Uninstaller.exe
    2010-06-12 05:16 . 2010-06-12 05:16 57532 ----a-w- c:\programdata\DivX\DSASPDecoder\Uninstaller.exe
    2010-06-12 05:16 . 2010-06-12 05:16 56458 ----a-w- c:\programdata\DivX\DivXDecoderShortcut\Uninstaller.exe
    2010-06-12 05:16 . 2010-06-12 05:16 54174 ----a-w- c:\programdata\DivX\DSAACDecoder\Uninstaller.exe
    2010-06-12 05:16 . 2010-06-12 05:16 54153 ----a-w- c:\programdata\DivX\DFXPlugin\Uninstaller.exe
    2010-06-12 05:16 . 2010-06-12 05:16 54128 ----a-w- c:\programdata\DivX\Converter\Uninstaller.exe
    2010-06-12 05:16 . 2010-06-12 05:16 54644 ----a-w- c:\programdata\DivX\TranscodeEngine\Uninstaller.exe
    2010-06-12 05:15 . 2010-06-12 05:15 54101 ----a-w- c:\programdata\DivX\MPEG2Plugin\Uninstaller.exe
    2010-06-12 05:15 . 2010-06-12 05:15 57409 ----a-w- c:\programdata\DivX\ControlPanel\Uninstaller.exe
    2010-06-12 05:15 . 2010-06-12 05:15 52963 ----a-w- c:\programdata\DivX\MSVC80CRTRedist\Uninstaller.exe
    2010-06-12 05:15 . 2010-06-12 05:15 -------- d-----w- c:\program files\Common Files\DivX Shared
    2010-06-12 05:15 . 2010-06-12 05:15 54073 ----a-w- c:\programdata\DivX\Qt4.5\Uninstaller.exe
    2010-06-12 05:15 . 2010-06-12 05:15 56969 ----a-w- c:\programdata\DivX\ASPEncoder\Uninstaller.exe
    2010-06-12 05:11 . 2010-06-12 05:17 1062184 ----a-w- c:\programdata\DivX\Setup\Resource.dll
    2010-06-12 05:10 . 2010-06-12 05:17 895256 ----a-w- c:\programdata\DivX\Setup\DivXSetup.exe
    2010-06-09 10:35 . 2006-12-18 04:50 -------- d-----w- c:\programdata\Microsoft Help
    2010-06-09 08:06 . 2010-06-09 08:06 976832 ----a-w- c:\programdata\Adobe\Reader\8.2\ARM\6685\AdobeARM.exe
    2010-06-09 08:06 . 2010-06-09 08:06 976832 ----a-w- c:\programdata\Adobe\Reader\8.2\ARM\16562\AdobeARM.exe
    2010-06-09 08:06 . 2010-06-09 08:06 70584 ----a-w- c:\programdata\Adobe\Reader\8.2\ARM\6685\AdobeExtractFiles.dll
    2010-06-09 08:06 . 2010-06-09 08:06 70584 ----a-w- c:\programdata\Adobe\Reader\8.2\ARM\16562\AdobeExtractFiles.dll
    2010-06-09 08:06 . 2010-06-09 08:06 331176 ----a-w- c:\programdata\Adobe\Reader\8.2\ARM\6685\ReaderUpdater.exe
    2010-06-09 08:06 . 2010-06-09 08:06 331176 ----a-w- c:\programdata\Adobe\Reader\8.2\ARM\6685\AcrobatUpdater.exe
    2010-06-09 08:06 . 2010-06-09 08:06 331176 ----a-w- c:\programdata\Adobe\Reader\8.2\ARM\16562\ReaderUpdater.exe
    2010-06-09 08:06 . 2010-06-09 08:06 331176 ----a-w- c:\programdata\Adobe\Reader\8.2\ARM\16562\AcrobatUpdater.exe
    2010-06-03 02:41 . 2010-06-03 02:41 3600384 ----a-w- c:\windows\system32\GPhotos.scr
    2010-05-21 21:14 . 2009-10-03 07:27 221568 ------w- c:\windows\system32\MpSigStub.exe
    2010-05-07 19:55 . 2010-05-07 19:55 255472 ----a-w- c:\users\User\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll
    .

    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "Sidebar "= "c:\program files\Windows Sidebar\sidebar.exe" [2008-01-11 1232896]
    "HPAdvisor "= "c:\program files\Hewlett-Packard\HP Advisor\HPAdvisor.exe" [2006-11-22 1474560]
    "WindowsWelcomeCenter "= "oobefldr.dll" [2006-11-02 2159104]
    "ehTray.exe "= "c:\windows\ehome\ehTray.exe" [2006-11-02 125440]
    "Skype "= "c:\program files\Skype\Phone\Skype.exe" [2007-03-12 25590312]
    "Google Update "= "c:\users\User\AppData\Local\Google\Update\GoogleUpdate.exe" [2009-03-01 133104]
    "msnmsgr "= "c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-07-26 3883856]
    "WMPNSCFG "= "c:\program files\Windows Media Player\WMPNSCFG.exe" [2006-11-02 201728]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "Windows Defender "= "c:\program files\Windows Defender\MSASCui.exe" [2007-04-17 1006264]
    "SynTPEnh "= "c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2006-11-15 815104]
    "IgfxTray "= "c:\windows\system32\igfxtray.exe" [2006-11-06 98304]
    "HotKeysCmds "= "c:\windows\system32\hkcmd.exe" [2006-11-06 106496]
    "Persistence "= "c:\windows\system32\igfxpers.exe" [2006-11-06 81920]
    "ccApp "= "c:\program files\Common Files\Symantec Shared\ccApp.exe" [2006-10-25 107112]
    "osCheck "= "c:\program files\Norton Internet Security\osCheck.exe" [2006-10-27 22696]
    "QPService "= "c:\program files\HP\QuickPlay\QPService.exe" [2006-11-24 167936]
    "HP Software Update "= "c:\program files\Hp\HP Software Update\HPWuSchd2.exe" [2005-02-17 49152]
    "QlbCtrl "= "c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2006-11-06 159744]
    "HP Health Check Scheduler "= "c:\program files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe" [2006-11-28 46704]
    "WAWifiMessage "= "c:\program files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe" [2006-10-18 317152]
    "hpWirelessAssistant "= "c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2006-10-18 472800]
    "SunJavaUpdateSched "= "c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-01-11 246504]
    "WPCUMI "= "c:\windows\system32\WpcUmi.exe" [2006-11-02 176128]
    "CanonMyPrinter "= "c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2006-03-22 1191936]
    "SSBkgdUpdate "= "c:\program files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [2003-09-30 155648]
    "OpwareSE4 "= "c:\program files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe" [2006-03-21 69632]
    "Symantec PIF AlertEng "= "c:\program files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" [2008-01-30 583048]
    "QuickTime Task "= "c:\program files\QuickTime\QTTask.exe" [2009-11-11 417792]
    "iTunesHelper "= "c:\program files\iTunes\iTunesHelper.exe" [2010-01-23 141608]
    "Adobe Reader Speed Launcher "= "c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2009-12-18 40368]
    "Adobe ARM "= "c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2009-12-11 948672]
    "DivXUpdate "= "c:\program files\DivX\DivX Update\DivXUpdate.exe" [2010-06-03 1144104]

    c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
    Audible Download Manager.lnk - c:\program files\Audible\Bin\AudibleDownloadHelper.exe [2008-6-13 1754456]
    HP Connections.lnk - c:\program files\HP Connections\6811507\Program\HP Connections.exe [2006-12-17 34520]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
    "AppInit_DLLs "=c:\progra~1\Google\GOOGLE~1\GOEC62~1.DLL

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
    "aux "=wdmaud.drv

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
    @= "Service "

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
    "DisableMonitoring "=dword:00000001

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
    "DisableMonitoring "=dword:00000001

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
    "DisableMonitoring "=dword:00000001

    R1 aswSP;aswSP; [x]
    R1 IDSvix86;Symantec Intrusion Prevention Driver;c:\progra~2\Symantec\DEFINI~1\SymcData\idsdefs\20070612.005\IDSvix86.sys [2007-05-30 212280]
    R2 aswFsBlk;aswFsBlk; [x]
    R2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2010-06-28 50256]
    R2 Viewpoint Manager Service;Viewpoint Manager Service;c:\program files\Viewpoint\Common\ViewpointService.exe [2007-01-04 24652]
    R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2007-04-05 106808]
    R3 ICDUSB2;Sony IC Recorder (P);c:\windows\system32\Drivers\ICDUSB2.sys [2002-11-29 39048]
    R3 R5U870FLx86;R5U870 UVC Lower Filter ;c:\windows\system32\Drivers\R5U870FLx86.sys [2006-12-19 73472]
    R3 R5U870FUx86;R5U870 UVC Upper Filter ;c:\windows\system32\Drivers\R5U870FUx86.sys [2006-12-19 43904]
    R3 SYMNDISV;SYMNDISV;c:\windows\System32\Drivers\SYMNDISV.SYS [2006-10-25 37008]
    S0 PzWDM;PzWDM;c:\windows\system32\Drivers\PzWDM.sys [2007-07-03 15172]


    --- Other Services/Drivers In Memory ---

    *NewlyCreated* - CFCATCHME
    *NewlyCreated* - COMHOST
    *Deregistered* - CFcatchme
    *Deregistered* - muikt

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
    bthsvcs REG_MULTI_SZ BthServ
    HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
    .
    Contents of the 'Scheduled Tasks' folder

    2010-07-08 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-107199264-59685293-546543122-1000Core.job
    - c:\users\User\AppData\Local\Google\Update\GoogleUpdate.exe [2009-03-01 22:50]

    2010-07-09 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-107199264-59685293-546543122-1000UA.job
    - c:\users\User\AppData\Local\Google\Update\GoogleUpdate.exe [2009-03-01 22:50]

    2010-06-12 c:\windows\Tasks\HPCeeScheduleForUser.job
    - c:\program files\Hewlett-Packard\SDP\Ceement\HPCEE.exe [2006-12-18 00:08]

    2010-06-19 c:\windows\Tasks\Norton Internet Security - Run Full System Scan - User.job
    - c:\progra~1\NORTON~1\NORTON~1\Navw32.exe [2006-11-08 07:48]

    2010-07-09 c:\windows\Tasks\Norton Security Scan for User.job
    - c:\program files\Norton Security Scan\Engine\2.7.3.34\Nss.exe [2010-06-12 16:48]

    2010-07-09 c:\windows\Tasks\User_Feed_Synchronization-{297E9270-95A0-4BF0-BB95-726FE08D846F}.job
    - c:\windows\system32\msfeedssync.exe [2006-11-02 09:45]

    2010-07-08 c:\windows\Tasks\User_Feed_Synchronization-{C4D2EA17-D19B-450E-AE3F-404E3BBD2D96}.job
    - c:\windows\system32\msfeedssync.exe [2006-11-02 09:45]
    .
    .
    ------- Supplementary Scan -------
    .
    uStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=71&bd=Pavilion&pf=laptop
    uDefault_Search_URL = hxxp://www.google.com/ie
    mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=71&bd=Pavilion&pf=laptop
    uSearchAssistant = hxxp://www.google.com/ie
    uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
    IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
    IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
    IE: Easy-WebPrint Add To Print List - c:\program files\Canon\Easy-WebPrint\Toolband.dll/RC_AddToList.html
    IE: Easy-WebPrint High Speed Print - c:\program files\Canon\Easy-WebPrint\Toolband.dll/RC_HSPrint.html
    IE: Easy-WebPrint Preview - c:\program files\Canon\Easy-WebPrint\Toolband.dll/RC_Preview.html
    IE: Easy-WebPrint Print - c:\program files\Canon\Easy-WebPrint\Toolband.dll/RC_Print.html
    LSP: c:\windows\system32\wpclsp.dll
    Handler: gameboxchrome - {494D4E3B-FA53-4487-8AF6-3F50FE1167A9} -
    FF - ProfilePath - c:\users\User\AppData\Roaming\Mozilla\Firefox\Profiles\z77dif15.default\
    FF - plugin: c:\program files\DivX\DivX Plus Web Player\npdivx32.dll
    FF - plugin: c:\program files\Google\Picasa3\npPicasa3.dll
    FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
    FF - plugin: c:\program files\Mozilla Firefox\plugins\npJoostPlugin.dll
    FF - plugin: c:\program files\Mozilla Firefox\plugins\npViewpoint.dll
    FF - plugin: c:\program files\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll
    FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll
    FF - plugin: c:\users\User\AppData\Local\Google\Update\1.2.183.29\npGoogleOneClick8.dll
    FF - plugin: c:\users\User\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll
    FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
    .
    - - - - ORPHANS REMOVED - - - -

    HKLM-RunOnce-<NO NAME> - (no file)



    **************************************************************************

    catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2010-07-28 19:04
    Windows 6.0.6000 NTFS

    scanning hidden processes ...

    scanning hidden autostart entries ...

    scanning hidden files ...

    scan completed successfully
    hidden files: 0

    **************************************************************************

    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\muikt]

    .
    --------------------- LOCKED REGISTRY KEYS ---------------------

    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
    @Denied: (A) (Users)
    @Denied: (A) (Everyone)
    @Allowed: (B 1 2 3 4 5) (S-1-5-20)
    "BlindDial "=dword:00000000
    .
    --------------------- DLLs Loaded Under Running Processes ---------------------

    - - - - - - - > 'Explorer.exe'(1736)
    c:\program files\Hewlett-Packard\HP Advisor\Pillars\Market\MLDeskBand.dll
    .
    ------------------------ Other Running Processes ------------------------
    .
    c:\windows\system32\WerFault.exe
    c:\windows\helppane.exe
    .
    **************************************************************************
    .
    Completion time: 2010-07-28 19:11:03 - machine was rebooted
    ComboFix-quarantined-files.txt 2010-07-29 02:11
    ComboFix2.txt 2010-07-29 01:14

    Pre-Run: 80,402,305,024 bytes free
    Post-Run: 80,163,168,256 bytes free

    - - End Of File - - 4470BAAF46F21CAFE1B8DAFAD5D076E5
     
    rkim,
    #10
  12. 2010/07/28
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    1. Please open Notepad
    • Click Start , then Run
    • Type notepad .exe in the Run Box.

    2. Now copy/paste the entire content of the codebox below into the Notepad window:

    Code:
    File::
c:\windows\system32\drivers\muikt.sys
c:\windows\System32\Drivers\SYMNDISV.SYS
c:\windows\Tasks\Norton Internet Security - Run Full System Scan - User.job
c:\progra~1\NORTON~1
c:\windows\Tasks\Norton Security Scan for User.job


Folder::
c:\program files\Norton Security Scan
c:\programdata\Symantec
c:\programdata\NortonInstaller
c:\program files\NortonInstaller
c:\progra~2\Symantec


Driver::
IDSvix86
SYMNDISV


Registry::
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
 "DisableMonitoring "=-
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\muikt]

    3. Save the above as CFScript.txt

    4. Close/disable all anti virus and anti malware programs again, so they do not interfere with the running of ComboFix.

    5. Then drag the CFScript.txt into ComboFix.exe as depicted in the animation below. This will start ComboFix again.

    [​IMG]


    6. After reboot, (in case it asks to reboot), please post the following reports/logs into your next reply:
    • Combofix.txt
     
    broni,
    #11
  13. 2010/07/28
    rkim

    rkim Inactive Thread Starter

    Joined:
    2010/07/09
    Messages:
    33
    Likes Received:
    0
    ComboFix 10-07-27.05 - User 07/28/2010 19:49:23.1.2 - x86 NETWORK
    Microsoft® Windows Vista™ Home Premium 6.0.6000.0.1252.1.1033.18.2037.1495 [GMT -7:00]
    Running from: c:\users\User\Desktop\ComboFix.exe
    Command switches used :: c:\users\User\Desktop\CFScript.txt
    AV: Norton Internet Security *On-access scanning enabled* (Outdated) {E10A9785-9598-4754-B552-92431C1C35F8}
    FW: Norton Internet Security *enabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220}
    SP: Norton Internet Security *enabled* (Outdated) {CBB7EE13-8244-4DAB-8B55-D5C7AA91E59A}
    SP: Windows Defender *disabled* (Outdated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
    * Created a new restore point

    FILE ::
    "c:\progra~1\NORTON~1 "
    "c:\windows\system32\drivers\muikt.sys "
    "c:\windows\System32\Drivers\SYMNDISV.SYS "
    "c:\windows\Tasks\Norton Internet Security - Run Full System Scan - User.job "
    "c:\windows\Tasks\Norton Security Scan for User.job "
    .

    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    c:\progra~2\Symantec
    c:\progra~2\Symantec\Common Client\settings.bak
    c:\progra~2\Symantec\Common Client\settings.dat
    c:\progra~2\Symantec\Definitions\SymcData\idsdefs\20070607.001\CATALOG.DAT
    c:\progra~2\Symantec\Definitions\SymcData\idsdefs\20070607.001\IDS9xx86.dll
    c:\progra~2\Symantec\Definitions\SymcData\idsdefs\20070607.001\IDSVia64.cat
    c:\progra~2\Symantec\Definitions\SymcData\idsdefs\20070607.001\IDSVia64.INF
    c:\progra~2\Symantec\Definitions\SymcData\idsdefs\20070607.001\IDSviA64.sys
    c:\progra~2\Symantec\Definitions\SymcData\idsdefs\20070607.001\IDSVix86.cat
    c:\progra~2\Symantec\Definitions\SymcData\idsdefs\20070607.001\IDSVix86.INF
    c:\progra~2\Symantec\Definitions\SymcData\idsdefs\20070607.001\IDSvix86.sys
    c:\progra~2\Symantec\Definitions\SymcData\idsdefs\20070607.001\IDSxpx86.dll
    c:\progra~2\Symantec\Definitions\SymcData\idsdefs\20070607.001\Metadata.dat
    c:\progra~2\Symantec\Definitions\SymcData\idsdefs\20070607.001\sigs.dat
    c:\progra~2\Symantec\Definitions\SymcData\idsdefs\20070607.001\SymIDSCo.sys
    c:\progra~2\Symantec\Definitions\SymcData\idsdefs\20070607.001\SymIDSCo.vxd
    c:\progra~2\Symantec\Definitions\SymcData\idsdefs\20070607.001\SymIDSI.dll
    c:\progra~2\Symantec\Definitions\SymcData\idsdefs\20070607.001\v.grd
    c:\progra~2\Symantec\Definitions\SymcData\idsdefs\20070607.001\v.sig
    c:\progra~2\Symantec\Definitions\SymcData\idsdefs\20070607.001\VIRSCAN1.DAT
    c:\progra~2\Symantec\Definitions\SymcData\idsdefs\20070607.001\zdone.dat
    c:\progra~2\Symantec\Definitions\SymcData\idsdefs\20070612.005\CATALOG.DAT
    c:\progra~2\Symantec\Definitions\SymcData\idsdefs\20070612.005\IDS9xx86.dll
    c:\progra~2\Symantec\Definitions\SymcData\idsdefs\20070612.005\IDSVia64.cat
    c:\progra~2\Symantec\Definitions\SymcData\idsdefs\20070612.005\IDSVia64.INF
    c:\progra~2\Symantec\Definitions\SymcData\idsdefs\20070612.005\IDSviA64.sys
    c:\progra~2\Symantec\Definitions\SymcData\idsdefs\20070612.005\IDSVix86.cat
    c:\progra~2\Symantec\Definitions\SymcData\idsdefs\20070612.005\IDSVix86.INF
    c:\progra~2\Symantec\Definitions\SymcData\idsdefs\20070612.005\IDSvix86.sys
    c:\progra~2\Symantec\Definitions\SymcData\idsdefs\20070612.005\IDSxpx86.dll
    c:\progra~2\Symantec\Definitions\SymcData\idsdefs\20070612.005\Metadata.dat
    c:\progra~2\Symantec\Definitions\SymcData\idsdefs\20070612.005\sigs.dat
    c:\progra~2\Symantec\Definitions\SymcData\idsdefs\20070612.005\SymIDSCo.sys
    c:\progra~2\Symantec\Definitions\SymcData\idsdefs\20070612.005\SymIDSCo.vxd
    c:\progra~2\Symantec\Definitions\SymcData\idsdefs\20070612.005\SymIDSI.dll
    c:\progra~2\Symantec\Definitions\SymcData\idsdefs\20070612.005\v.grd
    c:\progra~2\Symantec\Definitions\SymcData\idsdefs\20070612.005\v.sig
    c:\progra~2\Symantec\Definitions\SymcData\idsdefs\20070612.005\VIRSCAN1.DAT
    c:\progra~2\Symantec\Definitions\SymcData\idsdefs\20070612.005\zdone.dat
    c:\progra~2\Symantec\Definitions\SymcData\idsdefs\BinHub\catalog.dat
    c:\progra~2\Symantec\Definitions\SymcData\idsdefs\BinHub\ids9xx86.dll
    c:\progra~2\Symantec\Definitions\SymcData\idsdefs\BinHub\IDSVia64.cat
    c:\progra~2\Symantec\Definitions\SymcData\idsdefs\BinHub\IDSVia64.inf
    c:\progra~2\Symantec\Definitions\SymcData\idsdefs\BinHub\IDSviA64.sys
    c:\progra~2\Symantec\Definitions\SymcData\idsdefs\BinHub\IDSVix86.CAT
    c:\progra~2\Symantec\Definitions\SymcData\idsdefs\BinHub\IDSVix86.INF
    c:\progra~2\Symantec\Definitions\SymcData\idsdefs\BinHub\IDSvix86.sys
    c:\progra~2\Symantec\Definitions\SymcData\idsdefs\BinHub\idsxpx86.dll
    c:\progra~2\Symantec\Definitions\SymcData\idsdefs\BinHub\metadata.dat
    c:\progra~2\Symantec\Definitions\SymcData\idsdefs\BinHub\sigs.dat
    c:\progra~2\Symantec\Definitions\SymcData\idsdefs\BinHub\symidsco.sys
    c:\progra~2\Symantec\Definitions\SymcData\idsdefs\BinHub\symidsco.vxd
    c:\progra~2\Symantec\Definitions\SymcData\idsdefs\BinHub\SymIDSI.dll
    c:\progra~2\Symantec\Definitions\SymcData\idsdefs\BinHub\v.grd
    c:\progra~2\Symantec\Definitions\SymcData\idsdefs\BinHub\v.sig
    c:\progra~2\Symantec\Definitions\SymcData\idsdefs\BinHub\virscan1.dat
    c:\progra~2\Symantec\Definitions\SymcData\idsdefs\BinHub\zdone.dat
    c:\progra~2\Symantec\Definitions\SymcData\idsdefs\definfo.dat
    c:\progra~2\Symantec\Definitions\SymcData\idsdefs\usage.dat
    c:\progra~2\Symantec\Definitions\SymcData\nco1.0defs\20070621.003\Catalog.dat
    c:\progra~2\Symantec\Definitions\SymcData\nco1.0defs\20070621.003\full-webauth.sql.bin
    c:\progra~2\Symantec\Definitions\SymcData\nco1.0defs\20070621.003\hub.scr
    c:\progra~2\Symantec\Definitions\SymcData\nco1.0defs\20070621.003\Identifiers.xml.bin
    c:\progra~2\Symantec\Definitions\SymcData\nco1.0defs\20070621.003\Indicators.xml.bin
    c:\progra~2\Symantec\Definitions\SymcData\nco1.0defs\20070621.003\nppw.zip
    c:\progra~2\Symantec\Definitions\SymcData\nco1.0defs\20070621.003\PopularSites.xml.bin
    c:\progra~2\Symantec\Definitions\SymcData\nco1.0defs\20070621.003\Redirectors.xml.bin
    c:\progra~2\Symantec\Definitions\SymcData\nco1.0defs\20070621.003\Resources.xml.bin
    c:\progra~2\Symantec\Definitions\SymcData\nco1.0defs\20070621.003\SafeList.xml.bin
    c:\progra~2\Symantec\Definitions\SymcData\nco1.0defs\20070621.003\SearchServices.xml.bin
    c:\progra~2\Symantec\Definitions\SymcData\nco1.0defs\20070621.003\Throttle.xml.bin
    c:\progra~2\Symantec\Definitions\SymcData\nco1.0defs\20070621.003\TrustedDomains.xml.bin
    c:\progra~2\Symantec\Definitions\SymcData\nco1.0defs\20070621.003\URLAnalysis.xml.bin
    c:\progra~2\Symantec\Definitions\SymcData\nco1.0defs\20070621.003\v.grd
    c:\progra~2\Symantec\Definitions\SymcData\nco1.0defs\20070621.003\v.sig
    c:\progra~2\Symantec\Definitions\SymcData\nco1.0defs\20070621.003\virscan1.dat
    c:\progra~2\Symantec\Definitions\SymcData\nco1.0defs\20070621.003\WebHostingSites.xml.bin
    c:\progra~2\Symantec\Definitions\SymcData\nco1.0defs\20070622.006\Catalog.dat
    c:\progra~2\Symantec\Definitions\SymcData\nco1.0defs\20070622.006\full-webauth.sql.bin
    c:\progra~2\Symantec\Definitions\SymcData\nco1.0defs\20070622.006\hub.scr
    c:\progra~2\Symantec\Definitions\SymcData\nco1.0defs\20070622.006\Identifiers.xml.bin
    c:\progra~2\Symantec\Definitions\SymcData\nco1.0defs\20070622.006\Indicators.xml.bin
    c:\progra~2\Symantec\Definitions\SymcData\nco1.0defs\20070622.006\nppw.zip
    c:\progra~2\Symantec\Definitions\SymcData\nco1.0defs\20070622.006\PopularSites.xml.bin
    c:\progra~2\Symantec\Definitions\SymcData\nco1.0defs\20070622.006\Redirectors.xml.bin
    c:\progra~2\Symantec\Definitions\SymcData\nco1.0defs\20070622.006\Resources.xml.bin
    c:\progra~2\Symantec\Definitions\SymcData\nco1.0defs\20070622.006\SafeList.xml.bin
    c:\progra~2\Symantec\Definitions\SymcData\nco1.0defs\20070622.006\SearchServices.xml.bin
    c:\progra~2\Symantec\Definitions\SymcData\nco1.0defs\20070622.006\Throttle.xml.bin
    c:\progra~2\Symantec\Definitions\SymcData\nco1.0defs\20070622.006\TrustedDomains.xml.bin
    c:\progra~2\Symantec\Definitions\SymcData\nco1.0defs\20070622.006\URLAnalysis.xml.bin
    c:\progra~2\Symantec\Definitions\SymcData\nco1.0defs\20070622.006\v.grd
    c:\progra~2\Symantec\Definitions\SymcData\nco1.0defs\20070622.006\v.sig
    c:\progra~2\Symantec\Definitions\SymcData\nco1.0defs\20070622.006\virscan1.dat
    c:\progra~2\Symantec\Definitions\SymcData\nco1.0defs\20070622.006\WebHostingSites.xml.bin
    c:\progra~2\Symantec\Definitions\SymcData\nco1.0defs\BinHub\catalog.dat
    c:\progra~2\Symantec\Definitions\SymcData\nco1.0defs\BinHub\Identifiers.xml.bin
    c:\progra~2\Symantec\Definitions\SymcData\nco1.0defs\BinHub\Indicators.xml.bin
    c:\progra~2\Symantec\Definitions\SymcData\nco1.0defs\BinHub\PopularSites.xml.bin
    c:\progra~2\Symantec\Definitions\SymcData\nco1.0defs\BinHub\Redirectors.xml.bin
    c:\progra~2\Symantec\Definitions\SymcData\nco1.0defs\BinHub\Resources.xml.bin
    c:\progra~2\Symantec\Definitions\SymcData\nco1.0defs\BinHub\SafeList.xml.bin
    c:\progra~2\Symantec\Definitions\SymcData\nco1.0defs\BinHub\SearchServices.xml.bin
    c:\progra~2\Symantec\Definitions\SymcData\nco1.0defs\BinHub\Throttle.xml.bin
    c:\progra~2\Symantec\Definitions\SymcData\nco1.0defs\BinHub\TrustedDomains.xml.bin
    c:\progra~2\Symantec\Definitions\SymcData\nco1.0defs\BinHub\URLAnalysis.xml.bin
    c:\progra~2\Symantec\Definitions\SymcData\nco1.0defs\BinHub\v.grd
    c:\progra~2\Symantec\Definitions\SymcData\nco1.0defs\BinHub\v.sig
    c:\progra~2\Symantec\Definitions\SymcData\nco1.0defs\BinHub\virscan1.dat
    c:\progra~2\Symantec\Definitions\SymcData\nco1.0defs\BinHub\WebHostingSites.xml.bin
    c:\progra~2\Symantec\Definitions\SymcData\nco1.0defs\definfo.dat
    c:\progra~2\Symantec\Definitions\SymcData\nco1.0defs\latest-hub-webauth.sql.bin
    c:\progra~2\Symantec\Definitions\SymcData\nco1.0defs\usage.dat
    c:\progra~2\Symantec\Definitions\VirusDefs\20070621.017\CATALOG.DAT
    c:\progra~2\Symantec\Definitions\VirusDefs\20070621.017\CCERASER.DLL
    c:\progra~2\Symantec\Definitions\VirusDefs\20070621.017\ECBOOTIL.VXD
    c:\progra~2\Symantec\Definitions\VirusDefs\20070621.017\ECMSVR32.DLL
    c:\progra~2\Symantec\Definitions\VirusDefs\20070621.017\EECTRL.SYS
    c:\progra~2\Symantec\Definitions\VirusDefs\20070621.017\ERASER.GRD
    c:\progra~2\Symantec\Definitions\VirusDefs\20070621.017\ERASER.SIG
    c:\progra~2\Symantec\Definitions\VirusDefs\20070621.017\ERASER.SPM
    c:\progra~2\Symantec\Definitions\VirusDefs\20070621.017\ERASER.SYS
    c:\progra~2\Symantec\Definitions\VirusDefs\20070621.017\ESRDEF.BIN
    c:\progra~2\Symantec\Definitions\VirusDefs\20070621.017\HH
    c:\progra~2\Symantec\Definitions\VirusDefs\20070621.017\NAVENG.EXP
    c:\progra~2\Symantec\Definitions\VirusDefs\20070621.017\NAVENG.SYS
    c:\progra~2\Symantec\Definitions\VirusDefs\20070621.017\NAVENG.VXD
    c:\progra~2\Symantec\Definitions\VirusDefs\20070621.017\NAVENG32.DLL
    c:\progra~2\Symantec\Definitions\VirusDefs\20070621.017\NAVEX15.EXP
    c:\progra~2\Symantec\Definitions\VirusDefs\20070621.017\NAVEX15.SYS
    c:\progra~2\Symantec\Definitions\VirusDefs\20070621.017\NAVEX15.VXD
    c:\progra~2\Symantec\Definitions\VirusDefs\20070621.017\NAVEX32A.DLL
    c:\progra~2\Symantec\Definitions\VirusDefs\20070621.017\NCSACERT.TXT
    c:\progra~2\Symantec\Definitions\VirusDefs\20070621.017\SCRAUTH.DAT
    c:\progra~2\Symantec\Definitions\VirusDefs\20070621.017\SYMAVENG.CAT
    c:\progra~2\Symantec\Definitions\VirusDefs\20070621.017\SYMAVENG.INF
    c:\progra~2\Symantec\Definitions\VirusDefs\20070621.017\SYMERASE.CAT
    c:\progra~2\Symantec\Definitions\VirusDefs\20070621.017\SYMERASE.INF
    c:\progra~2\Symantec\Definitions\VirusDefs\20070621.017\TCDEFS.DAT
    c:\progra~2\Symantec\Definitions\VirusDefs\20070621.017\TCSCAN7.DAT
    c:\progra~2\Symantec\Definitions\VirusDefs\20070621.017\TCSCAN8.DAT
    c:\progra~2\Symantec\Definitions\VirusDefs\20070621.017\TCSCAN9.DAT
    c:\progra~2\Symantec\Definitions\VirusDefs\20070621.017\TECHNOTE.TXT
    c:\progra~2\Symantec\Definitions\VirusDefs\20070621.017\TINF.DAT
    c:\progra~2\Symantec\Definitions\VirusDefs\20070621.017\TINFIDX.DAT
    c:\progra~2\Symantec\Definitions\VirusDefs\20070621.017\TINFL.DAT
    c:\progra~2\Symantec\Definitions\VirusDefs\20070621.017\TSCAN1.DAT
    c:\progra~2\Symantec\Definitions\VirusDefs\20070621.017\TSCAN1HD.DAT
    c:\progra~2\Symantec\Definitions\VirusDefs\20070621.017\V.GRD
    c:\progra~2\Symantec\Definitions\VirusDefs\20070621.017\V.SIG
    c:\progra~2\Symantec\Definitions\VirusDefs\20070621.017\VIRSCAN.INF
    c:\progra~2\Symantec\Definitions\VirusDefs\20070621.017\VIRSCAN1.DAT
    c:\progra~2\Symantec\Definitions\VirusDefs\20070621.017\VIRSCAN2.DAT
    c:\progra~2\Symantec\Definitions\VirusDefs\20070621.017\VIRSCAN3.DAT
    c:\progra~2\Symantec\Definitions\VirusDefs\20070621.017\VIRSCAN4.DAT
    c:\progra~2\Symantec\Definitions\VirusDefs\20070621.017\VIRSCAN5.DAT
    c:\progra~2\Symantec\Definitions\VirusDefs\20070621.017\VIRSCAN6.DAT
    c:\progra~2\Symantec\Definitions\VirusDefs\20070621.017\VIRSCAN7.DAT
    c:\progra~2\Symantec\Definitions\VirusDefs\20070621.017\VIRSCAN8.DAT
    c:\progra~2\Symantec\Definitions\VirusDefs\20070621.017\VIRSCAN9.DAT
    c:\progra~2\Symantec\Definitions\VirusDefs\20070621.017\VIRSCANT.DAT
    c:\progra~2\Symantec\Definitions\VirusDefs\20070621.017\WHATSNEW.TXT
    c:\progra~2\Symantec\Definitions\VirusDefs\20070621.017\ZDONE.DAT
    c:\progra~2\Symantec\Definitions\VirusDefs\20070622.041\CATALOG.DAT
    c:\progra~2\Symantec\Definitions\VirusDefs\20070622.041\CCERASER.DLL
    c:\progra~2\Symantec\Definitions\VirusDefs\20070622.041\ECBOOTIL.VXD
    c:\progra~2\Symantec\Definitions\VirusDefs\20070622.041\ECMSVR32.DLL
    c:\progra~2\Symantec\Definitions\VirusDefs\20070622.041\EECTRL.SYS
    c:\progra~2\Symantec\Definitions\VirusDefs\20070622.041\ERASER.GRD
    c:\progra~2\Symantec\Definitions\VirusDefs\20070622.041\ERASER.SIG
    c:\progra~2\Symantec\Definitions\VirusDefs\20070622.041\ERASER.SPM
    c:\progra~2\Symantec\Definitions\VirusDefs\20070622.041\ERASER.SYS
    c:\progra~2\Symantec\Definitions\VirusDefs\20070622.041\ESRDEF.BIN
    c:\progra~2\Symantec\Definitions\VirusDefs\20070622.041\HH
    c:\progra~2\Symantec\Definitions\VirusDefs\20070622.041\NAVENG.EXP
    c:\progra~2\Symantec\Definitions\VirusDefs\20070622.041\NAVENG.SYS
    c:\progra~2\Symantec\Definitions\VirusDefs\20070622.041\NAVENG.VXD
    c:\progra~2\Symantec\Definitions\VirusDefs\20070622.041\NAVENG32.DLL
    c:\progra~2\Symantec\Definitions\VirusDefs\20070622.041\NAVEX15.EXP
    c:\progra~2\Symantec\Definitions\VirusDefs\20070622.041\NAVEX15.SYS
    c:\progra~2\Symantec\Definitions\VirusDefs\20070622.041\NAVEX15.VXD
    c:\progra~2\Symantec\Definitions\VirusDefs\20070622.041\NAVEX32A.DLL
    c:\progra~2\Symantec\Definitions\VirusDefs\20070622.041\NCSACERT.TXT
    c:\progra~2\Symantec\Definitions\VirusDefs\20070622.041\SCRAUTH.DAT
    c:\progra~2\Symantec\Definitions\VirusDefs\20070622.041\SYMAVENG.CAT
    c:\progra~2\Symantec\Definitions\VirusDefs\20070622.041\SYMAVENG.INF
    c:\progra~2\Symantec\Definitions\VirusDefs\20070622.041\SYMERASE.CAT
    c:\progra~2\Symantec\Definitions\VirusDefs\20070622.041\SYMERASE.INF
    c:\progra~2\Symantec\Definitions\VirusDefs\20070622.041\TCDEFS.DAT
    c:\progra~2\Symantec\Definitions\VirusDefs\20070622.041\TCSCAN7.DAT
    c:\progra~2\Symantec\Definitions\VirusDefs\20070622.041\TCSCAN8.DAT
    c:\progra~2\Symantec\Definitions\VirusDefs\20070622.041\TCSCAN9.DAT
    c:\progra~2\Symantec\Definitions\VirusDefs\20070622.041\TECHNOTE.TXT
    c:\progra~2\Symantec\Definitions\VirusDefs\20070622.041\TINF.DAT
    c:\progra~2\Symantec\Definitions\VirusDefs\20070622.041\TINFIDX.DAT
    c:\progra~2\Symantec\Definitions\VirusDefs\20070622.041\TINFL.DAT
    c:\progra~2\Symantec\Definitions\VirusDefs\20070622.041\TSCAN1.DAT
    c:\progra~2\Symantec\Definitions\VirusDefs\20070622.041\TSCAN1HD.DAT
    c:\progra~2\Symantec\Definitions\VirusDefs\20070622.041\V.GRD
    c:\progra~2\Symantec\Definitions\VirusDefs\20070622.041\V.SIG
    c:\progra~2\Symantec\Definitions\VirusDefs\20070622.041\VIRSCAN.INF
    c:\progra~2\Symantec\Definitions\VirusDefs\20070622.041\VIRSCAN1.DAT
    c:\progra~2\Symantec\Definitions\VirusDefs\20070622.041\VIRSCAN2.DAT
    c:\progra~2\Symantec\Definitions\VirusDefs\20070622.041\VIRSCAN3.DAT
    c:\progra~2\Symantec\Definitions\VirusDefs\20070622.041\VIRSCAN4.DAT
    c:\progra~2\Symantec\Definitions\VirusDefs\20070622.041\VIRSCAN5.DAT
    c:\progra~2\Symantec\Definitions\VirusDefs\20070622.041\VIRSCAN6.DAT
    c:\progra~2\Symantec\Definitions\VirusDefs\20070622.041\VIRSCAN7.DAT
    c:\progra~2\Symantec\Definitions\VirusDefs\20070622.041\VIRSCAN8.DAT
    c:\progra~2\Symantec\Definitions\VirusDefs\20070622.041\VIRSCAN9.DAT
    c:\progra~2\Symantec\Definitions\VirusDefs\20070622.041\VIRSCANT.DAT
    c:\progra~2\Symantec\Definitions\VirusDefs\20070622.041\vscanmsx.dat
    c:\progra~2\Symantec\Definitions\VirusDefs\20070622.041\WHATSNEW.TXT
    c:\progra~2\Symantec\Definitions\VirusDefs\20070622.041\ZDONE.DAT
    c:\progra~2\Symantec\Definitions\VirusDefs\BinHub\catalog.dat
    c:\progra~2\Symantec\Definitions\VirusDefs\BinHub\cceraser.dll
    c:\progra~2\Symantec\Definitions\VirusDefs\BinHub\ecmsvr32.dll
    c:\progra~2\Symantec\Definitions\VirusDefs\BinHub\eeCtrl.sys
    c:\progra~2\Symantec\Definitions\VirusDefs\BinHub\ERASER.grd
    c:\progra~2\Symantec\Definitions\VirusDefs\BinHub\ERASER.sig
    c:\progra~2\Symantec\Definitions\VirusDefs\BinHub\ERASER.spm
    c:\progra~2\Symantec\Definitions\VirusDefs\BinHub\ERASER.sys
    c:\progra~2\Symantec\Definitions\VirusDefs\BinHub\esrdef.bin
    c:\progra~2\Symantec\Definitions\VirusDefs\BinHub\hh
    c:\progra~2\Symantec\Definitions\VirusDefs\BinHub\naveng.sys
    c:\progra~2\Symantec\Definitions\VirusDefs\BinHub\naveng32.dll
    c:\progra~2\Symantec\Definitions\VirusDefs\BinHub\navex15.sys
    c:\progra~2\Symantec\Definitions\VirusDefs\BinHub\navex32a.dll
    c:\progra~2\Symantec\Definitions\VirusDefs\BinHub\ncsacert.txt
    c:\progra~2\Symantec\Definitions\VirusDefs\BinHub\scrauth.dat
    c:\progra~2\Symantec\Definitions\VirusDefs\BinHub\symaveng.cat
    c:\progra~2\Symantec\Definitions\VirusDefs\BinHub\symaveng.inf
    c:\progra~2\Symantec\Definitions\VirusDefs\BinHub\SymErase.cat
    c:\progra~2\Symantec\Definitions\VirusDefs\BinHub\SymErase.inf
    c:\progra~2\Symantec\Definitions\VirusDefs\BinHub\tcdefs.dat
    c:\progra~2\Symantec\Definitions\VirusDefs\BinHub\tcscan7.dat
    c:\progra~2\Symantec\Definitions\VirusDefs\BinHub\tcscan8.dat
    c:\progra~2\Symantec\Definitions\VirusDefs\BinHub\tcscan9.dat
    c:\progra~2\Symantec\Definitions\VirusDefs\BinHub\technote.txt
    c:\progra~2\Symantec\Definitions\VirusDefs\BinHub\tinf.dat
    c:\progra~2\Symantec\Definitions\VirusDefs\BinHub\tinfidx.dat
    c:\progra~2\Symantec\Definitions\VirusDefs\BinHub\tinfl.dat
    c:\progra~2\Symantec\Definitions\VirusDefs\BinHub\tscan1.dat
    c:\progra~2\Symantec\Definitions\VirusDefs\BinHub\tscan1hd.dat
    c:\progra~2\Symantec\Definitions\VirusDefs\BinHub\v.grd
    c:\progra~2\Symantec\Definitions\VirusDefs\BinHub\v.sig
    c:\progra~2\Symantec\Definitions\VirusDefs\BinHub\virscan.inf
    c:\progra~2\Symantec\Definitions\VirusDefs\BinHub\virscan1.dat
    c:\progra~2\Symantec\Definitions\VirusDefs\BinHub\virscan2.dat
    c:\progra~2\Symantec\Definitions\VirusDefs\BinHub\virscan3.dat
    c:\progra~2\Symantec\Definitions\VirusDefs\BinHub\virscan4.dat
    c:\progra~2\Symantec\Definitions\VirusDefs\BinHub\virscan5.dat
    c:\progra~2\Symantec\Definitions\VirusDefs\BinHub\virscan6.dat
    c:\progra~2\Symantec\Definitions\VirusDefs\BinHub\virscan7.dat
    c:\progra~2\Symantec\Definitions\VirusDefs\BinHub\virscan8.dat
     
    rkim,
    #12
  14. 2010/07/28
    rkim

    rkim Inactive Thread Starter

    Joined:
    2010/07/09
    Messages:
    33
    Likes Received:
    0
    c:\progra~2\Symantec\Definitions\VirusDefs\BinHub\virscan9.dat
    c:\progra~2\Symantec\Definitions\VirusDefs\BinHub\whatsnew.txt
    c:\progra~2\Symantec\Definitions\VirusDefs\BinHub\zdone.dat
    c:\progra~2\Symantec\Definitions\VirusDefs\definfo.dat
    c:\progra~2\Symantec\Definitions\VirusDefs\TextHub\virscant.dat
    c:\progra~2\Symantec\Definitions\VirusDefs\usage.dat
    c:\progra~2\Symantec\DSA\V_G\DSASL.xml
    c:\progra~2\Symantec\IDS\IDSSettg.BAK
    c:\progra~2\Symantec\IDS\IDSSettg.dat
    c:\progra~2\Symantec\LiveUpdate\1.Configuration.Log.LiveUpdate
    c:\progra~2\Symantec\LiveUpdate\1.Product.Inventory.LiveUpdate
    c:\progra~2\Symantec\LiveUpdate\1.Settings.LiveUpdate
    c:\progra~2\Symantec\LiveUpdate\10.Settings.LiveUpdate
    c:\progra~2\Symantec\LiveUpdate\2.Configuration.Log.LiveUpdate
    c:\progra~2\Symantec\LiveUpdate\2.Product.Inventory.LiveUpdate
    c:\progra~2\Symantec\LiveUpdate\2.Settings.LiveUpdate
    c:\progra~2\Symantec\LiveUpdate\2010-06-25_Log.ALUSchedulerSvc.LiveUpdate
    c:\progra~2\Symantec\LiveUpdate\2010-06-26_Log.ALUSchedulerSvc.LiveUpdate
    c:\progra~2\Symantec\LiveUpdate\2010-06-27_Log.ALUSchedulerSvc.LiveUpdate
    c:\progra~2\Symantec\LiveUpdate\2010-06-28_Log.ALUSchedulerSvc.LiveUpdate
    c:\progra~2\Symantec\LiveUpdate\2010-06-29_Log.ALUSchedulerSvc.LiveUpdate
    c:\progra~2\Symantec\LiveUpdate\2010-06-30_Log.ALUSchedulerSvc.LiveUpdate
    c:\progra~2\Symantec\LiveUpdate\2010-07-01_Log.ALUSchedulerSvc.LiveUpdate
    c:\progra~2\Symantec\LiveUpdate\2010-07-02_Log.ALUSchedulerSvc.LiveUpdate
    c:\progra~2\Symantec\LiveUpdate\2010-07-03_Log.ALUSchedulerSvc.LiveUpdate
    c:\progra~2\Symantec\LiveUpdate\2010-07-04_Log.ALUSchedulerSvc.LiveUpdate
    c:\progra~2\Symantec\LiveUpdate\2010-07-05_Log.ALUSchedulerSvc.LiveUpdate
    c:\progra~2\Symantec\LiveUpdate\2010-07-06_Log.ALUSchedulerSvc.LiveUpdate
    c:\progra~2\Symantec\LiveUpdate\2010-07-07_Log.ALUSchedulerSvc.LiveUpdate
    c:\progra~2\Symantec\LiveUpdate\2010-07-08_Log.ALUSchedulerSvc.LiveUpdate
    c:\progra~2\Symantec\LiveUpdate\3.Product.Inventory.LiveUpdate
    c:\progra~2\Symantec\LiveUpdate\3.Settings.LiveUpdate
    c:\progra~2\Symantec\LiveUpdate\4.Settings.LiveUpdate
    c:\progra~2\Symantec\LiveUpdate\5.Settings.LiveUpdate
    c:\progra~2\Symantec\LiveUpdate\6.Settings.LiveUpdate
    c:\progra~2\Symantec\LiveUpdate\7.Settings.LiveUpdate
    c:\progra~2\Symantec\LiveUpdate\8.Settings.LiveUpdate
    c:\progra~2\Symantec\LiveUpdate\9.Settings.LiveUpdate
    c:\progra~2\Symantec\LiveUpdate\Configuration.Log.LiveUpdate
    c:\progra~2\Symantec\LiveUpdate\Downloads\1262812900jtun_npm.zip.full.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\1263851874jtun_npm.zip.full.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\1265055897jtun_npm.zip.full.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\1265671747jtun_patch.zip.full.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\1266349636jtun_npm.zip.full.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\1267472468jtun_npm.zip.full.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\1268683159jtun_npm.zip.full.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\1269890045jtun_npm.zip.full.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\1271102877jtun_npm.zip.full.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\1272486698jtun_patch.zip.full.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\1273869685jtun_npm.zip.full.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\1274733051jtun_npm.zip.full.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\1275941967jtun_npm.zip.full.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\1277140685jtun_npm.zip.full.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\1278443378jtun_npm.zip.full.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\antivirus_1.1.00_english_livetri.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\antivirus_1.2.00_english_livetri.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\appcore_1.1.00_english_livetri.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\automatic$20liveupdate_3.2.0.26_english_livetri.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\automatic$20liveupdate_3.2.0.41_english_livetri.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\avenge$20microdefs25$20nav2007_microdefsb.apr_symalllanguages_livetri.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\avenge$20microdefs25$20nav2007_microdefsb.curdefs_symalllanguages_livetri.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\avenge$20microdefs25$20nav2007_microdefsb.feb_symalllanguages_livetri.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\avenge$20microdefs25$20nav2007_microdefsb.nov_symalllanguages_livetri.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\ccpd$5fretail$5flicensing$5ftechnology_6.0_english_livetri.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\coh$20update_6.0.0_symalllanguages_livetri.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\common$20client$20core_106.1.1_symalllanguages_livetri.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\decomposer_1.0.0_symalllanguages_livetri.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\firewall_2.1.0_english_livetri.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\firewall_2.1.1_english_livetri.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\ids$20$2d$20consumer_7.1.0_symalllanguages_livetri.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\ids$20defs$202007$20microdefs25_microdefsb.curdefs_symalllanguages_livetri.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\ids$20defs$202007$20microdefs25_microdefsb.error_symalllanguages_livetri.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\ids$20defs$202007$20microdefs25_microdefsb.feb_symalllanguages_livetri.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\ids$20defs$202007$20microdefs25_microdefsb.jun_symalllanguages_livetri.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\ids$20defs$202007$20microdefs25_microdefsb.may_symalllanguages_livetri.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\ids$20defs$202007$20microdefs25_microdefsb.oct_symalllanguages_livetri.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\livetri.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\liveupdate$20notice_1.4.5.83_symalllanguages_livetri.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\liveupdate$20notice_1.4.5.91_symalllanguages_livetri.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\minitri.flg
    c:\progra~2\Symantec\LiveUpdate\Downloads\navnt$202007$20resource_14.1.0.27_english_livetri.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\navnt$202007$20resource_14.5.0_english_livetri.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\navnt$202007$20resource_14.6.0_english_livetri.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\navnt$202007_14.1.0.27_english_livetri.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\norton$20internet$20security$20other_2.0_english_livetri.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\norton$20internet$20security$20resource_10.1.0_english_livetri.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\norton$20internet$20security$20resource_10.5.0_english_livetri.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\norton$20internet$20security$20resource_10.6.0_english_livetri.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\norton$20internet$20security_10.1.0_english_livetri.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\nortonprotectioncenter_2007.1.02_english_livetri.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\opc70x$5fcore_7.1_symalllanguages_livetri.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\spbbc_3.1.1_symalllanguages_livetri.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\srtsp$20consumer_10.1.1_symalllanguages_livetri.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\submission$20engine$20data_1.0_symalllanguages_livetri.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\symantec$20known$20application$20system_1.0.0_symalllanguages_livetri.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\symantec$20known$20application$20system_1.5.0_symalllanguages_livetri.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\symantec$20security$20content$20a_microdefsb.curdefs_symalllanguages_livetri.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\symantec$20trusted$20application$20list_2.0_english_livetri.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\symevent$20installer$20$2d$20consumer_12.1_symalllanguages_livetri.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\symnet$20consumer_7.1.0_symalllanguages_livetri.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\web$20authentication$20data_microdefsb.apr_symalllanguages_livetri.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\web$20authentication$20data_microdefsb.curdefs_symalllanguages_livetri.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\web$20authentication$20data_microdefsb.feb_symalllanguages_livetri.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\web$20authentication$20data_microdefsb.mar_symalllanguages_livetri.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\web$20authentication$20data_microdefsb.may_symalllanguages_livetri.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\web$20authentication$20data_microdefsb.oct_symalllanguages_livetri.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\web$20authentication$20data_microdefsb.old_symalllanguages_livetri.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\web$20protection$20data_1.0_symalllanguages_livetri.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\web$20protection$20data_2006.1.0.60_symalllanguages_livetri.zip
    c:\progra~2\Symantec\LiveUpdate\Downloads\web$20protection$20engine_2007.1.3.6_english_livetri.zip
    c:\progra~2\Symantec\LiveUpdate\Log.LiveUpdate
    c:\progra~2\Symantec\LiveUpdate\LUInstall.LiveUpdate
    c:\progra~2\Symantec\LiveUpdate\Product.Inventory.LastGood.LiveUpdate
    c:\progra~2\Symantec\LiveUpdate\Product.Inventory.LiveUpdate
    c:\progra~2\Symantec\LiveUpdate\Settings.LiveUpdate
    c:\progra~2\Symantec\Norton AntiVirus\alert.dat
    c:\progra~2\Symantec\Norton AntiVirus\Tasks\drives.sca
    c:\progra~2\Symantec\Norton AntiVirus\Tasks\files.sca
    c:\progra~2\Symantec\Norton AntiVirus\Tasks\floppy.sca
    c:\progra~2\Symantec\Norton AntiVirus\Tasks\folders.sca
    c:\progra~2\Symantec\Norton AntiVirus\Tasks\mycomp.sca
    c:\progra~2\Symantec\Norton AntiVirus\Tasks\quick.sca
    c:\progra~2\Symantec\Norton AntiVirus\Tasks\rem.sca
    c:\progra~2\Symantec\nppw.zip
    c:\progra~2\Symantec\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PEPCollectors\HBPep2_{BC8D3EAF-F864-4D4B-AB4D-B3D0C32E2840}.dat
    c:\progra~2\Symantec\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PEPCollectors\HBPep2_{BC8D3EAF-F864-4D4B-AB4D-B3D0C32E2840}.tmp
    c:\progra~2\Symantec\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PEPCollectors\Pep2_{BC8D3EAF-F864-4D4B-AB4D-B3D0C32E2840}.dat
    c:\progra~2\Symantec\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PEPCollectors\System_.dat
    c:\progra~2\Symantec\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PEPCollectors\System_.tmp
    c:\progra~2\Symantec\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PollManager\PollManager_Current.dat
    c:\progra~2\Symantec\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PollManager\PollManager_Job.dat
    c:\progra~2\Symantec\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\SVAR\SVAR_{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}.dat
    c:\progra~2\Symantec\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\SVAR\SVAR_110078.dat
    c:\progra~2\Symantec\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\SVAR\SVAR_110100.dat
    c:\progra~2\Symantec\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\SVAR\SVAR_110111.dat
    c:\progra~2\Symantec\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\SVAR\SVAR_110119.dat
    c:\progra~2\Symantec\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\SVAR\SVAR_110129.dat
    c:\progra~2\Symantec\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\SVAR\SVAR_110137.dat
    c:\progra~2\Symantec\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\SVAR\SVAR_110138.dat
    c:\progra~2\Symantec\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\SVAR\SVAR_110139.dat
    c:\progra~2\Symantec\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\SVAR\SVAR_110143.dat
    c:\progra~2\Symantec\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\SVAR\SVAR_110144.dat
    c:\progra~2\Symantec\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\SVAR\SVAR_110177.dat
    c:\progra~2\Symantec\Shared\QBackup\{00E04411-30E5-4190-9F76-A2C81098E6A7}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{00E04411-30E5-4190-9F76-A2C81098E6A7}\{588C795C-4C7F-4DCF-BE13-606C81921681}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{00E04411-30E5-4190-9F76-A2C81098E6A7}\{588C795C-4C7F-4DCF-BE13-606C81921681}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{00E04411-30E5-4190-9F76-A2C81098E6A7}\{B26E4106-2EB8-46F9-83C6-4944811FC602}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{00E04411-30E5-4190-9F76-A2C81098E6A7}\{B26E4106-2EB8-46F9-83C6-4944811FC602}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{053A1341-3B1C-4D12-AD5E-EF244E86A171}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{053A1341-3B1C-4D12-AD5E-EF244E86A171}\{C8667C73-F9D0-43C3-8F5D-70D380242B3B}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{053A1341-3B1C-4D12-AD5E-EF244E86A171}\{C8667C73-F9D0-43C3-8F5D-70D380242B3B}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{053A1341-3B1C-4D12-AD5E-EF244E86A171}\{DEFA2B71-F1EA-4255-B687-5CE3CC0C034C}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{053A1341-3B1C-4D12-AD5E-EF244E86A171}\{DEFA2B71-F1EA-4255-B687-5CE3CC0C034C}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{0955F015-2F23-401A-93C4-AFAE0A090765}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{0955F015-2F23-401A-93C4-AFAE0A090765}\{CDADFF68-F946-4236-9858-7C9729F98610}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{0955F015-2F23-401A-93C4-AFAE0A090765}\{CDADFF68-F946-4236-9858-7C9729F98610}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{0A49061D-182B-4E34-8360-AB4517B4B24B}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{0A49061D-182B-4E34-8360-AB4517B4B24B}\{7A5EC4D9-1A04-461B-95EA-90DD6139B3D8}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{0A49061D-182B-4E34-8360-AB4517B4B24B}\{7A5EC4D9-1A04-461B-95EA-90DD6139B3D8}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{0A49061D-182B-4E34-8360-AB4517B4B24B}\{B38ABC55-A2EA-4275-B8D6-D7CEAB3DAC97}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{0A49061D-182B-4E34-8360-AB4517B4B24B}\{B38ABC55-A2EA-4275-B8D6-D7CEAB3DAC97}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{0A49061D-182B-4E34-8360-AB4517B4B24B}\{BE6D5676-588C-4BF1-B3D2-76D06F146590}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{0A49061D-182B-4E34-8360-AB4517B4B24B}\{BE6D5676-588C-4BF1-B3D2-76D06F146590}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{0A49061D-182B-4E34-8360-AB4517B4B24B}\{ED639656-9B99-4489-AFE9-83188A376949}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{0A49061D-182B-4E34-8360-AB4517B4B24B}\{ED639656-9B99-4489-AFE9-83188A376949}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{0B2C10E3-D0A7-41B3-8E87-071005A07198}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{0B2C10E3-D0A7-41B3-8E87-071005A07198}\{92AC3942-7D7B-4BD8-8294-48FBB6694FE4}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{0B2C10E3-D0A7-41B3-8E87-071005A07198}\{92AC3942-7D7B-4BD8-8294-48FBB6694FE4}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{0B2C10E3-D0A7-41B3-8E87-071005A07198}\{EC07EE4A-20B0-48DD-AD76-123A16071F91}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{0B2C10E3-D0A7-41B3-8E87-071005A07198}\{EC07EE4A-20B0-48DD-AD76-123A16071F91}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{0E1D7C20-B8B2-48AC-B07F-5D38AA9406F1}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{0E1D7C20-B8B2-48AC-B07F-5D38AA9406F1}\{22DCB085-F56C-479E-81DC-E35AE8E534DE}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{0E1D7C20-B8B2-48AC-B07F-5D38AA9406F1}\{22DCB085-F56C-479E-81DC-E35AE8E534DE}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{0E1D7C20-B8B2-48AC-B07F-5D38AA9406F1}\{289B3150-FAB2-4A8D-94B7-3AFA3C3AEF7A}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{0E1D7C20-B8B2-48AC-B07F-5D38AA9406F1}\{289B3150-FAB2-4A8D-94B7-3AFA3C3AEF7A}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{0E1D7C20-B8B2-48AC-B07F-5D38AA9406F1}\{FC2FB81C-B514-4134-A437-3793B6849616}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{0E1D7C20-B8B2-48AC-B07F-5D38AA9406F1}\{FC2FB81C-B514-4134-A437-3793B6849616}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{10B5C74F-73C8-4661-AE4E-6ED147C40B26}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{10B5C74F-73C8-4661-AE4E-6ED147C40B26}\{89EEA713-D9ED-433C-995D-A324F798C330}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{10B5C74F-73C8-4661-AE4E-6ED147C40B26}\{89EEA713-D9ED-433C-995D-A324F798C330}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{10B5C74F-73C8-4661-AE4E-6ED147C40B26}\{E78843FC-B6E8-470B-90B0-F9D1AC22D438}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{10B5C74F-73C8-4661-AE4E-6ED147C40B26}\{E78843FC-B6E8-470B-90B0-F9D1AC22D438}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{110DAC0A-EDFE-4B8F-B3B8-66BECC16CD9F}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{110DAC0A-EDFE-4B8F-B3B8-66BECC16CD9F}\{333E8E0A-DCCF-411F-B657-62B7B88D22EC}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{110DAC0A-EDFE-4B8F-B3B8-66BECC16CD9F}\{333E8E0A-DCCF-411F-B657-62B7B88D22EC}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{17529B28-DED0-46FE-9AB7-BCAF0BD95DFA}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{17529B28-DED0-46FE-9AB7-BCAF0BD95DFA}\{097F7503-29A1-4E7C-9C33-994A5C159E7C}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{17529B28-DED0-46FE-9AB7-BCAF0BD95DFA}\{097F7503-29A1-4E7C-9C33-994A5C159E7C}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{17529B28-DED0-46FE-9AB7-BCAF0BD95DFA}\{6F9A20F0-10A7-423B-9051-0FDF98D8BA1A}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{17529B28-DED0-46FE-9AB7-BCAF0BD95DFA}\{6F9A20F0-10A7-423B-9051-0FDF98D8BA1A}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{17529B28-DED0-46FE-9AB7-BCAF0BD95DFA}\{858A10DE-47BE-4C51-A073-31770477240E}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{17529B28-DED0-46FE-9AB7-BCAF0BD95DFA}\{858A10DE-47BE-4C51-A073-31770477240E}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{18A86589-F855-4019-8EA6-FFE68B35064E}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{18A86589-F855-4019-8EA6-FFE68B35064E}\{73CB8D85-A1AC-4413-A9D2-AB06E1D7C475}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{18A86589-F855-4019-8EA6-FFE68B35064E}\{73CB8D85-A1AC-4413-A9D2-AB06E1D7C475}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{1D58566A-03C4-4A8B-86A8-01BA19C0E902}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{1D58566A-03C4-4A8B-86A8-01BA19C0E902}\{E99B7641-09C5-48AB-8320-6DD43116EDDA}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{1D58566A-03C4-4A8B-86A8-01BA19C0E902}\{E99B7641-09C5-48AB-8320-6DD43116EDDA}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{1E1C33AE-0A5D-4C03-B590-AC41AC915388}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{1E1C33AE-0A5D-4C03-B590-AC41AC915388}\{8BFAF111-D1F2-4957-93EA-55CD4A6EFF90}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{1E1C33AE-0A5D-4C03-B590-AC41AC915388}\{8BFAF111-D1F2-4957-93EA-55CD4A6EFF90}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{1E1C33AE-0A5D-4C03-B590-AC41AC915388}\{E0B0EF1D-0C34-40D2-A1A7-F67CAAE976B0}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{1E1C33AE-0A5D-4C03-B590-AC41AC915388}\{E0B0EF1D-0C34-40D2-A1A7-F67CAAE976B0}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{1E8DEFFD-5FB8-4CF4-AF2F-76616600568F}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{1E8DEFFD-5FB8-4CF4-AF2F-76616600568F}\{387D5B9D-3A6C-4B25-B128-42B70CD8710D}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{1E8DEFFD-5FB8-4CF4-AF2F-76616600568F}\{387D5B9D-3A6C-4B25-B128-42B70CD8710D}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{1E8DEFFD-5FB8-4CF4-AF2F-76616600568F}\{A7A4B43E-2DE6-4AA1-AABA-FFE919898BF8}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{1E8DEFFD-5FB8-4CF4-AF2F-76616600568F}\{A7A4B43E-2DE6-4AA1-AABA-FFE919898BF8}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{1E8DEFFD-5FB8-4CF4-AF2F-76616600568F}\{C285DE17-F0F1-479F-9D99-53B56DCC9094}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{1E8DEFFD-5FB8-4CF4-AF2F-76616600568F}\{C285DE17-F0F1-479F-9D99-53B56DCC9094}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{22F9BD22-B78F-42A9-BBB9-7658A0252D9A}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{22F9BD22-B78F-42A9-BBB9-7658A0252D9A}\{2E50ED0B-4760-4B63-A94C-ABFE66D7F8BA}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{22F9BD22-B78F-42A9-BBB9-7658A0252D9A}\{2E50ED0B-4760-4B63-A94C-ABFE66D7F8BA}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{288A262F-C69A-4E4B-A249-CF0EF900E82E}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{288A262F-C69A-4E4B-A249-CF0EF900E82E}\{E62727EB-13D5-41CF-8510-BE45E22B1D1D}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{288A262F-C69A-4E4B-A249-CF0EF900E82E}\{E62727EB-13D5-41CF-8510-BE45E22B1D1D}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{2A5D009D-6173-4C9A-857A-4CD311F7D784}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{2A5D009D-6173-4C9A-857A-4CD311F7D784}\{9F16F579-4ACC-442F-BCD1-852D0D15EC03}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{2A5D009D-6173-4C9A-857A-4CD311F7D784}\{9F16F579-4ACC-442F-BCD1-852D0D15EC03}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{2A5D009D-6173-4C9A-857A-4CD311F7D784}\{A8EC2E34-4407-459E-AC0D-712382145C81}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{2A5D009D-6173-4C9A-857A-4CD311F7D784}\{A8EC2E34-4407-459E-AC0D-712382145C81}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{2A5D009D-6173-4C9A-857A-4CD311F7D784}\{BBBFEE05-391C-43AF-86DE-879EAD512018}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{2A5D009D-6173-4C9A-857A-4CD311F7D784}\{BBBFEE05-391C-43AF-86DE-879EAD512018}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{2F7DD239-C1A3-4BA0-991F-D6BC160C2405}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{2F7DD239-C1A3-4BA0-991F-D6BC160C2405}\{78EADFC5-E6F8-4CA4-84DB-B4E1DA7DAAFF}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{2F7DD239-C1A3-4BA0-991F-D6BC160C2405}\{78EADFC5-E6F8-4CA4-84DB-B4E1DA7DAAFF}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{2F7DD239-C1A3-4BA0-991F-D6BC160C2405}\{A87F2587-BB0D-487A-8F82-B51AE424FA69}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{2F7DD239-C1A3-4BA0-991F-D6BC160C2405}\{A87F2587-BB0D-487A-8F82-B51AE424FA69}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{303C246F-DCE2-4DEA-B526-9457DE8A6845}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{303C246F-DCE2-4DEA-B526-9457DE8A6845}\{023183E6-348C-466E-9289-37F7AFF53CA0}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{303C246F-DCE2-4DEA-B526-9457DE8A6845}\{023183E6-348C-466E-9289-37F7AFF53CA0}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{303C246F-DCE2-4DEA-B526-9457DE8A6845}\{A6BFD95D-C066-48AB-9706-4405ABEF0827}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{303C246F-DCE2-4DEA-B526-9457DE8A6845}\{A6BFD95D-C066-48AB-9706-4405ABEF0827}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{30A95F73-E3BC-4FA7-A308-0146FFB75343}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{30A95F73-E3BC-4FA7-A308-0146FFB75343}\{CCBA0103-B507-471D-A772-85FBE64581D6}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{30A95F73-E3BC-4FA7-A308-0146FFB75343}\{CCBA0103-B507-471D-A772-85FBE64581D6}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{32305597-53E8-4838-B835-823ED76EE08F}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{32305597-53E8-4838-B835-823ED76EE08F}\{20266738-9D5B-4111-9D39-2B9E3EF4486C}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{32305597-53E8-4838-B835-823ED76EE08F}\{20266738-9D5B-4111-9D39-2B9E3EF4486C}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{32305597-53E8-4838-B835-823ED76EE08F}\{41BFA7E3-8095-4338-A709-FB1C6D0B666C}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{32305597-53E8-4838-B835-823ED76EE08F}\{41BFA7E3-8095-4338-A709-FB1C6D0B666C}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{32305597-53E8-4838-B835-823ED76EE08F}\{B3132FA5-40EE-44F2-A463-C31965AAF3D2}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{32305597-53E8-4838-B835-823ED76EE08F}\{B3132FA5-40EE-44F2-A463-C31965AAF3D2}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{355AAF2C-7F81-4DE6-BB32-2CC237523CDC}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{355AAF2C-7F81-4DE6-BB32-2CC237523CDC}\{AD6CBC5D-03C5-42B2-9E0D-C93DE96B07F4}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{355AAF2C-7F81-4DE6-BB32-2CC237523CDC}\{AD6CBC5D-03C5-42B2-9E0D-C93DE96B07F4}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{35FB46DE-7610-43A8-B53B-D88168382CFE}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{35FB46DE-7610-43A8-B53B-D88168382CFE}\{4BD9FB3D-0DE9-4BEA-BCE7-C7835E6B1354}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{35FB46DE-7610-43A8-B53B-D88168382CFE}\{4BD9FB3D-0DE9-4BEA-BCE7-C7835E6B1354}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{35FB46DE-7610-43A8-B53B-D88168382CFE}\{8500C42F-7D74-49E3-B02B-F3572F1489FC}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{35FB46DE-7610-43A8-B53B-D88168382CFE}\{8500C42F-7D74-49E3-B02B-F3572F1489FC}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{35FB46DE-7610-43A8-B53B-D88168382CFE}\{8F2706C4-F258-4BE6-AE56-40B07271F57B}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{35FB46DE-7610-43A8-B53B-D88168382CFE}\{8F2706C4-F258-4BE6-AE56-40B07271F57B}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{394D226C-3C5E-499F-96B5-B26D3BBF3ED7}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{394D226C-3C5E-499F-96B5-B26D3BBF3ED7}\{315F6DDA-E8D7-492C-8718-FF700C0D6ADB}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{394D226C-3C5E-499F-96B5-B26D3BBF3ED7}\{315F6DDA-E8D7-492C-8718-FF700C0D6ADB}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{394D226C-3C5E-499F-96B5-B26D3BBF3ED7}\{63985E83-18F1-4FF4-B968-E5C84478AB80}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{394D226C-3C5E-499F-96B5-B26D3BBF3ED7}\{63985E83-18F1-4FF4-B968-E5C84478AB80}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{394D226C-3C5E-499F-96B5-B26D3BBF3ED7}\{F1879A79-33BD-4353-AA4D-268308CA0FAE}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{394D226C-3C5E-499F-96B5-B26D3BBF3ED7}\{F1879A79-33BD-4353-AA4D-268308CA0FAE}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{40BF19C4-7D63-41A1-8AB2-F103D54F1357}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{40BF19C4-7D63-41A1-8AB2-F103D54F1357}\{2D47E4EC-5BE8-464C-BC99-53556D3429C9}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{40BF19C4-7D63-41A1-8AB2-F103D54F1357}\{2D47E4EC-5BE8-464C-BC99-53556D3429C9}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{40BF19C4-7D63-41A1-8AB2-F103D54F1357}\{84E2E5A9-C644-4EC6-8332-EBD19A0FC2CC}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{40BF19C4-7D63-41A1-8AB2-F103D54F1357}\{84E2E5A9-C644-4EC6-8332-EBD19A0FC2CC}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{40BF19C4-7D63-41A1-8AB2-F103D54F1357}\{B662F0E7-0718-4249-90C1-351A336820CC}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{40BF19C4-7D63-41A1-8AB2-F103D54F1357}\{B662F0E7-0718-4249-90C1-351A336820CC}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{40EC0EBD-2F30-403D-83F9-C2EDD97E9E56}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{40EC0EBD-2F30-403D-83F9-C2EDD97E9E56}\{2E3722EE-BC81-42B8-844B-978BEB5E7666}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{40EC0EBD-2F30-403D-83F9-C2EDD97E9E56}\{2E3722EE-BC81-42B8-844B-978BEB5E7666}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{40EC0EBD-2F30-403D-83F9-C2EDD97E9E56}\{3FDA5548-CE1E-4BA2-B070-6A1B7EB7A79F}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{40EC0EBD-2F30-403D-83F9-C2EDD97E9E56}\{3FDA5548-CE1E-4BA2-B070-6A1B7EB7A79F}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{40EC0EBD-2F30-403D-83F9-C2EDD97E9E56}\{F4AC1BFD-7CEE-4354-9453-8866AA132843}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{40EC0EBD-2F30-403D-83F9-C2EDD97E9E56}\{F4AC1BFD-7CEE-4354-9453-8866AA132843}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{43B52CB2-8241-4413-9631-C35E145D2BCA}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{43B52CB2-8241-4413-9631-C35E145D2BCA}\{22B5A29B-A22E-45ED-9401-098392D043CB}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{43B52CB2-8241-4413-9631-C35E145D2BCA}\{22B5A29B-A22E-45ED-9401-098392D043CB}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{43B52CB2-8241-4413-9631-C35E145D2BCA}\{B5C3E491-5D53-4436-B427-E17DA80E16EF}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{43B52CB2-8241-4413-9631-C35E145D2BCA}\{B5C3E491-5D53-4436-B427-E17DA80E16EF}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{459241E2-FCDB-4386-AF7C-8185F467F501}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{459241E2-FCDB-4386-AF7C-8185F467F501}\{4A9632A2-4774-4672-AF42-37D01A2674F2}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{459241E2-FCDB-4386-AF7C-8185F467F501}\{4A9632A2-4774-4672-AF42-37D01A2674F2}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{459241E2-FCDB-4386-AF7C-8185F467F501}\{AEB056C8-B93B-4C23-9FEC-04FBFAF45080}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{459241E2-FCDB-4386-AF7C-8185F467F501}\{AEB056C8-B93B-4C23-9FEC-04FBFAF45080}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{459241E2-FCDB-4386-AF7C-8185F467F501}\{BAA5922F-A162-4025-A456-F6686A9E5292}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{459241E2-FCDB-4386-AF7C-8185F467F501}\{BAA5922F-A162-4025-A456-F6686A9E5292}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{49BD520C-CF71-4E59-8256-49344AEAE11F}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{49BD520C-CF71-4E59-8256-49344AEAE11F}\{48EE5331-D1F7-4D28-9341-ECB266BE665B}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{49BD520C-CF71-4E59-8256-49344AEAE11F}\{48EE5331-D1F7-4D28-9341-ECB266BE665B}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{4CF56B6F-48F0-4A20-AF4D-C07AB6D39AEB}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{4CF56B6F-48F0-4A20-AF4D-C07AB6D39AEB}\{3B09A893-2A8A-4293-8394-1B202C7B0F78}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{4CF56B6F-48F0-4A20-AF4D-C07AB6D39AEB}\{3B09A893-2A8A-4293-8394-1B202C7B0F78}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{4CF56B6F-48F0-4A20-AF4D-C07AB6D39AEB}\{A74C809B-9DE1-4F97-A94D-C4182508F2D2}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{4CF56B6F-48F0-4A20-AF4D-C07AB6D39AEB}\{A74C809B-9DE1-4F97-A94D-C4182508F2D2}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{4CF56B6F-48F0-4A20-AF4D-C07AB6D39AEB}\{CB5CA1E1-20DE-4574-ACD1-9C7B72749050}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{4CF56B6F-48F0-4A20-AF4D-C07AB6D39AEB}\{CB5CA1E1-20DE-4574-ACD1-9C7B72749050}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{5342D479-A770-491E-8877-56702B800797}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{5342D479-A770-491E-8877-56702B800797}\{71201ADB-CF5A-40D8-8D0C-E618C012CF64}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{5342D479-A770-491E-8877-56702B800797}\{71201ADB-CF5A-40D8-8D0C-E618C012CF64}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{53F7C239-5B7A-438F-BB6B-1CEF9D05F106}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{53F7C239-5B7A-438F-BB6B-1CEF9D05F106}\{22C9A43C-D381-44E7-ACCE-C0C8CFFF16BE}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{53F7C239-5B7A-438F-BB6B-1CEF9D05F106}\{22C9A43C-D381-44E7-ACCE-C0C8CFFF16BE}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{53F7C239-5B7A-438F-BB6B-1CEF9D05F106}\{D5FF42DB-EECB-491F-9AA5-6D054DEF5283}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{53F7C239-5B7A-438F-BB6B-1CEF9D05F106}\{D5FF42DB-EECB-491F-9AA5-6D054DEF5283}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{543313AF-CD03-4E5E-91AC-8617FF8304C1}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{543313AF-CD03-4E5E-91AC-8617FF8304C1}\{5741C039-C361-4B15-912E-2931E97385C1}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{543313AF-CD03-4E5E-91AC-8617FF8304C1}\{5741C039-C361-4B15-912E-2931E97385C1}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{56F44823-AA76-483A-BD7E-E41858177458}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{56F44823-AA76-483A-BD7E-E41858177458}\{65D629B8-5B09-4116-8F45-F4DA178E213D}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{56F44823-AA76-483A-BD7E-E41858177458}\{65D629B8-5B09-4116-8F45-F4DA178E213D}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{56F44823-AA76-483A-BD7E-E41858177458}\{89B5FFBB-3356-414D-97E4-A2FF3F349DFA}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{56F44823-AA76-483A-BD7E-E41858177458}\{89B5FFBB-3356-414D-97E4-A2FF3F349DFA}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{56F44823-AA76-483A-BD7E-E41858177458}\{F4497E20-9171-48C8-B560-C595A5F3F857}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{56F44823-AA76-483A-BD7E-E41858177458}\{F4497E20-9171-48C8-B560-C595A5F3F857}.qbi
     
    rkim,
    #13
  15. 2010/07/28
    rkim

    rkim Inactive Thread Starter

    Joined:
    2010/07/09
    Messages:
    33
    Likes Received:
    0
    1E3A0-8EF7-4AF4-B41A-719A3ACC91B8}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{5711E3A0-8EF7-4AF4-B41A-719A3ACC91B8}\{292365CC-72C1-4CE7-98C9-22DA6252DE05}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{5711E3A0-8EF7-4AF4-B41A-719A3ACC91B8}\{292365CC-72C1-4CE7-98C9-22DA6252DE05}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{5711E3A0-8EF7-4AF4-B41A-719A3ACC91B8}\{C9DBC276-2275-448C-A30A-D51E26C9BCC9}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{5711E3A0-8EF7-4AF4-B41A-719A3ACC91B8}\{C9DBC276-2275-448C-A30A-D51E26C9BCC9}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{57C2A7B5-02FB-49EA-A231-1C4A288D4B43}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{57C2A7B5-02FB-49EA-A231-1C4A288D4B43}\{22138BD6-BBFD-4BC7-B2B6-35A5248132C9}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{57C2A7B5-02FB-49EA-A231-1C4A288D4B43}\{22138BD6-BBFD-4BC7-B2B6-35A5248132C9}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{57C2A7B5-02FB-49EA-A231-1C4A288D4B43}\{576AC22C-41EB-45F2-8917-DBB06EADE105}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{57C2A7B5-02FB-49EA-A231-1C4A288D4B43}\{576AC22C-41EB-45F2-8917-DBB06EADE105}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{57C2A7B5-02FB-49EA-A231-1C4A288D4B43}\{CD47E9CF-E40D-419E-BF77-45C851E2E24C}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{57C2A7B5-02FB-49EA-A231-1C4A288D4B43}\{CD47E9CF-E40D-419E-BF77-45C851E2E24C}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{59438FF3-1EA9-4A18-B7D9-976E68365F7E}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{59438FF3-1EA9-4A18-B7D9-976E68365F7E}\{273FED72-9772-4F1B-AEF7-A3890A90A5F3}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{59438FF3-1EA9-4A18-B7D9-976E68365F7E}\{273FED72-9772-4F1B-AEF7-A3890A90A5F3}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{59438FF3-1EA9-4A18-B7D9-976E68365F7E}\{69BB3DCB-EBB4-4E9B-9CBC-F38C53A556A8}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{59438FF3-1EA9-4A18-B7D9-976E68365F7E}\{69BB3DCB-EBB4-4E9B-9CBC-F38C53A556A8}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{5B007844-614B-4803-91B4-7BF238B6EB08}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{5B007844-614B-4803-91B4-7BF238B6EB08}\{09E200F1-037A-49EC-A736-CC3F31D3DBF3}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{5B007844-614B-4803-91B4-7BF238B6EB08}\{09E200F1-037A-49EC-A736-CC3F31D3DBF3}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{5B007844-614B-4803-91B4-7BF238B6EB08}\{E7FFE233-A821-42A6-9FF6-1B582144467B}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{5B007844-614B-4803-91B4-7BF238B6EB08}\{E7FFE233-A821-42A6-9FF6-1B582144467B}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{5C139D38-CF97-4204-8E95-20F2FB1177B2}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{5C139D38-CF97-4204-8E95-20F2FB1177B2}\{0BB768C0-95EE-423C-9899-7CF20A0A5A56}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{5C139D38-CF97-4204-8E95-20F2FB1177B2}\{0BB768C0-95EE-423C-9899-7CF20A0A5A56}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{5C139D38-CF97-4204-8E95-20F2FB1177B2}\{68053598-A053-4411-B3A2-20AF7E5A4CE1}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{5C139D38-CF97-4204-8E95-20F2FB1177B2}\{68053598-A053-4411-B3A2-20AF7E5A4CE1}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{5C139D38-CF97-4204-8E95-20F2FB1177B2}\{D309A4F9-6248-4AD3-9C69-04A31EA6FBC8}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{5C139D38-CF97-4204-8E95-20F2FB1177B2}\{D309A4F9-6248-4AD3-9C69-04A31EA6FBC8}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{5CFA3359-D335-497D-AE37-7650F73E0770}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{5CFA3359-D335-497D-AE37-7650F73E0770}\{19D10130-A63E-483D-84E0-3E7D0831580E}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{5CFA3359-D335-497D-AE37-7650F73E0770}\{19D10130-A63E-483D-84E0-3E7D0831580E}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{5CFA3359-D335-497D-AE37-7650F73E0770}\{3D598146-ECD2-40C9-80D7-D4FCC441F603}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{5CFA3359-D335-497D-AE37-7650F73E0770}\{3D598146-ECD2-40C9-80D7-D4FCC441F603}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{5E47D64A-8C75-4360-A867-EEDE633C9B92}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{5E47D64A-8C75-4360-A867-EEDE633C9B92}\{28F3CDF6-40D9-4476-BFF7-43C766A09D6A}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{5E47D64A-8C75-4360-A867-EEDE633C9B92}\{28F3CDF6-40D9-4476-BFF7-43C766A09D6A}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{5E47D64A-8C75-4360-A867-EEDE633C9B92}\{FA12380A-74DB-4175-BC4C-B7C3B3353049}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{5E47D64A-8C75-4360-A867-EEDE633C9B92}\{FA12380A-74DB-4175-BC4C-B7C3B3353049}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{640FE6E8-32D7-4162-8A78-CE6EF084D75D}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{640FE6E8-32D7-4162-8A78-CE6EF084D75D}\{D1876806-D18D-45B3-AF89-AFA2BD0F00FD}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{640FE6E8-32D7-4162-8A78-CE6EF084D75D}\{D1876806-D18D-45B3-AF89-AFA2BD0F00FD}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{6B4FF3F3-B8E0-4A4C-AF3C-AEC6349C373F}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{6B4FF3F3-B8E0-4A4C-AF3C-AEC6349C373F}\{1272BE1F-6013-46D7-BAF5-74C4F56ED6B7}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{6B4FF3F3-B8E0-4A4C-AF3C-AEC6349C373F}\{1272BE1F-6013-46D7-BAF5-74C4F56ED6B7}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{6B4FF3F3-B8E0-4A4C-AF3C-AEC6349C373F}\{7009565A-74C3-4F39-9C49-A92ACC0D5813}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{6B4FF3F3-B8E0-4A4C-AF3C-AEC6349C373F}\{7009565A-74C3-4F39-9C49-A92ACC0D5813}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{6B4FF3F3-B8E0-4A4C-AF3C-AEC6349C373F}\{8C3397B3-9499-4517-8993-FE5760D6CC5D}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{6B4FF3F3-B8E0-4A4C-AF3C-AEC6349C373F}\{8C3397B3-9499-4517-8993-FE5760D6CC5D}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{6ED98F07-33BF-40DD-8D92-55749F3BCFEC}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{6ED98F07-33BF-40DD-8D92-55749F3BCFEC}\{FE115A70-599F-41AF-8706-FD43377E5930}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{6ED98F07-33BF-40DD-8D92-55749F3BCFEC}\{FE115A70-599F-41AF-8706-FD43377E5930}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{6F37A5FF-9D4D-40A7-B845-CB75694D60F7}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{6F37A5FF-9D4D-40A7-B845-CB75694D60F7}\{917E6DC4-A292-4784-9E65-EC5D3B25CE86}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{6F37A5FF-9D4D-40A7-B845-CB75694D60F7}\{917E6DC4-A292-4784-9E65-EC5D3B25CE86}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{6F37A5FF-9D4D-40A7-B845-CB75694D60F7}\{B67C737B-E735-49A6-A2ED-01A601F37BE4}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{6F37A5FF-9D4D-40A7-B845-CB75694D60F7}\{B67C737B-E735-49A6-A2ED-01A601F37BE4}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{6F37A5FF-9D4D-40A7-B845-CB75694D60F7}\{C81C8AC8-81DE-4B8B-BA2D-05C590ADC160}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{6F37A5FF-9D4D-40A7-B845-CB75694D60F7}\{C81C8AC8-81DE-4B8B-BA2D-05C590ADC160}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{6F37A5FF-9D4D-40A7-B845-CB75694D60F7}\{F1228ABD-9E61-4C5C-94FE-B9B15D96D249}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{6F37A5FF-9D4D-40A7-B845-CB75694D60F7}\{F1228ABD-9E61-4C5C-94FE-B9B15D96D249}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{723122FF-C5BC-4A9D-B1E2-9C1E807A6EB2}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{723122FF-C5BC-4A9D-B1E2-9C1E807A6EB2}\{2A556FAF-DAFA-4A86-A3DE-15FFCC0F1F5B}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{723122FF-C5BC-4A9D-B1E2-9C1E807A6EB2}\{2A556FAF-DAFA-4A86-A3DE-15FFCC0F1F5B}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{7292B4DB-B629-4B17-8ECB-CD37D687BC61}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{7292B4DB-B629-4B17-8ECB-CD37D687BC61}\{4D176709-53BD-4E19-AD10-B1EC9AFB5702}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{7292B4DB-B629-4B17-8ECB-CD37D687BC61}\{4D176709-53BD-4E19-AD10-B1EC9AFB5702}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{7292B4DB-B629-4B17-8ECB-CD37D687BC61}\{9E5ED5F6-C50E-4AB3-A1C9-58D96754873F}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{7292B4DB-B629-4B17-8ECB-CD37D687BC61}\{9E5ED5F6-C50E-4AB3-A1C9-58D96754873F}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{7292B4DB-B629-4B17-8ECB-CD37D687BC61}\{B1701C28-70F9-4592-9FE2-C3325105139F}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{7292B4DB-B629-4B17-8ECB-CD37D687BC61}\{B1701C28-70F9-4592-9FE2-C3325105139F}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{7E6E1AEB-73B9-49BC-9FDF-B28EED330F78}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{7E6E1AEB-73B9-49BC-9FDF-B28EED330F78}\{06D05C6A-969E-490C-BEA9-7B34A2414BF7}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{7E6E1AEB-73B9-49BC-9FDF-B28EED330F78}\{06D05C6A-969E-490C-BEA9-7B34A2414BF7}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{7E6E1AEB-73B9-49BC-9FDF-B28EED330F78}\{A5A9A5DA-AB05-4000-8AC6-00DDB5ED405D}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{7E6E1AEB-73B9-49BC-9FDF-B28EED330F78}\{A5A9A5DA-AB05-4000-8AC6-00DDB5ED405D}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{7E6E1AEB-73B9-49BC-9FDF-B28EED330F78}\{DBA8BAE5-60A0-4110-8521-71B8A5AA45A7}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{7E6E1AEB-73B9-49BC-9FDF-B28EED330F78}\{DBA8BAE5-60A0-4110-8521-71B8A5AA45A7}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{7EC21E7B-1B92-42C9-9187-9C8F15033B3D}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{7EC21E7B-1B92-42C9-9187-9C8F15033B3D}\{55F68938-6E7D-40A8-BF4D-F55312D03C32}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{7EC21E7B-1B92-42C9-9187-9C8F15033B3D}\{55F68938-6E7D-40A8-BF4D-F55312D03C32}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{7F5B72A9-9331-4D48-9514-822F1796DD7F}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{7F5B72A9-9331-4D48-9514-822F1796DD7F}\{218DF5AE-65A4-4DEB-83D2-D3CBB6FC934D}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{7F5B72A9-9331-4D48-9514-822F1796DD7F}\{218DF5AE-65A4-4DEB-83D2-D3CBB6FC934D}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{8151680B-74E7-4E7C-9CCC-0FE891667420}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{8151680B-74E7-4E7C-9CCC-0FE891667420}\{0F2C2DE6-4F3C-451D-9D5F-BE31C56476D2}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{8151680B-74E7-4E7C-9CCC-0FE891667420}\{0F2C2DE6-4F3C-451D-9D5F-BE31C56476D2}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{8151680B-74E7-4E7C-9CCC-0FE891667420}\{5DC28B57-7764-48C5-92B4-060530E060AD}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{8151680B-74E7-4E7C-9CCC-0FE891667420}\{5DC28B57-7764-48C5-92B4-060530E060AD}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{8151680B-74E7-4E7C-9CCC-0FE891667420}\{D99C612C-F51B-465F-93A5-55859448EBC0}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{8151680B-74E7-4E7C-9CCC-0FE891667420}\{D99C612C-F51B-465F-93A5-55859448EBC0}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{83E5F91C-3D2E-4278-AA3D-D6FA585EFADB}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{83E5F91C-3D2E-4278-AA3D-D6FA585EFADB}\{3AE21269-E423-4034-9A13-030E5A6BDC5E}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{83E5F91C-3D2E-4278-AA3D-D6FA585EFADB}\{3AE21269-E423-4034-9A13-030E5A6BDC5E}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{83EA47E7-D6C1-43F9-84BF-7225E27EA12E}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{83EA47E7-D6C1-43F9-84BF-7225E27EA12E}\{3E147661-A649-45EC-A7E8-6D09344A854F}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{83EA47E7-D6C1-43F9-84BF-7225E27EA12E}\{3E147661-A649-45EC-A7E8-6D09344A854F}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{83EA47E7-D6C1-43F9-84BF-7225E27EA12E}\{69161711-A815-4B9B-BF43-E3F032BA400A}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{83EA47E7-D6C1-43F9-84BF-7225E27EA12E}\{69161711-A815-4B9B-BF43-E3F032BA400A}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{87B27206-8BC9-447F-B438-8C2D926B0DDE}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{87B27206-8BC9-447F-B438-8C2D926B0DDE}\{1C825D98-888F-4235-A5AD-94298B1D6031}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{87B27206-8BC9-447F-B438-8C2D926B0DDE}\{1C825D98-888F-4235-A5AD-94298B1D6031}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{87B27206-8BC9-447F-B438-8C2D926B0DDE}\{6F645B8B-354C-4209-9AAF-4D3223E3BD21}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{87B27206-8BC9-447F-B438-8C2D926B0DDE}\{6F645B8B-354C-4209-9AAF-4D3223E3BD21}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{87EF940A-3199-4B65-8389-6FA46F41AE2A}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{87EF940A-3199-4B65-8389-6FA46F41AE2A}\{341C1175-4B3E-4E4B-8411-B3406FD39EBA}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{87EF940A-3199-4B65-8389-6FA46F41AE2A}\{341C1175-4B3E-4E4B-8411-B3406FD39EBA}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{87EF940A-3199-4B65-8389-6FA46F41AE2A}\{4DABE9FD-C5A2-4EE2-A87E-40F0BC7E0CE0}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{87EF940A-3199-4B65-8389-6FA46F41AE2A}\{4DABE9FD-C5A2-4EE2-A87E-40F0BC7E0CE0}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{88BEAB46-FF40-4E02-9FBA-7F8D6763415F}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{88BEAB46-FF40-4E02-9FBA-7F8D6763415F}\{84DFC42B-0FBD-42DB-A60A-54AA7F920710}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{88BEAB46-FF40-4E02-9FBA-7F8D6763415F}\{84DFC42B-0FBD-42DB-A60A-54AA7F920710}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{88BEAB46-FF40-4E02-9FBA-7F8D6763415F}\{A5D7039F-7013-467B-950D-B6B7B2F3A98C}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{88BEAB46-FF40-4E02-9FBA-7F8D6763415F}\{A5D7039F-7013-467B-950D-B6B7B2F3A98C}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{90874EFC-C494-424C-8025-59E17CFAB7EF}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{90874EFC-C494-424C-8025-59E17CFAB7EF}\{3948D7F6-5576-4437-9A64-7CD8DA4AF3BB}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{90874EFC-C494-424C-8025-59E17CFAB7EF}\{3948D7F6-5576-4437-9A64-7CD8DA4AF3BB}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{90874EFC-C494-424C-8025-59E17CFAB7EF}\{EA4FF840-C254-4D03-891B-70A2DB93AB87}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{90874EFC-C494-424C-8025-59E17CFAB7EF}\{EA4FF840-C254-4D03-891B-70A2DB93AB87}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{90874EFC-C494-424C-8025-59E17CFAB7EF}\{EE2A1532-EBE1-43D7-B8CB-525EA1CF39C7}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{90874EFC-C494-424C-8025-59E17CFAB7EF}\{EE2A1532-EBE1-43D7-B8CB-525EA1CF39C7}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{93E2F1C8-3673-4E6F-B79B-02545E02354B}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{93E2F1C8-3673-4E6F-B79B-02545E02354B}\{32C4FBB3-91C7-43FF-9583-78510751C27A}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{93E2F1C8-3673-4E6F-B79B-02545E02354B}\{32C4FBB3-91C7-43FF-9583-78510751C27A}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{93E2F1C8-3673-4E6F-B79B-02545E02354B}\{4350559A-4813-4745-888C-753F5FBEB478}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{93E2F1C8-3673-4E6F-B79B-02545E02354B}\{4350559A-4813-4745-888C-753F5FBEB478}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{96F1588C-42C5-48B5-A412-5ADE32EF11F1}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{96F1588C-42C5-48B5-A412-5ADE32EF11F1}\{24D6B623-1F2E-4564-9F89-E1EA4680FA98}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{96F1588C-42C5-48B5-A412-5ADE32EF11F1}\{24D6B623-1F2E-4564-9F89-E1EA4680FA98}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{96F1588C-42C5-48B5-A412-5ADE32EF11F1}\{3CB36AAF-ED32-4840-92C8-EE6A623A3356}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{96F1588C-42C5-48B5-A412-5ADE32EF11F1}\{3CB36AAF-ED32-4840-92C8-EE6A623A3356}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{96F1588C-42C5-48B5-A412-5ADE32EF11F1}\{C4CAC568-5261-4C71-A1F8-F4B7C6DF1D43}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{96F1588C-42C5-48B5-A412-5ADE32EF11F1}\{C4CAC568-5261-4C71-A1F8-F4B7C6DF1D43}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{970E6685-BB65-4D46-9B66-B885E1CB1E7E}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{970E6685-BB65-4D46-9B66-B885E1CB1E7E}\{7AD3701F-0D2A-4F62-BD7A-C45F9FFC9A9D}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{970E6685-BB65-4D46-9B66-B885E1CB1E7E}\{7AD3701F-0D2A-4F62-BD7A-C45F9FFC9A9D}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{970E6685-BB65-4D46-9B66-B885E1CB1E7E}\{D34B2B4E-5A07-4E23-84EC-A869484473F6}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{970E6685-BB65-4D46-9B66-B885E1CB1E7E}\{D34B2B4E-5A07-4E23-84EC-A869484473F6}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{9AD293D1-4CF7-479C-BDD1-615069198C04}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{9AD293D1-4CF7-479C-BDD1-615069198C04}\{48EA29C4-37B1-4FEB-9354-9640F557FA9B}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{9AD293D1-4CF7-479C-BDD1-615069198C04}\{48EA29C4-37B1-4FEB-9354-9640F557FA9B}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{9C4F0D21-BECC-439B-9CBC-19FA8ADAD6BB}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{9C4F0D21-BECC-439B-9CBC-19FA8ADAD6BB}\{9EDCDF35-161B-4965-9A16-F180CDC83E3C}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{9C4F0D21-BECC-439B-9CBC-19FA8ADAD6BB}\{9EDCDF35-161B-4965-9A16-F180CDC83E3C}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{9C4F0D21-BECC-439B-9CBC-19FA8ADAD6BB}\{BB351F94-2586-4028-BFFD-3469B24C295D}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{9C4F0D21-BECC-439B-9CBC-19FA8ADAD6BB}\{BB351F94-2586-4028-BFFD-3469B24C295D}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{9C4F0D21-BECC-439B-9CBC-19FA8ADAD6BB}\{C4BF14A8-A4A0-419C-B180-36AF4F0EFF9E}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{9C4F0D21-BECC-439B-9CBC-19FA8ADAD6BB}\{C4BF14A8-A4A0-419C-B180-36AF4F0EFF9E}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{A3A914B6-4FC8-4233-8864-35A11BDFFF31}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{A3A914B6-4FC8-4233-8864-35A11BDFFF31}\{46B7E943-F40B-40B5-B43B-3098DB57642E}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{A3A914B6-4FC8-4233-8864-35A11BDFFF31}\{46B7E943-F40B-40B5-B43B-3098DB57642E}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{A83134AB-D993-436D-800E-DE1A64F46ECE}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{A83134AB-D993-436D-800E-DE1A64F46ECE}\{5EA14259-5CA1-4062-8C93-70FF2281D395}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{A83134AB-D993-436D-800E-DE1A64F46ECE}\{5EA14259-5CA1-4062-8C93-70FF2281D395}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{A8BDA06A-3754-49DA-9AFC-02034A507CA7}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{A8BDA06A-3754-49DA-9AFC-02034A507CA7}\{E02B517F-1F8A-464E-996D-4B6AB17EC16D}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{A8BDA06A-3754-49DA-9AFC-02034A507CA7}\{E02B517F-1F8A-464E-996D-4B6AB17EC16D}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{A8BDA06A-3754-49DA-9AFC-02034A507CA7}\{FE86E935-AC54-4E5D-8FD3-E83B5ACA2255}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{A8BDA06A-3754-49DA-9AFC-02034A507CA7}\{FE86E935-AC54-4E5D-8FD3-E83B5ACA2255}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{AB3DBF0D-603E-4CD1-B36F-D7CE073C8E74}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{AB3DBF0D-603E-4CD1-B36F-D7CE073C8E74}\{831AFB3A-F44C-4AE3-A318-E26769646CD1}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{AB3DBF0D-603E-4CD1-B36F-D7CE073C8E74}\{831AFB3A-F44C-4AE3-A318-E26769646CD1}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{AB9A7FFF-6C14-4EF0-86B0-6DD25CB30E36}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{AB9A7FFF-6C14-4EF0-86B0-6DD25CB30E36}\{16884940-9502-4255-B885-8E9A136DD2CF}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{AB9A7FFF-6C14-4EF0-86B0-6DD25CB30E36}\{16884940-9502-4255-B885-8E9A136DD2CF}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{AB9A7FFF-6C14-4EF0-86B0-6DD25CB30E36}\{77A5C1C0-F5C0-43E3-A14B-C9A57EA10CEE}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{AB9A7FFF-6C14-4EF0-86B0-6DD25CB30E36}\{77A5C1C0-F5C0-43E3-A14B-C9A57EA10CEE}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{AB9A7FFF-6C14-4EF0-86B0-6DD25CB30E36}\{A6469FC8-DBC0-4D86-A000-C1262D341CD7}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{AB9A7FFF-6C14-4EF0-86B0-6DD25CB30E36}\{A6469FC8-DBC0-4D86-A000-C1262D341CD7}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{B088F803-8DC3-43D9-880E-4ADF7CBEE173}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{B088F803-8DC3-43D9-880E-4ADF7CBEE173}\{69E30400-48B8-4D4E-A053-C11277B831D9}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{B088F803-8DC3-43D9-880E-4ADF7CBEE173}\{69E30400-48B8-4D4E-A053-C11277B831D9}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{B088F803-8DC3-43D9-880E-4ADF7CBEE173}\{DAB13D98-57F5-4EF6-856F-59309D7002F9}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{B088F803-8DC3-43D9-880E-4ADF7CBEE173}\{DAB13D98-57F5-4EF6-856F-59309D7002F9}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{B088F803-8DC3-43D9-880E-4ADF7CBEE173}\{EFC3641F-BA6A-4EB2-86C7-19E934F5A30E}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{B088F803-8DC3-43D9-880E-4ADF7CBEE173}\{EFC3641F-BA6A-4EB2-86C7-19E934F5A30E}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{B4AA850C-D6FC-41C4-A8D5-EE062CE743BF}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{B4AA850C-D6FC-41C4-A8D5-EE062CE743BF}\{88815CB1-F968-4231-A281-3CE10D0B27E1}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{B4AA850C-D6FC-41C4-A8D5-EE062CE743BF}\{88815CB1-F968-4231-A281-3CE10D0B27E1}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{B57807A6-5E8C-47C0-B68D-263490E58F6F}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{B57807A6-5E8C-47C0-B68D-263490E58F6F}\{0D32BB03-9837-487F-86E9-EB324B948D17}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{B57807A6-5E8C-47C0-B68D-263490E58F6F}\{0D32BB03-9837-487F-86E9-EB324B948D17}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{B57807A6-5E8C-47C0-B68D-263490E58F6F}\{D32005B9-9D88-4F2F-927D-FB38441AD6E9}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{B57807A6-5E8C-47C0-B68D-263490E58F6F}\{D32005B9-9D88-4F2F-927D-FB38441AD6E9}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{B8FC2158-C88C-4CEE-B07F-C855D699A110}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{B8FC2158-C88C-4CEE-B07F-C855D699A110}\{D16D5391-1A39-4B8F-9A61-69BE33E77C2A}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{B8FC2158-C88C-4CEE-B07F-C855D699A110}\{D16D5391-1A39-4B8F-9A61-69BE33E77C2A}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{BB972356-5A5A-4363-845D-B942FDA86B28}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{BB972356-5A5A-4363-845D-B942FDA86B28}\{2AF4D32C-5642-4C75-98C9-6118E536E601}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{BB972356-5A5A-4363-845D-B942FDA86B28}\{2AF4D32C-5642-4C75-98C9-6118E536E601}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{BB972356-5A5A-4363-845D-B942FDA86B28}\{DE2BD078-890E-45BB-8E5E-4660373A00E6}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{BB972356-5A5A-4363-845D-B942FDA86B28}\{DE2BD078-890E-45BB-8E5E-4660373A00E6}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{BC8984A0-6136-4BD5-9759-FD090E9231D5}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{BC8984A0-6136-4BD5-9759-FD090E9231D5}\{3B87F97F-A851-46DF-830B-CDCD2CD1FF38}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{BC8984A0-6136-4BD5-9759-FD090E9231D5}\{3B87F97F-A851-46DF-830B-CDCD2CD1FF38}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{BC8984A0-6136-4BD5-9759-FD090E9231D5}\{FC86B057-AD4F-4BF1-BF3A-6507241358DE}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{BC8984A0-6136-4BD5-9759-FD090E9231D5}\{FC86B057-AD4F-4BF1-BF3A-6507241358DE}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{BDED6F6E-14F1-4F07-BE51-76D2E7784C40}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{BDED6F6E-14F1-4F07-BE51-76D2E7784C40}\{AA3833E3-8DA8-490A-8E84-DEC91D593DBC}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{BDED6F6E-14F1-4F07-BE51-76D2E7784C40}\{AA3833E3-8DA8-490A-8E84-DEC91D593DBC}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{BDED6F6E-14F1-4F07-BE51-76D2E7784C40}\{BE2E252F-2C01-4B98-B7AD-92B1DDBD77AD}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{BDED6F6E-14F1-4F07-BE51-76D2E7784C40}\{BE2E252F-2C01-4B98-B7AD-92B1DDBD77AD}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{BDED6F6E-14F1-4F07-BE51-76D2E7784C40}\{CAC8ECF0-BE70-4B07-8ABA-1DB1EA2671EA}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{BDED6F6E-14F1-4F07-BE51-76D2E7784C40}\{CAC8ECF0-BE70-4B07-8ABA-1DB1EA2671EA}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{C01CBF80-A887-46BD-8501-49FD291082B6}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{C01CBF80-A887-46BD-8501-49FD291082B6}\{1BEA7065-94ED-431B-A83F-2D9B39FC00A5}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{C01CBF80-A887-46BD-8501-49FD291082B6}\{1BEA7065-94ED-431B-A83F-2D9B39FC00A5}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{C01CBF80-A887-46BD-8501-49FD291082B6}\{8254A1DF-5BEB-454B-9F33-A24AC46ACB99}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{C01CBF80-A887-46BD-8501-49FD291082B6}\{8254A1DF-5BEB-454B-9F33-A24AC46ACB99}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{C01CBF80-A887-46BD-8501-49FD291082B6}\{8BEC96D0-1550-4226-90D8-0EF996A0041B}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{C01CBF80-A887-46BD-8501-49FD291082B6}\{8BEC96D0-1550-4226-90D8-0EF996A0041B}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{C218FC70-3269-4B32-8266-804ADAFBF28F}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{C218FC70-3269-4B32-8266-804ADAFBF28F}\{890A8973-71EA-4F85-8AB0-6A6EAE9EE7B6}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{C218FC70-3269-4B32-8266-804ADAFBF28F}\{890A8973-71EA-4F85-8AB0-6A6EAE9EE7B6}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{C89E572B-5937-4856-B62B-256E3EDAA4D0}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{C89E572B-5937-4856-B62B-256E3EDAA4D0}\{9475F263-B957-42BA-AA93-C4468FECD81B}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{C89E572B-5937-4856-B62B-256E3EDAA4D0}\{9475F263-B957-42BA-AA93-C4468FECD81B}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{C97F56D7-31C2-43D1-A3C3-B41FEE3DC8DE}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{C97F56D7-31C2-43D1-A3C3-B41FEE3DC8DE}\{18872474-477D-48A3-9018-3BE321348D1A}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{C97F56D7-31C2-43D1-A3C3-B41FEE3DC8DE}\{18872474-477D-48A3-9018-3BE321348D1A}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{C97F56D7-31C2-43D1-A3C3-B41FEE3DC8DE}\{65885806-8B5C-4344-85D5-B0E050FE8A1B}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{C97F56D7-31C2-43D1-A3C3-B41FEE3DC8DE}\{65885806-8B5C-4344-85D5-B0E050FE8A1B}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{CD304B30-96BC-41ED-81B5-3831E686AA8B}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{CD304B30-96BC-41ED-81B5-3831E686AA8B}\{D918C701-C10C-4948-94D6-1922F6C5B65C}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{CD304B30-96BC-41ED-81B5-3831E686AA8B}\{D918C701-C10C-4948-94D6-1922F6C5B65C}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{CD304B30-96BC-41ED-81B5-3831E686AA8B}\{EC653408-8E1E-4D49-BE22-5F49BC7B88E3}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{CD304B30-96BC-41ED-81B5-3831E686AA8B}\{EC653408-8E1E-4D49-BE22-5F49BC7B88E3}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{CEC85965-B061-4869-A573-C3CB38E69E7C}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{CEC85965-B061-4869-A573-C3CB38E69E7C}\{040D803F-E537-40B3-986F-CDC0D21EECF9}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{CEC85965-B061-4869-A573-C3CB38E69E7C}\{040D803F-E537-40B3-986F-CDC0D21EECF9}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{D2C0D899-3E2E-4AC1-865F-7CAB67CFF377}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{D2C0D899-3E2E-4AC1-865F-7CAB67CFF377}\{0321890B-75AA-4F02-A00C-E7B80AD2304B}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{D2C0D899-3E2E-4AC1-865F-7CAB67CFF377}\{0321890B-75AA-4F02-A00C-E7B80AD2304B}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{D2C0D899-3E2E-4AC1-865F-7CAB67CFF377}\{A8848848-03B2-43E9-8631-32B7E2237B75}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{D2C0D899-3E2E-4AC1-865F-7CAB67CFF377}\{A8848848-03B2-43E9-8631-32B7E2237B75}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{D2C0D899-3E2E-4AC1-865F-7CAB67CFF377}\{DCC8CAF8-1EC0-42E8-A95F-DFD35551F878}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{D2C0D899-3E2E-4AC1-865F-7CAB67CFF377}\{DCC8CAF8-1EC0-42E8-A95F-DFD35551F878}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{D361E6A5-6B9D-46AB-B557-04A1A6D5CDBA}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{D361E6A5-6B9D-46AB-B557-04A1A6D5CDBA}\{6F7F3964-F06A-4089-9DFB-0D8A2D5447AA}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{D361E6A5-6B9D-46AB-B557-04A1A6D5CDBA}\{6F7F3964-F06A-4089-9DFB-0D8A2D5447AA}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{D361E6A5-6B9D-46AB-B557-04A1A6D5CDBA}\{E58C5316-6C20-4A85-A80B-0E845E66CEB3}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{D361E6A5-6B9D-46AB-B557-04A1A6D5CDBA}\{E58C5316-6C20-4A85-A80B-0E845E66CEB3}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{D4885998-BFCD-47FB-AE0A-776972E8759E}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{D4885998-BFCD-47FB-AE0A-776972E8759E}\{B54AB379-03AB-43E5-AB2B-6E05D9AA6420}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{D4885998-BFCD-47FB-AE0A-776972E8759E}\{B54AB379-03AB-43E5-AB2B-6E05D9AA6420}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{D560CD15-7A2D-4DD9-96F2-AB733422DB9E}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{D560CD15-7A2D-4DD9-96F2-AB733422DB9E}\{27154F6C-B99C-44FF-8F93-EA8DD1D85B70}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{D560CD15-7A2D-4DD9-96F2-AB733422DB9E}\{27154F6C-B99C-44FF-8F93-EA8DD1D85B70}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{D5C1E975-8A34-4CB7-810D-1C28D404F1D3}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{D5C1E975-8A34-4CB7-810D-1C28D404F1D3}\{B50D3BF4-D918-490D-853E-29BEFBBA9A7B}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{D5C1E975-8A34-4CB7-810D-1C28D404F1D3}\{B50D3BF4-D918-490D-853E-29BEFBBA9A7B}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{D5C1E975-8A34-4CB7-810D-1C28D404F1D3}\{EF818A77-0506-40F1-A3AC-D6F2A8613D57}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{D5C1E975-8A34-4CB7-810D-1C28D404F1D3}\{EF818A77-0506-40F1-A3AC-D6F2A8613D57}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{D6F7769F-01BF-4EFA-8ED3-BDC6ABA6891B}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{D6F7769F-01BF-4EFA-8ED3-BDC6ABA6891B}\{0E0D81AC-5D8E-4E08-97F4-D134E0B6FAE9}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{D6F7769F-01BF-4EFA-8ED3-BDC6ABA6891B}\{0E0D81AC-5D8E-4E08-97F4-D134E0B6FAE9}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{D6F7769F-01BF-4EFA-8ED3-BDC6ABA6891B}\{F95AC88B-B435-487B-B45C-85A9770D0A1C}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{D6F7769F-01BF-4EFA-8ED3-BDC6ABA6891B}\{F95AC88B-B435-487B-B45C-85A9770D0A1C}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{D96337DC-AF50-4309-A1FC-BD79C32D974F}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{D96337DC-AF50-4309-A1FC-BD79C32D974F}\{204B6A00-929F-414A-AECF-21290FC98EC6}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{D96337DC-AF50-4309-A1FC-BD79C32D974F}\{204B6A00-929F-414A-AECF-21290FC98EC6}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{D96337DC-AF50-4309-A1FC-BD79C32D974F}\{73B924D1-526E-451B-BBF8-CD703D9ADF91}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{D96337DC-AF50-4309-A1FC-BD79C32D974F}\{73B924D1-526E-451B-BBF8-CD703D9ADF91}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{D96337DC-AF50-4309-A1FC-BD79C32D974F}\{8031824D-8A8C-456A-9F68-2016C1F642F5}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{D96337DC-AF50-4309-A1FC-BD79C32D974F}\{8031824D-8A8C-456A-9F68-2016C1F642F5}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{DA837EFF-8DFD-4D56-9B54-089D121B67A6}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{DA837EFF-8DFD-4D56-9B54-089D121B67A6}\{42E8A0A0-FB78-40F0-B7B5-95F68B9425D3}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{DA837EFF-8DFD-4D56-9B54-089D121B67A6}\{42E8A0A0-FB78-40F0-B7B5-95F68B9425D3}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{DAFC5947-580F-4B78-9BCD-95457757D468}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{DAFC5947-580F-4B78-9BCD-95457757D468}\{33E087F5-CF62-435E-9FE1-F867EE62C639}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{DAFC5947-580F-4B78-9BCD-95457757D468}\{33E087F5-CF62-435E-9FE1-F867EE62C639}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{DAFC5947-580F-4B78-9BCD-95457757D468}\{91278CF8-251F-4399-BE44-7AE822CC546D}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{DAFC5947-580F-4B78-9BCD-95457757D468}\{91278CF8-251F-4399-BE44-7AE822CC546D}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{DBD60422-6032-4E8C-8597-F07A788A5891}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{DBD60422-6032-4E8C-8597-F07A788A5891}\{11C1261E-7AD8-4D7F-9904-2EBA8D8BDFE8}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{DBD60422-6032-4E8C-8597-F07A788A5891}\{11C1261E-7AD8-4D7F-9904-2EBA8D8BDFE8}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{DE28C3B7-7CC0-4BE5-99C0-1CA2C1EF2501}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{DE28C3B7-7CC0-4BE5-99C0-1CA2C1EF2501}\{4C0DADF0-CD95-4058-B21C-BE55EA040BF9}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{DE28C3B7-7CC0-4BE5-99C0-1CA2C1EF2501}\{4C0DADF0-CD95-4058-B21C-BE55EA040BF9}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{DE28C3B7-7CC0-4BE5-99C0-1CA2C1EF2501}\{FEC01BAF-11E5-4E3E-BE78-6E8A46C3CF70}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{DE28C3B7-7CC0-4BE5-99C0-1CA2C1EF2501}\{FEC01BAF-11E5-4E3E-BE78-6E8A46C3CF70}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{DEC67C55-0E3B-4DF0-BD09-F078501D93AA}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{DEC67C55-0E3B-4DF0-BD09-F078501D93AA}\{247B3464-B205-4CA3-B956-6D1FC7FD7DDF}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{DEC67C55-0E3B-4DF0-BD09-F078501D93AA}\{247B3464-B205-4CA3-B956-6D1FC7FD7DDF}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{DEC67C55-0E3B-4DF0-BD09-F078501D93AA}\{25E32B4A-195F-4E1A-ABBD-12E13BFAFF78}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{DEC67C55-0E3B-4DF0-BD09-F078501D93AA}\{25E32B4A-195F-4E1A-ABBD-12E13BFAFF78}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{DEC67C55-0E3B-4DF0-BD09-F078501D93AA}\{EF041A90-0C37-472D-88B5-41A2750B57C0}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{DEC67C55-0E3B-4DF0-BD09-F078501D93AA}\{EF041A90-0C37-472D-88B5-41A2750B57C0}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{DF061AEE-FCF8-465F-85A9-822A10E2EEAF}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{DF061AEE-FCF8-465F-85A9-822A10E2EEAF}\{31BEC7C8-637E-4A3B-A6B2-4BAECFBA45E8}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{DF061AEE-FCF8-465F-85A9-822A10E2EEAF}\{31BEC7C8-637E-4A3B-A6B2-4BAECFBA45E8}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{E1476162-AF25-45BE-8896-2977204B991E}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{E1476162-AF25-45BE-8896-2977204B991E}\{04C325B4-F903-4EF4-ABB1-CE83CFC2238F}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{E1476162-AF25-45BE-8896-2977204B991E}\{04C325B4-F903-4EF4-ABB1-CE83CFC2238F}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{E1476162-AF25-45BE-8896-2977204B991E}\{5D4EE940-2944-4D98-A4C8-03220A71783E}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{E1476162-AF25-45BE-8896-2977204B991E}\{5D4EE940-2944-4D98-A4C8-03220A71783E}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{E1476162-AF25-45BE-8896-2977204B991E}\{F8C401BF-10B8-467A-91F9-57488D703524}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{E1476162-AF25-45BE-8896-2977204B991E}\{F8C401BF-10B8-467A-91F9-57488D703524}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{E25A6AC7-85DC-4249-8796-6C60806C3CB7}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{E25A6AC7-85DC-4249-8796-6C60806C3CB7}\{FD864050-7E9A-4E6D-A203-56C11B55B9F2}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{E25A6AC7-85DC-4249-8796-6C60806C3CB7}\{FD864050-7E9A-4E6D-A203-56C11B55B9F2}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{E360F851-54C7-4834-8BF0-DFC9B2966EF7}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{E360F851-54C7-4834-8BF0-DFC9B2966EF7}\{19614EE6-E2B8-4EC9-A6B6-DDB4B41AB62D}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{E360F851-54C7-4834-8BF0-DFC9B2966EF7}\{19614EE6-E2B8-4EC9-A6B6-DDB4B41AB62D}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{E360F851-54C7-4834-8BF0-DFC9B2966EF7}\{1AFBFA0D-7799-4837-8C68-7A4DB22C18EF}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{E360F851-54C7-4834-8BF0-DFC9B2966EF7}\{1AFBFA0D-7799-4837-8C68-7A4DB22C18EF}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{E360F851-54C7-4834-8BF0-DFC9B2966EF7}\{2F70354D-D77F-432F-82CE-6F81D473E84C}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{E360F851-54C7-4834-8BF0-DFC9B2966EF7}\{2F70354D-D77F-432F-82CE-6F81D473E84C}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{E54F6B71-B839-4CF7-8DBD-D406F88F6C0C}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{E54F6B71-B839-4CF7-8DBD-D406F88F6C0C}\{092C7F07-27BC-49CA-BD50-FD192F53C8D4}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{E54F6B71-B839-4CF7-8DBD-D406F88F6C0C}\{092C7F07-27BC-49CA-BD50-FD192F53C8D4}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{E8241196-9363-4632-B5B4-11A4AADCB0DF}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{E8241196-9363-4632-B5B4-11A4AADCB0DF}\{8FF6F327-E5DB-4DDF-8965-66D95E33CFF6}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{E8241196-9363-4632-B5B4-11A4AADCB0DF}\{8FF6F327-E5DB-4DDF-8965-66D95E33CFF6}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{E8241196-9363-4632-B5B4-11A4AADCB0DF}\{9220EA65-B5DD-4BE6-9918-47A36FDCA694}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{E8241196-9363-4632-B5B4-11A4AADCB0DF}\{9220EA65-B5DD-4BE6-9918-47A36FDCA694}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{EC1286F1-42B3-49D3-8FF4-53F39741EF24}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{EC1286F1-42B3-49D3-8FF4-53F39741EF24}\{94EF89DE-77A3-45D7-885E-3A16777EEBDC}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{EC1286F1-42B3-49D3-8FF4-53F39741EF24}\{94EF89DE-77A3-45D7-885E-3A16777EEBDC}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{EC1286F1-42B3-49D3-8FF4-53F39741EF24}\{C75B207D-6128-4E8C-A39B-4B79E0DF7E2B}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{EC1286F1-42B3-49D3-8FF4-53F39741EF24}\{C75B207D-6128-4E8C-A39B-4B79E0DF7E2B}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{F767CBB3-F50C-4AFE-8781-437E82D8664B}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{F767CBB3-F50C-4AFE-8781-437E82D8664B}\{21DA43BE-3518-4A44-9E87-7B16AFC5069E}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{F767CBB3-F50C-4AFE-8781-437E82D8664B}\{21DA43BE-3518-4A44-9E87-7B16AFC5069E}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{F767CBB3-F50C-4AFE-8781-437E82D8664B}\{2E190CAE-E25E-4E6D-9144-BE370038C946}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{F767CBB3-F50C-4AFE-8781-437E82D8664B}\{2E190CAE-E25E-4E6D-9144-BE370038C946}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{F767CBB3-F50C-4AFE-8781-437E82D8664B}\{E203AB04-94FC-4911-B9F1-3F5B645A6557}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{F767CBB3-F50C-4AFE-8781-437E82D8664B}\{E203AB04-94FC-4911-B9F1-3F5B645A6557}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{F94CD7F6-86A8-4F42-A410-438DD9075F23}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{F94CD7F6-86A8-4F42-A410-438DD9075F23}\{A46B0350-49F2-430F-B7CB-B674DE128A8F}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{F94CD7F6-86A8-4F42-A410-438DD9075F23}\{A46B0350-49F2-430F-B7CB-B674DE128A8F}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{F94CD7F6-86A8-4F42-A410-438DD9075F23}\{A990B946-317A-45B7-BB9B-5D52FDB2B1B5}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{F94CD7F6-86A8-4F42-A410-438DD9075F23}\{A990B946-317A-45B7-BB9B-5D52FDB2B1B5}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{FBA2A5E5-5C06-4F8B-8067-CA957C3CDCE3}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{FBA2A5E5-5C06-4F8B-8067-CA957C3CDCE3}\{A6734B6B-3AC6-47A6-84EA-833BF9DD7562}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{FBA2A5E5-5C06-4F8B-8067-CA957C3CDCE3}\{A6734B6B-3AC6-47A6-84EA-833BF9DD7562}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{FC9F75A2-161F-43F8-AB13-C35B6E10E6C1}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{FC9F75A2-161F-43F8-AB13-C35B6E10E6C1}\{82BDF68A-D2BA-4BB9-B50B-32A3A6B4DBED}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{FC9F75A2-161F-43F8-AB13-C35B6E10E6C1}\{82BDF68A-D2BA-4BB9-B50B-32A3A6B4DBED}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{FC9F75A2-161F-43F8-AB13-C35B6E10E6C1}\{C6E29842-56D4-4B17-8295-7A4FA4C89530}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{FC9F75A2-161F-43F8-AB13-C35B6E10E6C1}\{C6E29842-56D4-4B17-8295-7A4FA4C89530}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{FC9F75A2-161F-43F8-AB13-C35B6E10E6C1}\{CF8452BB-50D3-42FC-B2DC-EE2F79F0E59A}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{FC9F75A2-161F-43F8-AB13-C35B6E10E6C1}\{CF8452BB-50D3-42FC-B2DC-EE2F79F0E59A}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{FCF6B885-4248-4736-AC4B-71E813F9DD44}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{FCF6B885-4248-4736-AC4B-71E813F9DD44}\{049C0EA7-7DB6-4FA0-AF16-B03CDB020D0B}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{FCF6B885-4248-4736-AC4B-71E813F9DD44}\{049C0EA7-7DB6-4FA0-AF16-B03CDB020D0B}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{FFCB67FD-3F43-40BD-B2BD-174520BE3C8F}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{FFCB67FD-3F43-40BD-B2BD-174520BE3C8F}\{63B802A2-DCB5-4343-A58E-451489C41147}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{FFCB67FD-3F43-40BD-B2BD-174520BE3C8F}\{63B802A2-DCB5-4343-A58E-451489C41147}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{FFCB67FD-3F43-40BD-B2BD-174520BE3C8F}\{7689F074-EEFF-446D-A3D3-8574FB006B5B}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{FFCB67FD-3F43-40BD-B2BD-174520BE3C8F}\{7689F074-EEFF-446D-A3D3-8574FB006B5B}.qbi
    c:\progra~2\Symantec\Shared\QBackup\{FFCB67FD-3F43-40BD-B2BD-174520BE3C8F}\{D205A192-300A-4A03-A61F-9F61EEFBA148}.qbd
    c:\progra~2\Symantec\Shared\QBackup\{FFCB67FD-3F43-40BD-B2BD-174520BE3C8F}\{D205A192-300A-4A03-A61F-9F61EEFBA148}.qbi
    c:\progra~2\Symantec\Shared\QBackup\index.qbs
    c:\progra~2\Symantec\SPBBC\BBConfig.log
    c:\progra~2\Symantec\SPBBC\BBDebug.log
    c:\progra~2\Symantec\SPBBC\BBDetect.log
    c:\progra~2\Symantec\SPBBC\BBNotify.log
    c:\progra~2\Symantec\SPBBC\BBRefr.log
    c:\progra~2\Symantec\SPBBC\BBSetCfg.log
    c:\progra~2\Symantec\SPBBC\BBSetCfg2.log
    c:\progra~2\Symantec\SPBBC\BBSetDev.log
    c:\progra~2\Symantec\SPBBC\BBSetLoc.log
    c:\progra~2\Symantec\SPBBC\BBSetUsr.log
    c:\progra~2\Symantec\SPBBC\BBStHash.log
    c:\progra~2\Symantec\SPBBC\BBValid.log
    c:\progra~2\Symantec\SPBBC\SPPolicy.log
    c:\progra~2\Symantec\SPBBC\SPStart.log
    c:\progra~2\Symantec\SPBBC\SPStop.log
    c:\progra~2\Symantec\SRTSP\SrtErEvt.log
    c:\progra~2\Symantec\SRTSP\SrtETmp\232009A3.TMP
    c:\progra~2\Symantec\SRTSP\SrtETmp\9A6E64AD.TMP
    c:\progra~2\Symantec\SRTSP\SrtMoEvt.log
    c:\progra~2\Symantec\SRTSP\SrtNvEvt.log
    c:\progra~2\Symantec\SRTSP\SrtScEvt.log
    c:\progra~2\Symantec\SRTSP\SRTSPSE.DAT
    c:\progra~2\Symantec\SRTSP\SRTSPSO.DAT
    c:\progra~2\Symantec\SRTSP\SRTSPSP.DAT
    c:\progra~2\Symantec\SRTSP\SrtTxFEvt.log
    c:\progra~2\Symantec\SRTSP\SrtViEvt.log
    c:\progra~2\Symantec\SubEng\SCD.xml
    c:\progra~2\Symantec\SubEng\submissions.idx
    c:\progra~2\Symantec\SyKnAppS\ac788cde-c3ec-4537-9ac9-d7a8db8ee24b_cohcol.wlt
    c:\progra~2\Symantec\SyKnAppS\cohcol.wlt
    c:\progra~2\Symantec\SyKnAppS\Freezer\CAV\COHCOL.wlt
    c:\progra~2\Symantec\SyKnAppS\Freezer\CAV\SyKnAppS.dll
    c:\progra~2\Symantec\SyKnAppS\patch25.dll
    c:\progra~2\Symantec\SyKnAppS\SyKnAppS.dll
    c:\progra~2\Symantec\SyKnAppS\SyKnAppS.grd
    c:\progra~2\Symantec\SyKnAppS\SyKnAppS.sig
    c:\progra~2\Symantec\SyKnAppS\SyKnAppS.spm
    c:\progra~2\Symantec\symdata.xml
    c:\progra~2\Symantec\SymNetDrv\Default.rul
    c:\progra~2\Symantec\SymNetDrv\Firewall.BAK
    c:\progra~2\Symantec\SymNetDrv\Firewall.rul
    c:\progra~2\Symantec\SymNetDrv\LocationMap.dat
    c:\progra~2\Symantec\SymNetDrv\Persist.BAK
    c:\progra~2\Symantec\SymNetDrv\Persist.Dat
    c:\progra~2\Symantec\SymNetDrv\SNDALRT.log
    c:\progra~2\Symantec\SymNetDrv\SNDCON.log
    c:\progra~2\Symantec\SymNetDrv\SNDDBG.log
    c:\progra~2\Symantec\SymNetDrv\SNDFW.log
    c:\progra~2\Symantec\SymNetDrv\SNDIDS.log
    c:\progra~2\Symantec\SymNetDrv\SNDSYS.log
    c:\progra~2\Symantec\SymNetDrv\TModule.Dat
    c:\progra~2\Symantec\SymNetDrv\TParent.Dat
    c:\program files\Norton Security Scan
    c:\program files\Norton Security Scan\Engine\2.7.3.34\{2A85E335-7417-424d-AD89-31DED1689794}.dat
    c:\program files\Norton Security Scan\Engine\2.7.3.34\{407D1C08-B366-4aca-92FB-E04E97F6681D}.dat
    c:\program files\Norton Security Scan\Engine\2.7.3.34\BilBDRes.dll
    c:\program files\Norton Security Scan\Engine\2.7.3.34\ccL80U.dll
    c:\program files\Norton Security Scan\Engine\2.7.3.34\ccScanw.dll
    c:\program files\Norton Security Scan\Engine\2.7.3.34\ccVrTrst.dll
    c:\program files\Norton Security Scan\Engine\2.7.3.34\dec_abi.dll
    c:\program files\Norton Security Scan\Engine\2.7.3.34\DefLoad.exe
    c:\program files\Norton Security Scan\Engine\2.7.3.34\DefUtDCD.dll
    c:\program files\Norton Security Scan\Engine\2.7.3.34\diLueCbk.dll
    c:\program files\Norton Security Scan\Engine\2.7.3.34\ecmldr32.dll
    c:\program files\Norton Security Scan\Engine\2.7.3.34\HeartBt.dll
    c:\program files\Norton Security Scan\Engine\2.7.3.34\help.htm
    c:\program files\Norton Security Scan\Engine\2.7.3.34\Microsoft.VC80.CRT.manifest
    c:\program files\Norton Security Scan\Engine\2.7.3.34\msl.dll
    c:\program files\Norton Security Scan\Engine\2.7.3.34\msvcp80.dll
    c:\program files\Norton Security Scan\Engine\2.7.3.34\msvcr80.dll
    c:\program files\Norton Security Scan\Engine\2.7.3.34\Nss.exe
    c:\program files\Norton Security Scan\Engine\2.7.3.34\patch25d.dll
    c:\program files\Norton Security Scan\Engine\2.7.3.34\PrdDtRes.dll
    c:\program files\Norton Security Scan\Engine\2.7.3.34\RevList.dll
    c:\program files\Norton Security Scan\Engine\2.7.3.34\RptCdRes.dll
    c:\program files\Norton Security Scan\Engine\2.7.3.34\SAUpdt.dll
    c:\program files\Norton Security Scan\Engine\2.7.3.34\ScanCore.dll
    c:\program files\Norton Security Scan\Engine\2.7.3.34\ScanRes.dll
    c:\program files\Norton Security Scan\Engine\2.7.3.34\ScanText.dll
    c:\program files\Norton Security Scan\Engine\2.7.3.34\SKUCfg.dll
    c:\program files\Norton Security Scan\Engine\2.7.3.34\SKURes.dll
    c:\program files\Norton Security Scan\Engine\2.7.3.34\symbos.exe
    c:\program files\Norton Security Scan\Engine\2.7.3.34\SymHTML.dll
    c:\program files\Norton Security Scan\isolate.ini
    c:\program files\NortonInstaller
    c:\program files\NortonInstaller\{397E31AA-0D78-4649-A01C-339D73A2ED35}\NSS\LicenseType\2.7.3.34\09\01\InstUI.loc
    c:\program files\NortonInstaller\{397E31AA-0D78-4649-A01C-339D73A2ED35}\NSS\LicenseType\2.7.3.34\ccL80U.dll
    c:\program files\NortonInstaller\{397E31AA-0D78-4649-A01C-339D73A2ED35}\NSS\LicenseType\2.7.3.34\ccSet.dll
    c:\program files\NortonInstaller\{397E31AA-0D78-4649-A01C-339D73A2ED35}\NSS\LicenseType\2.7.3.34\Engine.dll
    c:\program files\NortonInstaller\{397E31AA-0D78-4649-A01C-339D73A2ED35}\NSS\LicenseType\2.7.3.34\extract.dat
    c:\program files\NortonInstaller\{397E31AA-0D78-4649-A01C-339D73A2ED35}\NSS\LicenseType\2.7.3.34\fallback.dat
    c:\program files\NortonInstaller\{397E31AA-0D78-4649-A01C-339D73A2ED35}\NSS\LicenseType\2.7.3.34\finalzed.dat
    c:\program files\NortonInstaller\{397E31AA-0D78-4649-A01C-339D73A2ED35}\NSS\LicenseType\2.7.3.34\Install.mft
    c:\program files\NortonInstaller\{397E31AA-0D78-4649-A01C-339D73A2ED35}\NSS\LicenseType\2.7.3.34\InstStub.exe
    c:\program files\NortonInstaller\{397E31AA-0D78-4649-A01C-339D73A2ED35}\NSS\LicenseType\2.7.3.34\InstUI.dll
    c:\program files\NortonInstaller\{397E31AA-0D78-4649-A01C-339D73A2ED35}\NSS\LicenseType\2.7.3.34\layout.dat
    c:\program files\NortonInstaller\{397E31AA-0D78-4649-A01C-339D73A2ED35}\NSS\LicenseType\2.7.3.34\Lue.dll
    c:\program files\NortonInstaller\{397E31AA-0D78-4649-A01C-339D73A2ED35}\NSS\LicenseType\2.7.3.34\Microsoft.VC80.CRT\Microsoft.VC80.CRT.manifest
    c:\program files\NortonInstaller\{397E31AA-0D78-4649-A01C-339D73A2ED35}\NSS\LicenseType\2.7.3.34\Microsoft.VC80.CRT\msvcm80.dll
    c:\program files\NortonInstaller\{397E31AA-0D78-4649-A01C-339D73A2ED35}\NSS\LicenseType\2.7.3.34\Microsoft.VC80.CRT\msvcp80.dll
    c:\program files\NortonInstaller\{397E31AA-0D78-4649-A01C-339D73A2ED35}\NSS\LicenseType\2.7.3.34\Microsoft.VC80.CRT\msvcr80.dll
    c:\program files\NortonInstaller\{397E31AA-0D78-4649-A01C-339D73A2ED35}\NSS\LicenseType\2.7.3.34\ProdCbk.dll
    c:\program files\NortonInstaller\{397E31AA-0D78-4649-A01C-339D73A2ED35}\NSS\LicenseType\2.7.3.34\SKUCfg.dll
    c:\programdata\NortonInstaller
    c:\programdata\NortonInstaller\Logs\06-12-2010-01h12m50s\Install.1.mft.7z
    c:\programdata\NortonInstaller\Logs\06-12-2010-01h12m50s\NortonInstall-06-12-2010-01h12m50s.log
    c:\programdata\Symantec\Common Client\settings.bak
    c:\programdata\Symantec\Common Client\settings.dat
    c:\programdata\Symantec\Definitions\SymcData\idsdefs\20070607.001\CATALOG.DAT
    c:\programdata\Symantec\Definitions\SymcData\idsdefs\20070607.001\IDS9xx86.dll
    c:\programdata\Symantec\Definitions\SymcData\idsdefs\20070607.001\IDSVia64.cat
    c:\programdata\Symantec\Definitions\SymcData\idsdefs\20070607.001\IDSVia64.INF
    c:\programdata\Symantec\Definitions\SymcData\idsdefs\20070607.001\IDSviA64.sys
    c:\programdata\Symantec\Definitions\SymcData\idsdefs\20070607.001\IDSVix86.cat
    c:\programdata\Symantec\Definitions\SymcData\idsdefs\20070607.001\IDSVix86.INF
    c:\programdata\Symantec\Definitions\SymcData\idsdefs\20070607.001\IDSvix86.sys
    c:\programdata\Symantec\Definitions\SymcData\idsdefs\20070607.001\IDSxpx86.dll
    c:\programdata\Symantec\Definitions\SymcData\idsdefs\20070607.001\Metadata.dat
    c:\programdata\Symantec\Definitions\SymcData\idsdefs\20070607.001\sigs.dat
    c:\programdata\Symantec\Definitions\SymcData\idsdefs\20070607.001\SymIDSCo.sys
    c:\programdata\Symantec\Definitions\SymcData\idsdefs\20070607.001\SymIDSCo.vxd
    c:\programdata\Symantec\Definitions\SymcData\idsdefs\20070607.001\SymIDSI.dll
    c:\programdata\Symantec\Definitions\SymcData\idsdefs\20070607.001\v.grd
    c:\programdata\Symantec\Definitions\SymcData\idsdefs\20070607.001\v.sig
    c:\programdata\Symantec\Definitions\SymcData\idsdefs\20070607.001\VIRSCAN1.DAT
    c:\programdata\Symantec\Definitions\SymcData\idsdefs\20070607.001\zdone.dat
    c:\programdata\Symantec\Definitions\SymcData\idsdefs\20070612.005\CATALOG.DAT
    c:\programdata\Symantec\Definitions\SymcData\idsdefs\20070612.005\IDS9xx86.dll
    c:\programdata\Symantec\Definitions\SymcData\idsdefs\20070612.005\IDSVia64.cat
    c:\programdata\Symantec\Definitions\SymcData\idsdefs\20070612.005\IDSVia64.INF
    c:\programdata\Symantec\Definitions\SymcData\idsdefs\20070612.005\IDSviA64.sys
     
    rkim,
    #14
  16. 2010/07/28
    rkim

    rkim Inactive Thread Starter

    Joined:
    2010/07/09
    Messages:
    33
    Likes Received:
    0
    c:\programdata\Symantec\SymNetDrv\SNDIDS.log
    c:\programdata\Symantec\SymNetDrv\SNDSYS.log
    c:\programdata\Symantec\SymNetDrv\TModule.Dat
    c:\programdata\Symantec\SymNetDrv\TParent.Dat
    c:\windows\System32\Drivers\SYMNDISV.SYS
    c:\windows\system32\drivers\muikt.sys . . . . failed to delete

    .
    ((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    -------\Legacy_IDSVIX86
    -------\Legacy_SYMNDISV
    -------\Service_IDSvix86
    -------\Service_SYMNDISV
    -------\Legacy_muikt
    -------\Service_muikt


    ((((((((((((((((((((((((( Files Created from 2010-06-28 to 2010-07-29 )))))))))))))))))))))))))))))))
    .

    2010-07-29 03:03 . 2010-07-29 03:03 -------- d-----w- c:\programdata\Symantec
    2010-07-29 03:02 . 2010-07-29 03:11 -------- d-----w- c:\users\User\AppData\Local\temp
    2010-07-29 03:02 . 2010-07-29 03:02 -------- d-----w- c:\users\Public\AppData\Local\temp
    2010-07-29 03:02 . 2010-07-29 03:02 -------- d-----w- c:\users\Guest\AppData\Local\temp
    2010-07-29 03:02 . 2010-07-29 03:02 -------- d-----w- c:\users\Default\AppData\Local\temp
    2010-07-29 02:46 . 2010-07-29 02:48 -------- d-----w- C:\32788R22FWJFW
    2010-07-09 19:15 . 2010-07-09 19:50 4713737214 ----a-w- C:\Backup.zip
    2010-07-09 02:23 . 2010-06-28 20:37 165456 ----a-w- c:\windows\system32\drivers\aswSP.sys
    2010-07-09 02:23 . 2010-06-28 20:32 17744 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
    2010-07-09 02:23 . 2010-06-28 20:33 23376 ----a-w- c:\windows\system32\drivers\aswRdr.sys
    2010-07-09 02:23 . 2010-06-28 20:37 46672 ----a-w- c:\windows\system32\drivers\aswTdi.sys
    2010-07-09 02:23 . 2010-06-28 20:32 50256 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
    2010-07-09 02:23 . 2010-06-28 20:57 38848 ----a-w- c:\windows\avastSS.scr
    2010-07-09 02:23 . 2010-06-28 20:57 165032 ----a-w- c:\windows\system32\aswBoot.exe
    2010-07-09 02:22 . 2010-07-09 02:22 -------- d-----w- c:\programdata\Alwil Software
    2010-07-09 02:22 . 2010-07-09 02:22 -------- d-----w- c:\program files\Alwil Software
    2010-07-09 02:06 . 2010-07-29 03:11 767488 ----a-w- c:\windows\system32\drivers\muikt.sys

    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2010-07-09 18:54 . 2007-05-10 22:38 1356 ----a-w- c:\users\User\AppData\Local\d3d9caps.dat
    2010-07-09 02:31 . 2007-03-29 03:40 -------- d-----w- c:\program files\Common Files\AOL
    2010-07-09 02:30 . 2007-03-17 02:40 -------- d-----w- c:\programdata\AOL
    2010-06-27 18:48 . 2006-12-18 04:05 12 ----a-w- c:\windows\bthservsdp.dat
    2010-06-18 17:14 . 2010-06-12 05:11 -------- d-----w- c:\programdata\DivX
    2010-06-15 19:11 . 2006-12-18 04:57 -------- d-----w- c:\program files\HP Games
    2010-06-15 19:02 . 2006-12-18 05:02 -------- d-----w- c:\programdata\WildTangent
    2010-06-15 18:58 . 2006-12-18 04:26 -------- d--h--w- c:\program files\InstallShield Installation Information
    2010-06-15 18:58 . 2007-07-03 23:45 -------- d-----w- c:\program files\HOTALBUMMyBOX
    2010-06-14 01:42 . 2010-06-14 01:42 -------- d-----w- c:\program files\AviSynth 2.5
    2010-06-12 23:59 . 2009-09-20 23:31 -------- d-----w- c:\program files\Microsoft Silverlight
    2010-06-12 08:12 . 2009-12-14 23:38 -------- d-----w- c:\programdata\Norton
    2010-06-12 07:00 . 2009-01-01 16:37 -------- d-----w- c:\users\User\AppData\Roaming\DivX
    2010-06-12 05:19 . 2010-06-12 05:19 57344 ----a-w- c:\programdata\DivX\RunAsUser\RUNASUSERPROCESS.dll
    2010-06-12 05:17 . 2006-12-18 05:12 -------- d-----w- c:\program files\DivX
    2010-06-12 05:17 . 2010-06-12 05:17 56765 ----a-w- c:\programdata\DivX\DivXPlusShortcuts\Uninstaller.exe
    2010-06-12 05:17 . 2010-06-12 05:17 56997 ----a-w- c:\programdata\DivX\WebPlayer\Uninstaller.exe
    2010-06-12 05:17 . 2010-06-12 05:17 53600 ----a-w- c:\programdata\DivX\Update\Uninstaller.exe
    2010-06-12 05:17 . 2010-06-12 05:17 57715 ----a-w- c:\programdata\DivX\Player\Uninstaller.exe
    2010-06-12 05:16 . 2010-06-12 05:16 84062 ----a-w- c:\programdata\DivX\TransferWizard\Uninstaller.exe
    2010-06-12 05:16 . 2007-08-05 20:11 -------- d-----w- c:\program files\Common Files\PX Storage Engine
    2010-06-12 05:16 . 2010-06-12 05:16 57054 ----a-w- c:\programdata\DivX\DSDesktopComponents\Uninstaller.exe
    2010-06-12 05:16 . 2010-06-12 05:16 54166 ----a-w- c:\programdata\DivX\DSAVCDecoder\Uninstaller.exe
    2010-06-12 05:16 . 2010-06-12 05:16 57532 ----a-w- c:\programdata\DivX\DSASPDecoder\Uninstaller.exe
    2010-06-12 05:16 . 2010-06-12 05:16 56458 ----a-w- c:\programdata\DivX\DivXDecoderShortcut\Uninstaller.exe
    2010-06-12 05:16 . 2010-06-12 05:16 54174 ----a-w- c:\programdata\DivX\DSAACDecoder\Uninstaller.exe
    2010-06-12 05:16 . 2010-06-12 05:16 54153 ----a-w- c:\programdata\DivX\DFXPlugin\Uninstaller.exe
    2010-06-12 05:16 . 2010-06-12 05:16 54128 ----a-w- c:\programdata\DivX\Converter\Uninstaller.exe
    2010-06-12 05:16 . 2010-06-12 05:16 54644 ----a-w- c:\programdata\DivX\TranscodeEngine\Uninstaller.exe
    2010-06-12 05:15 . 2010-06-12 05:15 54101 ----a-w- c:\programdata\DivX\MPEG2Plugin\Uninstaller.exe
    2010-06-12 05:15 . 2010-06-12 05:15 57409 ----a-w- c:\programdata\DivX\ControlPanel\Uninstaller.exe
    2010-06-12 05:15 . 2010-06-12 05:15 52963 ----a-w- c:\programdata\DivX\MSVC80CRTRedist\Uninstaller.exe
    2010-06-12 05:15 . 2010-06-12 05:15 -------- d-----w- c:\program files\Common Files\DivX Shared
    2010-06-12 05:15 . 2010-06-12 05:15 54073 ----a-w- c:\programdata\DivX\Qt4.5\Uninstaller.exe
    2010-06-12 05:15 . 2010-06-12 05:15 56969 ----a-w- c:\programdata\DivX\ASPEncoder\Uninstaller.exe
    2010-06-12 05:11 . 2010-06-12 05:17 1062184 ----a-w- c:\programdata\DivX\Setup\Resource.dll
    2010-06-12 05:10 . 2010-06-12 05:17 895256 ----a-w- c:\programdata\DivX\Setup\DivXSetup.exe
    2010-06-09 10:35 . 2006-12-18 04:50 -------- d-----w- c:\programdata\Microsoft Help
    2010-06-09 08:06 . 2010-06-09 08:06 976832 ----a-w- c:\programdata\Adobe\Reader\8.2\ARM\6685\AdobeARM.exe
    2010-06-09 08:06 . 2010-06-09 08:06 976832 ----a-w- c:\programdata\Adobe\Reader\8.2\ARM\16562\AdobeARM.exe
    2010-06-09 08:06 . 2010-06-09 08:06 70584 ----a-w- c:\programdata\Adobe\Reader\8.2\ARM\6685\AdobeExtractFiles.dll
    2010-06-09 08:06 . 2010-06-09 08:06 70584 ----a-w- c:\programdata\Adobe\Reader\8.2\ARM\16562\AdobeExtractFiles.dll
    2010-06-09 08:06 . 2010-06-09 08:06 331176 ----a-w- c:\programdata\Adobe\Reader\8.2\ARM\6685\ReaderUpdater.exe
    2010-06-09 08:06 . 2010-06-09 08:06 331176 ----a-w- c:\programdata\Adobe\Reader\8.2\ARM\6685\AcrobatUpdater.exe
    2010-06-09 08:06 . 2010-06-09 08:06 331176 ----a-w- c:\programdata\Adobe\Reader\8.2\ARM\16562\ReaderUpdater.exe
    2010-06-09 08:06 . 2010-06-09 08:06 331176 ----a-w- c:\programdata\Adobe\Reader\8.2\ARM\16562\AcrobatUpdater.exe
    2010-06-03 02:41 . 2010-06-03 02:41 3600384 ----a-w- c:\windows\system32\GPhotos.scr
    2010-05-21 21:14 . 2009-10-03 07:27 221568 ------w- c:\windows\system32\MpSigStub.exe
    2010-05-07 19:55 . 2010-05-07 19:55 255472 ----a-w- c:\users\User\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll
    .

    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "Sidebar "= "c:\program files\Windows Sidebar\sidebar.exe" [2008-01-11 1232896]
    "HPAdvisor "= "c:\program files\Hewlett-Packard\HP Advisor\HPAdvisor.exe" [2006-11-22 1474560]
    "WindowsWelcomeCenter "= "oobefldr.dll" [2006-11-02 2159104]
    "ehTray.exe "= "c:\windows\ehome\ehTray.exe" [2006-11-02 125440]
    "Skype "= "c:\program files\Skype\Phone\Skype.exe" [2007-03-12 25590312]
    "Google Update "= "c:\users\User\AppData\Local\Google\Update\GoogleUpdate.exe" [2009-03-01 133104]
    "msnmsgr "= "c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-07-26 3883856]
    "WMPNSCFG "= "c:\program files\Windows Media Player\WMPNSCFG.exe" [2006-11-02 201728]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "Windows Defender "= "c:\program files\Windows Defender\MSASCui.exe" [2007-04-17 1006264]
    "SynTPEnh "= "c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2006-11-15 815104]
    "IgfxTray "= "c:\windows\system32\igfxtray.exe" [2006-11-06 98304]
    "HotKeysCmds "= "c:\windows\system32\hkcmd.exe" [2006-11-06 106496]
    "Persistence "= "c:\windows\system32\igfxpers.exe" [2006-11-06 81920]
    "ccApp "= "c:\program files\Common Files\Symantec Shared\ccApp.exe" [2006-10-25 107112]
    "osCheck "= "c:\program files\Norton Internet Security\osCheck.exe" [2006-10-27 22696]
    "QPService "= "c:\program files\HP\QuickPlay\QPService.exe" [2006-11-24 167936]
    "HP Software Update "= "c:\program files\Hp\HP Software Update\HPWuSchd2.exe" [2005-02-17 49152]
    "QlbCtrl "= "c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2006-11-06 159744]
    "HP Health Check Scheduler "= "c:\program files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe" [2006-11-28 46704]
    "WAWifiMessage "= "c:\program files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe" [2006-10-18 317152]
    "hpWirelessAssistant "= "c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2006-10-18 472800]
    "SunJavaUpdateSched "= "c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-01-11 246504]
    "WPCUMI "= "c:\windows\system32\WpcUmi.exe" [2006-11-02 176128]
    "CanonMyPrinter "= "c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2006-03-22 1191936]
    "SSBkgdUpdate "= "c:\program files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [2003-09-30 155648]
    "OpwareSE4 "= "c:\program files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe" [2006-03-21 69632]
    "Symantec PIF AlertEng "= "c:\program files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" [2008-01-30 583048]
    "QuickTime Task "= "c:\program files\QuickTime\QTTask.exe" [2009-11-11 417792]
    "iTunesHelper "= "c:\program files\iTunes\iTunesHelper.exe" [2010-01-23 141608]
    "Adobe Reader Speed Launcher "= "c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2009-12-18 40368]
    "Adobe ARM "= "c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2009-12-11 948672]
    "DivXUpdate "= "c:\program files\DivX\DivX Update\DivXUpdate.exe" [2010-06-03 1144104]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
    "GrpConv "= "grpconv -o" [X]

    c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
    Audible Download Manager.lnk - c:\program files\Audible\Bin\AudibleDownloadHelper.exe [2008-6-13 1754456]
    HP Connections.lnk - c:\program files\HP Connections\6811507\Program\HP Connections.exe [2006-12-17 34520]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
    "AppInit_DLLs "=c:\progra~1\Google\GOOGLE~1\GOEC62~1.DLL

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
    "aux "=wdmaud.drv

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
    @= "Service "

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
    "DisableMonitoring "=dword:00000001

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
    "DisableMonitoring "=dword:00000001

    R1 aswSP;aswSP; [x]
    R2 aswFsBlk;aswFsBlk; [x]
    R2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2010-06-28 50256]
    R2 Viewpoint Manager Service;Viewpoint Manager Service;c:\program files\Viewpoint\Common\ViewpointService.exe [2007-01-04 24652]
    R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2007-04-05 106808]
    R3 ICDUSB2;Sony IC Recorder (P);c:\windows\system32\Drivers\ICDUSB2.sys [2002-11-29 39048]
    R3 R5U870FLx86;R5U870 UVC Lower Filter ;c:\windows\system32\Drivers\R5U870FLx86.sys [2006-12-19 73472]
    R3 R5U870FUx86;R5U870 UVC Upper Filter ;c:\windows\system32\Drivers\R5U870FUx86.sys [2006-12-19 43904]
    S0 PzWDM;PzWDM;c:\windows\system32\Drivers\PzWDM.sys [2007-07-03 15172]


    --- Other Services/Drivers In Memory ---

    *NewlyCreated* - CFCATCHME
    *NewlyCreated* - COMHOST
    *Deregistered* - CFcatchme
    *Deregistered* - muikt

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
    bthsvcs REG_MULTI_SZ BthServ
    HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
    .
    Contents of the 'Scheduled Tasks' folder

    2010-07-08 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-107199264-59685293-546543122-1000Core.job
    - c:\users\User\AppData\Local\Google\Update\GoogleUpdate.exe [2009-03-01 22:50]

    2010-07-09 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-107199264-59685293-546543122-1000UA.job
    - c:\users\User\AppData\Local\Google\Update\GoogleUpdate.exe [2009-03-01 22:50]

    2010-06-12 c:\windows\Tasks\HPCeeScheduleForUser.job
    - c:\program files\Hewlett-Packard\SDP\Ceement\HPCEE.exe [2006-12-18 00:08]

    2010-06-19 c:\windows\Tasks\Norton Internet Security - Run Full System Scan - User.job
    - c:\progra~1\NORTON~1\NORTON~1\Navw32.exe [2006-11-08 07:48]

    2010-07-09 c:\windows\Tasks\User_Feed_Synchronization-{297E9270-95A0-4BF0-BB95-726FE08D846F}.job
    - c:\windows\system32\msfeedssync.exe [2006-11-02 09:45]

    2010-07-08 c:\windows\Tasks\User_Feed_Synchronization-{C4D2EA17-D19B-450E-AE3F-404E3BBD2D96}.job
    - c:\windows\system32\msfeedssync.exe [2006-11-02 09:45]
    .
    .
    ------- Supplementary Scan -------
    .
    uStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=71&bd=Pavilion&pf=laptop
    uDefault_Search_URL = hxxp://www.google.com/ie
    mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=71&bd=Pavilion&pf=laptop
    uSearchAssistant = hxxp://www.google.com/ie
    uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
    IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
    IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
    IE: Easy-WebPrint Add To Print List - c:\program files\Canon\Easy-WebPrint\Toolband.dll/RC_AddToList.html
    IE: Easy-WebPrint High Speed Print - c:\program files\Canon\Easy-WebPrint\Toolband.dll/RC_HSPrint.html
    IE: Easy-WebPrint Preview - c:\program files\Canon\Easy-WebPrint\Toolband.dll/RC_Preview.html
    IE: Easy-WebPrint Print - c:\program files\Canon\Easy-WebPrint\Toolband.dll/RC_Print.html
    LSP: c:\windows\system32\wpclsp.dll
    Handler: gameboxchrome - {494D4E3B-FA53-4487-8AF6-3F50FE1167A9} -
    FF - ProfilePath - c:\users\User\AppData\Roaming\Mozilla\Firefox\Profiles\z77dif15.default\
    FF - plugin: c:\program files\DivX\DivX Plus Web Player\npdivx32.dll
    FF - plugin: c:\program files\Google\Picasa3\npPicasa3.dll
    FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
    FF - plugin: c:\program files\Mozilla Firefox\plugins\npJoostPlugin.dll
    FF - plugin: c:\program files\Mozilla Firefox\plugins\npViewpoint.dll
    FF - plugin: c:\program files\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll
    FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll
    FF - plugin: c:\users\User\AppData\Local\Google\Update\1.2.183.29\npGoogleOneClick8.dll
    FF - plugin: c:\users\User\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll
    FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
    .
    - - - - ORPHANS REMOVED - - - -

    HKLM-RunOnce-<NO NAME> - (no file)
    AddRemove-NSS - c:\program files\NortonInstaller\{397E31AA-0D78-4649-A01C-339D73A2ED35}\NSS\LicenseType\2.7.3.34\InstStub.exe



    **************************************************************************

    catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2010-07-28 20:11
    Windows 6.0.6000 NTFS

    scanning hidden processes ...

    scanning hidden autostart entries ...

    scanning hidden files ...

    scan completed successfully
    hidden files: 0

    **************************************************************************

    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\muikt]

    .
    --------------------- LOCKED REGISTRY KEYS ---------------------

    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
    @Denied: (A) (Users)
    @Denied: (A) (Everyone)
    @Allowed: (B 1 2 3 4 5) (S-1-5-20)
    "BlindDial "=dword:00000000
    .
    --------------------- DLLs Loaded Under Running Processes ---------------------

    - - - - - - - > 'Explorer.exe'(1208)
    c:\program files\Hewlett-Packard\HP Advisor\Pillars\Market\MLDeskBand.dll
    .
    ------------------------ Other Running Processes ------------------------
    .
    c:\windows\helppane.exe
    .
    **************************************************************************
    .
    Completion time: 2010-07-28 20:18:27 - machine was rebooted
    ComboFix-quarantined-files.txt 2010-07-29 03:18
    ComboFix2.txt 2010-07-29 02:11
    ComboFix3.txt 2010-07-29 01:14

    Pre-Run: 80,238,338,048 bytes free
    Post-Run: 80,216,506,368 bytes free

    - - End Of File - - 2A10F3B1032374F44547590A5D2BB6DF
     
    rkim,
    #15
  17. 2010/07/28
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Download MBRCheck to your desktop

    Double click MBRCheck.exe to run (Vista and Windows 7 users, right click and select Run as Administrator).
    It will show a black screen with some data on it.
    A report called MBRcheckxxxx.txt will be on your desktop
    Open this report and post its content in your next reply.
     
    broni,
    #16
  18. 2010/07/29
    rkim

    rkim Inactive Thread Starter

    Joined:
    2010/07/09
    Messages:
    33
    Likes Received:
    0
    MBRCheck, version 1.1.1

    (c) 2010, AD



    \\.\C: --> \\.\PhysicalDrive0

    \\.\D: --> \\.\PhysicalDrive0



    Size Device Name MBR Status

    --------------------------------------------

    149 GB \\.\PhysicalDrive0 Unknown MBR code





    Found non-standard or infected MBR.

    Enter 'Y' and hit ENTER for more options, or 'N' to exit:
     
    rkim,
    #17
  19. 2010/07/29
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Aha...

    Rerun MBRCheck.
    Enter 'Y' and hit ENTER for more options and select option "2 ".
    When asked for physical disk number, enter 0 (zero).
    Next, enter 3 (Windows Vista) for MBR code.
    Post resulting log.
     
    broni,
    #18
  20. 2010/07/29
    rkim

    rkim Inactive Thread Starter

    Joined:
    2010/07/09
    Messages:
    33
    Likes Received:
    0
    I ran MBRCheck as stated and when it was finished it automatically restarted the computer. As windows was rebooting a window came up and said windows has failed to start. It gave the following info:

    File: \Windows\system32\winload.exe

    Status: 0xc000000e

    Info: The selected entry could not be loaded because the application is missing or corrupt.
     
    rkim,
    #19
  21. 2010/07/29
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Try to restart one more time.
     
    broni,
    #20
Page 1 of 3

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...