Solved Brontok A

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0214058.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0214059.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0214060.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0214061.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0214062.pif Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0214063.com Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0214064.scr Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0214065.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0214074.Sys Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0214075.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0214076.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0214077.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0214078.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0214079.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0214080.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0214081.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0214082.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0214083.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0214084.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0214085.pif Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0214086.com Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0214087.scr Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0214088.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0214097.ime Infected: Trojan-Spy.Win32.Delf.azp skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0215069.Sys Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0215075.Sys Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0215079.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0215080.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0215081.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0215082.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0215083.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0215084.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0215085.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0215086.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0215087.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0215088.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0215089.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0215090.com Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0215091.scr Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0216074.Sys Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0216075.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0216076.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0216077.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0216078.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0216079.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0216080.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0216081.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0216082.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0216083.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0216084.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0216085.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0216086.com Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0216087.scr Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0216090.ime Infected: Trojan-Spy.Win32.Delf.azp skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0217069.Sys Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0217075.Sys Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0217079.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0217080.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0217081.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0217082.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0217083.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0217084.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0217085.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0217086.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0217087.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0217088.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0217089.pif Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0217090.com Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0217091.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0217092.scr Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0217100.Sys Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0217106.Sys Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0217108.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0217109.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0217110.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0217111.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0217112.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0217113.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0217114.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0217115.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0217116.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0217117.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0217118.pif Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0217119.com Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0217120.scr Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0217123.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0217146.Sys Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0217147.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0217148.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0217149.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0217150.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0217151.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0217152.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0217153.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0217154.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0217155.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0217156.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0217157.pif Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0217158.com Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0217159.scr Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0217160.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0218305.ime Infected: Trojan-Spy.Win32.Delf.azp skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0218312.Sys Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0218318.Sys Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0218321.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0218322.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0218323.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0218324.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0218325.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0218326.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0218327.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0218328.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0218329.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0218330.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0218331.pif Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0218332.com Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0218333.scr Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0218334.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0218346.Sys Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0218352.Sys Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0218355.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0218356.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0218357.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0218358.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0218359.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0218360.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0218361.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0218362.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0218363.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0218364.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0218365.com Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0218366.scr Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0218367.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0218369.com Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0218370.scr Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0218371.scr Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0218372.scr Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0218373.com Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0218374.com Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0218375.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0218376.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0218377.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0218378.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0218379.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0218380.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0218381.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0218382.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0218383.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0218384.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0218385.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0218386.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0218387.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0218388.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0218389.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0218390.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0218391.pif Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0218392.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0218393.pif Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0220405.Sys Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0220414.Sys Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0220424.Sys Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0220430.Sys Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0221610.Sys Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP167\A0221616.Sys Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP168\A0221710.Sys Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP168\A0221736.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP168\A0221738.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP168\A0221739.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP168\A0221740.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP168\A0221741.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP168\A0221742.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP168\A0221743.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP168\A0221744.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP168\A0221745.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP168\A0222642.Sys Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP168\A0222644.Sys Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP168\A0222688.Sys Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP169\A0222734.Sys Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP169\A0222752.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP169\A0222759.dll Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP169\A0222760.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP169\A0222761.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP170\A0224010.Sys Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP170\snapshot\MFEX-1.DAT Infected: Trojan-Spy.Win32.Delf.bdm skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP170\snapshot\MFEX-2.DAT Infected: Trojan-Spy.Win32.Delf.bda skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP170\snapshot\MFEX-3.DAT Infected: Trojan-Spy.Win32.Delf.azt skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP171\A0224113.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP171\A0224114.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP171\A0224115.Sys Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP171\A0225351.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP171\A0225352.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP171\A0225353.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP171\A0225354.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP171\A0225355.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP171\A0225356.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP171\A0225357.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP171\A0225358.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP171\A0225359.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP171\A0225361.com Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP171\A0225362.scr Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP171\A0225363.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225367.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225368.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225369.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225370.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225371.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225372.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225373.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225374.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225391.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225392.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225393.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225394.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225395.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225396.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225397.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225398.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225399.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225400.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225401.com Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225402.scr Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225403.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225416.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225417.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225418.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225419.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225420.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225421.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225422.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225423.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225424.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225425.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225426.com Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225427.scr Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225430.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225438.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225439.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225440.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225441.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225442.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225443.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225444.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225445.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225446.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225447.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225448.com Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225449.scr Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225452.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225464.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225465.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225466.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225467.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225468.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225469.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225470.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225471.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225472.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225473.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225474.com Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225475.scr Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225483.exe Object is locked skipped

 

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225484.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225485.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225486.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225487.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225488.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225489.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225490.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225491.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225492.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225493.com Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225494.scr Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0225497.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0226483.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0226484.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0226485.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0226486.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0226487.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0226488.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0226489.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0226490.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0226491.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0226492.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0226493.com Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0226494.scr Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0226499.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0227483.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0227484.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0227485.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0227486.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0227487.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0227488.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0227489.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0227490.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0227491.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0227492.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0227493.com Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0227494.scr Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0227498.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0228483.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0228484.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0228485.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0228486.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0228487.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0228488.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0228489.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0228490.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0228491.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0228492.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0228493.com Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0228494.scr Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0228497.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0228509.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0228510.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0228511.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0228512.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0228513.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0228514.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0228515.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0228516.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0228517.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0228518.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0228519.com Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0228520.scr Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0228523.exe Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP172\A0228529.pif Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP179\A0234745.dll Object is locked skipped

C:\System Volume Information\_restore{3A3C753E-374F-4D63-88D5-9555F76A7918}\RP179\change.log Object is locked skipped

C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped

C:\WINDOWS\ModemLog_Wireless Broadband Modem (WDM).txt Object is locked skipped

C:\WINDOWS\SchedLgU.Txt Object is locked skipped

C:\WINDOWS\SoftwareDistribution\EventCache\{A106CF80-C548-411F-8D10-05E764B16FE8}.bin Object is locked skipped

C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped

C:\WINDOWS\Sti_Trace.log Object is locked skipped

C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped

C:\WINDOWS\system32\config\default Object is locked skipped

C:\WINDOWS\system32\config\default.LOG Object is locked skipped

C:\WINDOWS\system32\config\Internet.evt Object is locked skipped

C:\WINDOWS\system32\config\SAM Object is locked skipped

C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped

C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped

C:\WINDOWS\system32\config\SECURITY Object is locked skipped

C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped

C:\WINDOWS\system32\config\software Object is locked skipped

C:\WINDOWS\system32\config\software.LOG Object is locked skipped

C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped

C:\WINDOWS\system32\config\system Object is locked skipped

C:\WINDOWS\system32\config\system.LOG Object is locked skipped

C:\WINDOWS\system32\h323log.txt Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped

C:\WINDOWS\wiadebug.log Object is locked skipped

C:\WINDOWS\wiaservc.log Object is locked skipped

C:\WINDOWS\WindowsUpdate.log Object is locked skipped

Scan process completed.

 

and here is a freh log of HJT ..I guess we r beating the record for the longest posts!!!

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:13:51 AM, on 2/23/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\WINDOWS\system32\DVDRAMSV.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
c:\TOSHIBA\IVP\swupdate\swupdtmr.exe
C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe
C:\WINDOWS\system32\ThpSrv.exe
C:\Program Files\TOSHIBA\TME3\Tmesrv31.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\TPSMain.exe
C:\WINDOWS\system32\thpsrv.exe
C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
C:\Program Files\Protector Suite QL\psqltray.exe
C:\WINDOWS\system32\TPSBattM.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\ltmoh\Ltmoh.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
C:\Program Files\Synaptics\SynTP\Toshiba.exe
C:\Program Files\TOSHIBA\TOSHIBA Controls\TFncKy.exe
C:\Program Files\TOSHIBA\TOSHIBA Zooming Utility\SmoothView.exe
C:\WINDOWS\system32\dla\DLACTRLW.exe
C:\toshiba\ivp\ism\pinger.exe
C:\Program Files\TOSHIBA\TME3\TMEEJME.EXE
C:\Program Files\TOSHIBA\TME3\TMERzCtl.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSServ.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\PROGRA~1\Intel\Wireless\Bin\Dot1XCfg.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Metamail Inc\Metamail Tray\Metamail Trust Manager.exe
C:\WINDOWS\system32\RAMASST.exe
C:\PROGRA~1\METAMA~1\METAMA~1\METAMA~2.EXE
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\Program Files\IPWireless Inc\IPWireless PC Software\UEStatus.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
O4 - HKLM\..\Run: [PSQLLauncher] "C:\Program Files\Protector Suite QL\launcher.exe" /startup
O4 - HKLM\..\Run: [ThpSrv] thpsrv /logon
O4 - HKLM\..\Run: [THotkey] C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
O4 - HKLM\..\Run: [TFncKy] TFncKy.exe
O4 - HKLM\..\Run: [DockMsgFrom] C:\Program Files\Toshiba\Toshiba Applet\DockMsgFrom.exe
O4 - HKLM\..\Run: [PadTouch] C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe
O4 - HKLM\..\Run: [SmoothView] C:\Program Files\TOSHIBA\TOSHIBA Zooming Utility\SmoothView.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\DLACTRLW.exe
O4 - HKLM\..\Run: [Pinger] c:\toshiba\ivp\ism\pinger.exe /run
O4 - HKLM\..\Run: [TMESRV.EXE] C:\Program Files\TOSHIBA\TME3\TMESRV31.EXE /Logon
O4 - HKLM\..\Run: [TMERzCtl.EXE] C:\Program Files\TOSHIBA\TME3\TMERzCtl.EXE /Service
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe "
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [CFSServ.exe] CFSServ.exe -NoClient
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [AOL Fast Start] "C:\Program Files\America Online 9.0\AOL.EXE" -b
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Default user')
O4 - Global Startup: Metamail Trust Manager.lnk = C:\Program Files\Metamail Inc\Metamail Tray\Metamail Trust Manager.exe
O4 - Global Startup: RAMASST.lnk = C:\WINDOWS\system32\RAMASST.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.toshibadirect.com/dpdstart
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/default/kavwebscan_unicode.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www.ca.com/securityadvisor/virusinfo/webscan.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{0C4C7CA9-5CB1-41D2-9E5A-35362D4CEFB4}: NameServer = 85.112.85.85 85.112.85.86
O17 - HKLM\System\CCS\Services\Tcpip\..\{CB27FA68-A18C-45DE-AE89-F3CBBB9FE5CE}: NameServer = 192.168.1.1,192.168.1.5
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
O23 - Service: AOL TopSpeed Monitor (AOL TopSpeedMonitor) - America Online, Inc - C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: DVD-RAM_Service - Matsushita Electric Industrial Co., Ltd. - C:\WINDOWS\system32\DVDRAMSV.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: Swupdtmr - Unknown owner - c:\TOSHIBA\IVP\swupdate\swupdtmr.exe
O23 - Service: TOSHIBA Application Service (TAPPSRV) - TOSHIBA Corp. - C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe
O23 - Service: TOSHIBA HDD Protection (Thpsrv) - TOSHIBA Corporation - C:\WINDOWS\system32\ThpSrv.exe
O23 - Service: Tmesrv3 (Tmesrv) - TOSHIBA - C:\Program Files\TOSHIBA\TME3\Tmesrv31.exe

--
End of file - 11876 bytes

 

Click Start>Run and type ComboFix /u then hit Enter to uninstall ComboFix and remove the files it has quarantined. This action will also reset the System Restore points, removing the infected files there as well. The C:\Deckard's folder will also be removed. You can delete any logs that were created/saved too.

Note - Combofix makes some changes when run to prevent autorun/autoplay of ALL CDs, floppies and USB devices, to assist with malware removal & increase security. If this is an issue or makes it difficult for you to use those devices, please ask how to reset it.


Guess what? Your system is now clean! Geri has posted some very helpful information and recommendations regarding future protection in the following link.

http://www.windowsbbs.com/showthread.php?t=67958

Everything seem to be working as it should now?

 

Hi Dave,

Everything is PERFECT now.. Thanks a lot for your valuable help..really appreciate it.
I have re run AVG antivirus,Antispyware and rootkit and no threat was found!!

Can I delete the folders named "Mysafe.backup 1, Mysafe.backup2 ect....I hae 523 of those and I don't really know what they are. They are listed under My Documents.

Again thanks a million mate... you can tag the thread as resolved

 

Would you right click a couple of those folders and Send To>Compressed (Zipped) Folder, then upload those zips to my submission channel. Leave a link back to this topic.


After reviewing this topic, I would also like to have a look at one more thing. Highlight and copy the bolded text below.

dir "C:\Documents and Settings\mohamed\Local Settings\Application Data" /s /A> "%userprofile%\desktop\appdata.txt "
exit
cls

Click Start>Run and type cmd then hit Enter to open a command window. Now right click the command window and paste the copied text. The command window should close on it's own and create a log file on your desktop named appdata.txt
Please post the contents of that log.

 

Hi Dave,

When I am trying to compress any of the safeback files I'm getting a system message saying it can't be zipped as the file is empty. I opened one folder and it was really empty.

Attached is the requested log

Volume in drive C is KHALIL
Volume Serial Number is 8C5D-9DCA

Directory of C:\Documents and Settings\mohamed\Local Settings\Application Data

02/11/2008 06:15 AM <DIR> .
02/11/2008 06:15 AM <DIR> ..
12/08/2006 04:31 AM <DIR> Adobe
12/05/2005 06:42 PM <DIR> ApplicationHistory
11/19/2006 02:23 AM <DIR> Google
09/17/2007 04:26 PM <DIR> Help
11/14/2006 01:06 PM <DIR> Identities
02/07/2008 06:27 AM <DIR> Microsoft
12/06/2005 02:32 PM <DIR> Yahoo
12/06/2005 02:14 PM <DIR> {3248F0A6-6813-11D6-A77B-00B0D0150040}
0 File(s) 0 bytes

Directory of C:\Documents and Settings\mohamed\Local Settings\Application Data\Adobe

12/08/2006 04:31 AM <DIR> .
12/08/2006 04:31 AM <DIR> ..
12/08/2006 04:31 AM <DIR> Acrobat
12/08/2006 04:31 AM <DIR> Color
0 File(s) 0 bytes

Directory of C:\Documents and Settings\mohamed\Local Settings\Application Data\Adobe\Acrobat

12/08/2006 04:31 AM <DIR> .
12/08/2006 04:31 AM <DIR> ..
12/08/2006 04:31 AM <DIR> 7.0
0 File(s) 0 bytes

Directory of C:\Documents and Settings\mohamed\Local Settings\Application Data\Adobe\Acrobat\7.0

12/08/2006 04:31 AM <DIR> .
12/08/2006 04:31 AM <DIR> ..
12/08/2006 04:31 AM <DIR> Cache
0 File(s) 0 bytes

Directory of C:\Documents and Settings\mohamed\Local Settings\Application Data\Adobe\Acrobat\7.0\Cache

12/08/2006 04:31 AM <DIR> .
12/08/2006 04:31 AM <DIR> ..
12/08/2006 04:31 AM <DIR> Search70
0 File(s) 0 bytes

Directory of C:\Documents and Settings\mohamed\Local Settings\Application Data\Adobe\Acrobat\7.0\Cache\Search70

12/08/2006 04:31 AM <DIR> .
12/08/2006 04:31 AM <DIR> ..
0 File(s) 0 bytes

Directory of C:\Documents and Settings\mohamed\Local Settings\Application Data\Adobe\Color

12/08/2006 04:31 AM <DIR> .
12/08/2006 04:31 AM <DIR> ..
0 File(s) 0 bytes

Directory of C:\Documents and Settings\mohamed\Local Settings\Application Data\ApplicationHistory

12/05/2005 06:42 PM <DIR> .
12/05/2005 06:42 PM <DIR> ..
0 File(s) 0 bytes

Directory of C:\Documents and Settings\mohamed\Local Settings\Application Data\Google

11/19/2006 02:23 AM <DIR> .
11/19/2006 02:23 AM <DIR> ..
02/03/2008 11:30 AM <DIR> Custom Buttons
0 File(s) 0 bytes

Directory of C:\Documents and Settings\mohamed\Local Settings\Application Data\Google\Custom Buttons

02/03/2008 11:30 AM <DIR> .
02/03/2008 11:30 AM <DIR> ..
11/19/2006 02:23 AM <DIR> Enterprise
06/22/2007 02:42 AM <DIR> Overrides
0 File(s) 0 bytes

Directory of C:\Documents and Settings\mohamed\Local Settings\Application Data\Google\Custom Buttons\Enterprise

11/19/2006 02:23 AM <DIR> .
11/19/2006 02:23 AM <DIR> ..
0 File(s) 0 bytes

Directory of C:\Documents and Settings\mohamed\Local Settings\Application Data\Google\Custom Buttons\Overrides

06/22/2007 02:42 AM <DIR> .
06/22/2007 02:42 AM <DIR> ..
0 File(s) 0 bytes

Directory of C:\Documents and Settings\mohamed\Local Settings\Application Data\Help

09/17/2007 04:26 PM <DIR> .
09/17/2007 04:26 PM <DIR> ..
0 File(s) 0 bytes

 

Directory of C:\Documents and Settings\mohamed\Local Settings\Application Data\Identities

11/14/2006 01:06 PM <DIR> .
11/14/2006 01:06 PM <DIR> ..
11/14/2006 01:06 PM <DIR> {34D7A8CD-2775-4AC1-B217-AF39C96B264F}
0 File(s) 0 bytes

Directory of C:\Documents and Settings\mohamed\Local Settings\Application Data\Identities\{34D7A8CD-2775-4AC1-B217-AF39C96B264F}

11/14/2006 01:06 PM <DIR> .
11/14/2006 01:06 PM <DIR> ..
11/14/2006 01:06 PM <DIR> Microsoft
0 File(s) 0 bytes

Directory of C:\Documents and Settings\mohamed\Local Settings\Application Data\Identities\{34D7A8CD-2775-4AC1-B217-AF39C96B264F}\Microsoft

11/14/2006 01:06 PM <DIR> .
11/14/2006 01:06 PM <DIR> ..
11/14/2006 01:06 PM <DIR> Outlook Express
0 File(s) 0 bytes

Directory of C:\Documents and Settings\mohamed\Local Settings\Application Data\Identities\{34D7A8CD-2775-4AC1-B217-AF39C96B264F}\Microsoft\Outlook Express

11/14/2006 01:06 PM <DIR> .
11/14/2006 01:06 PM <DIR> ..
0 File(s) 0 bytes

Directory of C:\Documents and Settings\mohamed\Local Settings\Application Data\Microsoft

02/07/2008 06:27 AM <DIR> .
02/07/2008 06:27 AM <DIR> ..
12/05/2005 06:23 PM <DIR> CD Burning
11/07/2006 11:53 PM <DIR> Credentials
02/07/2008 06:27 AM <DIR> Feeds
02/07/2008 06:27 AM <DIR> Feeds Cache
01/10/2007 10:47 AM <DIR> HelpCtr
02/07/2008 06:27 AM <DIR> Internet Explorer
11/12/2006 04:34 AM <DIR> Media Player
02/06/2008 04:48 AM <DIR> Messenger
12/05/2005 06:24 PM <DIR> OFFICE
02/22/2008 07:21 AM <DIR> Windows
02/06/2008 04:43 AM <DIR> Windows Live Contacts
02/04/2008 09:13 AM <DIR> Windows Live OneCare safety scanner
12/05/2005 06:19 PM <DIR> Windows Media
06/12/2006 05:30 PM <DIR> Works
0 File(s) 0 bytes

Directory of C:\Documents and Settings\mohamed\Local Settings\Application Data\Microsoft\CD Burning

12/05/2005 06:23 PM <DIR> .
12/05/2005 06:23 PM <DIR> ..
0 File(s) 0 bytes

Directory of C:\Documents and Settings\mohamed\Local Settings\Application Data\Microsoft\Credentials

11/07/2006 11:53 PM <DIR> .
11/07/2006 11:53 PM <DIR> ..
12/13/2006 04:22 AM <DIR> S-1-5-21-3454122850-2608146190-3624656239-1006
0 File(s) 0 bytes

Directory of C:\Documents and Settings\mohamed\Local Settings\Application Data\Microsoft\Credentials\S-1-5-21-3454122850-2608146190-3624656239-1006

12/13/2006 04:22 AM <DIR> .
12/13/2006 04:22 AM <DIR> ..
0 File(s) 0 bytes

Directory of C:\Documents and Settings\mohamed\Local Settings\Application Data\Microsoft\Feeds

02/07/2008 06:27 AM <DIR> .
02/07/2008 06:27 AM <DIR> ..
02/07/2008 06:27 AM <DIR> Microsoft Feeds~
0 File(s) 0 bytes

Directory of C:\Documents and Settings\mohamed\Local Settings\Application Data\Microsoft\Feeds\Microsoft Feeds~

02/07/2008 06:27 AM <DIR> .
02/07/2008 06:27 AM <DIR> ..
0 File(s) 0 bytes

Directory of C:\Documents and Settings\mohamed\Local Settings\Application Data\Microsoft\Feeds Cache

02/07/2008 06:27 AM <DIR> .
02/07/2008 06:27 AM <DIR> ..
02/07/2008 06:27 AM <DIR> OOXQFFU3
02/07/2008 06:27 AM <DIR> S0WWO5RD
02/07/2008 06:27 AM <DIR> SLXL2QIT
02/07/2008 06:27 AM <DIR> U1BSAU08
0 File(s) 0 bytes

Directory of C:\Documents and Settings\mohamed\Local Settings\Application Data\Microsoft\Feeds Cache\OOXQFFU3

02/07/2008 06:27 AM <DIR> .
02/07/2008 06:27 AM <DIR> ..
0 File(s) 0 bytes

Directory of C:\Documents and Settings\mohamed\Local Settings\Application Data\Microsoft\Feeds Cache\S0WWO5RD

02/07/2008 06:27 AM <DIR> .
02/07/2008 06:27 AM <DIR> ..
0 File(s) 0 bytes

Directory of C:\Documents and Settings\mohamed\Local Settings\Application Data\Microsoft\Feeds Cache\SLXL2QIT

02/07/2008 06:27 AM <DIR> .
02/07/2008 06:27 AM <DIR> ..
0 File(s) 0 bytes

Directory of C:\Documents and Settings\mohamed\Local Settings\Application Data\Microsoft\Feeds Cache\U1BSAU08

02/07/2008 06:27 AM <DIR> .
02/07/2008 06:27 AM <DIR> ..
0 File(s) 0 bytes

Directory of C:\Documents and Settings\mohamed\Local Settings\Application Data\Microsoft\HelpCtr

01/10/2007 10:47 AM <DIR> .
01/10/2007 10:47 AM <DIR> ..
0 File(s) 0 bytes

Directory of C:\Documents and Settings\mohamed\Local Settings\Application Data\Microsoft\Internet Explorer

02/07/2008 06:27 AM <DIR> .
02/07/2008 06:27 AM <DIR> ..
0 File(s) 0 bytes

Directory of C:\Documents and Settings\mohamed\Local Settings\Application Data\Microsoft\Media Player

11/12/2006 04:34 AM <DIR> .
11/12/2006 04:34 AM <DIR> ..
11/08/2006 09:56 AM <DIR> Transcoded Files Cache
0 File(s) 0 bytes

Directory of C:\Documents and Settings\mohamed\Local Settings\Application Data\Microsoft\Media Player\Transcoded Files Cache

11/08/2006 09:56 AM <DIR> .
11/08/2006 09:56 AM <DIR> ..
0 File(s) 0 bytes

 

I've removed for email address content

noahdfear

 

I've removed for email address content

noahdfear

 

I've removed for email address content

noahdfear

 

I've removed for email address content

noahdfear

 

I've removed email address content

noahdfear


Directory of C:\Documents and Settings\mohamed\Local Settings\Application Data\Microsoft\Windows Live OneCare safety scanner

02/04/2008 09:13 AM <DIR> .
02/04/2008 09:13 AM <DIR> ..
02/04/2008 09:13 AM <DIR> SQM
0 File(s) 0 bytes

Directory of C:\Documents and Settings\mohamed\Local Settings\Application Data\Microsoft\Windows Live OneCare safety scanner\SQM

02/04/2008 09:13 AM <DIR> .
02/04/2008 09:13 AM <DIR> ..
02/04/2008 09:13 AM <DIR> MSVS
0 File(s) 0 bytes

Directory of C:\Documents and Settings\mohamed\Local Settings\Application Data\Microsoft\Windows Live OneCare safety scanner\SQM\MSVS

02/04/2008 09:13 AM <DIR> .
02/04/2008 09:13 AM <DIR> ..
0 File(s) 0 bytes

Directory of C:\Documents and Settings\mohamed\Local Settings\Application Data\Microsoft\Windows Media

12/05/2005 06:19 PM <DIR> .
12/05/2005 06:19 PM <DIR> ..
02/24/2008 03:14 AM <DIR> 10.0
12/05/2005 06:19 PM <DIR> 9.0
0 File(s) 0 bytes

Directory of C:\Documents and Settings\mohamed\Local Settings\Application Data\Microsoft\Windows Media\10.0

02/24/2008 03:14 AM <DIR> .
02/24/2008 03:14 AM <DIR> ..
0 File(s) 0 bytes

Directory of C:\Documents and Settings\mohamed\Local Settings\Application Data\Microsoft\Windows Media\9.0

12/05/2005 06:19 PM <DIR> .
12/05/2005 06:19 PM <DIR> ..
0 File(s) 0 bytes

Directory of C:\Documents and Settings\mohamed\Local Settings\Application Data\Microsoft\Works

06/12/2006 05:30 PM <DIR> .
06/12/2006 05:30 PM <DIR> ..
06/12/2006 05:30 PM <DIR> Portfolio
0 File(s) 0 bytes

Directory of C:\Documents and Settings\mohamed\Local Settings\Application Data\Microsoft\Works\Portfolio

06/12/2006 05:30 PM <DIR> .
06/12/2006 05:30 PM <DIR> ..
0 File(s) 0 bytes

Directory of C:\Documents and Settings\mohamed\Local Settings\Application Data\Yahoo

12/06/2005 02:32 PM <DIR> .
12/06/2005 02:32 PM <DIR> ..
12/06/2005 02:32 PM <DIR> YMP
0 File(s) 0 bytes

Directory of C:\Documents and Settings\mohamed\Local Settings\Application Data\Yahoo\YMP

12/06/2005 02:32 PM <DIR> .
12/06/2005 02:32 PM <DIR> ..
12/06/2005 02:32 PM <DIR> minis
0 File(s) 0 bytes

Directory of C:\Documents and Settings\mohamed\Local Settings\Application Data\Yahoo\YMP\minis

12/06/2005 02:32 PM <DIR> .
12/06/2005 02:32 PM <DIR> ..
0 File(s) 0 bytes

Directory of C:\Documents and Settings\mohamed\Local Settings\Application Data\{3248F0A6-6813-11D6-A77B-00B0D0150040}

12/06/2005 02:14 PM <DIR> .
12/06/2005 02:14 PM <DIR> ..
0 File(s) 0 bytes

Total Files Listed:
0 File(s) 0 bytes
797 Dir(s) 62,138,564,608 bytes free

 

Go ahead and delete those MySafe.Backup folders, since you don't know what they belong to and appear to be empty anyway.

The Application Data directory contents are fine as well.

 

Thanks again Dave..)
Make my day tag the thread as resolved

 

You're most welcome Andy. Tagged!