Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

Various Trojan and Malware problems [RESOLVED]

Started by Solarin , Aug 23 2006 10:21 PM

  • This topic is locked This topic is locked

#16
Shaba
Posted 31 August 2006 - 11:59 PM

Shaba

    Malware Expert

  • Member
  • PipPipPip
  • 558 posts
  • MVP
Hi

I see no kaspersky report. Could you re-send it, please? :whistling:
  • 0

Advertisements

#17
Solarin
Posted 02 September 2006 - 10:20 AM

Solarin

    Member

  • Topic Starter
  • Member
  • PipPip
  • 28 posts
Drat! How silly! Let me rescan and I will post the log.
  • 0

#18
Solarin
Posted 04 September 2006 - 08:57 AM

Solarin

    Member

  • Topic Starter
  • Member
  • PipPip
  • 28 posts
Kaspersky Log:

-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Monday, September 04, 2006 9:51:28 AM
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.83.0
Kaspersky Anti-Virus database last update: 4/09/2006
Kaspersky Anti-Virus database records: 220605
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
A:\
C:\
D:\
E:\
G:\

Scan Statistics:
Total number of scanned objects: 150459
Number of viruses found: 14
Number of infected objects: 38 / 0
Number of suspicious objects: 4
Duration of the scan process: 02:34:46

Infected Object Name / Virus Name / Last Action
C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite59.zip/backWeb-8876480.exe Suspicious: Password-protected-EXE skipped
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\BackWeblite59.zip ZIP: suspicious - 1 skipped
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\SecondThoughtSTCLoader2.zip/stcloader.exe Suspicious: Password-protected-EXE skipped
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\SecondThoughtSTCLoader2.zip ZIP: suspicious - 1 skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\Windows Defender\Support\WDLog-08272006-012758.log Object is locked skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\Common Client\settings.dat Object is locked skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Symantec\LiveUpdate\2006-09-04_Log.ALUSchedulerSvc.LiveUpdate Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\Matt\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\Matt\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat Object is locked skipped
C:\Documents and Settings\Matt\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\Matt\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\Matt\Local Settings\Application Data\Microsoft\Windows Defender\FileTracker\{72C68A4E-8B95-4827-A8FD-7D07268EC81B} Object is locked skipped
C:\Documents and Settings\Matt\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Matt\Local Settings\History\History.IE5\MSHist012006090420060905\index.dat Object is locked skipped
C:\Documents and Settings\Matt\Local Settings\Temporary Internet Files\AntiPhishing\07FB382D-AA75-4683-82F4-EAB265A275CB.dat Object is locked skipped
C:\Documents and Settings\Matt\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Matt\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\Matt\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\Matthew Cavanaugh\My Documents\Education and School\Econ 1015\econ 5 1st exam ws03V1.doc Object is locked skipped
C:\Documents and Settings\Matthew Cavanaugh\My Documents\My Literature\Angelic.doc Object is locked skipped
C:\Documents and Settings\Matthew Cavanaugh\My Documents\My Literature\book prolouge.doc Object is locked skipped
C:\Documents and Settings\Matthew Cavanaugh\My Documents\My Literature\King's Juggle List.doc Object is locked skipped
C:\Documents and Settings\Matthew Cavanaugh\My Documents\My Literature\nightmare.txt Object is locked skipped
C:\Documents and Settings\Matthew Cavanaugh\My Documents\My Literature\One Summer Afternoon....doc Object is locked skipped
C:\Documents and Settings\Matthew Cavanaugh\My Documents\My Literature\Pope.doc Object is locked skipped
C:\Documents and Settings\Matthew Cavanaugh\My Documents\My Literature\The Young Patriot.doc Object is locked skipped
C:\Documents and Settings\Matthew Cavanaugh\My Documents\My Literature\War of the Phoenix.doc Object is locked skipped
C:\Documents and Settings\Matthew Cavanaugh\My Documents\Thumbs.db Object is locked skipped
C:\Documents and Settings\NetworkService.NT AUTHORITY\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService.NT AUTHORITY\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService.NT AUTHORITY\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService.NT AUTHORITY\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService.NT AUTHORITY\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService.NT AUTHORITY\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService.NT AUTHORITY\ntuser.dat.LOG Object is locked skipped
C:\Program Files\Boot Randomizer\Boot\12391.zip Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\EENGINE\EPERSIST.DAT Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBConfig.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBDebug.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBDetect.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBNotify.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBRefr.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBSetCfg.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBSetCfg2.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBSetDev.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBSetLoc.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBSetUsr.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBSMNot.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBSMReg.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBSMRSt.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBStHash.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBStMSI.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\BBValid.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\SPPolicy.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\SPStart.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SPBBC\LOGS\SPStop.log Object is locked skipped
C:\Program Files\Hijack This!\backups\backup-20060827-102539-787.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.da skipped
C:\Program Files\Internet Explorer\ie6setup.exe Object is locked skipped
C:\Program Files\Logitech\Desktop Messenger\8876480\Users\Matt\Data\chandir.dat Object is locked skipped
C:\Program Files\Logitech\Desktop Messenger\8876480\Users\Matt\Data\chandir.idx Object is locked skipped
C:\Program Files\Logitech\Desktop Messenger\8876480\Users\Matt\Data\chn.dat Object is locked skipped
C:\Program Files\Logitech\Desktop Messenger\8876480\Users\Matt\Data\chn.idx Object is locked skipped
C:\Program Files\Logitech\Desktop Messenger\8876480\Users\Matt\Data\D0000000.FCS Object is locked skipped
C:\Program Files\Logitech\Desktop Messenger\8876480\Users\Matt\Data\inuse.txt Object is locked skipped
C:\Program Files\Logitech\Desktop Messenger\8876480\Users\Matt\Data\L0000002.FCS Object is locked skipped
C:\Program Files\Logitech\Desktop Messenger\8876480\Users\Matt\Data\main.log Object is locked skipped
C:\Program Files\Logitech\Desktop Messenger\8876480\Users\Matt\Data\prs.dat Object is locked skipped
C:\Program Files\Logitech\Desktop Messenger\8876480\Users\Matt\Data\prs.idx Object is locked skipped
C:\Program Files\Logitech\Desktop Messenger\8876480\Users\Matt\Data\prs_die.dat Object is locked skipped
C:\Program Files\Logitech\Desktop Messenger\8876480\Users\Matt\Data\prs_die.idx Object is locked skipped
C:\Program Files\Logitech\Desktop Messenger\8876480\Users\Matt\Data\prs_dnd.dat Object is locked skipped
C:\Program Files\Logitech\Desktop Messenger\8876480\Users\Matt\Data\prs_dnd.idx Object is locked skipped
C:\Program Files\Logitech\Desktop Messenger\8876480\Users\Matt\Data\prs_ext.dat Object is locked skipped
C:\Program Files\Logitech\Desktop Messenger\8876480\Users\Matt\Data\prs_ext.idx Object is locked skipped
C:\Program Files\Logitech\Desktop Messenger\8876480\Users\Matt\Data\prs_rcv.dat Object is locked skipped
C:\Program Files\Logitech\Desktop Messenger\8876480\Users\Matt\Data\prs_rcv.idx Object is locked skipped
C:\Program Files\Logitech\Desktop Messenger\8876480\Users\Matt\Data\storydb.dat Object is locked skipped
C:\Program Files\Logitech\Desktop Messenger\8876480\Users\Matt\Data\storydb.idx Object is locked skipped
C:\Program Files\Microsoft Office\Office10\SARGE.acs Object is locked skipped
C:\Program Files\Microsoft Office\Office10\Sarge.inf Object is locked skipped
C:\Program Files\Symantec AntiVirus\SAVRT\0343NAV~.TMP Object is locked skipped
C:\Program Files\Symantec AntiVirus\SAVRT\0593NAV~.TMP Object is locked skipped
C:\RECYCLER\NPROTECT\00026344.dtd Object is locked skipped
C:\RECYCLER\NPROTECT\00026345.dtd Object is locked skipped
C:\RECYCLER\NPROTECT\00026348.ini Object is locked skipped
C:\RECYCLER\NPROTECT\00026352.xml Object is locked skipped
C:\RECYCLER\NPROTECT\00026375.DBX Object is locked skipped
C:\RECYCLER\NPROTECT\00026389.BIN Object is locked skipped
C:\RECYCLER\NPROTECT\00026390.edb Object is locked skipped
C:\RECYCLER\NPROTECT\00026398.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026399.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026400.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026401.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026402.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026403.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026405.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026406.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026427.MAP Object is locked skipped
C:\RECYCLER\NPROTECT\00026428.MAP Object is locked skipped
C:\RECYCLER\NPROTECT\00026439.cab Object is locked skipped
C:\RECYCLER\NPROTECT\00026445 Object is locked skipped
C:\RECYCLER\NPROTECT\00026446.EXE Object is locked skipped
C:\RECYCLER\NPROTECT\00026449.dll Object is locked skipped
C:\RECYCLER\NPROTECT\00026450.dat Object is locked skipped
C:\RECYCLER\NPROTECT\00026451.sig Object is locked skipped
C:\RECYCLER\NPROTECT\00026452.dll Object is locked skipped
C:\RECYCLER\NPROTECT\00026453.dll Object is locked skipped
C:\RECYCLER\NPROTECT\00026454.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00026455.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00026456.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00026457.1 Object is locked skipped
C:\RECYCLER\NPROTECT\00026458.inf Object is locked skipped
C:\RECYCLER\NPROTECT\00026459.txt Object is locked skipped
C:\RECYCLER\NPROTECT\00026460.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00026461.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00026462.dll Object is locked skipped
C:\RECYCLER\NPROTECT\00026463.cat Object is locked skipped
C:\RECYCLER\NPROTECT\00026464.dll Object is locked skipped
C:\RECYCLER\NPROTECT\00026465.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00026466.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00026467.inf Object is locked skipped
C:\RECYCLER\NPROTECT\00026468.url Object is locked skipped
C:\RECYCLER\NPROTECT\00026469.ver Object is locked skipped
C:\RECYCLER\NPROTECT\00026470.inf Object is locked skipped
C:\RECYCLER\NPROTECT\00026471.PSM Object is locked skipped
C:\RECYCLER\NPROTECT\00026472.STA Object is locked skipped
C:\RECYCLER\NPROTECT\00026473.TXT Object is locked skipped
C:\RECYCLER\NPROTECT\00026474.STA Object is locked skipped
C:\RECYCLER\NPROTECT\00026475.STA Object is locked skipped
C:\RECYCLER\NPROTECT\00026476.edb Object is locked skipped
C:\RECYCLER\NPROTECT\00026486.edb Object is locked skipped
C:\RECYCLER\NPROTECT\00026489.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026490.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026491.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026492.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026493.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026494.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026495.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026496.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026497.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026498.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026499.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026500.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026502.wpl Object is locked skipped
C:\RECYCLER\NPROTECT\00026503.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026504.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026505.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026506.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026507.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026518.BIN Object is locked skipped
C:\RECYCLER\NPROTECT\00026519.edb Object is locked skipped
C:\RECYCLER\NPROTECT\00026531.DBX Object is locked skipped
C:\RECYCLER\NPROTECT\00026532.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026533.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026535.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026538.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026539.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026541.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026542.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026543.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026544.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026545.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026546.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026548.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026550.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026551.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026569.cab Object is locked skipped
C:\RECYCLER\NPROTECT\00026574 Object is locked skipped
C:\RECYCLER\NPROTECT\00026575.EXE Object is locked skipped
C:\RECYCLER\NPROTECT\00026579.dll Object is locked skipped
C:\RECYCLER\NPROTECT\00026580.dat Object is locked skipped
C:\RECYCLER\NPROTECT\00026581.sig Object is locked skipped
C:\RECYCLER\NPROTECT\00026582.dll Object is locked skipped
C:\RECYCLER\NPROTECT\00026583.dll Object is locked skipped
C:\RECYCLER\NPROTECT\00026584.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00026585.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00026586.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00026587.1 Object is locked skipped
C:\RECYCLER\NPROTECT\00026588.inf Object is locked skipped
C:\RECYCLER\NPROTECT\00026589.txt Object is locked skipped
C:\RECYCLER\NPROTECT\00026590.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00026591.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00026592.dll Object is locked skipped
C:\RECYCLER\NPROTECT\00026593.cat Object is locked skipped
C:\RECYCLER\NPROTECT\00026594.dll Object is locked skipped
C:\RECYCLER\NPROTECT\00026595.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00026596.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00026597.inf Object is locked skipped
C:\RECYCLER\NPROTECT\00026598.url Object is locked skipped
C:\RECYCLER\NPROTECT\00026599.ver Object is locked skipped
C:\RECYCLER\NPROTECT\00026600.inf Object is locked skipped
C:\RECYCLER\NPROTECT\00026601.PSM Object is locked skipped
C:\RECYCLER\NPROTECT\00026602.STA Object is locked skipped
C:\RECYCLER\NPROTECT\00026603.TXT Object is locked skipped
C:\RECYCLER\NPROTECT\00026604.STA Object is locked skipped
C:\RECYCLER\NPROTECT\00026605.STA Object is locked skipped
C:\RECYCLER\NPROTECT\00026606.edb Object is locked skipped
C:\RECYCLER\NPROTECT\00026607.MAP Object is locked skipped
C:\RECYCLER\NPROTECT\00026608.MAP Object is locked skipped
C:\RECYCLER\NPROTECT\00026619.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026620.DBX Object is locked skipped
C:\RECYCLER\NPROTECT\00026621.DBX Object is locked skipped
C:\RECYCLER\NPROTECT\00026622.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026623.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026625.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026626.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026628.edb Object is locked skipped
C:\RECYCLER\NPROTECT\00026630.XML Object is locked skipped
C:\RECYCLER\NPROTECT\00026633.XML Object is locked skipped
C:\RECYCLER\NPROTECT\00026636.wpl Object is locked skipped
C:\RECYCLER\NPROTECT\00026644.BIN Object is locked skipped
C:\RECYCLER\NPROTECT\00026655.edb Object is locked skipped
C:\RECYCLER\NPROTECT\00026658.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026659.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026660.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026661.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026662.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026664.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026665.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026666.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026667.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026668.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026669.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026670.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026671.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026673.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026676.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026679.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026680.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026682.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026685.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026686.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026688.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026689.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026694.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026696.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026699.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026700.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026704.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026705.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026709.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026713.XML Object is locked skipped
C:\RECYCLER\NPROTECT\00026715.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026716.wpl Object is locked skipped
C:\RECYCLER\NPROTECT\00026719.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026725.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026726.sol Object is locked skipped
C:\RECYCLER\NPROTECT\00026727.sol Object is locked skipped
C:\RECYCLER\NPROTECT\00026728.sol Object is locked skipped
C:\RECYCLER\NPROTECT\00026729.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026732.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026733.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026735.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026736.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026737.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026738.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026739.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026740.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026741.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026742.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026743.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026744.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026745.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026746.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026747.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026748.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026749.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026750.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026751.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026752.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026753.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026754.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026755.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026756.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026757.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026759.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026762.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026763.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026765.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026766.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026767.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026768.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026769.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026770.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026771.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026772.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026774.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026775.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026781.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026782.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026784.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026785.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00026805.cab Object is locked skipped
C:\RECYCLER\NPROTECT\00026810 Object is locked skipped
C:\RECYCLER\NPROTECT\00026811.EXE Object is locked skipped
C:\RECYCLER\NPROTECT\00026815.dll Object is locked skipped
C:\RECYCLER\NPROTECT\00026816.dat Object is locked skipped
C:\RECYCLER\NPROTECT\00026817.sig Object is locked skipped
C:\RECYCLER\NPROTECT\00026818.dll Object is locked skipped
C:\RECYCLER\NPROTECT\00026819.dll Object is locked skipped
C:\RECYCLER\NPROTECT\00026820.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00026821.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00026822.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00026823.1 Object is locked skipped
C:\RECYCLER\NPROTECT\00026824.inf Object is locked skipped
C:\RECYCLER\NPROTECT\00026825.txt Object is locked skipped
C:\RECYCLER\NPROTECT\00026826.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00026827.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00026828.dll Object is locked skipped
C:\RECYCLER\NPROTECT\00026829.cat Object is locked skipped
C:\RECYCLER\NPROTECT\00026830.dll Object is locked skipped
C:\RECYCLER\NPROTECT\00026831.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00026832.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00026833.inf Object is locked skipped
C:\RECYCLER\NPROTECT\00026834.url Object is locked skipped
C:\RECYCLER\NPROTECT\00026835.ver Object is locked skipped
C:\RECYCLER\NPROTECT\00026836.inf Object is locked skipped
C:\RECYCLER\NPROTECT\00026837.PSM Object is locked skipped
C:\RECYCLER\NPROTECT\00026838.STA Object is locked skipped
C:\RECYCLER\NPROTECT\00026839.TXT Object is locked skipped
C:\RECYCLER\NPROTECT\00026840.STA Object is locked skipped
C:\RECYCLER\NPROTECT\00026841.STA Object is locked skipped
C:\RECYCLER\NPROTECT\00026845.edb Object is locked skipped
C:\RECYCLER\NPROTECT\00026851.MAP Object is locked skipped
C:\RECYCLER\NPROTECT\00026852.MAP Object is locked skipped
C:\RECYCLER\NPROTECT\00026861.BIN Object is locked skipped
C:\RECYCLER\NPROTECT\00026862.edb Object is locked skipped
C:\RECYCLER\NPROTECT\00026874.edb Object is locked skipped
C:\RECYCLER\NPROTECT\00026875.REG Object is locked skipped
C:\RECYCLER\NPROTECT\00026876.REG Object is locked skipped
C:\RECYCLER\NPROTECT\00026877.REG Object is locked skipped
C:\RECYCLER\NPROTECT\00026878.REG Object is locked skipped
C:\RECYCLER\NPROTECT\00026879.REG Object is locked skipped
C:\RECYCLER\NPROTECT\00026880.und Object is locked skipped
C:\RECYCLER\NPROTECT\00026881.und Object is locked skipped
C:\RECYCLER\NPROTECT\00026882.und Object is locked skipped
C:\RECYCLER\NPROTECT\00026883.und Object is locked skipped
C:\RECYCLER\NPROTECT\00026884.und Object is locked skipped
C:\RECYCLER\NPROTECT\00026885.und Object is locked skipped
C:\RECYCLER\NPROTECT\00026886.und Object is locked skipped
C:\RECYCLER\NPROTECT\00026887.und Object is locked skipped
C:\RECYCLER\NPROTECT\00026888.und Object is locked skipped
C:\RECYCLER\NPROTECT\00026889.und Object is locked skipped
C:\RECYCLER\NPROTECT\00026890.und Object is locked skipped
C:\RECYCLER\NPROTECT\00026891.und Object is locked skipped
C:\RECYCLER\NPROTECT\00026892.und Object is locked skipped
C:\RECYCLER\NPROTECT\00026893.und Object is locked skipped
C:\RECYCLER\NPROTECT\00026894.und Object is locked skipped
C:\RECYCLER\NPROTECT\00026895.und Object is locked skipped
C:\RECYCLER\NPROTECT\00026896.und Object is locked skipped
C:\RECYCLER\NPROTECT\00026897.und Object is locked skipped
C:\RECYCLER\NPROTECT\00026898.und Object is locked skipped
C:\RECYCLER\NPROTECT\00026899.und Object is locked skipped
C:\RECYCLER\NPROTECT\00026900.und Object is locked skipped
C:\RECYCLER\NPROTECT\00026901.und Object is locked skipped
C:\RECYCLER\NPROTECT\00026902.und Object is locked skipped
C:\RECYCLER\NPROTECT\00026903.und Object is locked skipped
C:\RECYCLER\NPROTECT\00026904.und Object is locked skipped
C:\RECYCLER\NPROTECT\00026905.und Object is locked skipped
C:\RECYCLER\NPROTECT\00026906.und Object is locked skipped
C:\RECYCLER\NPROTECT\00026907.und Object is locked skipped
C:\RECYCLER\NPROTECT\00026908.und Object is locked skipped
C:\RECYCLER\NPROTECT\00026909.und Object is locked skipped
C:\RECYCLER\NPROTECT\00026910.und Object is locked skipped
C:\RECYCLER\NPROTECT\00026911.und Object is locked skipped
C:\RECYCLER\NPROTECT\00026912.und Object is locked skipped
C:\RECYCLER\NPROTECT\00026913.und Object is locked skipped
C:\RECYCLER\NPROTECT\00026914.und Object is locked skipped
C:\RECYCLER\NPROTECT\00026915.und Object is locked skipped
C:\RECYCLER\NPROTECT\00026916.und Object is locked skipped
C:\RECYCLER\NPROTECT\00026917.und Object is locked skipped
C:\RECYCLER\NPROTECT\00026918.und Object is locked skipped
C:\RECYCLER\NPROTECT\00026919.und Object is locked skipped
C:\RECYCLER\NPROTECT\00026920.und Object is locked skipped
C:\RECYCLER\NPROTECT\00026921.und Object is locked skipped
C:\RECYCLER\NPROTECT\00026922.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026923.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026924.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026925.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026926.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026927.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026928.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026929.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026930.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026931.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026932.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026933.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026934.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026935.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026936.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026937.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026938.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026939.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026940.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026941.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026942.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026943.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026944.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026945.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026946.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026947.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026948.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026949.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026950.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026951.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026952.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026953.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026954.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026955.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026956.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026957.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026958.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026959.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026960.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026961.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026962.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026963.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026964.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026965.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026966.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026967.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026968.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026969.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026970.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026971.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026972.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026973.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026974.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026975.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026976.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026977.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026978.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026979.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026980.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026981.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026982.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026983.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026984.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026985.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026986.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026987.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026988.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026989.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026990.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026991.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026992.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026993.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026994.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026995.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026996.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026997.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026998.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00026999.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00027000.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00027001.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00027002.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00027003.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00027004.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00027005.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00027006.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00027007.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00027008.sud Object is locked skipped
C:\RECYCLER\NPROTECT\00027011.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027012.DBX Object is locked skipped
C:\RECYCLER\NPROTECT\00027013.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027014.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027015.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027017.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027019.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027020.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027035.cab Object is locked skipped
C:\RECYCLER\NPROTECT\00027040 Object is locked skipped
C:\RECYCLER\NPROTECT\00027041.EXE Object is locked skipped
C:\RECYCLER\NPROTECT\00027044.dll Object is locked skipped
C:\RECYCLER\NPROTECT\00027045.dat Object is locked skipped
C:\RECYCLER\NPROTECT\00027046.sig Object is locked skipped
C:\RECYCLER\NPROTECT\00027047.dll Object is locked skipped
C:\RECYCLER\NPROTECT\00027048.dll Object is locked skipped
C:\RECYCLER\NPROTECT\00027049.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00027050.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00027051.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00027052.1 Object is locked skipped
C:\RECYCLER\NPROTECT\00027053.inf Object is locked skipped
C:\RECYCLER\NPROTECT\00027054.txt Object is locked skipped
C:\RECYCLER\NPROTECT\00027055.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00027056.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00027057.dll Object is locked skipped
C:\RECYCLER\NPROTECT\00027059.cat Object is locked skipped
C:\RECYCLER\NPROTECT\00027060.dll Object is locked skipped
C:\RECYCLER\NPROTECT\00027061.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00027062.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00027063.inf Object is locked skipped
C:\RECYCLER\NPROTECT\00027064.url Object is locked skipped
C:\RECYCLER\NPROTECT\00027065.ver Object is locked skipped
C:\RECYCLER\NPROTECT\00027066.inf Object is locked skipped
C:\RECYCLER\NPROTECT\00027067.PSM Object is locked skipped
C:\RECYCLER\NPROTECT\00027068.STA Object is locked skipped
C:\RECYCLER\NPROTECT\00027069.TXT Object is locked skipped
C:\RECYCLER\NPROTECT\00027070.STA Object is locked skipped
C:\RECYCLER\NPROTECT\00027071.STA Object is locked skipped
C:\RECYCLER\NPROTECT\00027072.edb Object is locked skipped
C:\RECYCLER\NPROTECT\00027084.xml Object is locked skipped
C:\RECYCLER\NPROTECT\00027087.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027088.DBX Object is locked skipped
C:\RECYCLER\NPROTECT\00027089.DBX Object is locked skipped
C:\RECYCLER\NPROTECT\00027091.edb Object is locked skipped
C:\RECYCLER\NPROTECT\00027096.DBX Object is locked skipped
C:\RECYCLER\NPROTECT\00027102.edb Object is locked skipped
C:\RECYCLER\NPROTECT\00027115.BIN Object is locked skipped
C:\RECYCLER\NPROTECT\00027116.edb Object is locked skipped
C:\RECYCLER\NPROTECT\00027122.MAP Object is locked skipped
C:\RECYCLER\NPROTECT\00027123.MAP Object is locked skipped
C:\RECYCLER\NPROTECT\00027125.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027126.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027127.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027128.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027129.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027130.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027131.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027132.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027133.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027134.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027136.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027137.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027138.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027139.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027140.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027146.XML Object is locked skipped
C:\RECYCLER\NPROTECT\00027147.TXT Object is locked skipped
C:\RECYCLER\NPROTECT\00027148.TXT Object is locked skipped
C:\RECYCLER\NPROTECT\00027149.MCH Object is locked skipped
C:\RECYCLER\NPROTECT\00027150.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027159.edb Object is locked skipped
C:\RECYCLER\NPROTECT\00027172.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027173.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027174.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027176.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027177.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027183.cab Object is locked skipped
C:\RECYCLER\NPROTECT\00027189 Object is locked skipped
C:\RECYCLER\NPROTECT\00027190.EXE Object is locked skipped
C:\RECYCLER\NPROTECT\00027193.dll Object is locked skipped
C:\RECYCLER\NPROTECT\00027194.dat Object is locked skipped
C:\RECYCLER\NPROTECT\00027195.sig Object is locked skipped
C:\RECYCLER\NPROTECT\00027196.dll Object is locked skipped
C:\RECYCLER\NPROTECT\00027197.dll Object is locked skipped
C:\RECYCLER\NPROTECT\00027198.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00027199.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00027200.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00027201.1 Object is locked skipped
C:\RECYCLER\NPROTECT\00027202.inf Object is locked skipped
C:\RECYCLER\NPROTECT\00027203.txt Object is locked skipped
C:\RECYCLER\NPROTECT\00027204.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00027205.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00027206.dll Object is locked skipped
C:\RECYCLER\NPROTECT\00027207.cat Object is locked skipped
C:\RECYCLER\NPROTECT\00027208.dll Object is locked skipped
C:\RECYCLER\NPROTECT\00027209.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00027210.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00027211.inf Object is locked skipped
C:\RECYCLER\NPROTECT\00027212.url Object is locked skipped
C:\RECYCLER\NPROTECT\00027213.ver Object is locked skipped
C:\RECYCLER\NPROTECT\00027214.inf Object is locked skipped
C:\RECYCLER\NPROTECT\00027215.PSM Object is locked skipped
C:\RECYCLER\NPROTECT\00027216.STA Object is locked skipped
C:\RECYCLER\NPROTECT\00027217.TXT Object is locked skipped
C:\RECYCLER\NPROTECT\00027218.STA Object is locked skipped
C:\RECYCLER\NPROTECT\00027219.STA Object is locked skipped
C:\RECYCLER\NPROTECT\00027220.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027221.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027222.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027223.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027224.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027225.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027226.edb Object is locked skipped
C:\RECYCLER\NPROTECT\00027235.wpl Object is locked skipped
C:\RECYCLER\NPROTECT\00027236.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027237.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027247.XML Object is locked skipped
C:\RECYCLER\NPROTECT\00027252.XML Object is locked skipped
C:\RECYCLER\NPROTECT\00027254.wpl Object is locked skipped
C:\RECYCLER\NPROTECT\00027256.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027259.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027260.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027261.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027281.BIN Object is locked skipped
C:\RECYCLER\NPROTECT\00027282.edb Object is locked skipped
C:\RECYCLER\NPROTECT\00027284.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027286.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027287.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027288.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027289.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027291.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027292.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027294.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027295.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027296.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027297.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027298.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027300.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027301.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027302.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027303.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027304.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027305.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027306.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027307.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027308.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027309.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027310.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027311.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027312.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027313.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027314.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027316.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027317.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027319.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027320.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027321.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027322.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027323.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027324.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027325.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027326.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027328.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027334.old Object is locked skipped
C:\RECYCLER\NPROTECT\00027335.old Object is locked skipped
C:\RECYCLER\NPROTECT\00027336.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027337.old Object is locked skipped
C:\RECYCLER\NPROTECT\00027338.old Object is locked skipped
C:\RECYCLER\NPROTECT\00027339.old Object is locked skipped
C:\RECYCLER\NPROTECT\00027340.old Object is locked skipped
C:\RECYCLER\NPROTECT\00027341.old Object is locked skipped
C:\RECYCLER\NPROTECT\00027342.old Object is locked skipped
C:\RECYCLER\NPROTECT\00027343.old Object is locked skipped
C:\RECYCLER\NPROTECT\00027344.old Object is locked skipped
C:\RECYCLER\NPROTECT\00027345.old Object is locked skipped
C:\RECYCLER\NPROTECT\00027346.old Object is locked skipped
C:\RECYCLER\NPROTECT\00027347.old Object is locked skipped
C:\RECYCLER\NPROTECT\00027348.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027349.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027350.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027351.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027352.old Object is locked skipped
C:\RECYCLER\NPROTECT\00027353.old Object is locked skipped
C:\RECYCLER\NPROTECT\00027354.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027355.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027356.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027357.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027358.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027359.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027360.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027361.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027362.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027363.old Object is locked skipped
C:\RECYCLER\NPROTECT\00027364.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027365.old Object is locked skipped
C:\RECYCLER\NPROTECT\00027366.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027367.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027368.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027369.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027370.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027371.old Object is locked skipped
C:\RECYCLER\NPROTECT\00027372.old Object is locked skipped
C:\RECYCLER\NPROTECT\00027373.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027374.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027375.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027376.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027377.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027378.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027379.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027380.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027381.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027382.old Object is locked skipped
C:\RECYCLER\NPROTECT\00027383.old Object is locked skipped
C:\RECYCLER\NPROTECT\00027384.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027385.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027386.old Object is locked skipped
C:\RECYCLER\NPROTECT\00027387.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027388.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027389.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027390.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027391.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027392.old Object is locked skipped
C:\RECYCLER\NPROTECT\00027393.old Object is locked skipped
C:\RECYCLER\NPROTECT\00027394.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027395.old Object is locked skipped
C:\RECYCLER\NPROTECT\00027396.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027397.old Object is locked skipped
C:\RECYCLER\NPROTECT\00027398.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027399.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027400.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027401.old Object is locked skipped
C:\RECYCLER\NPROTECT\00027402.old Object is locked skipped
C:\RECYCLER\NPROTECT\00027403.old Object is locked skipped
C:\RECYCLER\NPROTECT\00027404.old Object is locked skipped
C:\RECYCLER\NPROTECT\00027405.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027406.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027407.old Object is locked skipped
C:\RECYCLER\NPROTECT\00027408.old Object is locked skipped
C:\RECYCLER\NPROTECT\00027409.old Object is locked skipped
C:\RECYCLER\NPROTECT\00027410.old Object is locked skipped
C:\RECYCLER\NPROTECT\00027411.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027412.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027413.old Object is locked skipped
C:\RECYCLER\NPROTECT\00027414.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027415.old Object is locked skipped
C:\RECYCLER\NPROTECT\00027416.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027417.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027418.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027419.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027420.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027421.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027422.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027423.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027424.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027425.old Object is locked skipped
C:\RECYCLER\NPROTECT\00027426.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027427.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027428.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027429.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027430.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027431.old Object is locked skipped
C:\RECYCLER\NPROTECT\00027432.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027433.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027434.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027435.old Object is locked skipped
C:\RECYCLER\NPROTECT\00027436.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027437.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027438.old Object is locked skipped
C:\RECYCLER\NPROTECT\00027439.old Object is locked skipped
C:\RECYCLER\NPROTECT\00027440.old Object is locked skipped
C:\RECYCLER\NPROTECT\00027441.old Object is locked skipped


Edited by Solarin, 04 September 2006 - 09:00 AM.

  • 0

#19
Solarin
Posted 04 September 2006 - 09:01 AM

Solarin

    Member

  • Topic Starter
  • Member
  • PipPip
  • 28 posts

C:\RECYCLER\NPROTECT\00027442.old Object is locked skipped
C:\RECYCLER\NPROTECT\00027443.old Object is locked skipped
C:\RECYCLER\NPROTECT\00027444.old Object is locked skipped
C:\RECYCLER\NPROTECT\00027445.old Object is locked skipped
C:\RECYCLER\NPROTECT\00027446.old Object is locked skipped
C:\RECYCLER\NPROTECT\00027447.old Object is locked skipped
C:\RECYCLER\NPROTECT\00027448.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027449.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027450.old Object is locked skipped
C:\RECYCLER\NPROTECT\00027451.old Object is locked skipped
C:\RECYCLER\NPROTECT\00027452.old Object is locked skipped
C:\RECYCLER\NPROTECT\00027453.OLD Object is locked skipped
C:\RECYCLER\NPROTECT\00027457.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027458.LOG Object is locked skipped
C:\RECYCLER\NPROTECT\00027473.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027476.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027481.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027482.box Object is locked skipped
C:\RECYCLER\NPROTECT\00027483.dat Object is locked skipped
C:\RECYCLER\NPROTECT\00027484.dat Object is locked skipped
C:\RECYCLER\NPROTECT\00027485.box Object is locked skipped
C:\RECYCLER\NPROTECT\00027493.msf Object is locked skipped
C:\RECYCLER\NPROTECT\00027498.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027501.MSF Object is locked skipped
C:\RECYCLER\NPROTECT\00027502.msf Object is locked skipped
C:\RECYCLER\NPROTECT\00027503.msf Object is locked skipped
C:\RECYCLER\NPROTECT\00027504.msf Object is locked skipped
C:\RECYCLER\NPROTECT\00027512.JAR Object is locked skipped
C:\RECYCLER\NPROTECT\00027520.JAR Object is locked skipped
C:\RECYCLER\NPROTECT\00027529.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027531.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027532.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027536.box Object is locked skipped
C:\RECYCLER\NPROTECT\00027538.DBX Object is locked skipped
C:\RECYCLER\NPROTECT\00027539.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027540.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027541.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027552.XML Object is locked skipped
C:\RECYCLER\NPROTECT\00027554.wpl Object is locked skipped
C:\RECYCLER\NPROTECT\00027557.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00027568.XML Object is locked skipped
C:\RECYCLER\NPROTECT\00027579.XML Object is locked skipped
C:\RECYCLER\NPROTECT\00027581.wpl Object is locked skipped
C:\RECYCLER\NPROTECT\00027585.edb Object is locked skipped
C:\RECYCLER\NPROTECT\00027587.XML Object is locked skipped
C:\RECYCLER\NPROTECT\00027590.XML Object is locked skipped
C:\RECYCLER\NPROTECT\00027593.wpl Object is locked skipped
C:\RECYCLER\NPROTECT\00027594.XML Object is locked skipped
C:\RECYCLER\NPROTECT\00027605.BMP Object is locked skipped
C:\RECYCLER\NPROTECT\00027609.BMP Object is locked skipped
C:\RECYCLER\NPROTECT\00027909.BMP Object is locked skipped
C:\RECYCLER\NPROTECT\00027911.BMP Object is locked skipped
C:\RECYCLER\NPROTECT\00028031.BMP Object is locked skipped
C:\RECYCLER\NPROTECT\00028044.RES Object is locked skipped
C:\RECYCLER\NPROTECT\00028045.RES Object is locked skipped
C:\RECYCLER\NPROTECT\00028046.ifo Object is locked skipped
C:\RECYCLER\NPROTECT\00028047.sav Object is locked skipped
C:\RECYCLER\NPROTECT\00028048.res Object is locked skipped
C:\RECYCLER\NPROTECT\00028049.BMP Object is locked skipped
C:\RECYCLER\NPROTECT\00028051.sav Object is locked skipped
C:\RECYCLER\NPROTECT\00028056.BMP Object is locked skipped
C:\RECYCLER\NPROTECT\00028061.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00028062.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00028063.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00028064.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00028066.BMP Object is locked skipped
C:\RECYCLER\NPROTECT\00028134.rim Object is locked skipped
C:\RECYCLER\NPROTECT\00028257.BMP Object is locked skipped
C:\RECYCLER\NPROTECT\00028260.BMP Object is locked skipped
C:\RECYCLER\NPROTECT\00028269.BMP Object is locked skipped
C:\RECYCLER\NPROTECT\00028273.BMP Object is locked skipped
C:\RECYCLER\NPROTECT\00028275.BMP Object is locked skipped
C:\RECYCLER\NPROTECT\00028279.BMP Object is locked skipped
C:\RECYCLER\NPROTECT\00028281.BMP Object is locked skipped
C:\RECYCLER\NPROTECT\00028283.BMP Object is locked skipped
C:\RECYCLER\NPROTECT\00028286.BMP Object is locked skipped
C:\RECYCLER\NPROTECT\00028289.BMP Object is locked skipped
C:\RECYCLER\NPROTECT\00028293.BMP Object is locked skipped
C:\RECYCLER\NPROTECT\00028298.BMP Object is locked skipped
C:\RECYCLER\NPROTECT\00028302.BMP Object is locked skipped
C:\RECYCLER\NPROTECT\00028304.BMP Object is locked skipped
C:\RECYCLER\NPROTECT\00028307.BMP Object is locked skipped
C:\RECYCLER\NPROTECT\00028310.BMP Object is locked skipped
C:\RECYCLER\NPROTECT\00028312.BMP Object is locked skipped
C:\RECYCLER\NPROTECT\00028316.BMP Object is locked skipped
C:\RECYCLER\NPROTECT\00028442.BMP Object is locked skipped
C:\RECYCLER\NPROTECT\00028444.BMP Object is locked skipped
C:\RECYCLER\NPROTECT\00028450.RES Object is locked skipped
C:\RECYCLER\NPROTECT\00028451.RES Object is locked skipped
C:\RECYCLER\NPROTECT\00028452.ifo Object is locked skipped
C:\RECYCLER\NPROTECT\00028453.sav Object is locked skipped
C:\RECYCLER\NPROTECT\00028454.res Object is locked skipped
C:\RECYCLER\NPROTECT\00028455.rim Object is locked skipped
C:\RECYCLER\NPROTECT\00028515.RES Object is locked skipped
C:\RECYCLER\NPROTECT\00028516.RES Object is locked skipped
C:\RECYCLER\NPROTECT\00028517.sav Object is locked skipped
C:\RECYCLER\NPROTECT\00028518.res Object is locked skipped
C:\RECYCLER\NPROTECT\00028519.tga Object is locked skipped
C:\RECYCLER\NPROTECT\00028702.sav Object is locked skipped
C:\RECYCLER\NPROTECT\00028703.sav Object is locked skipped
C:\RECYCLER\NPROTECT\00028704.sav Object is locked skipped
C:\RECYCLER\NPROTECT\00028705.sav Object is locked skipped
C:\RECYCLER\NPROTECT\00028706.sav Object is locked skipped
C:\RECYCLER\NPROTECT\00028707.sav Object is locked skipped
C:\RECYCLER\NPROTECT\00028708.sav Object is locked skipped
C:\RECYCLER\NPROTECT\00028709.sav Object is locked skipped
C:\RECYCLER\NPROTECT\00028710.sav Object is locked skipped
C:\RECYCLER\NPROTECT\00028711.sav Object is locked skipped
C:\RECYCLER\NPROTECT\00028712.sav Object is locked skipped
C:\RECYCLER\NPROTECT\00028713.sav Object is locked skipped
C:\RECYCLER\NPROTECT\00028714.sav Object is locked skipped
C:\RECYCLER\NPROTECT\00028715.UTC Object is locked skipped
C:\RECYCLER\NPROTECT\00028716.UTC Object is locked skipped
C:\RECYCLER\NPROTECT\00028717.UTC Object is locked skipped
C:\RECYCLER\NPROTECT\00028718.UTC Object is locked skipped
C:\RECYCLER\NPROTECT\00028719.UTC Object is locked skipped
C:\RECYCLER\NPROTECT\00028720.UTC Object is locked skipped
C:\RECYCLER\NPROTECT\00028721.RES Object is locked skipped
C:\RECYCLER\NPROTECT\00028722.utc Object is locked skipped
C:\RECYCLER\NPROTECT\00028723.fac Object is locked skipped
C:\RECYCLER\NPROTECT\00028724.rim Object is locked skipped
C:\RECYCLER\NPROTECT\00028726.BMP Object is locked skipped
C:\RECYCLER\NPROTECT\00028737.BMP Object is locked skipped
C:\RECYCLER\NPROTECT\00028740.BMP Object is locked skipped
C:\RECYCLER\NPROTECT\00028742.sav Object is locked skipped
C:\RECYCLER\NPROTECT\00028743.sav Object is locked skipped
C:\RECYCLER\NPROTECT\00028744.sav Object is locked skipped
C:\RECYCLER\NPROTECT\00028745.sav Object is locked skipped
C:\RECYCLER\NPROTECT\00028746.sav Object is locked skipped
C:\RECYCLER\NPROTECT\00028747.sav Object is locked skipped
C:\RECYCLER\NPROTECT\00028748.sav Object is locked skipped
C:\RECYCLER\NPROTECT\00028749.sav Object is locked skipped
C:\RECYCLER\NPROTECT\00028750.sav Object is locked skipped
C:\RECYCLER\NPROTECT\00028751.sav Object is locked skipped
C:\RECYCLER\NPROTECT\00028752.sav Object is locked skipped
C:\RECYCLER\NPROTECT\00028753.sav Object is locked skipped
C:\RECYCLER\NPROTECT\00028754.sav Object is locked skipped
C:\RECYCLER\NPROTECT\00028755.UTC Object is locked skipped
C:\RECYCLER\NPROTECT\00028756.UTC Object is locked skipped
C:\RECYCLER\NPROTECT\00028757.UTC Object is locked skipped
C:\RECYCLER\NPROTECT\00028758.UTC Object is locked skipped
C:\RECYCLER\NPROTECT\00028759.UTC Object is locked skipped
C:\RECYCLER\NPROTECT\00028760.UTC Object is locked skipped
C:\RECYCLER\NPROTECT\00028761.RES Object is locked skipped
C:\RECYCLER\NPROTECT\00028762.utc Object is locked skipped
C:\RECYCLER\NPROTECT\00028763.fac Object is locked skipped
C:\RECYCLER\NPROTECT\00028764.rim Object is locked skipped
C:\RECYCLER\NPROTECT\00028765.BMP Object is locked skipped
C:\RECYCLER\NPROTECT\00028775.BMP Object is locked skipped
C:\RECYCLER\NPROTECT\00028778.BMP Object is locked skipped
C:\RECYCLER\NPROTECT\00028780.sav Object is locked skipped
C:\RECYCLER\NPROTECT\00028781.sav Object is locked skipped
C:\RECYCLER\NPROTECT\00028782.sav Object is locked skipped
C:\RECYCLER\NPROTECT\00028783.sav Object is locked skipped
C:\RECYCLER\NPROTECT\00028784.sav Object is locked skipped
C:\RECYCLER\NPROTECT\00028785.sav Object is locked skipped
C:\RECYCLER\NPROTECT\00028786.sav Object is locked skipped
C:\RECYCLER\NPROTECT\00028787.sav Object is locked skipped
C:\RECYCLER\NPROTECT\00028788.sav Object is locked skipped
C:\RECYCLER\NPROTECT\00028789.sav Object is locked skipped
C:\RECYCLER\NPROTECT\00028790.sav Object is locked skipped
C:\RECYCLER\NPROTECT\00028791.sav Object is locked skipped
C:\RECYCLER\NPROTECT\00028792.sav Object is locked skipped
C:\RECYCLER\NPROTECT\00028793.UTC Object is locked skipped
C:\RECYCLER\NPROTECT\00028794.UTC Object is locked skipped
C:\RECYCLER\NPROTECT\00028795.UTC Object is locked skipped
C:\RECYCLER\NPROTECT\00028796.UTC Object is locked skipped
C:\RECYCLER\NPROTECT\00028797.UTC Object is locked skipped
C:\RECYCLER\NPROTECT\00028798.UTC Object is locked skipped
C:\RECYCLER\NPROTECT\00028799.RES Object is locked skipped
C:\RECYCLER\NPROTECT\00028800.utc Object is locked skipped
C:\RECYCLER\NPROTECT\00028801.fac Object is locked skipped
C:\RECYCLER\NPROTECT\00028802.rim Object is locked skipped
C:\RECYCLER\NPROTECT\00028980.rim Object is locked skipped
C:\RECYCLER\NPROTECT\00028981.sav Object is locked skipped
C:\RECYCLER\NPROTECT\00028982.sav Object is locked skipped
C:\RECYCLER\NPROTECT\00028983.sav Object is locked skipped
C:\RECYCLER\NPROTECT\00028984.sav Object is locked skipped
C:\RECYCLER\NPROTECT\00028985.sav Object is locked skipped
C:\RECYCLER\NPROTECT\00028986.sav Object is locked skipped
C:\RECYCLER\NPROTECT\00028987.sav Object is locked skipped
C:\RECYCLER\NPROTECT\00028988.sav Object is locked skipped
C:\RECYCLER\NPROTECT\00028989.sav Object is locked skipped
C:\RECYCLER\NPROTECT\00028990.sav Object is locked skipped
C:\RECYCLER\NPROTECT\00028991.sav Object is locked skipped
C:\RECYCLER\NPROTECT\00028992.sav Object is locked skipped
C:\RECYCLER\NPROTECT\00028993.sav Object is locked skipped
C:\RECYCLER\NPROTECT\00028994.UTC Object is locked skipped
C:\RECYCLER\NPROTECT\00028995.UTC Object is locked skipped
C:\RECYCLER\NPROTECT\00028996.UTC Object is locked skipped
C:\RECYCLER\NPROTECT\00028997.UTC Object is locked skipped
C:\RECYCLER\NPROTECT\00028998.UTC Object is locked skipped
C:\RECYCLER\NPROTECT\00028999.UTC Object is locked skipped
C:\RECYCLER\NPROTECT\00029000.RES Object is locked skipped
C:\RECYCLER\NPROTECT\00029001.utc Object is locked skipped
C:\RECYCLER\NPROTECT\00029002.fac Object is locked skipped
C:\RECYCLER\NPROTECT\00029004.BMP Object is locked skipped
C:\RECYCLER\NPROTECT\00029007.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029010.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029011.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029014.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029016.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029017.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029018.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029020.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029021.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029036.JAR Object is locked skipped
C:\RECYCLER\NPROTECT\00029039.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029041.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029042.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029043.dat Object is locked skipped
C:\RECYCLER\NPROTECT\00029044.dat Object is locked skipped
C:\RECYCLER\NPROTECT\00029058.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029060.dat Object is locked skipped
C:\RECYCLER\NPROTECT\00029061.dat Object is locked skipped
C:\RECYCLER\NPROTECT\00029062.mfl Object is locked skipped
C:\RECYCLER\NPROTECT\00029071.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029073.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029074.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029075.mfl Object is locked skipped
C:\RECYCLER\NPROTECT\00029077.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029078.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029079.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029080.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029082.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029083.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029095.MAP Object is locked skipped
C:\RECYCLER\NPROTECT\00029096.MAP Object is locked skipped
C:\RECYCLER\NPROTECT\00029098.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029101.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029102.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029105.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029111.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029112.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029114.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029115.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029118.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029119.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029121.edb Object is locked skipped
C:\RECYCLER\NPROTECT\00029124.XML Object is locked skipped
C:\RECYCLER\NPROTECT\00029127.XML Object is locked skipped
C:\RECYCLER\NPROTECT\00029130.XML Object is locked skipped
C:\RECYCLER\NPROTECT\00029133.XML Object is locked skipped
C:\RECYCLER\NPROTECT\00029138 Object is locked skipped
C:\RECYCLER\NPROTECT\00029145.edb Object is locked skipped
C:\RECYCLER\NPROTECT\00029150.cab Object is locked skipped
C:\RECYCLER\NPROTECT\00029156 Object is locked skipped
C:\RECYCLER\NPROTECT\00029157.EXE Object is locked skipped
C:\RECYCLER\NPROTECT\00029160.dll Object is locked skipped
C:\RECYCLER\NPROTECT\00029161.dat Object is locked skipped
C:\RECYCLER\NPROTECT\00029162.sig Object is locked skipped
C:\RECYCLER\NPROTECT\00029163.dll Object is locked skipped
C:\RECYCLER\NPROTECT\00029164.dll Object is locked skipped
C:\RECYCLER\NPROTECT\00029165.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00029166.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00029167.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00029168.1 Object is locked skipped
C:\RECYCLER\NPROTECT\00029169.inf Object is locked skipped
C:\RECYCLER\NPROTECT\00029170.txt Object is locked skipped
C:\RECYCLER\NPROTECT\00029171.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00029172.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00029173.dll Object is locked skipped
C:\RECYCLER\NPROTECT\00029174.cat Object is locked skipped
C:\RECYCLER\NPROTECT\00029175.dll Object is locked skipped
C:\RECYCLER\NPROTECT\00029176.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00029177.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00029178.inf Object is locked skipped
C:\RECYCLER\NPROTECT\00029179.url Object is locked skipped
C:\RECYCLER\NPROTECT\00029180.ver Object is locked skipped
C:\RECYCLER\NPROTECT\00029181.inf Object is locked skipped
C:\RECYCLER\NPROTECT\00029182.PSM Object is locked skipped
C:\RECYCLER\NPROTECT\00029183.STA Object is locked skipped
C:\RECYCLER\NPROTECT\00029184.TXT Object is locked skipped
C:\RECYCLER\NPROTECT\00029185.STA Object is locked skipped
C:\RECYCLER\NPROTECT\00029186.STA Object is locked skipped
C:\RECYCLER\NPROTECT\00029190.edb Object is locked skipped
C:\RECYCLER\NPROTECT\00029191.wpl Object is locked skipped
C:\RECYCLER\NPROTECT\00029194.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029199.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029200.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029202.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029204.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029205.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029210.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029211.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029214.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029215.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029216.wpl Object is locked skipped
C:\RECYCLER\NPROTECT\00029226.BIN Object is locked skipped
C:\RECYCLER\NPROTECT\00029227.edb Object is locked skipped
C:\RECYCLER\NPROTECT\00029237.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029239.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029240.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029244.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029246.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029247.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029248.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029250.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029252.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029253.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029268.edb Object is locked skipped
C:\RECYCLER\NPROTECT\00029408.MAP Object is locked skipped
C:\RECYCLER\NPROTECT\00029409.MAP Object is locked skipped
C:\RECYCLER\NPROTECT\00029448.cab Object is locked skipped
C:\RECYCLER\NPROTECT\00029459 Object is locked skipped
C:\RECYCLER\NPROTECT\00029461.EXE Object is locked skipped
C:\RECYCLER\NPROTECT\00029462.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029466.dll Object is locked skipped
C:\RECYCLER\NPROTECT\00029467.dat Object is locked skipped
C:\RECYCLER\NPROTECT\00029468.sig Object is locked skipped
C:\RECYCLER\NPROTECT\00029469.dll Object is locked skipped
C:\RECYCLER\NPROTECT\00029470.dll Object is locked skipped
C:\RECYCLER\NPROTECT\00029471.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00029472.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00029473.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00029474.1 Object is locked skipped
C:\RECYCLER\NPROTECT\00029475.inf Object is locked skipped
C:\RECYCLER\NPROTECT\00029476.txt Object is locked skipped
C:\RECYCLER\NPROTECT\00029477.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00029478.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00029479.dll Object is locked skipped
C:\RECYCLER\NPROTECT\00029480.cat Object is locked skipped
C:\RECYCLER\NPROTECT\00029481.dll Object is locked skipped
C:\RECYCLER\NPROTECT\00029482.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00029483.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00029484.inf Object is locked skipped
C:\RECYCLER\NPROTECT\00029485.url Object is locked skipped
C:\RECYCLER\NPROTECT\00029486.ver Object is locked skipped
C:\RECYCLER\NPROTECT\00029487.inf Object is locked skipped
C:\RECYCLER\NPROTECT\00029488.PSM Object is locked skipped
C:\RECYCLER\NPROTECT\00029489.STA Object is locked skipped
C:\RECYCLER\NPROTECT\00029490.TXT Object is locked skipped
C:\RECYCLER\NPROTECT\00029491.STA Object is locked skipped
C:\RECYCLER\NPROTECT\00029492.STA Object is locked skipped
C:\RECYCLER\NPROTECT\00029493.DBX Object is locked skipped
C:\RECYCLER\NPROTECT\00029494.edb Object is locked skipped
C:\RECYCLER\NPROTECT\00029495.edb Object is locked skipped
C:\RECYCLER\NPROTECT\00029496.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029500.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029501.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029502.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029503.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029504.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029505.edb Object is locked skipped
C:\RECYCLER\NPROTECT\00029506.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029507.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029508.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029510.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029511.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029514.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029517.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029519.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029520.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029532.BIN Object is locked skipped
C:\RECYCLER\NPROTECT\00029533.edb Object is locked skipped
C:\RECYCLER\NPROTECT\00029540.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029542.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029543.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029544.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029545.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029546.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029548.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029549.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029553.XML Object is locked skipped
C:\RECYCLER\NPROTECT\00029558.edb Object is locked skipped
C:\RECYCLER\NPROTECT\00029560.XML Object is locked skipped
C:\RECYCLER\NPROTECT\00029563.XML Object is locked skipped
C:\RECYCLER\NPROTECT\00029566.XML Object is locked skipped
C:\RECYCLER\NPROTECT\00029569.XML Object is locked skipped
C:\RECYCLER\NPROTECT\00029572.XML Object is locked skipped
C:\RECYCLER\NPROTECT\00029575.XML Object is locked skipped
C:\RECYCLER\NPROTECT\00029578.XML Object is locked skipped
C:\RECYCLER\NPROTECT\00029581.wpl Object is locked skipped
C:\RECYCLER\NPROTECT\00029582.XML Object is locked skipped
C:\RECYCLER\NPROTECT\00029612.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029615.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029616.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029620.PSD Object is locked skipped
C:\RECYCLER\NPROTECT\00029621.PSP Object is locked skipped
C:\RECYCLER\NPROTECT\00029631.wpl Object is locked skipped
C:\RECYCLER\NPROTECT\00029636.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029637.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029639.wpl Object is locked skipped
C:\RECYCLER\NPROTECT\00029640.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029641.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029642.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029646.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029649.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029653.cab Object is locked skipped
C:\RECYCLER\NPROTECT\00029660 Object is locked skipped
C:\RECYCLER\NPROTECT\00029661.EXE Object is locked skipped
C:\RECYCLER\NPROTECT\00029663.dll Object is locked skipped
C:\RECYCLER\NPROTECT\00029664.dat Object is locked skipped
C:\RECYCLER\NPROTECT\00029665.sig Object is locked skipped
C:\RECYCLER\NPROTECT\00029666.dll Object is locked skipped
C:\RECYCLER\NPROTECT\00029667.dll Object is locked skipped
C:\RECYCLER\NPROTECT\00029668.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00029669.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00029670.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00029671.1 Object is locked skipped
C:\RECYCLER\NPROTECT\00029672.inf Object is locked skipped
C:\RECYCLER\NPROTECT\00029673.txt Object is locked skipped
C:\RECYCLER\NPROTECT\00029674.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00029675.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00029676.dll Object is locked skipped
C:\RECYCLER\NPROTECT\00029677.cat Object is locked skipped
C:\RECYCLER\NPROTECT\00029678.dll Object is locked skipped
C:\RECYCLER\NPROTECT\00029679.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00029680.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00029681.inf Object is locked skipped
C:\RECYCLER\NPROTECT\00029682.url Object is locked skipped
C:\RECYCLER\NPROTECT\00029683.ver Object is locked skipped
C:\RECYCLER\NPROTECT\00029684.inf Object is locked skipped
C:\RECYCLER\NPROTECT\00029685.PSM Object is locked skipped
C:\RECYCLER\NPROTECT\00029686.STA Object is locked skipped
C:\RECYCLER\NPROTECT\00029687.TXT Object is locked skipped
C:\RECYCLER\NPROTECT\00029688.STA Object is locked skipped
C:\RECYCLER\NPROTECT\00029689.STA Object is locked skipped
C:\RECYCLER\NPROTECT\00029690 Object is locked skipped
C:\RECYCLER\NPROTECT\00029691.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029692.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029698.wpl Object is locked skipped
C:\RECYCLER\NPROTECT\00029699.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029700.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029701.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029702.edb Object is locked skipped
C:\RECYCLER\NPROTECT\00029703.log Object is locked skipped
C:\RECYCLER\NPROTECT\00029708.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029712.wpl Object is locked skipped
C:\RECYCLER\NPROTECT\00029714.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029716.wpl Object is locked skipped
C:\RECYCLER\NPROTECT\00029718.wpl Object is locked skipped
C:\RECYCLER\NPROTECT\00029721.XML Object is locked skipped
C:\RECYCLER\NPROTECT\00029723.edb Object is locked skipped
C:\RECYCLER\NPROTECT\00029724.wpl Object is locked skipped
C:\RECYCLER\NPROTECT\00029728.box Object is locked skipped
C:\RECYCLER\NPROTECT\00029732.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029733.box Object is locked skipped
C:\RECYCLER\NPROTECT\00029734.dat Object is locked skipped
C:\RECYCLER\NPROTECT\00029735.dat Object is locked skipped
C:\RECYCLER\NPROTECT\00029737.box Object is locked skipped
C:\RECYCLER\NPROTECT\00029738.mfl Object is locked skipped
C:\RECYCLER\NPROTECT\00029747.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029752.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029754.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029755.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029758.msf Object is locked skipped
C:\RECYCLER\NPROTECT\00029760.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029765.DBX Object is locked skipped
C:\RECYCLER\NPROTECT\00029767.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029772.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029773.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029774.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029775.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029776.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029777.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029781.wpl Object is locked skipped
C:\RECYCLER\NPROTECT\00029783.xml Object is locked skipped
C:\RECYCLER\NPROTECT\00029784.ini Object is locked skipped
C:\RECYCLER\NPROTECT\00029785.ini Object is locked skipped
C:\RECYCLER\NPROTECT\00029786.ini Object is locked skipped
C:\RECYCLER\NPROTECT\00029787.ini Object is locked skipped
C:\RECYCLER\NPROTECT\00029788.ini Object is locked skipped
C:\RECYCLER\NPROTECT\00029789.ini Object is locked skipped
C:\RECYCLER\NPROTECT\00029791.xml Object is locked skipped
C:\RECYCLER\NPROTECT\00029792.ini Object is locked skipped
C:\RECYCLER\NPROTECT\00029793.MAP Object is locked skipped
C:\RECYCLER\NPROTECT\00029794.MAP Object is locked skipped
C:\RECYCLER\NPROTECT\00029795.MAP Object is locked skipped
C:\RECYCLER\NPROTECT\00029796.MAP Object is locked skipped
C:\RECYCLER\NPROTECT\00029799.edb Object is locked skipped
C:\RECYCLER\NPROTECT\00029802.LNK Object is locked skipped
C:\RECYCLER\NPROTECT\00029803.LNK Object is locked skipped
C:\RECYCLER\NPROTECT\00029804.ini Object is locked skipped
C:\RECYCLER\NPROTECT\00029806.LNK Object is locked skipped
C:\RECYCLER\NPROTECT\00029808.LNK Object is locked skipped
C:\RECYCLER\NPROTECT\00029809.MAP Object is locked skipped
C:\RECYCLER\NPROTECT\00029810.MAP Object is locked skipped
C:\RECYCLER\NPROTECT\00029811.DAT Object is locked skipped
C:\RECYCLER\NPROTECT\00029814.lo_ Object is locked skipped
C:\RECYCLER\NPROTECT\00029836.wpl Object is locked skipped
C:\RECYCLER\NPROTECT\00029839.STE Object is locked skipped
C:\RECYCLER\NPROTECT\00029842.LNK Object is locked skipped
C:\RECYCLER\NPROTECT\00029848.XML Object is locked skipped
C:\RECYCLER\NPROTECT\00029850.wpl Object is locked skipped
C:\RECYCLER\NPROTECT\00029852.edb Object is locked skipped
C:\RECYCLER\NPROTECT\00029853.edb Object is locked skipped
C:\RECYCLER\NPROTECT\00029855.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029857.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029858.MOZ Object is locked skipped
C:\RECYCLER\NPROTECT\00029859.edb Object is locked skipped
C:\RECYCLER\NPROTECT\00029861.wpl Object is locked skipped
C:\RECYCLER\NPROTECT\00029862.wpl Object is locked skipped
C:\RECYCLER\NPROTECT\00029863.wpl Object is locked skipped
C:\RECYCLER\NPROTECT\00029865.edb Object is locked skipped
C:\RECYCLER\NPROTECT\00029870.XML Object is locked skipped
C:\RECYCLER\NPROTECT\00029873.edb Object is locked skipped
C:\RECYCLER\NPROTECT\00029875.XML Object is locked skipped
C:\RECYCLER\NPROTECT\00029877.XML Object is locked skipped
C:\RECYCLER\NPROTECT\00029878.XML Object is locked skipped
C:\RECYCLER\NPROTECT\00029880.XML Object is locked skipped
C:\RECYCLER\NPROTECT\00029881.MAP Object is locked skipped
C:\RECYCLER\NPROTECT\00029882.MAP Object is locked skipped
C:\RECYCLER\NPROTECT\00029883.MAP Object is locked skipped
C:\RECYCLER\NPROTECT\00029884.MAP Object is locked skipped
C:\RECYCLER\NPROTECT\00029885.XML Object is locked skipped
C:\RECYCLER\NPROTECT\00029886.XML Object is locked skipped
C:\RECYCLER\NPROTECT\00029887.MAP Object is locked skipped
C:\RECYCLER\NPROTECT\00029888.MAP Object is locked skipped
C:\RECYCLER\NPROTECT\00029889.wpl Object is locked skipped
C:\RECYCLER\NPROTECT\00029890.XML Object is locked skipped
C:\RECYCLER\NPROTECT\00029893.MAP Object is locked skipped
C:\RECYCLER\NPROTECT\00029894.MAP Object is locked skipped
C:\RECYCLER\NPROTECT\00029896.wpl Object is locked skipped
C:\RECYCLER\NPROTECT\00029902.wpl Object is locked skipped
C:\RECYCLER\NPROTECT\00029906.wpl Object is locked skipped
C:\RECYCLER\NPROTECT\00029907.edb Object is locked skipped
C:\RECYCLER\NPROTECT\00029908.wpl Object is locked skipped
C:\RECYCLER\NPROTECT\00029912.wpl Object is locked skipped
C:\RECYCLER\NPROTECT\00029916.MAP Object is locked skipped
C:\RECYCLER\NPROTECT\00029917.MAP Object is locked skipped
C:\RECYCLER\NPROTECT\00029919.wpl Object is locked skipped
C:\RECYCLER\NPROTECT\00029920.MAP Object is locked skipped
C:\RECYCLER\NPROTECT\00029921.MAP Object is locked skipped
C:\RECYCLER\NPROTECT\00029922.MAP Object is locked skipped
C:\RECYCLER\NPROTECT\00029923.MAP Object is locked skipped
C:\RECYCLER\NPROTECT\00029924.wpl Object is locked skipped
C:\RECYCLER\NPROTECT\00029927.edb Object is locked skipped
C:\RECYCLER\NPROTECT\00029931.wpl Object is locked skipped
C:\RECYCLER\NPROTECT\00029935.wpl Object is locked skipped
C:\RECYCLER\NPROTECT\00029936.h Object is locked skipped
C:\RECYCLER\NPROTECT\00029937.ini Object is locked skipped
C:\RECYCLER\NPROTECT\00029944.MAP Object is locked skipped
C:\RECYCLER\NPROTECT\00029945.MAP Object is locked skipped
C:\RECYCLER\NPROTECT\00029946.MAP Object is locked skipped
C:\RECYCLER\NPROTECT\00029947.MAP Object is locked skipped
C:\RECYCLER\NPROTECT\00029948.h Object is locked skipped
C:\RECYCLER\NPROTECT\00029949.ini Object is locked skipped
C:\RECYCLER\NPROTECT\00029957.wpl Object is locked skipped
C:\RECYCLER\NPROTECT\00029959.edb Object is locked skipped
C:\RECYCLER\NPROTECT\NPROTECT.LOG Object is locked skipped
C:\RECYCLER\S-1-5-21-2010220994-3757435101-538525854-1005\Dc1617\ntrition.xls Object is locked skipped
C:\System Volume Information\_restore{CC758005-0E50-410B-862F-2F533F9EFE56}\RP0\A0001005.exe Infected: Trojan-Downloader.Win32.Zlob.agg skipped
C:\System Volume Information\_restore{CC758005-0E50-410B-862F-2F533F9EFE56}\RP0\A0001006.dll.tcf Infected: Trojan-Downloader.Win32.Zlob.aae skipped
C:\System Volume Information\_restore{CC758005-0E50-410B-862F-2F533F9EFE56}\RP1\A0001053.exe Infected: Trojan-Downloader.Win32.Zlob.agg skipped
C:\System Volume Information\_restore{CC758005-0E50-410B-862F-2F533F9EFE56}\RP1\A0001054.exe Infected: Trojan-Downloader.Win32.Zlob.agg skipped
C:\System Volume Information\_restore{CC758005-0E50-410B-862F-2F533F9EFE56}\RP1\A0001057.dll.tcf Infected: Trojan-Downloader.Win32.Zlob.aae skipped
C:\System Volume Information\_restore{CC758005-0E50-410B-862F-2F533F9EFE56}\RP1\A0001088.dll Infected: Trojan-Downloader.Win32.Delf.aeo skipped
C:\System Volume Information\_restore{CC758005-0E50-410B-862F-2F533F9EFE56}\RP1\A0001090.exe.tcf Infected: not-a-virus:AdWare.Win32.MediaTickets.w skipped
C:\System Volume Information\_restore{CC758005-0E50-410B-862F-2F533F9EFE56}\RP105\change.log Object is locked skipped
C:\System Volume Information\_restore{CC758005-0E50-410B-862F-2F533F9EFE56}\RP22\A0002108.exe Object is locked skipped
C:\System Volume Information\_restore{CC758005-0E50-410B-862F-2F533F9EFE56}\RP22\A0002340.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped
C:\System Volume Information\_restore{CC758005-0E50-410B-862F-2F533F9EFE56}\RP22\A0003219.dll Infected: Trojan-Downloader.Win32.Delf.aeo skipped
C:\System Volume Information\_restore{CC758005-0E50-410B-862F-2F533F9EFE56}\RP22\A0003227.exe Infected: Trojan.Win32.VB.tg skipped
C:\System Volume Information\_restore{CC758005-0E50-410B-862F-2F533F9EFE56}\RP22\A0003229.dll Infected: Trojan-Downloader.Win32.Zlob.agl skipped
C:\System Volume Information\_restore{CC758005-0E50-410B-862F-2F533F9EFE56}\RP23\A0004316.exe Infected: Trojan-Downloader.Win32.Zlob.agf skipped
C:\System Volume Information\_restore{CC758005-0E50-410B-862F-2F533F9EFE56}\RP23\A0004319.exe Infected: Trojan.Win32.VB.tg skipped
C:\System Volume Information\_restore{CC758005-0E50-410B-862F-2F533F9EFE56}\RP23\A0004381.dll Infected: not-a-virus:AdWare.Win32.TrafficSol.c skipped
C:\System Volume Information\_restore{CC758005-0E50-410B-862F-2F533F9EFE56}\RP35\A0010987.exe Infected: Trojan.Win32.VB.tg skipped
C:\System Volume Information\_restore{CC758005-0E50-410B-862F-2F533F9EFE56}\RP35\A0010989.exe/data0002 Infected: Trojan.Win32.VB.tg skipped
C:\System Volume Information\_restore{CC758005-0E50-410B-862F-2F533F9EFE56}\RP35\A0010989.exe/data0005 Infected: Trojan.Win32.VB.tg skipped
C:\System Volume Information\_restore{CC758005-0E50-410B-862F-2F533F9EFE56}\RP35\A0010989.exe/data0006 Infected: Trojan.Win32.VB.tg skipped
C:\System Volume Information\_restore{CC758005-0E50-410B-862F-2F533F9EFE56}\RP35\A0010989.exe NSIS: infected - 3 skipped
C:\System Volume Information\_restore{CC758005-0E50-410B-862F-2F533F9EFE56}\RP35\A0010991.exe Infected: Trojan.Win32.VB.tg skipped
C:\System Volume Information\_restore{CC758005-0E50-410B-862F-2F533F9EFE56}\RP35\A0010993.exe Infected: not-a-virus:Downloader.Win32.WinFixer.r skipped
C:\System Volume Information\_restore{CC758005-0E50-410B-862F-2F533F9EFE56}\RP35\A0011010.exe Infected: not-a-virus:Downloader.Win32.WinFixer.r skipped
C:\System Volume Information\_restore{CC758005-0E50-410B-862F-2F533F9EFE56}\RP35\A0011012.exe/data0002 Infected: Trojan.Win32.VB.tg skipped
C:\System Volume Information\_restore{CC758005-0E50-410B-862F-2F533F9EFE56}\RP35\A0011012.exe/data0005 Infected: Trojan.Win32.VB.tg skipped
C:\System Volume Information\_restore{CC758005-0E50-410B-862F-2F533F9EFE56}\RP35\A0011012.exe/data0006 Infected: Trojan.Win32.VB.tg skipped
C:\System Volume Information\_restore{CC758005-0E50-410B-862F-2F533F9EFE56}\RP35\A0011012.exe NSIS: infected - 3 skipped
C:\System Volume Information\_restore{CC758005-0E50-410B-862F-2F533F9EFE56}\RP35\A0011013.exe Infected: Trojan.Win32.VB.tg skipped
C:\System Volume Information\_restore{CC758005-0E50-410B-862F-2F533F9EFE56}\RP35\A0011014.exe Infected: Trojan.Win32.VB.tg skipped
C:\System Volume Information\_restore{CC758005-0E50-410B-862F-2F533F9EFE56}\RP48\A0011508.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.da skipped
C:\System Volume Information\_restore{CC758005-0E50-410B-862F-2F533F9EFE56}\RP48\A0011509.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.da skipped
C:\System Volume Information\_restore{CC758005-0E50-410B-862F-2F533F9EFE56}\RP93\A0018478.exe/stream/data0004 Infected: not-a-virus:AdWare.Win32.SearchIt.o skipped
C:\System Volume Information\_restore{CC758005-0E50-410B-862F-2F533F9EFE56}\RP93\A0018478.exe/stream Infected: not-a-virus:AdWare.Win32.SearchIt.o skipped
C:\System Volume Information\_restore{CC758005-0E50-410B-862F-2F533F9EFE56}\RP93\A0018478.exe NSIS: infected - 2 skipped
C:\System Volume Information\_restore{CC758005-0E50-410B-862F-2F533F9EFE56}\RP93\A0018480.exe/data0002 Infected: not-a-virus:AdWare.Win32.PurityScan.bu skipped
C:\System Volume Information\_restore{CC758005-0E50-410B-862F-2F533F9EFE56}\RP93\A0018480.exe/data0003 Infected: not-a-virus:AdWare.Win32.PurityScan.bu skipped
C:\System Volume Information\_restore{CC758005-0E50-410B-862F-2F533F9EFE56}\RP93\A0018480.exe NSIS: infected - 2 skipped
C:\VundoFix Backups\mllml.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.da skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\Internet.evt Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat Object is locked skipped
C:\WINDOWS\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\LogFiles\HTTPERR\httperr1.log Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
G:\Education and School\Econ 1015\econ 5 1st exam ws03V1.doc Object is locked skipped
G:\My Literature\Angelic.doc Object is locked skipped
G:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped

Scan process completed.


  • 0

#20
Solarin
Posted 04 September 2006 - 09:02 AM

Solarin

    Member

  • Topic Starter
  • Member
  • PipPip
  • 28 posts
Hijack This! Log:

Logfile of HijackThis v1.99.1
Scan saved at 10:02:14 AM, on 9/4/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5450.0004)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\TrojanHunter 4.5\THGuard.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\PROGRA~1\SYMANT~1\VPTray.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe
C:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\Logitech\SetPoint\KEM.exe
C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE
C:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Trillian\trillian.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Hijack This!\HJT.exe.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://securityrespo...r/fix_homepage/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft....k/?LinkId=54729
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft....k/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft....k/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft....cid={SUB_CLCID}
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: (no name) - {AAF5E800-6EF6-4A41-BC5D-34B7F354AB81} - C:\VundoFix Backups\mllml.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: StylerToolBar - {D2F8F919-690B-4EA2-9FA7-A203D1E04F75} - C:\Program Files\Styler\TB\StylerTB.dll
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\Updreg.exe
O4 - HKLM\..\Run: [Jet Detection] C:\Program Files\Creative\SBAudigy\PROGRAM\ADGJDet.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [THGuard] "C:\Program Files\TrojanHunter 4.5\THGuard.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe"
O4 - HKLM\..\Run: [mmtask] c:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [LogonStudio] "C:\Program Files\WinCustomize\LogonStudio\logonstudio.exe" /RANDOM
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
O4 - Startup: Styler.lnk = ?
O4 - Global Startup: Belkin Wireless USB Utility.lnk = C:\Program Files\Belkin\USB F5D7050\Wireless Utility\Belkinwcui.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\KEM.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative....026/CTSUEng.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky...can_unicode.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.micros...b?1156300299077
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoft...free/asinst.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative....15026/CTPID.cab
O20 - Winlogon Notify: mllml - C:\VundoFix Backups\mllml.dll
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll
O20 - Winlogon Notify: WBSrv - C:\PROGRA~1\Stardock\OBJECT~1\WINDOW~1\wbsrv.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Unknown owner - C:\Program Files\iPod\bin\iPodService.exe (file missing)
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe


  • 0

#21
Shaba
Posted 04 September 2006 - 09:34 AM

Shaba

    Malware Expert

  • Member
  • PipPipPip
  • 558 posts
  • MVP
Hi

Vundo is back :whistling:

Re-run vundofix as instructed above.

After that, empty this folder -> C:\VundoFix Backups

Empty Recycle Bin

Send:

- a fresh HijackThis log
- c:\vundofix.txt
  • 0

#22
Solarin
Posted 04 September 2006 - 04:11 PM

Solarin

    Member

  • Topic Starter
  • Member
  • PipPip
  • 28 posts
I ran Vundo and it told me that it didn't find any files.

Hijack This! Log:

Logfile of HijackThis v1.99.1
Scan saved at 5:11:16 PM, on 9/4/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5450.0004)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\TrojanHunter 4.5\THGuard.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\PROGRA~1\SYMANT~1\VPTray.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe
C:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\Logitech\SetPoint\KEM.exe
C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE
C:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Trillian\trillian.exe
C:\Program Files\iTunes\iTunes.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Microsoft Office\Office10\WINWORD.EXE
C:\Program Files\Hijack This!\HJT.exe.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://securityrespo...r/fix_homepage/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft....k/?LinkId=54729
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft....k/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft....k/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft....cid={SUB_CLCID}
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: (no name) - {AAF5E800-6EF6-4A41-BC5D-34B7F354AB81} - C:\VundoFix Backups\mllml.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: StylerToolBar - {D2F8F919-690B-4EA2-9FA7-A203D1E04F75} - C:\Program Files\Styler\TB\StylerTB.dll
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\Updreg.exe
O4 - HKLM\..\Run: [Jet Detection] C:\Program Files\Creative\SBAudigy\PROGRAM\ADGJDet.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [THGuard] "C:\Program Files\TrojanHunter 4.5\THGuard.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe"
O4 - HKLM\..\Run: [mmtask] c:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [LogonStudio] "C:\Program Files\WinCustomize\LogonStudio\logonstudio.exe" /RANDOM
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
O4 - Startup: Styler.lnk = ?
O4 - Global Startup: Belkin Wireless USB Utility.lnk = C:\Program Files\Belkin\USB F5D7050\Wireless Utility\Belkinwcui.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\KEM.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative....026/CTSUEng.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky...can_unicode.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.micros...b?1156300299077
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoft...free/asinst.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative....15026/CTPID.cab
O20 - Winlogon Notify: mllml - C:\VundoFix Backups\mllml.dll
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll
O20 - Winlogon Notify: WBSrv - C:\PROGRA~1\Stardock\OBJECT~1\WINDOW~1\wbsrv.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Unknown owner - C:\Program Files\iPod\bin\iPodService.exe (file missing)
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe


  • 0

#23
Shaba
Posted 05 September 2006 - 12:07 AM

Shaba

    Malware Expert

  • Member
  • PipPipPip
  • 558 posts
  • MVP
Hi

We'll try this then:

1. Please download The Avenger by Swandog46 to your Desktop.
  • Click on Avenger.zip to open the file
  • Extract avenger.exe to your desktop
2. Copy all the text contained in the code box below to your Clipboard by highlighting it and pressing (Ctrl+C):

Files to delete:
C:\VundoFix Backups\mllml.dll


Note: the above code was created specifically for this user. If you are not this user, do NOT follow these directions as they could damage the workings of your system.

3. Now, start The Avenger program by clicking on its icon on your desktop.
  • Under "Script file to execute" choose "Input Script Manually".
  • Now click on the Magnifying Glass icon which will open a new window titled "View/edit script"
  • Paste the text copied to clipboard into this window by pressing (Ctrl+V).
  • Click Done
  • Now click on the Green Light to begin execution of the script
  • Answer "Yes" twice when prompted.
4. The Avenger will automatically do the following:
  • It will Restart your computer. ( In cases where the code to execute contains "Drivers to Unload", The Avenger will actually restart your system twice.)
  • On reboot, it will briefly open a black command window on your desktop, this is normal.
  • After the restart, it creates a log file that should open with the results of Avenger’s actions. This log file will be located at C:\avenger.txt
  • The Avenger will also have backed up all the files, etc., that you asked it to delete, and will have zipped them and moved the zip archives to C:\avenger\backup.zip.
5. Please copy/paste the content of c:\avenger.txt into your reply along with a fresh HJT log by using Add/Reply
  • 0

#24
Solarin
Posted 08 September 2006 - 07:04 AM

Solarin

    Member

  • Topic Starter
  • Member
  • PipPip
  • 28 posts
Avenger Logfile:

Logfile of The Avenger version 1, by Swandog46
Running from registry key:
\Registry\Machine\System\CurrentControlSet\Services\yywcgcgy

*******************

Script file located at: \??\C:\Documents and Settings\dpdvhfsx.txt
Script file opened successfully.

Script file read successfully

Backups directory opened successfully at C:\Avenger

*******************

Beginning to process script file:

File C:\VundoFix Backups\mllml.dll deleted successfully.

Completed script processing.

*******************

Finished! Terminate.


Hijack This! Logfile:

Logfile of HijackThis v1.99.1
Scan saved at 8:03:32 AM, on 9/8/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5450.0004)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\TrojanHunter 4.5\THGuard.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\PROGRA~1\SYMANT~1\VPTray.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe
C:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
C:\Program Files\Belkin\USB F5D7050\Wireless Utility\Belkinwcui.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\Logitech\SetPoint\KEM.exe
C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE
C:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE
C:\WINDOWS\system32\notepad.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Stardock\Object Desktop\WindowBlinds\wbconfig.exe
C:\Program Files\Hijack This!\HJT.exe.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://securityrespo...r/fix_homepage/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft....k/?LinkId=54729
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft....k/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft....k/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft....cid={SUB_CLCID}
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: (no name) - {AAF5E800-6EF6-4A41-BC5D-34B7F354AB81} - C:\VundoFix Backups\mllml.dll (file missing)
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: StylerToolBar - {D2F8F919-690B-4EA2-9FA7-A203D1E04F75} - C:\Program Files\Styler\TB\StylerTB.dll
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\Updreg.exe
O4 - HKLM\..\Run: [Jet Detection] C:\Program Files\Creative\SBAudigy\PROGRAM\ADGJDet.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [THGuard] "C:\Program Files\TrojanHunter 4.5\THGuard.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe"
O4 - HKLM\..\Run: [mmtask] c:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [LogonStudio] "C:\Program Files\WinCustomize\LogonStudio\logonstudio.exe" /RANDOM
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - Startup: Styler.lnk = ?
O4 - Global Startup: Belkin Wireless USB Utility.lnk = C:\Program Files\Belkin\USB F5D7050\Wireless Utility\Belkinwcui.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\KEM.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative....026/CTSUEng.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky...can_unicode.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.micros...b?1156300299077
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoft...free/asinst.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative....15026/CTPID.cab
O18 - Protocol: bw+0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - Winlogon Notify: mllml - C:\VundoFix Backups\mllml.dll (file missing)
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll
O20 - Winlogon Notify: WBSrv - C:\PROGRA~1\Stardock\OBJECT~1\WINDOW~1\wbsrv.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Unknown owner - C:\Program Files\iPod\bin\iPodService.exe (file missing)
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe


  • 0

#25
Shaba
Posted 08 September 2006 - 09:54 AM

Shaba

    Malware Expert

  • Member
  • PipPipPip
  • 558 posts
  • MVP
Hi

Looking quite good :whistling:

Open HijackThis, click do a system scan only and checkmark these:

O2 - BHO: (no name) - {AAF5E800-6EF6-4A41-BC5D-34B7F354AB81} - C:\VundoFix Backups\mllml.dll (file missing)
O20 - Winlogon Notify: mllml - C:\VundoFix Backups\mllml.dll (file missing)

Reboot and send a fresh HijackThis log.

Still having problems?
  • 0

Advertisements

#26
Solarin
Posted 13 September 2006 - 09:51 PM

Solarin

    Member

  • Topic Starter
  • Member
  • PipPip
  • 28 posts
I haven't noticed any problems that I can see. Startup is right around where it used to be before the infection and I am no longer receiving error messages or pop-ups.

Hijack This! Logfile:

Logfile of HijackThis v1.99.1
Scan saved at 10:51:10 PM, on 9/13/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5450.0004)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\TrojanHunter 4.5\THGuard.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\PROGRA~1\SYMANT~1\VPTray.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe
C:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Belkin\USB F5D7050\Wireless Utility\Belkinwcui.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\Logitech\SetPoint\KEM.exe
C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE
C:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Hijack This!\HJT.exe.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://securityrespo...r/fix_homepage/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft....k/?LinkId=54729
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft....k/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft....k/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft....cid={SUB_CLCID}
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: (no name) - {AAF5E800-6EF6-4A41-BC5D-34B7F354AB81} - C:\VundoFix Backups\mllml.dll (file missing)
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\Updreg.exe
O4 - HKLM\..\Run: [Jet Detection] C:\Program Files\Creative\SBAudigy\PROGRAM\ADGJDet.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [THGuard] "C:\Program Files\TrojanHunter 4.5\THGuard.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe"
O4 - HKLM\..\Run: [mmtask] c:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [LogonStudio] "C:\Program Files\WinCustomize\LogonStudio\logonstudio.exe" /RANDOM
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - Global Startup: Belkin Wireless USB Utility.lnk = C:\Program Files\Belkin\USB F5D7050\Wireless Utility\Belkinwcui.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\KEM.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative....026/CTSUEng.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky...can_unicode.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.micros...b?1156300299077
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoft...free/asinst.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative....15026/CTPID.cab
O18 - Protocol: bw+0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll
O20 - Winlogon Notify: WBSrv - C:\PROGRA~1\Stardock\OBJECT~1\WINDOW~1\wbsrv.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Unknown owner - C:\Program Files\iPod\bin\iPodService.exe (file missing)
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe


  • 0

#27
Shaba
Posted 14 September 2006 - 03:49 AM

Shaba

    Malware Expert

  • Member
  • PipPipPip
  • 558 posts
  • MVP
Hi

Open HijackThis, click do a system scan only and checkmark this:

O2 - BHO: (no name) - {AAF5E800-6EF6-4A41-BC5D-34B7F354AB81} - C:\VundoFix Backups\mllml.dll (file missing)

Close all windows including browser and press fix checked.

Reboot and send a fresh HjT log.
  • 0

#28
Solarin
Posted 16 September 2006 - 08:02 PM

Solarin

    Member

  • Topic Starter
  • Member
  • PipPip
  • 28 posts
Hijack This! Logfile:

Logfile of HijackThis v1.99.1
Scan saved at 9:01:54 PM, on 9/16/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5450.0004)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\TrojanHunter 4.5\THGuard.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\PROGRA~1\SYMANT~1\VPTray.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe
C:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\Logitech\SetPoint\KEM.exe
C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE
C:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\iTunes\iTunes.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Hijack This!\HJT.exe.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://securityrespo...r/fix_homepage/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft....k/?LinkId=54729
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft....k/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft....k/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft....cid={SUB_CLCID}
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\Updreg.exe
O4 - HKLM\..\Run: [Jet Detection] C:\Program Files\Creative\SBAudigy\PROGRAM\ADGJDet.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [THGuard] "C:\Program Files\TrojanHunter 4.5\THGuard.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe"
O4 - HKLM\..\Run: [mmtask] c:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [LogonStudio] "C:\Program Files\WinCustomize\LogonStudio\logonstudio.exe" /RANDOM
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - Global Startup: Belkin Wireless USB Utility.lnk = C:\Program Files\Belkin\USB F5D7050\Wireless Utility\Belkinwcui.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\KEM.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative....026/CTSUEng.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky...can_unicode.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.micros...b?1156300299077
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoft...free/asinst.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative....15026/CTPID.cab
O18 - Protocol: bw+0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {AFD52C95-487C-4E2D-89EF-5A0D592FB6BF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll
O20 - Winlogon Notify: WBSrv - C:\PROGRA~1\Stardock\OBJECT~1\WINDOW~1\wbsrv.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Unknown owner - C:\Program Files\iPod\bin\iPodService.exe (file missing)
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe


  • 0

#29
Shaba
Posted 17 September 2006 - 02:50 AM

Shaba

    Malware Expert

  • Member
  • PipPipPip
  • 558 posts
  • MVP
Hi

Logs look good.

How are things running now?
  • 0

#30
Solarin
Posted 22 September 2006 - 02:30 PM

Solarin

    Member

  • Topic Starter
  • Member
  • PipPip
  • 28 posts
Things are running smoothly. I don't get any pop-ups and start-up is quick. Thanks for all your help!
  • 0
Back to Virus, Spyware, Malware Removal · Next Unread Topic →




Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

  1. Geeks to Go Community
  2. → Security
  3. → Virus, Spyware, Malware Removal

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP