[raysell]

Here is the panda active scan. Running WinXP Home edition on HP zv5000. AdAware SE, Spy Sweeper scans completed and items quanatined. Hijack this found no critical items.


Incident Status Location

Adware:adware/wupd Not disinfected c:\windows\system32\ide21201.vxd
Adware:adware/startpage.art Not disinfected c:\program files\System.exe
Adware:adware/ncase Not disinfected c:\windows\180Solutions
Adware:adware/transponder Not disinfected Windows Registry
Adware:adware/mbkwbar Not disinfected Windows Registry
Adware:adware/ieplugin Not disinfected Windows Registry
Adware:adware/blazefind Not disinfected Windows Registry
Dialer:dialer.du Not disinfected HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7B55BB05-0B4D-44FD-81A6-B136188F5DEB}
Adware:adware/topmoxie Not disinfected Windows Registry
Adware:adware/cws Not disinfected Windows Registry
Adware:adware/dyfuca Not disinfected Windows Registry
Adware:adware/exact.bargainbuddy Not disinfected Windows Registry
Spyware:Cookie/FastClick Not disinfected C:\Documents and Settings\Denise\Cookies\[email protected][1].txt
Possible Virus. Renamed C:\Program Files\Trend Micro\Antivirus\VSS7FOEN.03N
Possible Virus. Renamed C:\Program Files\Trend Micro\Antivirus\VSSETS9N.03U

Logfile of HijackThis v1.99.1
Scan saved at 10:33:27 AM, on 12/10/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Trend Micro\Antivirus\Tmntsrv.exe
C:\Program Files\Trend Micro\Antivirus\tmproxy.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe
C:\Program Files\Trend Micro\Antivirus\pccguide.exe
C:\Program Files\Trend Micro\Antivirus\PCClient.exe
C:\Program Files\Trend Micro\Antivirus\TMOAgent.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Webroot\Spy Sweeper\SSU.EXE
C:\WINDOWS\system32\NOTEPAD.EXE
C:\hyjack this\HijackThis.exe

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe" /startintray
O4 - HKLM\..\Run: [pccguide.exe] "C:\Program Files\Trend Micro\Antivirus\pccguide.exe"
O4 - HKLM\..\Run: [PCClient.exe] "C:\Program Files\Trend Micro\Antivirus\PCClient.exe"
O4 - HKLM\..\Run: [TM Outbreak Agent] "C:\Program Files\Trend Micro\Antivirus\TMOAgent.exe" /run
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MoneyAgent] "c:\Program Files\Microsoft Money\System\mnyexpr.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_04\bin\npjpi142_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_04\bin\npjpi142_04.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O14 - IERESET.INF: START_PAGE_URL=http://us8l.hpwis.com
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://housecall65.t...ivex/hcImpl.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.syma...bin/AvSniff.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.syma...n/bin/cabsa.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoft...free/asinst.cab
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: SearchList = safedose.com
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: SearchList = safedose.com
O20 - Winlogon Notify: MRI_DISABLED - C:\WINDOWS\
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
O23 - Service: Trend NT Realtime Service (Tmntsrv) - Trend Micro Incorporated. - C:\Program Files\Trend Micro\Antivirus\Tmntsrv.exe
O23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Incorporated. - C:\Program Files\Trend Micro\Antivirus\tmproxy.exe
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe

Edited by raysell, 10 December 2006 - 09:35 AM.

[Advertisements]

Hi raysell

Welcome to GTG!

* I am attaching a fix.zip file to this post. Download it and save it to your desktop. Unzip it to extract the fix.reg file it contains.

Doubleclick on the fix.reg file to add it to the registry. Answer yes to confirm the merge.


* Click here to download ATF Cleaner by Atribune and save it to your desktop.


* Click Here and download Killbox and save it to your desktop.


* Click here for info on how to boot to safe mode if you don't already know how.


* Now copy these instructions to notepad and save them to your desktop. You will need them to refer to.


* Run Hijack This again and put a check by this entry. Close ALL windows except HijackThis and click "Fix checked"

O20 - Winlogon Notify: MRI_DISABLED - C:\WINDOWS\


* Restart your computer into safe mode now. Perform the following steps in safe mode:


* Double-click on Killbox.exe to run it.

• Put a tick by Standard File Kill.
• In the "Full Path of File to Delete" box, copy and paste each of the following lines one at a time:
  
  c:\windows\system32\ide21201.vxd
  
  c:\program files\System.exe
  
  c:\windows\180Solutions
  
  
• Click on the button that has the red circle with the X in the middle after you enter each file.
• It will ask for confimation to delete the file.
• Click Yes.
• Continue with that procedure until you have pasted all of these in the "Paste Full Path of File to Delete" box.
• Killbox may tell you that one or more files do not exist.
• If that happens, just continue on with all the files. Be sure you don't miss any.
• Exit the Killbox.

* Run ATF Cleaner:

• Double-click ATF-Cleaner.exe to run the program.
• Under Main choose: Select All
• Click the Empty Selected button.
• If you use Firefox:
• Click Firefox at the top and choose: Select All
• Click the Empty Selected button.
• NOTE: If you would like to keep your saved passwords, please click No at the prompt.

• If you use Opera:
• Click Opera at the top and choose: Select All
• Click the Empty Selected button.
  
• NOTE: If you would like to keep your saved passwords, please click No at the prompt.

[*]Click Exit on the Main menu to close the program.
[/list]
* Restart back into Windows normally now.


* Run Kaspersky online virus scan here.

After the updates have downloaded, click on the "Scan Settings" button.
Choose the "Extended database" for the scan.
Under "Please select a target to scan", click "My Computer".
When the scan is finished, Save the results from the scan!

Note: You have to use Internet Explorer to do the online scan.

Post a new HiJackThis log along with the results from Kaspersky scan

* Also open Hijack This and click on the "Open the Misc Tools section" button. Click on the "Open Uninstall Manager" button. Click the "Save List" button. After you click the "Save List" button, you will be asked where to save the file. Pick a place to save it then the list should open in notepad. Copy and paste that list here.

Attached Files

•  fix.zip   235bytes   126 downloads

[Flrman1]

Hi raysell

Welcome to GTG!

* I am attaching a fix.zip file to this post. Download it and save it to your desktop. Unzip it to extract the fix.reg file it contains.

Doubleclick on the fix.reg file to add it to the registry. Answer yes to confirm the merge.


* Click here to download ATF Cleaner by Atribune and save it to your desktop.


* Click Here and download Killbox and save it to your desktop.


* Click here for info on how to boot to safe mode if you don't already know how.


* Now copy these instructions to notepad and save them to your desktop. You will need them to refer to.


* Run Hijack This again and put a check by this entry. Close ALL windows except HijackThis and click "Fix checked"

O20 - Winlogon Notify: MRI_DISABLED - C:\WINDOWS\


* Restart your computer into safe mode now. Perform the following steps in safe mode:


* Double-click on Killbox.exe to run it.

• Put a tick by Standard File Kill.
• In the "Full Path of File to Delete" box, copy and paste each of the following lines one at a time:
  
  c:\windows\system32\ide21201.vxd
  
  c:\program files\System.exe
  
  c:\windows\180Solutions
  
  
• Click on the button that has the red circle with the X in the middle after you enter each file.
• It will ask for confimation to delete the file.
• Click Yes.
• Continue with that procedure until you have pasted all of these in the "Paste Full Path of File to Delete" box.
• Killbox may tell you that one or more files do not exist.
• If that happens, just continue on with all the files. Be sure you don't miss any.
• Exit the Killbox.

* Run ATF Cleaner:

• Double-click ATF-Cleaner.exe to run the program.
• Under Main choose: Select All
• Click the Empty Selected button.
• If you use Firefox:
• Click Firefox at the top and choose: Select All
• Click the Empty Selected button.
• NOTE: If you would like to keep your saved passwords, please click No at the prompt.

• If you use Opera:
• Click Opera at the top and choose: Select All
• Click the Empty Selected button.
  
• NOTE: If you would like to keep your saved passwords, please click No at the prompt.

[*]Click Exit on the Main menu to close the program.
[/list]
* Restart back into Windows normally now.


* Run Kaspersky online virus scan here.

After the updates have downloaded, click on the "Scan Settings" button.
Choose the "Extended database" for the scan.
Under "Please select a target to scan", click "My Computer".
When the scan is finished, Save the results from the scan!

Note: You have to use Internet Explorer to do the online scan.

Post a new HiJackThis log along with the results from Kaspersky scan

* Also open Hijack This and click on the "Open the Misc Tools section" button. Click on the "Open Uninstall Manager" button. Click the "Save List" button. After you click the "Save List" button, you will be asked where to save the file. Pick a place to save it then the list should open in notepad. Copy and paste that list here.

Attached Files

•  fix.zip   235bytes   126 downloads

[raysell]

Logfile of HijackThis v1.99.1
Scan saved at 6:57:15 PM, on 12/10/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Trend Micro\Antivirus\Tmntsrv.exe
C:\Program Files\Trend Micro\Antivirus\tmproxy.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\MsPMSPSv.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe
C:\Program Files\Trend Micro\Antivirus\pccguide.exe
C:\Program Files\Trend Micro\Antivirus\PCClient.exe
C:\Program Files\Trend Micro\Antivirus\TMOAgent.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Webroot\Spy Sweeper\SSU.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\hyjack this\HijackThis.exe

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe" /startintray
O4 - HKLM\..\Run: [pccguide.exe] "C:\Program Files\Trend Micro\Antivirus\pccguide.exe"
O4 - HKLM\..\Run: [PCClient.exe] "C:\Program Files\Trend Micro\Antivirus\PCClient.exe"
O4 - HKLM\..\Run: [TM Outbreak Agent] "C:\Program Files\Trend Micro\Antivirus\TMOAgent.exe" /run
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MoneyAgent] "c:\Program Files\Microsoft Money\System\mnyexpr.exe"
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_04\bin\npjpi142_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_04\bin\npjpi142_04.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O14 - IERESET.INF: START_PAGE_URL=http://us8l.hpwis.com
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky...can_unicode.cab
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://housecall65.t...ivex/hcImpl.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.syma...bin/AvSniff.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.syma...n/bin/cabsa.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoft...free/asinst.cab
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: SearchList = safedose.com
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: SearchList = safedose.com
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
O23 - Service: Trend NT Realtime Service (Tmntsrv) - Trend Micro Incorporated. - C:\Program Files\Trend Micro\Antivirus\Tmntsrv.exe
O23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Incorporated. - C:\Program Files\Trend Micro\Antivirus\tmproxy.exe
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe

Ad-Aware SE Personal
Adobe Atmosphere Player for Acrobat and Adobe Reader
Adobe Reader 7.0
Agere Systems AC'97 Modem
ATI Control Panel
ATI Display Driver
Easy CD & DVD Creator 6
HijackThis 1.99.1
Hotfix for Windows XP (KB914440)
Hotfix for Windows XP (KB915865)
HP Help and Support
HP Memories Disc
HP Share-to-Web
HP Software Update
InterVideo WinDVD
InterVideo WinDVD Creator 2
Java 2 Runtime Environment, SE v1.4.2_03
Java 2 Runtime Environment, SE v1.4.2_04
Kaspersky Online Scanner
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Hotfix (KB886903)
Microsoft Data Access Components KB870669
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft Money 2004
Microsoft Money 2004 System Pack
Microsoft National Language Support Downlevel APIs
Microsoft Office Standard Edition 2003
Microsoft Office XP Web Components
Microsoft Web Publishing Wizard 1.52
Microsoft Works 7.0
muvee autoProducer DVD Edition - HPH
Panda ActiveScan
PCI 1620 Cardbus Controller and Software
Quicken 2004
RealPlayer Basic
Security Update for Step By Step Interactive Training (KB898458)
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player 9 (KB917734)
Security Update for Windows XP (KB893756)
Security Update for Windows XP (KB896358)
Security Update for Windows XP (KB896423)
Security Update for Windows XP (KB896424)
Security Update for Windows XP (KB896428)
Security Update for Windows XP (KB899587)
Security Update for Windows XP (KB899591)
Security Update for Windows XP (KB900725)
Security Update for Windows XP (KB901017)
Security Update for Windows XP (KB901214)
Security Update for Windows XP (KB902400)
Security Update for Windows XP (KB904706)
Security Update for Windows XP (KB905414)
Security Update for Windows XP (KB905749)
Security Update for Windows XP (KB908519)
Security Update for Windows XP (KB911562)
Security Update for Windows XP (KB911567)
Security Update for Windows XP (KB911927)
Security Update for Windows XP (KB912919)
Security Update for Windows XP (KB913580)
Security Update for Windows XP (KB914388)
Security Update for Windows XP (KB914389)
Security Update for Windows XP (KB917344)
Security Update for Windows XP (KB917422)
Security Update for Windows XP (KB917953)
Security Update for Windows XP (KB918439)
Security Update for Windows XP (KB919007)
Security Update for Windows XP (KB920213)
Security Update for Windows XP (KB920214)
Security Update for Windows XP (KB920670)
Security Update for Windows XP (KB920683)
Security Update for Windows XP (KB920685)
Security Update for Windows XP (KB921398)
Security Update for Windows XP (KB922616)
Security Update for Windows XP (KB922760)
Security Update for Windows XP (KB922819)
Security Update for Windows XP (KB923191)
Security Update for Windows XP (KB923414)
Security Update for Windows XP (KB923980)
Security Update for Windows XP (KB924191)
Security Update for Windows XP (KB924270)
Security Update for Windows XP (KB924496)
Security Update for Windows XP (KB925486)
Shockwave
Spy Sweeper
Trend Micro Antivirus
Update for Windows XP (KB894391)
Update for Windows XP (KB898461)
Update for Windows XP (KB900485)
Update for Windows XP (KB904942)
Update for Windows XP (KB908531)
Update for Windows XP (KB910437)
Update for Windows XP (KB911280)
Update for Windows XP (KB916595)
Update for Windows XP (KB920872)
Update for Windows XP (KB922582)
VPN Client
Windows Installer 3.1 (KB893803)
Windows Installer 3.1 (KB893803)
Windows XP Hotfix - KB834707
Windows XP Hotfix - KB867282
Windows XP Hotfix - KB873333
Windows XP Hotfix - KB873339
Windows XP Hotfix - KB885250
Windows XP Hotfix - KB885835
Windows XP Hotfix - KB885836
Windows XP Hotfix - KB886185
Windows XP Hotfix - KB887472
Windows XP Hotfix - KB887742
Windows XP Hotfix - KB888113
Windows XP Hotfix - KB888302
Windows XP Hotfix - KB890047
Windows XP Hotfix - KB890175
Windows XP Hotfix - KB890859
Windows XP Hotfix - KB890923
Windows XP Hotfix - KB891781
Windows XP Hotfix - KB893066
Windows XP Hotfix - KB893086
Windows XP Service Pack 2

-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Sunday, December 10, 2006 6:56:37 PM
Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.83.0
Kaspersky Anti-Virus database last update: 10/12/2006
Kaspersky Anti-Virus database records: 253782
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
C:\

Scan Statistics:
Total number of scanned objects: 43306
Number of viruses found: 41
Number of infected objects: 941 / 0
Number of suspicious objects: 0
Duration of the scan process: 01:06:34

Infected Object Name / Virus Name / Last Action
C:\Documents and Settings\All Users\Application Data\Broderbund Software\Print\The Print Shop\20.0\Books\Sender\Sender.abk Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Broderbund Software\Print\The Print Shop\20.0\PMWPRINT.INI Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\511a0f3f9e960fa97de3d0b74adfc574_85a4945a-623a-4c2b-b12d-2313f899b88c Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\dd36ee39165bb26f18271f7183f2b5e2_85a4945a-623a-4c2b-b12d-2313f899b88c Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ea563f5ed0b8ea72081a19b9b561dd25_85a4945a-623a-4c2b-b12d-2313f899b88c Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\fb0e69704a850c4f1346dd9e4af52b2a_85a4945a-623a-4c2b-b12d-2313f899b88c Object is locked skipped
C:\Documents and Settings\All Users\Application Data\muvee Technologies\030410\0102\0102\values Object is locked skipped
C:\Documents and Settings\Denise\Application Data\Webroot\Spy Sweeper\Logs\061210075224.ses Object is locked skipped
C:\Documents and Settings\Denise\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\Denise\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\Denise\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\Denise\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Denise\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Denise\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\Denise\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Data\settings.dat Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS02B69D46-83D6-46F6-8F59-CB742A58EBC0.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS090BF51B-E59B-4CA0-9CF7-E7BC38B86214.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS09773D6E-17FB-4664-8F12-29BC7F8F23DB.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS0D3C9D7C-12D9-4160-B0D2-E2746DA798DE.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS0F725DEE-470C-4CAE-B72E-A148388819FA.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS1AA07E25-3A6C-4C4A-BD7D-CCBEB90966A7.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS1AE2D14B-8B74-43B9-B4E9-D5545DF3694E.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS20A0786A-9F18-4231-A7C5-3054C6BE1B2F.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS232D80B1-3FA9-4E85-976B-ABB7A5B4BEB8.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS2355932B-F055-4986-B28B-EBD39308BC1C.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS320D2B8A-BE0B-4EF2-B81B-07C28EAFD12E.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS33AF003C-5920-4055-B2A0-9C95734DA327.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS3A771263-8550-49E9-8C4A-AE27398D3AC2.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS3F619281-9ADC-4585-B98B-12151DC694EB.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS403A5D4A-1F9F-40D2-882A-A55D6D0E9278.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS4AEA5FB1-DB9E-406B-BEC0-6562DFDBC469.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS4B108988-E6EF-4B13-91BC-C3E9D38E3D2E.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS4B681F8E-5D8C-46D6-B6C2-648228A04F80.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS4BA7DF85-7496-470B-9A2B-CD97DDDBF843.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS4C977138-283E-4A0A-B1FA-FE58802122EC.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS4D79B5AF-21E9-4EC0-8048-651838450FF5.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS4E42AED3-D44D-4B8B-B378-959DBF2DB4EF.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS5DE890DE-8AEC-4995-83B6-611D31B3A29C.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS5DF1D680-4B4C-4E1C-ABDE-227EBB628B9E.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS62B7724E-9D78-4217-B1A1-A360515C6B2F.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS64A7BE65-C689-43A1-A0D9-D0E4CD9E66A9.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS64E7A697-CF89-471D-B904-8FFE02045FB8.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS685EC724-9848-4D80-8CB1-F08DDD566E66.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS6C534DB7-55D0-4F0D-B5B7-008D55F85892.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS70E93AA2-CD58-4709-B77E-FAD8AC2A0C42.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS77E7D40A-1BDD-4C89-9B3E-EC4AFB46C136.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS7934F008-D264-40F6-AEBD-BB611C491338.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS7956E3CA-FEB6-441D-9C87-A1FA1AEA2B02.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS7B388F65-3938-4B1F-9AB5-FD68B7CA3EF7.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS7BC46AA2-93AF-49CE-B325-1C3E8F56ADD1.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS7D35E0BF-C8F9-4738-9600-BBEEA93895BB.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS82753347-12DE-4AB2-89E4-9D111506BEC0.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS8634C0F2-5498-4293-AED4-3536DC31A1D6.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS88657BC4-5612-40F6-AE21-0D0C075A4BD4.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS8B3E37BA-4A08-4AE6-AF03-278944C0DACB.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS8B51BB8B-E1C2-416B-AC63-F1E12EFBB105.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS8BEBC6BD-56A6-4CF1-82CB-95F899DEF290.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS8ED09479-800A-4EC8-89C9-3AB440532B2E.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS9089F2D7-2472-4805-AF92-47C9987E9B3E.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS9321AAD6-1D70-4860-8CDC-EDB70C351792.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS93968F2F-D76D-4A02-986E-5B5D5F7519E7.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS96555D5B-9FB3-49C2-A661-B73EDA36FCAE.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS9B550C04-775C-48A4-AE2E-2F17AE56EA94.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS9EF050A9-E1C8-4B62-B54C-0C9F107EEE96.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCS9FC0CE3A-0CA6-4C52-88EF-B839935FAD03.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSA32B784B-3FD2-4F5F-8DA3-020DE06C176D.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSA8F19F3F-3628-404B-8D93-6F9A83C868F3.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSAA77047E-26EB-4692-8A33-7B2C16F134E2.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSBB82FEAB-0099-4BCF-A9A6-D802933F86C0.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSBF4B80E1-9A00-428A-9CE7-6207E74BA5C8.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSC3CD280D-F5E0-4E0C-96BD-614AE88FB178.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSC3DFC48B-F613-40D5-A1E5-2EFACBB4B254.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSC422EC22-1F7E-4D7E-8249-C9470FB71460.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSC54BF518-2652-4BF1-A972-B05A4282FE23.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSC81DCAA5-DB3C-470D-964A-A99D6CEA8D9A.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSC8D5E012-FAE0-4E12-8193-370871FBE75B.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSCB28F0BB-074F-470E-AF8F-679EC16FD2A9.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSCCE276EB-E222-4488-A197-273D72EE2D2C.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSCD2B85AA-9F0F-48EF-B4DA-E5E52DF93311.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSCD5F87DF-4C57-448F-83DB-148FEBF1D8FF.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSCE630B74-DF24-426B-A7EC-2D93C1B3E29B.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSD11B4924-59F3-4FD6-8C38-B862596E2AB6.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSD32A18FB-8297-4275-8B92-49EBBEF13829.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSD508D303-5026-4128-93D3-7B923C2DD177.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSD5E8083B-EFF2-4932-A9C9-2896B7632FD0.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSD677E3C5-E343-483E-AAFC-285E81B2411D.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSD695F909-5B9C-49F7-A634-41A33F91988A.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSDE919D90-8BF0-4CF8-AF45-88C89C27F7F1.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSE15192FB-0C1D-4EB7-9501-B4FEEE01FCE4.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSE2575577-D4BE-4D68-88D0-D4E865ADD4DD.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSE433F5E1-3C2E-4E95-903D-B0E279CD2E94.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSE9B5E73B-810C-443C-822C-9A215D04B767.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSEA3A3F06-2873-4B47-8F9E-3975FCE34BD9.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSEB9B6D5F-A136-462D-8F1F-B0B44E581A04.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSEC7B2D80-DEF1-4A34-AB63-9DD8A4DA31CB.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSEDF93A0A-FCF1-4734-852E-893A966D62F3.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSEE4BE36B-3CD1-4874-805A-74C6D48C8511.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSF80006F3-53DD-4424-97F1-84E6A75B6AB4.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSF872F5A6-F3D8-4D6A-83DE-086434222AD7.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSFC2FCBB8-DFE2-4ACE-85FF-F8CB2B1AD65E.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSFC88BC74-6F63-4AD6-AC0D-D9BF09AC9722.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSFE1CDE70-8447-4EA2-AC5F-C47AA64823DE.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSFE24F6D0-C7BD-4C78-B4AC-0BDBDB260251.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSFE271623-BA22-4A7C-92CA-EB8148B6AB2E.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSFE652EFC-00AC-498C-8DED-2603AD6D4009.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Application Data\Webroot\Spy Sweeper\Temp\SSCSFF09E8A7-EEC4-437B-8CAD-6C1D9854D0F0.tmp Object is locked skipped
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\Program Files\Adobe\Acrobat 6.0\Reader\plug_ins\Multimedia\MPP\AtmosphereMPP.mpp Object is locked skipped
C:\Program Files\InstallShield Installation Information\{5624C000-B109-11D4-9DB4-00E0290FCAC5}\setup.ilg Object is locked skipped
C:\Program Files\InstallShield Installation Information\{748F4870-8350-11D3-B0BF-080009FB4A19}\setup.ilg Object is locked skipped
C:\Program Files\InstallShield Installation Information\{7B0ADD54-01D9-45E7-964A-B4A334F12034}\Setup.ilg Object is locked skipped
C:\Program Files\Norton AntiVirus\Quarantine\006B077D.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\00B70A01.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\019D79B9.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\01BA2C5E.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\01FA7173.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\020848CF.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\020D25E7.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\020E59FD.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\021600BE.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\02561715 Object is locked skipped
C:\Program Files\Norton AntiVirus\Quarantine\02590502.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\02602103.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\02672D85.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\027E3A41.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\02992082.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\02D51604.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\02E00DD8.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\02E62FA9.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\03005012.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\030A311E.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\032763C3.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\03562B07.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\035D671F.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\03602BA9.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\03857B9E.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\039D23FD.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\03A3174A Object is locked skipped
C:\Program Files\Norton AntiVirus\Quarantine\04820702 Object is locked skipped
C:\Program Files\Norton AntiVirus\Quarantine\04D42D2E.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\05210BB1.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\054F12C8.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\05500D3B.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\055D1970.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\05614BD4.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\05674FEE.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\05690EE7.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\057A28BA.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\057D52B7.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\05A856C2 Infected: not-a-virus:AdWare.Win32.BiSpy.t skipped
C:\Program Files\Norton AntiVirus\Quarantine\05B068D2.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\05B312CE.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\05C1578C.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\05DD38A7.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\05F605C4.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\05FD487F.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\0600727B.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\0602528D.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\060E4CC9 Object is locked skipped
C:\Program Files\Norton AntiVirus\Quarantine\06475FD1.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\06614E12.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\06B1110D.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\07227151.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\07633D29.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\07AF1A3E.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\07AF3712.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\080A27A0.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\080E371A Object is locked skipped
C:\Program Files\Norton AntiVirus\Quarantine\08116117 Infected: Trojan-Dropper.Win32.Delf.z skipped
C:\Program Files\Norton AntiVirus\Quarantine\08140B13 Object is locked skipped
C:\Program Files\Norton AntiVirus\Quarantine\0818350F Infected: Trojan-Downloader.Win32.Agent.ae skipped
C:\Program Files\Norton AntiVirus\Quarantine\081E0908 Infected: Trojan-Dropper.Win32.Delf.z skipped
C:\Program Files\Norton AntiVirus\Quarantine\081F1756.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\08213305 Object is locked skipped
C:\Program Files\Norton AntiVirus\Quarantine\0854638D.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\0872672D.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\088433AD.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\08885DAA.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\08C46B68.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\08CA77EA.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\08EB7BCB.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\08FA54A5.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\090014E4.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\093662AE.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\0961707B.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\09C11AF2.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\09C14C12.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\0A0D45F7.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\0A13425F.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\0A6673D8 Object is locked skipped
C:\Program Files\Norton AntiVirus\Quarantine\0A8956F9.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\0A931018.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\0AB87674.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\0AB9365E.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\0ADB24B8.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\0B672B65.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\0B681416 Object is locked skipped
C:\Program Files\Norton AntiVirus\Quarantine\0BA258FE Object is locked skipped
C:\Program Files\Norton AntiVirus\Quarantine\0BD3652D.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\0BE11D1C.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\0BEC337E.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\0BF5039B.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\0BF92D98.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\0C1E4DF9.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\0C2078BB.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\0C281365.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\0C3D5910.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\0C4F2590.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\0C723DEE.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\0C740ECE.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\0C7738CA.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\0CA8003A.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\0CC84274.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\0D16543D.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\0D281E0B.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\0D6E7749.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\0DEF4502.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\0E1A26FD.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\0E6620E6.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\0F1A2999.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\0F1C333C.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\0F2835CD.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\0F2E424F.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\0F3D6122.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\0F454518.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\0F84506D.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\0F8C3B61.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\0F9571DF.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\0FC864DC.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\0FD3584B.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\0FE4230D.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\1015262B.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\10284073.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\10534F87.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\105904A5.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\107804C6.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\108F7003.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\10C42FCB.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\11057BA3.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\1111486C.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\118524EA.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\119F08C8 Object is locked skipped
C:\Program Files\Norton AntiVirus\Quarantine\11C106EC.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\11C60354.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\11CB400C.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\12057ED0 Infected: Trojan-Downloader.Win32.Alchemic skipped
C:\Program Files\Norton AntiVirus\Quarantine\12316730.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\12455216.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\12723308.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\12817B91.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\128C5DCA.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\128F07C6.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\12951448.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\129C131F.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\12BE2CF1.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\12C22AF9 Object is locked skipped
C:\Program Files\Norton AntiVirus\Quarantine\12E82B21.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\12EF1BE7.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\130B7D01.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\132E0D35.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\133834CA.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\1364596C.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\13966665.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\13B500D9.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\144344C7.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\147D6332.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\14A02AD5.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\14D110D1.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\14F82DB2.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\15984CD8.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\15A45584.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\15B04E0B.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\15C76C53.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\15CB67AF.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\15EA1A97.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\15F903BB.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\15FF103D.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\16054B71.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\162F593E.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\166F729B.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\1678385E.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\167F0C57.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\168F34D5.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\16B912B6.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\16F0106C.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\172F6E9A.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\174C0533.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\1791037C.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\18264A1B.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\187870C0.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\18B93C98.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\18C4260C.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\18F72B92.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\19104C0B.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\195757BF.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\195D6441.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\197516C4.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\19843DE3.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\198867DF.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\198F573E.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\19D64494.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\19FD5AC7.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\1A0004C3.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\1A576265.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\1AB306E6.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\1AE24E2A.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\1AE73465.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\1B293761.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\1B634566.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\1B7F3792.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\1B887AA5.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\1BAA7D81.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\1BAC084D.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\1BB0324A.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\1C147182.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\1C17426C.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\1C577A27.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\1C6030A6.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\1C606B6A.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\1C740972.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\1CA9498A.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\1CBA3844.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\1CF62936.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\1D2F44C7 Object is locked skipped
C:\Program Files\Norton AntiVirus\Quarantine\1D414089.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\1D5704CE.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\1D7458EE.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\1D953ACE Infected: not-a-virus:AdWare.Win32.WebRebates.c skipped
C:\Program Files\Norton AntiVirus\Quarantine\1DCD22D0.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\1E194126.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\1EA331AC.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\1EC476B8.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\1EEF3C2F.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\1F3A0B51.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\1F6B47E5.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\1F77406C.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\1F8D5911.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\1FAD15EF.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\1FB730B1.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\1FBE4C20.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\1FD8439D.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\1FE006B0.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\1FF64B9F.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\202B31B5.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\203A415B.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine\20410657.exe Infected: not-a-virus:AdWare.Win32.HelpExpress skipped
C:\Program Files\Norton AntiVirus\Quarantine

[Flrman1]

The only infected files that scan found are in Norton and SpySweeper's quarantine areas. You should go ahead and empty out those quarantines.

The Hijack This log is clean so unless you have a malware problem that I don't see, you should be clean.

There is one minor issue to deal with in the Add/Remove programs list.

Go to Add/Remove programs and uninstall these old versions of Java:

Java 2 Runtime Environment, SE v1.4.2_03
Java 2 Runtime Environment, SE v1.4.2_04

Now go here and install the latest version of Java.

Is everything OK now?

[raysell]

Thanks for your help. I'm still not sure it's completely clean. While I was removing the old Java, spysweeper indicated that some program was attempting to add something to IE toolbar. MSIEXEC.EXE ia attempting to install a browser addon. This was the last message I got just a few minutes ago.

Ray

[Flrman1]

That alert from Spysweeper was nothing more than it alerting you to what you were doing while removing the old Java.

[Flrman1]

* If I had you use Killbox to delete any files, go ahead and delete the C:\!Killbox folder then empty the Recycle Bin.


* Check this out for info on how to tighten your security settings and some good free tools to help prevent this from happening again.


* Go to Windows update and install all "High Priority Updates".


* Now turn off System Restore:

On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
Check Turn off System Restore.
Click Apply, and then click OK.

Restart your computer, turn System Restore back on and create a restore point.

To create a restore point:

Single-click Start and point to All Programs.
Mouse over Accessories, then System Tools, and select System Restore.
In the System Restore wizard, select the box next the text labeled "Create a restore point" and click the Next button.
Type a description for your new restore point. Something like "After trojan/spyware cleanup". Click Create and you're done.

[raysell]

Again, thanks for your help. This was beyond my ability to research and fix.
I'll let it run for a while and see how it goes. It is running behind a firewall, and shows hidden using Shields up on GRC.com

[Flrman1]

You're welcome!

[Flrman1]

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.