Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

ie windows are redirected to the site ad.aware [RESOLVED]

Started by manuelrosati , Mar 12 2008 04:37 PM

  • This topic is locked This topic is locked

#16
manuelrosati
Posted 13 April 2008 - 01:16 PM

manuelrosati

    Member

  • Topic Starter
  • Member
  • PipPip
  • 41 posts
Thanks Andrewuk!
Kaspersky found 1 infected object ("number of viruses found" = 1, "number of infected objects" = 1)
Here is the log:
"
-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Sunday, April 13, 2008 9:05:39 PM
Operating System: Microsoft Windows Vista Home Edition, (Build 6000)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 13/04/2008
Kaspersky Anti-Virus database records: 701850
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
C:\
D:\
E:\

Scan Statistics:
Total number of scanned objects: 104498
Number of viruses found: 1
Number of infected objects: 1
Number of suspicious objects: 0
Duration of the scan process: 01:18:17

Infected Object Name / Virus Name / Last Action
C:\Acer\Empowering Technology\Logs\ETF.log Object is locked skipped
C:\Boot\BCD Object is locked skipped
C:\Boot\BCD.LOG Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\fwtsqmfile00.sqm Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\fwtsqmfile01.sqm Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\fwtsqmfile02.sqm Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\fwtsqmfile03.sqm Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\fwtsqmfile04.sqm Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\fwtsqmfile05.sqm Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\fwtsqmfile06.sqm Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\fwtsqmfile07.sqm Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\fwtsqmfile08.sqm Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\fwtsqmfile09.sqm Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\fwtsqmfile10.sqm Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\fwtsqmfile11.sqm Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\fwtsqmfile12.sqm Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\fwtsqmfile13.sqm Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\fwtsqmfile14.sqm Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\fwtsqmfile15.sqm Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\fwtsqmfile16.sqm Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\fwtsqmfile17.sqm Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\fwtsqmfile18.sqm Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\JET99FD.tmp Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\lpksetup-20080308-022129-0.log Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\lpksetup-20080308-022142-0.log Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\lpksetup-20080309-210625-0.log Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\lpksetup-20080309-210636-0.log Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\lpksetup-20080309-232639-0.log Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\lpksetup-20080309-232651-0.log Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\lpksetup-20080310-161055-0.log Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\lpksetup-20080310-161107-0.log Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\lpksetup-20080312-122752-0.log Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\lpksetup-20080312-122804-0.log Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\lpksetup-20080312-231720-0.log Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\lpksetup-20080312-231732-0.log Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\lpksetup-20080313-093110-0.log Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\lpksetup-20080313-093124-0.log Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\lpksetup-20080313-211337-0.log Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\lpksetup-20080313-211349-0.log Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\lpksetup-20080313-232547-0.log Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\lpksetup-20080313-232558-0.log Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\lpksetup-20080315-131027-0.log Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\lpksetup-20080315-131038-0.log Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\lpksetup-20080316-011839-0.log Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\lpksetup-20080316-011852-0.log Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\lpksetup-20080316-213330-0.log Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\lpksetup-20080316-213344-0.log Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\lpksetup-20080320-191004-0.log Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\lpksetup-20080320-191016-0.log Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\lpksetup-20080325-101134-0.log Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\lpksetup-20080325-101146-0.log Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\lpksetup-20080326-092416-0.log Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\lpksetup-20080326-092428-0.log Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\lpksetup-20080327-211203-0.log Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\lpksetup-20080327-211215-0.log Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\lpksetup-20080328-190417-0.log Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\lpksetup-20080328-190429-0.log Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\lpksetup-20080329-001739-0.log Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\lpksetup-20080329-001752-0.log Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\lpksetup-20080331-222438-0.log Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\lpksetup-20080401-130749-0.log Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\lpksetup-20080402-132233-0.log Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\lpksetup-20080402-132244-0.log Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\lpksetup-20080404-112654-0.log Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\lpksetup-20080404-112705-0.log Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\lpksetup-20080405-181017-0.log Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\lpksetup-20080405-181029-0.log Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\lpksetup-20080406-025706-0.log Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\lpksetup-20080406-025728-0.log Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\lpksetup-20080406-124914-0.log Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\lpksetup-20080406-124926-0.log Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\WER3226.tmp.version.txt Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\WER3227.tmp.appcompat.txt Object is locked skipped
C:\Deckard\System Scanner\backup\Windows\temp\WER6355.tmp.hdmp Object is locked skipped
C:\Program Files\Circle Developement\Uninstall.exe Infected: Trojan-Dropper.Win32.Agent.lxl skipped
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcrst.dll Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\EENGINE\EPERSIST.DAT Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\NFWEVT.LOG Object is locked skipped
C:\Program Files\InstallShield Installation Information\{1577A05B-EE62-4BBC-9DB7-FE748FA44EC2}\Setup.ilg Object is locked skipped
C:\Program Files\InstallShield Installation Information\{31403E22-2FDB-452F-AE9E-20854633226D}\setup.ilg Object is locked skipped
C:\Program Files\InstallShield Installation Information\{A450831D-25F6-4F42-9662-D000B25E0D82}\setup.ilg Object is locked skipped
C:\Program Files\InstallShield Installation Information\{AA4BF92B-2AAF-11DA-9D78-000129760D75}\setup.ilg Object is locked skipped
C:\Program Files\InstallShield Installation Information\{B145EC69-66F5-11D8-9D75-000129760D75}\setup.ilg Object is locked skipped
C:\Program Files\InstallShield Installation Information\{B7A0CE06-068E-11D6-97FD-0050BACBF861}\setup.ilg Object is locked skipped
C:\Program Files\InstallShield Installation Information\{B804C424-B66D-447A-84BD-C6B88C392C3A}\setup.ilg Object is locked skipped
C:\Program Files\InstallShield Installation Information\{EFBDC2B0-FAA8-4B78-8DE1-AEBE7958FA37}\setup.ilg Object is locked skipped
C:\Program Files\InstallShield Installation Information\{F79A208D-D929-11D9-9D77-000129760D75}\setup.ilg Object is locked skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\AVApp.log Object is locked skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\AVError.log Object is locked skipped
C:\Program Files\Norton Internet Security\Norton AntiVirus\AVVirus.log Object is locked skipped
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\$Acer$.cmd Object is locked skipped
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\5d7d50237fa134a9e1d6dc3b0795a2fd_f99bc357-62f5-4686-ab5a-80584a930840 Object is locked skipped
C:\ProgramData\Symantec\Common Client\ccSubSDK\submissions.idx Object is locked skipped
C:\ProgramData\Symantec\Common Client\settings.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\settings.DAT Object is locked skipped
C:\ProgramData\Symantec\Common Client\volatile.DAT Object is locked skipped
C:\ProgramData\Symantec\Common Client\{003E1664-7365-45C1-9925-3089A81AFC4B}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{00827C6B-2BA0-4E1B-9A38-C9C7B7BE1A17}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{00E0CB5C-2F71-4A09-9645-311BA0924DA3}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{00E7F6F0-D72F-4984-9CBB-9BC54BCF67A1}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{02861301-4F59-4209-B7BF-83569901E37E}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{0384EF8F-575D-4741-92AD-746B065D1CB0}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{03C03174-DCD3-4B4B-BD73-E53408764986}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{0405D9E6-003A-4E15-8A6A-5FBAC7F3CA31}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{0498FB14-227D-4D51-8F6F-65987C6CFD20}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{04B984D9-A578-4BE5-8260-9FEF24D3A450}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{0525B202-8445-4C69-A1CD-9CBC3555F9AC}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{0630A3AB-40F2-4EE1-BF2B-ADDF60A3B106}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{06D40F99-9230-42AD-AE9C-497B60D91AD0}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{06F1175B-3FAC-4388-B18C-595545AD91A3}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{07B0EB97-B0C9-438D-A68A-9670E98919DD}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{093956DB-ECEF-4742-A298-81968CB271F8}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{098198E5-C0D3-4535-B238-E36D217FB0FB}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{0999AE2C-7D0C-4658-9050-7F5ED31A3661}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{0A61E705-A66F-411A-A28E-5D597D0B040C}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{0D408A06-3D7D-46DC-A068-3D297F6D1EC3}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{0E94FA46-1196-460E-8712-A0A8890DB3A4}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{0EBD9235-4170-444D-AE3A-4531AC21F78D}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{0FC415B1-15F1-49C4-B895-0A3FA6ACE7C2}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{100912C7-1C7B-4EB5-BEFC-A8F3D551F8CF}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{10D64291-827A-422B-82C9-BDC665BA91B5}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{11C67A11-3960-4FB7-A976-BE1F98A4D6CF}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{11EE8F6D-469A-4CF3-92E5-CEA16ED539B5}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{126C73C4-738F-4B53-A705-3B38CDAC62E3}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{133694AF-77C4-429B-9E84-6243741F7624}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{1343045B-7044-4C9E-8308-FBD8BD34F9CC}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{13A26FD6-F26F-43DE-9F14-CAD6038ED01F}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{140358BA-B2A7-4EA3-B35B-9EB1D014E442}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{14826174-2E3F-4EBB-8696-E9CDC8CFCEBA}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{15342B57-DB27-4BC3-B6C0-98667FEB1B87}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{1577239C-2A2D-4DAC-8DC8-5F9769F5F403}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{174FA51F-F29F-4C3A-B86E-FBBF2A65913F}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{17F74473-7899-4899-88F7-5E97244F8A03}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{19A2C67F-D6AE-4D0F-89DA-CEC266B96A5E}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{19A2C67F-D6AE-4D0F-89DA-CEC266B96A5E}.DAT Object is locked skipped
C:\ProgramData\Symantec\Common Client\{19A9A72F-F823-4C93-B298-6F7EDD66F41E}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{1A85C754-E17D-42D4-80CD-D75D0727D74F}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{1B219C89-D419-445C-9E0B-71E02AB55077}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{1B710A83-F930-48A6-BFC7-1AD543BD5A77}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{1BB9F9AF-B700-4E1F-90BD-74480CE7F212}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{1C7BB41B-33FA-499A-A1D8-C9EF1A55BB75}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{1C8AE641-3B0C-451A-A0E1-F18A57E4C904}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{1ED1A433-15C1-4CCD-9D5F-4C4F09D24FB4}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{1F5AD8E6-E0A4-462C-BE77-DCF6006062FA}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{1F7EEAB1-D6E3-4725-8DEB-9B3F348092EF}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{200C5347-DE7B-4C72-A5CB-7BBA05E8EC43}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{20633FC5-CDAD-4E1D-92FF-5F27E72248F7}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{20F0C1AD-D82F-472E-9C91-63BF6D1361DE}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{21EB4B97-1F65-43EE-A77B-0EC89B1C14FC}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{2216F05D-8ABF-475B-B970-79BC6892577B}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{23353935-6440-4861-AE61-1FC9C620AAF1}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{23A26473-0C9D-45BE-BB41-C8AABD1BE0C8}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{24628D80-FC18-4D4F-A7DB-BC54D7B88D58}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{24B49344-0814-4945-B2D0-36B9CADB3815}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{24FF8713-D265-4658-8C78-02C9FB8494F2}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{25BCE05B-A93D-4F5D-A1DB-97BD885C3549}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{26194839-EBC5-435F-AB54-08E40C40AB73}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{26EBD227-1915-4821-B48A-4C10A17FE4B2}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{26EDE274-89B8-4462-B414-4C60FA3BA8DA}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{2960D83D-CD0C-4035-8BDF-AB53798E65EF}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{2AD7ECA9-0EE5-4E1D-AFB0-9A334D13937C}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{2B4C7B6B-CB1B-4D77-A424-7D11F8368F06}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{2BACF1B8-6777-41EC-8D54-97D14F078A51}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{2BD4DF25-D855-4262-8408-C0241BAD2280}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{2BEE8B06-FC7B-46D0-BBDC-BD6C45A412A9}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{2DD2627D-0C4C-4B5C-9B0E-7867DBEBBC49}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{2ED81AC8-57F5-458B-9A6C-EB5F9682CDC3}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{2FCB67CC-AB3D-4153-87C9-45A25E437567}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{31919263-5F2C-4D0F-9BBE-F35B4CF32B41}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{31D35FA1-DBA8-4D6A-A805-CF9F93D56EBD}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{326A86A6-80B7-4E4B-9146-C575753316FA}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{34DDE415-B993-4A95-B2F0-C4C4391D2DAE}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{35788F36-3F4B-4FC7-9481-6E625D7F7161}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{366FDD21-8A3A-4071-BFD0-B562D952ADEE}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{376745E0-7687-48BA-95E4-DC0960FA5197}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{37AC599A-3D2D-4750-B845-1DC7F461FD22}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{37DAC12E-CE3D-465D-9D65-B011C58D1159}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{38049F72-8639-4F9A-A0C3-585362536E4A}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{38381BB6-543E-455C-BC14-5F325C09B7AF}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{39C2A356-54F5-428E-9B95-B5B549117AB6}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{3B804F18-E7DA-4A93-AE92-39AED2469E82}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{3B9962A9-B1C5-4E3A-AB78-7AF3143A44AE}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{3C60B3BB-CD16-46F8-AEEF-E8529E5E3494}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{3D0232A1-1039-4A7F-8B35-12F6950DDE5A}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{3D616D0B-8391-4032-B839-3F3A19B05856}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{3DECF56C-4C27-4A4C-8042-8CAE948BA6F1}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{3E1013C0-7BE8-464B-9C99-EAB6275A5E93}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{3E7C68DC-1A5B-4AF6-87B9-56128E50E329}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{3E9583BB-0304-475D-AA43-1C3BBC493A2D}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{406FD99E-DB2B-430F-AC80-F570E180FF6B}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{410C5019-AFAC-4E94-BF58-3F01ECF7AB42}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{41C21AC3-B95C-401E-9DEB-9772263AAF69}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{422AA5A7-2473-48BF-B587-6040A21690E2}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{430DD13F-874C-4961-8608-C721BA9E97AD}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{44DFA5A4-53D0-4A80-9F11-9BC097AC4D96}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{4566E5B1-B0D3-4997-993E-98348B31AF44}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{457403C7-5C3B-49F8-A55E-BEBB70A88147}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{45D9D42A-8C1E-4023-92EF-705FE8E828C4}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{45E0B849-D0EF-40F0-AEF1-9598642D68B6}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{469DF8CE-5D2D-4FC6-8C4F-F4443883C004}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{46B88FB7-A98B-4E43-9BAD-B2C0A1EE7413}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{46FE1245-C146-4F53-A42C-0990343B1442}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{47E50059-653F-4AF7-83AF-A93C2B2F7011}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{48BE25BA-A2C0-4D74-8F52-19157FE0E456}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{49266CBC-7299-47F8-A547-EC7443DDE05D}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{4A246F0A-F3A1-45AC-9CA0-762E155F7443}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{4B69335D-2909-4BBF-9BE5-0302F2EA9814}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{4BD0E29A-D7A9-4043-9157-9A88B0FE2830}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{4BD26439-581A-4FD9-BABB-88E71A8FA0B4}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{4C1ABBA6-D0F2-44A3-B0F3-A55DA24DB724}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{4C220366-3910-4408-8E1F-B83B44D7D4E2}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{4C9AE125-BDCF-4758-B661-6765493621E9}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{4DA31D61-6C1E-4077-9F2E-CCEF252BE747}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{4E89DACF-3F53-4E9B-8356-39EFDFD06E07}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{4EAE9961-068F-4BEF-AA57-C9F9644D6BC6}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{4EAF0CB6-0C78-4CBE-BA21-A36135F03093}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{4FC80E56-8346-4C50-A333-565771F03179}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{50F2E161-6BFB-4F40-9C64-C5C96169FD0D}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{521A6217-AA63-428E-96F7-27786FFD5141}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{52D19A62-4D24-4861-B9D6-6948844A8611}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{5354C9E1-B989-4B3C-8774-B884969ACFF2}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{537FEBB6-9746-49F8-9B1D-4EDA184A7734}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{53BFE14A-16FE-4D41-A887-CED6F1E9E0C2}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{53D643EA-D3D1-4FEF-B788-A53447A032D8}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{542940DC-DBE5-4588-8987-B9933A5C56E2}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{5507E3BE-97CB-409C-9E53-465651CCA3C9}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{5533E371-EE18-4B78-A1ED-D3304C0F322C}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{574BE63A-31A1-4C5E-8A6D-334AA162EC13}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{581B2B7C-C2EF-4D79-844D-E106F467E3DF}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{5B7863AF-D989-4EBB-8471-49F16DF7A79B}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{5D21C6A1-8C52-491A-8E79-59EF407B7B3E}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{5DAB524E-3E03-4381-BEC7-FF0193B34D8C}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{5DF2B375-43C2-4085-B6C0-79082B3CD4E7}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{5EC50A96-792E-4328-825C-46DB5F854F75}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{5F511A26-AC4E-4516-A808-51054CF8D6E4}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{5F6B2FB7-AFFC-4C7E-AC70-A635C89C3B5A}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{60D47237-314F-456B-8A35-3953E54E4DBC}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{610B6554-A1EB-488D-9334-3C4F5868CF9A}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{638105BE-FC90-4384-B71D-29F029713820}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{63BEBEBF-DB47-4D4D-8773-1438F55C963F}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{63C97790-A68E-45E8-99A8-1B9D76980FB1}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{65D27AB8-54A8-4BF8-AB3E-7F4F5FD43C0B}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{65F2BDC9-7803-4D18-B866-487E29FA72F5}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{65F2BDC9-7803-4D18-B866-487E29FA72F5}.DAT Object is locked skipped
C:\ProgramData\Symantec\Common Client\{666D76F2-D97D-4470-B166-7A25FE94ECB1}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{66CD2BFD-2B4A-427A-B1B9-998D770256BF}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{672C8F02-7D92-4474-A4E8-E48FAF8A08E2}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{673F7D86-F419-4062-BE94-6E8545616CDB}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{67D0F9DE-A491-498D-901E-D233FC155370}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{69702934-9D3F-403D-8261-A21BCEF3A664}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{6A3E393B-26C7-48CF-8B85-BBC3B5487854}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{6A69718F-84F9-44BF-BA3F-CFBB0BC97174}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{6A924DB0-A031-4D97-8AD8-9D544D0C3738}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{6ABBA55F-9A2A-4219-BB35-0F92E3354BF4}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{6ABDECD2-9CEC-465A-B9A7-D73354218E64}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{6BADE39C-DF41-48DF-9964-6B2293977543}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{6C5CC0DE-6DFC-408A-96C0-5910F7C37415}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{6CD1A402-199D-4021-9F49-5FC46ABE828E}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{6D3535E3-E466-48A1-A716-147BFB93DD04}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{6E391DCA-41D5-45C4-969E-44F0C79650F4}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{6E9247F6-05EC-4DDD-BEA3-2A67DA409968}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{6E9BDF0C-EA9A-46DB-AA26-53221F90DEF1}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{6F8F2F85-1C7A-49CE-917D-D0A379E6510A}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{6FA97773-D06D-4082-9D8E-DDEF0875E340}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{704F82E8-98CF-41FA-AD2B-1729EC16B665}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{71407AB2-0810-444D-99F7-8E3D6F8BCDFB}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{7147ADBD-5B1F-471B-A0A8-8F717A17F95B}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{72B44CB8-303B-4498-AE3F-2F84DC59CB9F}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{72F51112-747B-422E-825C-AF93340750AA}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{736E3101-ED13-4DFB-9502-9C7CC84ED396}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{73809FBC-B5F8-4086-866D-985498CE2BAA}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{7392CEAB-1A67-49E6-A422-4D8663361612}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{742ED82B-ED42-4E2D-9698-5C013BF8EFC5}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{7444F3DB-51EF-4811-84FA-A85BC31F2072}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{75618A23-B1F1-4917-A796-5DA9F6FDBB7E}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{7597D2E3-4162-45C8-BD28-9888ADD695D1}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{75E0DF18-BD61-44C2-90CF-D4BD4AA86D2F}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{774ABFDB-1AD3-4BB0-911F-A2DA042FB5FB}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{7806A11F-306A-4C00-931A-BDED4523362F}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{784B6CEE-A228-464E-A492-A89EE975507E}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{7866E3A3-D286-4E7F-A2D3-3D26AF244BED}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{78A32DE5-F7A2-4E4A-AAEA-561AE9CE4850}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{78E16FEF-64D2-4DB5-A2D2-078FCB4DAC05}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{7925550E-04B6-4737-A06D-9D595E5ACDB5}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{79FB3041-1423-4472-89A9-8B62B72DC0C8}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{7A6C4FF1-0DAC-441E-B8E7-96CAF71B6B1C}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{7AA1ECB5-3135-4161-A29A-B8346D05EDF9}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{7B7469B7-D285-428A-A993-35FD6A386726}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{7B9D8347-D59E-4EF5-97E2-6EB0D721D70E}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{7C3FAF81-2AD6-4522-A54B-91D5CD98D883}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{7CB5F9B8-822A-41E9-A45A-B1539E7B915A}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{7D32A40C-3990-4601-97E6-3C1AD5AAE8DC}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{7D428CC1-338B-4964-8714-31CC290CEE68}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{7F063A2D-BDEC-42BE-92AC-7A379D47FD87}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{7FC7D5D5-41E6-4FD0-99B5-0CBAA79FA52E}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{80037D11-99A0-46C9-BA36-1149DDC3CEED}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{8042B468-F948-43DE-B23D-8ACEDEB7E3F6}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{810C14D1-AB0B-4DCA-A9F3-BC0E2FD2AB2D}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{818CC714-E0CD-470D-8533-B78D11386F49}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{828F89D5-48BB-4FF5-93C3-FB281F93BA62}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{83BC0F73-07A5-4633-B520-12821AFAA56F}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{844F6E8D-FE18-4152-B76B-B14B0B744566}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{84AE20E9-18A4-4FDA-B64B-3C850E833F1C}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{8507819A-90A2-4A25-B5A2-43A557740F1B}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{85F2ADDA-563C-45D2-A062-79700742D1D5}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{87A1FA43-50E6-465E-B983-9D6A1766A38A}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{88025DA2-2760-4137-94B8-ECC86037F4B7}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{8909B9B7-50BF-4FC1-8ECF-D6552571BA0B}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{8A18F075-30A9-442A-9D93-A8D40E041AED}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{8CA833AF-1D5D-4865-89F3-A277B6C971A0}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{8D47B902-3CBC-413F-8A31-6AD499AAD7F8}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{8D6A8E41-5794-4B1C-B4CF-58C56995AEF5}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{8E5D90C6-55F5-4F7B-9580-B4FF2B7A1E3E}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{8E72414C-9279-4B2E-B0B2-E99C85822F5D}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{8ECB0A41-E11A-4416-A3D7-B122E75B927A}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{8EF54976-0421-4B88-902F-305B792EC210}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{8F4C56A5-6641-4EB7-95B5-2C17DEFF6BC5}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{8F8D6912-995A-4ADC-9709-0AF446790F7D}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{90C36189-FE99-472E-9D82-1BB169C439B4}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{90CB225B-F818-44B3-9786-0012A08DD8D8}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{915AF472-DA5D-4123-87E3-B5E4BF8F1AF8}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{9168C3E9-F100-448D-AA65-E454EC0B303E}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{91F2E424-0FFD-4C7E-9626-E6679C1A6009}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{925BAF8A-B268-4130-85C2-675FB35F67CA}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{92808990-4DA6-48E0-90A7-03AD67B5D217}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{9372967C-8952-45EB-B80A-60602AB4D8BE}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{93EF4850-075C-4B13-8134-879D5654EFC9}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{9482386E-BE25-4DFE-83A8-F96E58C85CB3}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{94A93DFA-3657-41A1-ACDA-90503C8D13E4}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{9562E3C0-451A-41C3-A7F9-61CB3FE9DE75}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{970A72D1-2758-4340-BA11-C783F69C2C94}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{9776A21E-430D-4F96-BA88-E8479CF4F5D5}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{98400729-054F-4211-8991-E217FBEE5121}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{9ABD4AAF-A945-4F36-BE89-B8E74D9B2A6E}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{9B21C769-6855-461A-BC36-5DA5DA15C3C2}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{9CB03AC7-F349-4A93-B81C-6048EBE8EFB8}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{9D6D071D-87CB-4D93-B4A5-7ECFB129CD53}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{9D9B9334-90EB-42E8-975F-A12201462D5D}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{9DA29C1C-F31B-418E-B9C1-03E4C8BC3BA5}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{9DC3E62D-BA93-4374-B47F-1AA0C7E2E2B5}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{9DD29EB4-7F8F-4B54-97A5-5E875295204A}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{9DDB7B58-D02E-4C82-A518-B1D8BF0A5AB6}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{9E56D7D4-AF75-474E-90E0-D5D33A7D4901}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{9FA7DB47-C374-4BE9-8D0F-905E7DE0D468}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{A0D3064B-332E-4D6C-B390-E5368523DC2F}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{A0DA9E7D-39DE-4CD8-AFB3-0D242C8E38AD}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{A2242396-5052-4FCF-90A8-4FA2D8D33204}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{A231ED0C-ADDC-4B94-AD86-8FA90F784DCC}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{A2CBAE4D-6F7E-4AEC-A8B1-E0083FB86367}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{A3AB57DE-1297-4408-92E8-59C398A8F399}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{A4513BEC-8A39-4BC9-A9DB-C3B7A0B7761E}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{A49C0D82-58C2-423D-B6D9-B4EB3A71E725}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{A599B46D-7845-4639-A654-17DA5C30E25A}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{A61D7FCD-E44A-4B8C-85C9-74FC9603C0AB}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{A62437B2-6D81-46AB-983B-589CE3C17EE8}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{A7DF86F1-80BA-4ABC-8656-40CC7623502C}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{A8A383DF-E0E6-485C-BD7B-D1FE2365F274}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{A8AD1546-4E50-4160-8B92-4DFBC67D134A}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{A8D2432B-F8E8-48CF-ABAA-53415DCB661A}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{A8D729A5-CFA0-432B-8EE8-F8169BC2D269}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{AA5D038E-517A-4C71-BC32-8B018C48BE1F}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{AAB5809C-711A-4FCA-B2E7-2539E80F400D}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{AB3BACCD-282C-4A8C-B054-6A0E13337FE2}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{ABB6CAC4-60E8-4A61-B596-1881063421CC}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{AC5B5903-3FE4-427B-912B-F45ACC0F99E8}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{AC90809E-D1C0-41CC-907E-F702A2D0233E}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{ACDC1436-1239-4ADE-8CA2-0F822FC6F455}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{ADA5BDE8-D181-4ACE-9C19-D684F5008C69}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{AEE782AA-A09E-4E63-A871-BC99F2F2BB80}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{AF71FF76-BE15-4E0F-93D2-15056EEB024A}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{B1C92908-8386-4F81-B408-BB51E04EBE81}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{B3541DC0-8596-4F7F-8C07-4B37E1125CDD}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{B3582B3E-19E4-4521-9A9B-D7E603EF76A0}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{B380FCD2-375B-49D8-892C-4A68CC4D8653}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{B418A215-96A7-4545-9775-92000FF725DC}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{B420FBEE-C2AF-4313-8B8C-5EE85B2C4DB9}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{B4DED34F-EFB4-47CE-84A0-5ECFB4E2BFC3}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{B5A6970C-4AAE-46D0-B40C-023A9F03926D}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{B6CA633A-FA2E-48FA-9CB5-F4B13CB004EC}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{B6D4CEA5-13D3-47AA-A696-EBAF0A5F0C9F}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{B73544B0-3880-4E83-9D14-3F0565D71917}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{B73544B0-3880-4E83-9D14-3F0565D71917}.DAT Object is locked skipped
C:\ProgramData\Symantec\Common Client\{B7865FC0-9A14-4263-B7BD-6909277FAEA8}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{B80D92E3-4094-4A3B-827B-0A17F4880412}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{B826D7D0-141E-4E0B-859C-4B0258583014}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{B8602AA1-34A2-43A6-A669-D19714E0D229}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{B8B115CC-44EB-468B-95A1-43319E440719}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{B8CE6799-ECEE-40AE-9B64-247BAFE52476}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{B9468421-BFBD-4300-AD76-53777D78329D}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{B94BCD1C-0B14-43BE-AAFA-23BCA76D576A}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{B98904D0-311E-4D98-BB49-AAAA60C06CCA}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{BA23DAF0-C4A1-4332-B1AF-6118C5F5F3CA}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{BA5E5DE3-3869-4E28-ACBF-F8A3A3F06598}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{BAA4EE46-12DF-494F-94CD-CE7CAF04489B}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{BB7614EC-0FC0-44F7-88C6-CAE0B4819F02}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{BBDFC6BA-FE93-4AF4-9415-226C55F6799E}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{BD1A6A8D-1D63-40AC-BA1A-86906476B707}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{BD6083CF-665E-4107-ACD6-DA7C7B0283EA}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{BE248C19-8631-498C-A066-2EB6B51C549B}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{BF230482-D43E-4CD2-BD94-E5194AC7BAF4}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{BFC6525D-E4F5-43A8-A7DA-C16ADC8AA186}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{C085E387-C743-46FC-A109-1C094C4F4CDF}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{C0BD719B-A2E3-4072-A2BC-27BA7EB7CD53}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{C1FF8307-6242-4226-B432-7C166B87880E}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{C2413E4A-E01E-4BD7-9B9B-5E778508FCEC}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{C2CEF0B1-4E6C-4A22-8C58-496C8E6D55DB}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{C5EF033E-60A0-4709-9D6A-98A877DFAB9D}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{C6D8618B-2AC8-4326-8DC6-EE196ACB72B6}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{C7002554-4C4A-410C-8A76-ABED66D7A1C1}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{C74200C4-6FDA-4440-87DB-CEA4B298F63F}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{C7452538-BE0F-43CC-95A3-374D78EC0774}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{C7B38EAE-4776-4B04-B6CF-AEE0577BFF58}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{C8E1B96A-C27A-4928-A3D9-B67BE5976026}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{C94A749E-499E-4716-A760-07A4B8B7FABD}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{C97B835A-E9DD-4E5D-96C3-AE918AEC37D2}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{CB471FAF-DFE4-4445-A4EB-995B9D01602F}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{CC616E5B-A5AC-4632-A1D3-350B2A3B5BF8}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{CC79B38A-18E8-47D4-A85A-8BA87ACB702A}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{CC817658-15AD-4834-B81C-8D1F531C94D9}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{CCCE6082-DC60-4E93-A245-2D7C6A893FBD}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{CCF07628-E1BF-4A01-A490-7275EA7E7C01}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{CE1F8255-2FD7-4952-9BC5-F46552FC3D96}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{CE9A388A-7DDF-4B75-B31C-953BD21F694D}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{CF045EE7-F74F-4C0E-98F0-7C27D97A779A}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{CF141DF2-F706-458D-BBAF-325C6EF108A5}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{CF43423E-125A-4B58-8239-1CC1CEE0A794}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{D1B19ECE-71CE-4865-91FE-7C2590BE2DE9}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{D1D4ADC1-F46D-41C6-A717-A1868C601330}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{D2D4DCA1-729B-4B77-AF60-C4E0F455260F}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{D34452DE-9C0C-497D-83E4-4CB4C17DF711}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{D39CD644-BED0-4F80-B917-2B91273668F3}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{D3D2A38A-1EE5-4684-82FC-E20F63234E96}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{D4D78571-40F6-4E5B-8B52-399E42ACAAD9}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{D5A33F62-E06E-423B-9DF7-F30963AFA4EE}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{D5B52EE9-AB81-456F-993D-B4D061D7D780}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{D61F576E-2056-4EEF-8336-96D2D8EB9646}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{D6874E5D-B239-426C-B8C4-192F3D735310}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{D71CA744-682B-4C71-BE4D-18F39338AAB6}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{D7A073A8-E061-4C27-A07D-13B07D7F0C38}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{D80934D6-9CB0-4662-89CB-CFD1AA0D799F}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{D84456F1-3079-4D13-ABD8-13C1240BF896}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{D8534734-459D-49F5-B3C4-1FE7BFD4DF4D}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{D8A4B823-3E43-414B-A9F5-B847A0BE3E85}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{D8D60696-381F-494A-8099-3E19E1173EA4}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{D9A47868-8106-44FC-AFA8-138E170F0868}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{D9BF9629-1B1F-4996-9627-11977C358A1B}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{DBC06BC7-3BCC-499E-94B3-C1ED7B0196CA}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{DBE2654B-797F-43A9-98BE-66FB0A2DEBCB}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{DC0DEE03-517F-40C6-8461-6CDA971AEF47}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{DD047F1B-1789-41E6-982F-796266186B87}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{DD2245F3-30BF-4E31-A654-04ED9D888785}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{DD570C68-E925-42A3-A2A0-668A98CF1A82}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{DD9050C2-4868-4D95-83CC-62F8C9CA3D63}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{DD9050C2-4868-4D95-83CC-62F8C9CA3D63}.DAT Object is locked skipped
C:\ProgramData\Symantec\Common Client\{DE5E6B0D-9BDE-4DB8-B7F4-E44ED1F34CDC}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{DE706315-16C7-40BF-BFD4-93610A2D0DDC}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{DE72F8B8-DCE0-4D52-9330-3D93E7558809}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{E3454406-4786-4FFA-A809-24654FF15C5D}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{E353107D-D028-4946-9838-ED76E78EBAC8}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{E3C21950-9661-4A6E-B377-69A540FF78A4}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{E50BF5D1-C601-4AA2-AF0F-ABB713F396AC}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{E55305AD-5670-4DBB-8E3F-D3749D693D87}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{E64DE793-5388-4EC5-AE08-EBCC2214838D}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{E67689B1-C227-43C8-8EFB-041085F6F2B8}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{E6C54D2A-142E-454E-B5D4-59B7D1E98040}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{E7AEF49B-D84F-481E-A06E-E775BDE66FB6}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{E900EA4E-10B7-44F4-B0BA-AE16146B9E47}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{EA724E5A-B521-439A-86FC-4136379FC4B2}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{EAD016DB-A43C-40B4-9899-8EF4DA6DA44D}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{EAEA3AFC-7F2C-40F8-80BF-984BAE34A63B}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{EB8E3FAD-4AB1-47E2-AD6A-59C0232E663D}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{EB9267EE-4705-4CFA-B1EB-D146F624E649}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{EBAF8FD8-5905-4C8C-B4F1-5D5F7747F19E}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{EC7C7589-6DAF-4467-A449-FFD76FA21398}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{ECE63F0D-D2DB-4AC2-9CA1-08E76955CAEE}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{ECE8C412-2648-4A21-ABA3-9090C02E4093}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{ED10D0DA-2B3D-4380-818A-08B6A010FEE9}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{EEDE4D3C-9446-4CC6-83F0-A167C28176D7}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{EEEFDE57-7F78-46AC-AA70-3B8018BC2AAE}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{EF109A35-94CD-44C2-B24E-7268488E0C92}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{EF22B807-3DA5-45D6-971F-E99007F9B974}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{EF6B1DFB-F9A5-477B-B45D-B170B4A0BC8D}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{F2950209-69FB-4196-A97F-1EB4619FCF99}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{F2BED51A-30BF-4E45-A4A6-4DBE78D02489}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{F39CFB82-9399-47E3-A636-FE26F4A00BAA}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{F43D5104-BE7C-4CD2-A638-6735356E4D42}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{F4B9BBE6-1D2D-4ECD-AAC7-53271B78393A}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{F509027D-EA6F-4846-B4D6-500DF468EDD6}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{F61138F8-204D-4E19-B140-C38F94A0EB34}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{F7ABCBF8-6491-4F85-B279-DFE75769F819}.BAK Object is locked skipped
C:\ProgramData\Symantec\Common Client\{F993DDBA-F8FD-40DB-8B49-D63A2683EF92}.BAK Object is locked skipped
C:\ProgramData\Symantec\C
  • 0

Advertisements

#17
andrewuk
Posted 13 April 2008 - 01:27 PM

andrewuk

    Trusted Helper

  • Malware Removal
  • 5,297 posts
looks like the kaspersky scan log got cut off, but i can see the infected item.

Please double-click OTMoveIt2.exe to run it. (Vista users, please right click on OTMoveit2.exe and select "Run as an Administrator")
  • Copy the file paths below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy):

    C:\Program Files\Circle Developement\Uninstall.exe
Purity
  • Return to OTMoveIt2, right click in the "Paste List of Files/Folders to Move" window (under the light Yellow bar) and choose Paste.
  • Click the red Moveit! button.
  • A log of files and folders moved will be created in the c:\_OTMoveIt\MovedFiles folder in the form of Date and Time (mmddyyyy_hhmmss.log). Please open this log in Notepad and post its contents in your next reply.
  • Close OTMoveIt2
If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes.

In your next reply can i see:
1. the OTMoveIT log
2. a new hijackthis log
3. some idea of how your machine is running now

andrewuk
  • 0

#18
manuelrosati
Posted 13 April 2008 - 01:39 PM

manuelrosati

    Member

  • Topic Starter
  • Member
  • PipPip
  • 41 posts
Thanks for the SUPERfast reply.
I don't know what happens with Kaspersky: it could be that connection cutted off and I didn't notice it.
The PC is working well (until my girlfriend downloads some other viruses :) )

OTMoveIt2 log:
"
C:\Program Files\Circle Developement\Uninstall.exe moved successfully.
< Purity >

OTMoveIt2 by OldTimer - Version 1.0.4.0 log created on 04132008_213201
"

HijackThis log:
"
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:36:17, on 13/04/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16643)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\RtHDVCpl.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSLoader.exe
C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe
C:\Users\luka\AppData\Local\Temp\RtkBtMnt.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Launch Manager\LManager.exe
C:\Program Files\Acer Arcade Deluxe\Play Movie\PMVService.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Acer\Empowering Technology\eAudio\eAudio.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Ares\Ares.exe
C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PCSuite.exe
C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
C:\Acer\Empowering Technology\ENET\ENMTRAY.EXE
C:\Windows\ehome\ehmsas.exe
C:\Acer\Empowering Technology\EPOWER\EPOWER_DMC.EXE
C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE
C:\Program Files\Apoint2K\ApMsgFwd.exe
C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE
C:\Program Files\Apoint2K\Apntex.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\Internet Explorer\ieuser.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr.fr.acer.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft....k/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IPSBHO.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Windows\system32\ActiveToolBand.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\system32\eDStoolbar.dll
O3 - Toolbar: Afficher Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\CoIEPlg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [ALaunch] C:\Acer\ALaunch\AlaunchClient.exe
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [PLFSetL] C:\Windows\PLFSetL.exe
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe
O4 - HKLM\..\Run: [PlayMovie] "C:\Program Files\Acer Arcade Deluxe\Play Movie\PMVService.exe"
O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe
O4 - HKLM\..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe
O4 - HKLM\..\Run: [SetPanel] C:\Acer\APanel\APanel.cmd
O4 - HKLM\..\Run: [eAudio] "C:\Acer\Empowering Technology\eAudio\eAudio.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [UVS10 Preload] C:\Program Files\Ulead Systems\Ulead VideoStudio 10\uvPL.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
O4 - HKCU\..\Run: [AnyDVD] C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 6\PCSuite.exe" -onlytray
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [Nokia.PCSync] "C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" /NoDialog (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Nokia.PCSync] "C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" /NoDialog (User 'Default user')
O4 - Startup: OneNote 2007 - Capture d'écran et lancement.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O4 - Global Startup: Empowering Technology Launcher.lnk = ?
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O15 - Trusted Zone: http://www.pandasoftware.com
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky...can_unicode.cab
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://javadl-esd.su...ows-i586-jc.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: eNetHook.dll
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: ALaunch Service (ALaunchService) - Unknown owner - C:\Acer\ALaunch\ALaunchSvc.exe
O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Program Files\Ares\chatServer.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: eDSService.exe (eDataSecurity Service) - HiTRSUT - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe
O23 - Service: eLock Service (eLockService) - Acer Inc. - C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe
O23 - Service: eNet Service - Acer Inc. - C:\Acer\Empowering Technology\eNet\eNet Service.exe
O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
O23 - Service: eSettings Service (eSettingsService) - Unknown owner - C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE
O23 - Service: LiveUpdate Notice - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: ePower Service (WMIService) - acer - C:\Acer\Empowering Technology\ePower\ePowerSvc.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

--
End of file - 12378 bytes

"
  • 0

#19
andrewuk
Posted 13 April 2008 - 02:28 PM

andrewuk

    Trusted Helper

  • Malware Removal
  • 5,297 posts
Hi manuelrosati

congratulations, your logs are clean :)

I don't know what happens with Kaspersky:

the log was too long for the page, but we cleared the infected item :)

in this post we will clear away the fix tools, reset your restore points (there will be infections lurking in there) and i will leave you with some ideas on how to enhance the protection of your machine against future infection.

====STEP 1====
  • Make sure you have an Internet Connection.
  • Double-click OTMoveIt2.exe to run it. (Vista users, please right click on OTMoveit2.exe and select "Run as an Administrator")
  • Click on the CleanUp! button
  • A list of tool components used in the Cleanup of malware will be downloaded.
  • If your Firewall or Real Time protection attempts to block OtMoveit2 to reach the Internet, please allow the application to do so.
  • Click Yes to begin the Cleanup process and remove these components, including this application.
  • You will be asked to reboot the machine to finish the Cleanup process. If you are asked to reboot the machine choose Yes.
you can clear away the other fix tools we used also.


====STEP 2====
Resetting your restore points (which is about turning system restore off, rebooting, and then turning it back on again).

1. Open System by clicking the Start button, clicking Control Panel, clicking System and Maintenance, and then clicking System.

2. In the left pane, click System Protection. If you are prompted for an administrator password or confirmation, type the password or provide confirmation.

3. To turn off System Protection for a hard disk, clear the check box next to the disk, and then click OK.

reboot

1. Open System by clicking the Start button, clicking Control Panel, clicking System and Maintenance, and then clicking System.

2. In the left pane, click System Protection. If you are prompted for an administrator password or confirmation, type the password or provide confirmation.

3. To turn on System Protection for a hard disk, select the check box next to the disk, and then click OK.

How to Turn On and Turn Off System Restore in Vista
http://windowshelp.m...6fb3f01033.mspx


====AND FINALLY====
The following is a list of tools and utilities that I like to suggest to people. This list is full of great tools and utilities to help you understand how you got infected and how to keep from getting infected again.
  • Spybot Search & Destroy - Uber powerful tool which can search and annhilate nasties that make it onto your system. Now with an Immunize section that will help prevent future infections.
  • AdAware - Another very powerful tool which searches and kills nasties that infect your system. AdAware and Spybot Search & Destroy compliment each other very well.
  • SpywareBlaster - Great prevention tool to keep nasties from installing on your system.
  • SpywareGuard - Works as a Spyware "Shield" to protect your computer from getting malware in the first place.
  • IE-SpyAd - puts over 5000 sites in your restricted zone so you'll be protected when you visit innocent-looking sites that aren't actually innocent at all.
  • ATF Cleaner - Cleans temporary files from IE and Windows, empties the recycle bin and more. Great tool to help speed up your computer and knock out those nasties that like to reside in the temp folders.
  • Windows Updates - It is very important to make sure that both Internet Explorer and Windows are kept current with the latest critical security patches from Microsoft. To do this just start Internet Explorer and select Tools > Windows Update, and follow the online instructions from there.
  • Google Toolbar - Free google toolbar that allows you to use the powerful Google search engine from the bar, but also blocks pop up windows.
  • Trillian or Miranda-IM - These are Malware free Instant Messenger programs which allow you to connect to multiple IM services in one program! (AOL, Yahoo, ICQ, IRC, MSN)
To find out more information about how you got infected in the first place and some great guidelines to follow to prevent future infections you can read this article by Tony Klein


andrewuk
  • 0

#20
manuelrosati
Posted 13 April 2008 - 04:30 PM

manuelrosati

    Member

  • Topic Starter
  • Member
  • PipPip
  • 41 posts
Hi Andrewuk,

I have performed all the actions you suggested to me. Everything is fine and all the issues have been fixed.
Thanks a lot for your clear and competent help: they were really high level suggestions. I would have never been able to remove this virus without you.

Ciao! :)
Manuel
  • 0

#21
andrewuk
Posted 13 April 2008 - 04:35 PM

andrewuk

    Trusted Helper

  • Malware Removal
  • 5,297 posts
Since this issue appears to be resolved ... this Topic has been closed. Glad we could help. :)

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.
  • 0
Back to Virus, Spyware, Malware Removal · Next Unread Topic →




Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

  1. Geeks to Go Community
  2. → Security
  3. → Virus, Spyware, Malware Removal

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP