[SHILORAVINN]

C:\WINDOWS\$NtServicePackUninstall$\shmgrate.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\shrpubw.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\shscrap.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\shsvcs.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\shtml.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\shtml.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\shutdown.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sigtab.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sigverif.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\simpdata.tlb Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sisagp.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\skeys.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\skins.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\slayerxp.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\slbcsp.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\slbiop.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\slip.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sl_anet.acm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\smartcrd.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\smbali.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\smbbatt.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\smbclass.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\smi2smir.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\smlogcfg.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\smlogsvc.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\smss.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\smtpsvc.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sndrec32.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sniffpol.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\snmp.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\snmpapi.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\snmpcl.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\snmpincl.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\snmpsmir.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\snmpsnap.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\snmpthrd.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\softkbd.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sonydcam.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sortkey.nls Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sorttbls.nls Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\spgrmr.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\spider.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\splitter.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\spoolss.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\spoolsv.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sptip.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sqloledb.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sqloledb.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sqloledb.rll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sqlsrv32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sqlsrv32.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sqlsrv32.rll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sqlunirl.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sqlxmlx.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sqlxmlx.rll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sr.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\srchctls.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\srchui.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\srclient.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\srrstr.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\srrstr.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\srsvc.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\srv.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\srvsvc.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sr_ui.chm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ss3dfo.scr Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ssbezier.scr Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ssdpapi.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ssdpsrv.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ssflwbox.scr Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ssmarque.scr Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ssmypics.scr Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ssmyst.scr Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sspipes.scr Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ssstars.scr Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sstext3d.scr Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sstub.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\start_control.htm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\start_desktop.htm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\start_ending.htm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\start_files.htm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\start_fr.htm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\start_icons.htm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\start_menu.htm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\start_taskbar.htm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\start_windows.htm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\stdprov.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sti.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\stimon.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sti_ci.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\stobject.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\storprop.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\stream.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\streamip.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\strmdll.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\stub_fpsrvadm.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\stub_fpsrvwin.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\svchost.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\swflash.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\swflash.ocx Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sxs.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sxs.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\synceng.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\syncui.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sysaudio.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sysdm.cpl Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sysfiles.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sysmain.sdb Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sysmain.sdb.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sysmod.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sysmod_a.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sysmon.ocx Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sysoc.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sysocmgr.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sysrestore.chm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\syssetup.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\syssetup.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\sys_srv.chm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\t2embed.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tahoma.ttf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tahomabd.ttf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tape.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tape.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tapi3.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tapi32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tapisrv.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\taskmgr.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tcpip.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tcpip6.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tcpmib.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tcpmon.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tcpmon.ini Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tcpmonui.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tcptest.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tcptsat.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tdc.ocx Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tdi.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tdpipe.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tdtcp.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\telnet.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\termdd.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\termmgr.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\termsrv.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tffsport.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\themeui.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\timedate.cpl Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\times.ttf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\timesbd.ttf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tintlgnt.ime Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tip.htm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tourstart.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tourstrt.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tracert.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\triedit.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\trkwks.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tscfgwmi.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tscfgwmi.mfl Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tscfgwmi.mof Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tscupgrd.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tsddd.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tshoot.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tsoc.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tsoc.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tsweb1.htm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\tunmp.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\twain_32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\txflog.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\udfs.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\udhisapi.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ulib.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\umandlg.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\umpnpmgr.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\unicdime.ime Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\unidrv.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\unidrvui.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\uniime.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\unimdm.tsp Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\unimdmat.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\uniplat.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\unires.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\unlock_built.htm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\unlock_fr.htm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\unlock_optimized.htm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\unlock_playing.htm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\unregmp2.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\untfs.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\update.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\uploadm.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\upnp.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\upnpcont.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\upnphost.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\upnpui.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ups.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\url.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\urlmon.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\urlmon.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\usb8023.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\usbaudio.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\usbccgp.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\usbehci.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\usbhub.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\usbintel.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\usbmon.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\usbohci.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\usbport.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\usbport.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\usbprint.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\usbscan.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\usbstor.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\usbuhci.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\usbui.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\user32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\user32.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\useract.chm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\userenv.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\userinit.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\usmtdef.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\usp10.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\utilman.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\uxtheme.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\vbajet32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\vbisurf.ax Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\vbscript.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\vdmdbg.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\vdmredir.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\version.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\vfwwdm32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\vga.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\vgx.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\viaagp.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\viaide.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\videoprt.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\viewprov.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\voicepad.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\voicesub.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\volsnap.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\vssapi.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\vssvc.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\w32time.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\w6uoj9bz.dat Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\w95upgnt.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wab.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wab32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wab32.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wab32res.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wabfind.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wabimp.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wabmig.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wacompen.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wanarp.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\watchdog.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wbemcntl.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wbemcomn.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wbemcons.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wbemcore.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wbemdisp.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wbemess.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wbemperf.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wbemprox.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wbemsvc.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wbemtest.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wbemupgd.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wdigest.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wdmaud.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\webcheck.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\webclnt.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\webfldrs.msi Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\webpub.chm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\webvw.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\welcome.htm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wextract.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\whatnewp.chm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\whatsnew.chm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wiaacmgr.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wiadefui.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wiadss.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wiascr.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wiaservc.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wiashext.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wiavideo.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\win32k.sys Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\win32k.sys.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\win32spl.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\winar30.ime Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\winbrand.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\windows.chq Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\winhlp32.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\winhttp.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\winhttp.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\winime.ime Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wininet.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wininet.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\winipsec.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\winlogon.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\winmm.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\winntbbu.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\winrnr.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\winscard.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\winspool.drv Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\winsrv.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\winsrv.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\winsta.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wintrust.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\winver.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wkssvc.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wldap32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wlnotify.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmaccess.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmadmod.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmadmoe.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmasf.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmdmlog.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmdmps.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmi.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmiadap.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmiapres.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmiaprpl.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmiapsrv.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmicookr.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmidcprv.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmipcima.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmipdskq.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmipiprt.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmipjobj.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmiprov.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmiprvsd.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmiprvse.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmipsess.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmisvc.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmiutils.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmnetmgr.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmp.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmp.ocx Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmpcd.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmpcore.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmpcore.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmplayer.chm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmplayer.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmplayer.exe.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmploc.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmpocm.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmpshell.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmpui.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmsdmod.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmsdmoe.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmstream.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmv8ds32.ax Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmvcore.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmvdmod.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wmvds32.ax Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wordpad.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wordpad.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wow32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wpabaln.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wpnpinst.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ws2help.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ws2_32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wscript.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wshcon.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wshext.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wship6.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wshom.ocx Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wshrm.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wshtcpip.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wsnmp32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wsock32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wstcodec.inf Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wstdecod.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wtsapi32.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wuau.adm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wuauclt.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wuaueng.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wuauhelp.chm Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wuauserv.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wzcdlg.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wzcsapi.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\wzcsvc.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\xactsrv.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\xcopy.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\xenroll.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\xolehlp.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\xpob2res.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\xpsp1res.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\xpsp2res.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\xpsp2res.dll.000 Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\zipfldr.dll Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\zipfldr.dll.000 Object is locked skipped
C:\WINDOWS\$NtUninstallKB824141$\kb824141.cat Object is locked skipped
C:\WINDOWS\$NtUninstallKB824141$\user32.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB824141$\win32k.sys Object is locked skipped
C:\WINDOWS\$NtUninstallKB824141_RTM$\sysmain.sdb Object is locked skipped
C:\WINDOWS\$NtUninstallKB824141_RTM$\user32.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB824141_RTM$\win32k.sys Object is locked skipped
C:\WINDOWS\$NtUninstallKB828028$\kb828028.cat Object is locked skipped
C:\WINDOWS\$NtUninstallKB828028$\msasn1.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828028_RTM$\msasn1.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828035$\kb828035.cat Object is locked skipped
C:\WINDOWS\$NtUninstallKB828035$\msgsvc.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828035$\wkssvc.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828035_RTM$\msgsvc.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828035_RTM$\wkssvc.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828741$\catsrv.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828741$\catsrvut.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828741$\clbcatex.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828741$\clbcatq.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828741$\colbact.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828741$\comadmin.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828741$\comrepl.exe Object is locked skipped
C:\WINDOWS\$NtUninstallKB828741$\comsvcs.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828741$\comuid.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828741$\es.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828741$\msdtcprx.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828741$\msdtctm.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828741$\msdtcuiu.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828741$\mtxclu.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828741$\mtxoci.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828741$\ole32.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828741$\rpcrt4.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828741$\rpcss.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828741$\txflog.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB835732$\callcont.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB835732$\gdi32.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB835732$\h323.tsp Object is locked skipped
C:\WINDOWS\$NtUninstallKB835732$\h323msp.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB835732$\helpctr.exe Object is locked skipped
C:\WINDOWS\$NtUninstallKB835732$\ipnathlp.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB835732$\lsasrv.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB835732$\mf3216.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB835732$\msasn1.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB835732$\msgina.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB835732$\mst120.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB835732$\netapi32.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB835732$\nmcom.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB835732$\rtcdll.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB835732$\schannel.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB837001$\dao360.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB837001$\expsrv.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB837001$\msexch40.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB837001$\msexcl40.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB837001$\msjet40.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB837001$\msjetoledb40.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB837001$\msjint40.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB837001$\msjter40.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB837001$\msjtes40.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB837001$\msltus40.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB837001$\mspbde40.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB837001$\msrd2x40.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB837001$\msrd3x40.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB837001$\msrepl40.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB837001$\mstext40.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB837001$\mswdat10.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB837001$\mswstr10.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB837001$\msxbde40.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB837001$\vbajet32.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB839645$\fldrclnr.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB839645$\shell32.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB839645$\shlwapi.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB839645$\sxs.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB839645$\xpsp2res.dll Object is locked skipped
C:\WINDOWS\$NtUninstallQ309521$\dxmasf.dll Object is locked skipped
C:\WINDOWS\$NtUninstallQ309521$\lsasrv.dll Object is locked skipped
C:\WINDOWS\$NtUninstallQ309521$\msdxm.ocx Object is locked skipped
C:\WINDOWS\$NtUninstallQ309521$\sfcfiles.dll Object is locked skipped
C:\WINDOWS\$NtUninstallQ309521$\spuninst\spuninst.exe Object is locked skipped
C:\WINDOWS\$NtUninstallQ309521$\spuninst\spuninst.inf Object is locked skipped
C:\WINDOWS\$NtUninstallQ314862$\qmgr.dll Object is locked skipped
C:\WINDOWS\$NtUninstallQ314862$\spuninst\spuninst.exe Object is locked skipped
C:\WINDOWS\$NtUninstallQ314862$\spuninst\spuninst.inf Object is locked skipped
C:\WINDOWS\$NtUninstallQ323172$\reg00003 Object is locked skipped
C:\WINDOWS\$NtUninstallQ323172$\reg00005 Object is locked skipped
C:\WINDOWS\$NtUninstallQ323172$\reg00008 Object is locked skipped
C:\WINDOWS\$NtUninstallQ323172$\reg00009 Object is locked skipped
C:\WINDOWS\$NtUninstallQ323172$\reg00010 Object is locked skipped
C:\WINDOWS\$NtUninstallQ323172$\reg00011 Object is locked skipped
C:\WINDOWS\$NtUninstallQ328940$\reg00003 Object is locked skipped
C:\WINDOWS\$NtUninstallQ329048$\reg00001 Object is locked skipped
C:\WINDOWS\$NtUninstallQ329390$\reg00001 Object is locked skipped
C:\WINDOWS\$NtUninstallQ329834$\reg00001 Object is locked skipped
C:\WINDOWS\$NtUninstallQ828026$\msdxm.ocx Object is locked skipped
C:\WINDOWS\$NtUninstallQ828026$\wmpcore.dll Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\ModemLog_Lucent Win Modem.txt Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\SYSTEM32\brix6ie.ocx Infected: not-a-virus:AdWare.Win32.Coupons.c skipped
C:\WINDOWS\SYSTEM32\CatRoot2\edb.log Object is locked skipped
C:\WINDOWS\SYSTEM32\CatRoot2\tmp.edb Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\AppEvent.Evt Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\DEFAULT Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\DEFAULT.LOG Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\Internet.evt Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SAM Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SAM.LOG Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SecEvent.Evt Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SECURITY Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SECURITY.LOG Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SOFTWARE Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SOFTWARE.LOG Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SysEvent.Evt Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM.LOG Object is locked skipped
C:\WINDOWS\SYSTEM32\DRIVERS\ETC\hosts.20080212-201005.backup Infected: Trojan.Win32.Qhost.r skipped
C:\WINDOWS\SYSTEM32\H323LOG.TXT Object is locked skipped
C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\WIADEBUG.LOG Object is locked skipped
C:\WINDOWS\WIASERVC.LOG Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped

Scan process completed.

[Advertisements]

I see a couple in that scan that either werent there before or got cut-off, so lets kill'em.

Lets delete some ill mannered files.

• Please double-click OTMoveIt2.exe to run it. (Vista users, please right click on OTMoveit2.exe and select "Run as an Administrator")
• Copy the file paths below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy):
  
  

  C:\WINDOWS\SYSTEM32\brix6ie.ocx
  C:\WINDOWS\SYSTEM32\DRIVERS\ETC\hosts.20080212-201005.backup

• Return to OTMoveIt2, right click in the "Paste List of Files/Folders to be Moved" window (under the light blue bar) and choose Paste.
• Click the red Moveit! button.
• A log of files and folders moved will be created in the c:\_OTMoveIt\MovedFiles folder in the form of Date and Time (mmddyyyy_hhmmss.log). Please open this log in Notepad and post its contents in your next reply.
• Close OTMoveIt2

If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes.

[Stamper19]

I see a couple in that scan that either werent there before or got cut-off, so lets kill'em.

Lets delete some ill mannered files.

• Please double-click OTMoveIt2.exe to run it. (Vista users, please right click on OTMoveit2.exe and select "Run as an Administrator")
• Copy the file paths below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy):
  
  

  C:\WINDOWS\SYSTEM32\brix6ie.ocx
  C:\WINDOWS\SYSTEM32\DRIVERS\ETC\hosts.20080212-201005.backup

• Return to OTMoveIt2, right click in the "Paste List of Files/Folders to be Moved" window (under the light blue bar) and choose Paste.
• Click the red Moveit! button.
• A log of files and folders moved will be created in the c:\_OTMoveIt\MovedFiles folder in the form of Date and Time (mmddyyyy_hhmmss.log). Please open this log in Notepad and post its contents in your next reply.
• Close OTMoveIt2

If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes.

[SHILORAVINN]

And where, pray tell do I find OTMoveIt2? Have I ran it before?

[Stamper19]

Doh! I thought we had already downloaded it so I actually removed the link You can get it here:

Please download the OTMoveIt2 by OldTimer

[SHILORAVINN]

Stamper - Disregard that, I found it online.

[SHILORAVINN]

LOL Guess I didn't refresh my page fast enough! Thanks!

[SHILORAVINN]

Sorry, that took a bit longer than it should have, I was trying to find ummm my clipboard. LOL I've never used it so I thought it was an actual screen, not just "invisible"...


C:\WINDOWS\SYSTEM32\brix6ie.ocx unregistered successfully.
C:\WINDOWS\SYSTEM32\brix6ie.ocx moved successfully.
C:\WINDOWS\SYSTEM32\DRIVERS\ETC\hosts.20080212-201005.backup moved successfully.

OTMoveIt2 by OldTimer - Version 1.0.21 log created on 03292008_155734

[Stamper19]

Any change in the way the computer is behaving after that?

[SHILORAVINN]

Shutting down screens was much much faster, almost instanteous. I restarted, still getting the restart prompt, and restart seemed slower, and bringing IE up was definitely slower - maybe not even related...

[Stamper19]

Hi Shiloravinn,

Quick question: does the account that you are running all of these fixes from have full adminstrative rights? It is unclear from the logs and if it doesnt then it could be the source of some of the oddities Im seeing.

Lets delete some ill mannered files.

• Please double-click OTMoveIt2.exe to run it. (Vista users, please right click on OTMoveit2.exe and select "Run as an Administrator")
• Copy the file paths below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy):
  
  

  C:\Program Files\Pkl1.exe
  C:\Program Files\Mwc1.exe
  C:\Program Files\Xq1.exe
  C:\Program Files\Rnh1.exe
  C:\Program Files\Rg1.exe
  C:\Program Files\Xur1.exe
  C:\WINDOWS\Fonts\Heles___.zip

• Return to OTMoveIt2, right click in the "Paste List of Files/Folders to be Moved" window (under the light blue bar) and choose Paste.
• Click the red Moveit! button.
• A log of files and folders moved will be created in the c:\_OTMoveIt\MovedFiles folder in the form of Date and Time (mmddyyyy_hhmmss.log). Please open this log in Notepad and post its contents in your next reply.
• Close OTMoveIt2

If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes.

[SHILORAVINN]

Hi Stamper!

Yep, I am using Admin account.

C:\Program Files\Pkl1.exe moved successfully.
C:\Program Files\Mwc1.exe moved successfully.
C:\Program Files\Xq1.exe moved successfully.
C:\Program Files\Rnh1.exe moved successfully.
C:\Program Files\Rg1.exe moved successfully.
C:\Program Files\Xur1.exe moved successfully.
C:\WINDOWS\Fonts\Heles___.zip moved successfully.
File/Folder not found.

OTMoveIt2 by OldTimer - Version 1.0.21 log created on 03302008_132634

[Stamper19]

Any improvement after getting rid of those?

[SHILORAVINN]

Stamper -
I am not sure, actually. I can't really tell, it still seemed like it took a day and a half to refresh this page...Sorry I'm not more helpful! I will restart and see how that goes and let you know. Thanks!

[SHILORAVINN]

Shut down was about normal (slow), several programs had the little screen pop up saying they were closing, do I want to close now..., start up was slower and stilllll getting that #$%^&*() restart prompt that makes me want to punch my fist through the screen.

[Stamper19]

Hi Shiloravinn,

This has been a bit of a fishing exhibition. In truth, youre computer has not shown any signs of major infection, and at this point your logs are clean. However, since you are still having problems I am inclined to do another scan to look for rootkits (hidden malware). If that comes back clean then we will have to consider other possible causes of the problems (i.e., windows issues, hardware problems, etc.). I am pointing this out because I know this is dragging a bit and I wanted you to understand why.

Download Sophos Anti-Rootkit & save it to your desktop after filling out the questionaire and reading the EULA.

Note: You will need to enter your name, e-mail address and location in order to access the download page.

• Double-click sarsfx.exe to extract the files.
• Click the Accept button at the EULA, then Install to the default directory
• At the next prompt, click Yes to start the program
• Make sure the following are checked:
  • Running processes
  • Windows Registry
  • Local Hard Drives
• Click the "Start Scan" button.
• Allow the program to scan your computer - please be patient as it may take some time
• Once the scan has completed a window will pop-up with the results of the scan - click OK to this
• In the main window, you will see each of the entries found by the scan (if any)
  
  • If the scanner generated any warning messages, please click on each warning and copy and paste the text of it into this thread for me to review
  • Once you have posted any warning messages here, you can close the scanner and wait for me to get back to you
• If you have not had any warnings, any entries which can be cleaned up by the scanner will have a box with a green checkmark in it next to the entry
• To clean up these entries click on the Clean up checked items button
• If you accidentally check a file NOT recommended for clean up, you will get a warning message and if necessary can re-select the entries you want to clean up
• Once you have cleaned the selected files, you will be prompted to re-boot your computer - please do so
• When you have re-booted, please post a fresh HijackThis log into this thread and tell me how your computer is running now