Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

virus infected, computer reboots auto, cant open many programs even hi

Started by rich06 , Apr 05 2008 10:46 AM

  • This topic is locked This topic is locked

#61
rich06
Posted 16 May 2008 - 06:55 PM

rich06

    Member

  • Topic Starter
  • Member
  • PipPip
  • 59 posts 
Ran on Fri 05/16/2008 - 20:54:40.10



----a-w		   282,624 2008-01-22 00:31:51  C:\Program Files\QuickTime\qttask										 .exe



 Entries:				1  (1)

 Directories:			0  Files:			 1

 Bytes:			282,624  Blocks:		  552

  • 0

Advertisements

#62
kahdah
Posted 16 May 2008 - 07:14 PM

kahdah

    GeekU Teacher

  • Retired Staff
  • 15,822 posts
1. Please open Notepad
  • Click Start , then Run
  • type in notepad in the Run Box then hit ok.

2. Now copy/paste the entire content of the codebox below into the Notepad window:

RenV::
C:\Program Files\QuickTime\qttask										 .exe


3. Save the above as CFScript.txt

4. Then drag the CFScript.txt into ComboFix.exe as depicted in the animation below. This will start ComboFix again.

Posted Image


5. After reboot, (in case it asks to reboot), please post the following reports/logs into your next reply:
  • Combofix.txt
  • A new HijackThis log.

  • 0

#63
rich06
Posted 16 May 2008 - 07:21 PM

rich06

    Member

  • Topic Starter
  • Member
  • PipPip
  • 59 posts
ComboFix 08-05-12.1 - Owner 2008-05-16 21:17:41.3 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.1.1252.1.1033.18.218 [GMT -4:00]
Running from: C:\Documents and Settings\Owner\Desktop\ComboFix.exe
Command switches used :: C:\Documents and Settings\Owner\Desktop\CFScript.txt
* Created a new restore point
.

((((((((((((((((((((((((( Files Created from 2008-04-17 to 2008-05-17 )))))))))))))))))))))))))))))))
.

2008-05-16 20:41 . 2008-05-16 20:41 <DIR> d--h----- C:\kleaner.tmp
2008-05-16 20:41 . 2008-05-16 20:41 81,465 --a------ C:\WINDOWS\system32\drivers\klif.cab
2008-05-16 19:29 . 2008-01-14 22:07 155,648 --a------ C:\WINDOWS\system32\NeroCheck.exe
2008-05-14 20:06 . 2008-05-14 20:06 36 -rahs---- C:\.uid_xxx
2008-05-14 19:59 . 2008-05-14 20:01 1,024 -r-h----- C:\WINDOWS\system32\NTIRIPPER.dll
2008-05-14 19:55 . 2008-05-14 19:59 <DIR> d-------- C:\Program Files\NewTech Infosystems
2008-05-13 20:28 . 2008-05-14 19:22 19,561 --ah----- C:\hpothb07.tif
2008-05-13 20:28 . 2008-05-14 20:24 10,293 --ah----- C:\hpothb07.dat
2008-05-13 20:27 . 2008-05-13 20:27 346,203 --ah----- C:\WINDOWS\hpothb07.tif
2008-05-13 20:27 . 2008-05-13 20:27 39,275 --ah----- C:\WINDOWS\hpothb07.dat
2008-05-08 22:10 . 2008-05-08 22:10 <DIR> d-------- C:\Program Files\USB Storage RW
2008-05-08 22:07 . 2008-05-08 22:10 <DIR> d-------- C:\cmdcons(2)
2008-05-08 22:02 . 2002-08-29 02:06 51,072 --a------ C:\WINDOWS\system32\drivers\i8042prt.sys
2008-05-08 22:02 . 2002-08-29 01:27 23,424 --a------ C:\WINDOWS\system32\drivers\kbdclass.sys

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-05-17 01:17 --------- d-----w C:\Program Files\QuickTime
2008-05-17 00:54 --------- d-----w C:\Program Files\Common Files\Symantec Shared
2008-05-16 23:28 --------- d-----w C:\Program Files\SymNetDrv
2008-05-16 23:28 --------- d-----w C:\Program Files\iTunes
2008-05-16 23:28 --------- d-----w C:\Program Files\AIM
2008-05-16 23:15 --------- d-----w C:\Program Files\Greetings Workshop
2008-05-15 01:39 --------- d-----w C:\Program Files\Easy Internet signup
2008-05-15 01:39 --------- d-----w C:\Documents and Settings\Owner\Application Data\interMute
2008-05-14 23:59 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-05-09 02:14 4,526 --sha-r C:\WINDOWS\system32\drivers\HP_DF253A-ABA a250n_YW_Pavi_QMXM329_E33NAheBLU4_4_I P4SD-LA _SASUSTeK Computer INC._VRev 1.xx_B3.10_T030627_WXH1_L409_M512_J120_7Intel_8Pentium 4_92.6_1104C8023_N10EC8139_P_Z11C1044C_K_A808624D5_U808624D2_G10DE0181.MRK
2008-04-16 04:23 --------- d-----w C:\Program Files\cezfawfa
2008-04-16 04:22 --------- d-----w C:\Program Files\Malwarebytes' Anti-Malware
2008-04-16 02:43 --------- d-----w C:\Documents and Settings\Owner\Application Data\Malwarebytes
2008-04-16 02:43 --------- d-----w C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-04-08 19:35 7,724 --sha-w C:\WINDOWS\system32\drivers\fidbox2.idx
2008-04-08 19:35 26,108 --sha-w C:\WINDOWS\system32\drivers\fidbox.idx
2008-04-08 19:35 2,471,968 --sha-w C:\WINDOWS\system32\drivers\fidbox.dat
2008-04-08 19:35 112,160 --sha-w C:\WINDOWS\system32\drivers\fidbox2.dat
2008-04-04 01:28 41,984 --sh--r C:\WINDOWS\system32\adsntt.exe
2008-03-20 19:05 --------- d-----w C:\Program Files\VB6 Runtime Files for IDAutomation.com Applications
2008-03-20 18:47 396,288 ----a-w C:\Program Files\HijackThis.exe
2008-03-20 18:42 --------- d-----w C:\Program Files\Trend Micro
2008-03-20 17:51 --------- d-----w C:\Documents and Settings\All Users\Application Data\Avg7
2008-03-20 01:40 --------- d-----w C:\Documents and Settings\LocalService\Application Data\AVG7
2008-03-20 01:39 --------- d-----w C:\Documents and Settings\All Users\Application Data\Grisoft
2007-12-31 02:28 0 --sha-w C:\Documents and Settings\Owner\Application Data\b925c42d1a728a077ffecc0dc7cb4d670ba1e2bc.dat
2003-04-10 11:19 32 --sha-w C:\WINDOWS\{FC92DEF6-B98A-462F-BDEC-6F8042F11C76}.dat
2008-01-03 21:33 4,096 --sha-w C:\WINDOWS\system32\5558.dat
2004-10-20 20:56 56 -csh--r C:\WINDOWS\system32\EB01BC701C.sys
2005-05-27 21:26 475 -csha-w C:\WINDOWS\system32\hhxky.dll
2004-10-20 20:56 1,890 -csha-w C:\WINDOWS\system32\KGyGaAvL.sys
2003-04-10 11:19 32 --sha-w C:\WINDOWS\system32\{9E165BF4-5E4A-49D1-BA74-00B57060829D}.dat
.

------- Sigcheck -------

2004-08-04 02:00 29056 4448006b6bc60e6c027932cfc38d6855 C:\WINDOWS\SoftwareDistribution\Download\16b2c96a0c41f4dfdb4d3cc228a4f819\ip6fw.sys
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NVIEW"="nview.dll" [2003-03-03 14:44 831557 C:\WINDOWS\system32\nview.dll]
"Shadow"="C:\Program Files\NewTech Infosystems\NTI Shadow 3\Shadow.exe" [2006-12-30 11:56 495616]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"hpsysdrv"="c:\windows\system\hpsysdrv.exe" [2008-01-16 22:23 52736]
"HotKeysCmds"="C:\WINDOWS\System32\hkcmd.exe" [2003-03-11 20:11 114688]
"KYE_UDSI"="C:\Program Files\USB Storage RW\udsi.exe" [2003-02-22 00:30 212992]
"CamMonitor"="c:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe" [2008-01-16 22:24 411136]
"Share-to-Web Namespace Daemon"="c:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe" [2008-01-14 22:07 69632]
"KBD"="C:\HP\KBD\KBD.EXE" [2008-01-14 22:07 61440]
"StorageGuard"="C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" [2008-01-16 22:24 155648]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [2003-04-10 02:36 151597]
"Recguard"="C:\WINDOWS\SMINST\RECGUARD.EXE" [2008-01-13 19:20 212992]
"NvCplDaemon"="C:\WINDOWS\System32\NvCpl.dll" [2003-03-03 14:44 4595712]
"nwiz"="nwiz.exe" [2003-03-03 14:44 323584 C:\WINDOWS\system32\nwiz.exe]
"NAV CfgWiz"="c:\PROGRA~1\NORTON~1\Cfgwiz.exe" [ ]
"ccApp"="c:\Program Files\Common Files\Symantec Shared\ccApp.exe" [2008-01-13 20:47 59040]
"ccRegVfy"="c:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe" [2002-11-15 05:29 59072]
"BCNT"="C:\PROGRA~1\AWS\WEATHE~1\BCNT.EXE" [2002-08-20 09:20 28672]
"AlcxMonitor"="ALCXMNTR.EXE" [2003-04-03 23:35 50176 C:\WINDOWS\ALCXMNTR.EXE]
"Reminder"="C:\Windows\Creator\Remind_XP.exe" [2003-03-18 04:50 331776]
"PS2"="C:\WINDOWS\system32\ps2.exe" [2002-10-16 18:57 81920]

C:\WINDOWS\system32\config\systemprofile\Start Menu\Programs\Startup\
AutoTBar.exe [2002-08-21 19:48:26 40960]
mod_sm.lnk - C:\hp\bin\cloaker.exe [1999-11-07 10:11:14 27136]

C:\Documents and Settings\Owner\Start Menu\Programs\Startup\
Greetings Workshop Reminders.lnk - C:\Program Files\Greetings Workshop\GWREMIND.EXE [1996-06-25 01:00:00 40448]
Picture Motion Browser Media Check Tool.lnk - C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe [2007-12-02 12:28:52 344064]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\OPXPGina]
C:\Program Files\Softex\OmniPass\opxpgina.dll 2003-02-21 06:50 40960 C:\Program Files\Softex\OmniPass\OPXPGina.dll

S3 N;N;C:\Program Files\NewTech Infosystems\NTI Ripper\ [2008-05-14 20:00]

*Newly Created Service* - KLIF
.
Contents of the 'Scheduled Tasks' folder
"2008-03-05 15:00:00 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
"2008-05-09 02:09:11 C:\WINDOWS\Tasks\easy Internet sign-up.job"
- C:\Program Files\Easy Internet signup\HPSdpApp.exe
"2008-02-24 02:28:23 C:\WINDOWS\Tasks\EasyShare Registration Task.job"
- C:\WINDOWS\System32\rundll32.exelC:\DOCUME~1\ALLUSE~1\APPLIC~1\Kodak\EasyShareSetup\$REGIS~1\Registration_7.4.20.2.sxt _RegistrationOffer@16
"2005-02-08 21:30:23 C:\WINDOWS\Tasks\XoftSpy.job"
- C:\Program Files\XoftSpy\XoftSpy.exe
.
**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-05-16 21:19:26
Windows 5.1.2600 Service Pack 1 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\system\ControlSet001\Services\N]
"ImagePath"="\??\C:\Program Files\NewTech Infosystems\NTI Ripper\"
.
--------------------- DLLs Loaded Under Running Processes ---------------------

PROCESS: C:\WINDOWS\system32\winlogon.exe
-> C:\Program Files\Softex\OmniPass\opxpgina.dll
.
Completion time: 2008-05-16 21:21:40
ComboFix-quarantined-files.txt 2008-05-17 01:21:11
ComboFix2.txt 2008-05-15 01:05:03
ComboFix3.txt 2008-05-14 00:39:29

Pre-Run: 4,501,196,800 bytes free
Post-Run: 4,492,435,456 bytes free

132
  • 0

#64
rich06
Posted 16 May 2008 - 07:22 PM

rich06

    Member

  • Topic Starter
  • Member
  • PipPip
  • 59 posts
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:22:44 PM, on 5/16/2008
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
c:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Softex\OmniPass\Omniserv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Softex\OmniPass\OPXPApp.exe
C:\Program Files\USB Storage RW\udsi.exe
C:\WINDOWS\ALCXMNTR.EXE
C:\Program Files\NewTech Infosystems\NTI Shadow 3\Shadow.exe
C:\WINDOWS\System32\rundll32.exe
c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
C:\Program Files\Updates from HP\137903\Program\BackWeb-137903.exe
C:\Program Files\Greetings Workshop\GWREMIND.EXE
C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft....k/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft....k/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft....k/?LinkId=54896
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - c:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: hp toolkit - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - C:\HP\EXPLOREBAR\HPTOOLKT.DLL
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - c:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [KYE_UDSI] "C:\Program Files\USB Storage RW\udsi.exe
O4 - HKLM\..\Run: [CamMonitor] c:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] c:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
O4 - HKLM\..\Run: [NAV CfgWiz] c:\PROGRA~1\NORTON~1\Cfgwiz.exe /R
O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ccRegVfy] "c:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [BCNT] C:\PROGRA~1\AWS\WEATHE~1\BCNT.EXE
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [Reminder] "C:\Windows\Creator\Remind_XP.exe"
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
O4 - HKCU\..\Run: [Shadow] C:\Program Files\NewTech Infosystems\NTI Shadow 3\Shadow.exe --minimize
O4 - S-1-5-18 Startup: AutoTBar.exe (User 'SYSTEM')
O4 - S-1-5-18 Startup: mod_sm.lnk = C:\hp\bin\cloaker.exe (User 'SYSTEM')
O4 - .DEFAULT Startup: AutoTBar.exe (User 'Default user')
O4 - .DEFAULT Startup: mod_sm.lnk = C:\hp\bin\cloaker.exe (User 'Default user')
O4 - .DEFAULT User Startup: AutoTBar.exe (User 'Default user')
O4 - .DEFAULT User Startup: mod_sm.lnk = C:\hp\bin\cloaker.exe (User 'Default user')
O4 - Startup: Greetings Workshop Reminders.lnk = C:\Program Files\Greetings Workshop\GWREMIND.EXE
O4 - Startup: Picture Motion Browser Media Check Tool.lnk = C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
O4 - Global Startup: customize__IE.lnk = C:\hp\region\customizeIe.wsf
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Photosmart Premier Fast Start.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: Kodak EasyShare software.lnk = C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
O4 - Global Startup: KODAK Software Updater.lnk = C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: MsnFixer.lnk = ?
O4 - Global Startup: Quicken Scheduled Updates.lnk = C:\Program Files\Quicken\bagent.exe
O4 - Global Startup: Updates from HP.lnk = C:\Program Files\Updates from HP\137903\Program\BackWeb-137903.exe
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation Service (ccPwdSvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - c:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Softex OmniPass Service (omniserv) - Unknown owner - C:\Program Files\Softex\OmniPass\Omniserv.exe

--
End of file - 6263 bytes
  • 0

#65
kahdah
Posted 16 May 2008 - 07:28 PM

kahdah

    GeekU Teacher

  • Retired Staff
  • 15,822 posts
Please download ATF Cleaner by Atribune.
Double-click ATF-Cleaner.exe to run the program.
Under Main choose: Select All
Click the Empty Selected button.
If you use Firefox browserClick Firefox at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
If you use Opera browserClick Opera at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
Click Exit on the Main menu to close the program.
For Technical Support, double-click the e-mail address located at the bottom of each menu.
=========================
Please do an online scan with Kaspersky WebScanner
(This scanner is for use with internet explorer only)
Click on "Accept"

You will be promted to install an ActiveX component from Kaspersky, Click Yes.
  • The program will launch and then begin downloading the latest definition files:
  • Once the files have been downloaded click on NEXT
  • Now click on Scan Settings
  • In the scan settings make that the following are selected:
    • Scan using the following Anti-Virus database:
    Extended (if available otherwise Standard)
    • Scan Options:
    Scan Archives
    Scan Mail Bases
  • Click OK
  • Now under select a target to scan:Select My Computer
  • This will program will start and scan your system.
  • The scan will take a while so be patient and let it run.
  • Once the scan is complete it will display if your system has been infected.
    • Now click on the Save as button:
  • Save the file in txt format to your desktop.
  • Post that information in your next post.

  • 0

#66
rich06
Posted 17 May 2008 - 03:01 PM

rich06

    Member

  • Topic Starter
  • Member
  • PipPip
  • 59 posts
-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Saturday, May 17, 2008 5:01:08 PM
Operating System: Microsoft Windows XP Home Edition, Service Pack 1 (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 17/05/2008
Kaspersky Anti-Virus database records: 779690
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
A:\
C:\
D:\
E:\
F:\
G:\
H:\
I:\
J:\

Scan Statistics:
Total number of scanned objects: 114976
Number of viruses found: 57
Number of infected objects: 333
Number of suspicious objects: 0
Duration of the scan process: 01:44:45

Infected Object Name / Virus Name / Last Action
C:\06c311207b4cb5f37a94c00b8aeae2\sp2\update\update.exe Object is locked skipped
C:\0c86ba0ce79fde6313410f0f19\sp2\update\update.exe Object is locked skipped
C:\17dd598903e920119d516158800870aa\sp2\update\update.exe Object is locked skipped
C:\4b3ec7b8318d5fc301a82c6c\sp2\update\update.exe Object is locked skipped
C:\6a795fb11be02c24578ea7\sp2\update\update.exe Object is locked skipped
C:\ba851e505d4c523b9b726\sp2\update\update.exe Object is locked skipped
C:\c88ea6fc85faf38d12\sp2\update\update.exe Object is locked skipped
C:\d8116d9d1c963ea9771718b25c279970\sp2\update\update.exe Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\008c6d3561148b73fdf84a87d9538c23_0c494147-e685-4096-a204-2d4c9c9b4049 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a74b193248f4b245bdbaf2aa43e51299_0c494147-e685-4096-a204-2d4c9c9b4049 Object is locked skipped
C:\Documents and Settings\Guest\Local Settings\Temp\hsperfdata_Guest\3348 Object is locked skipped
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temp\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temp\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\Owner\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.36686 Infected: Trojan-Downloader.Win32.Agent.lfo skipped
C:\Documents and Settings\Owner\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.79047/data0001 Infected: not-a-virus:AdWare.Win32.PurityScan.gp skipped
C:\Documents and Settings\Owner\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.79047 NSIS: infected - 1 skipped
C:\Documents and Settings\Owner\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.90838 Infected: Trojan-Downloader.Win32.Agent.lfo skipped
C:\Documents and Settings\Owner\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.93313 Infected: Trojan-Downloader.Win32.PurityScan.eg skipped
C:\Documents and Settings\Owner\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\Owner\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\Owner\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\Owner\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Owner\Local Settings\temp\me_0o7IeUd0aJJxK3u Object is locked skipped
C:\Documents and Settings\Owner\Local Settings\temp\me_3YVo7ZcpOKs13p7 Object is locked skipped
C:\Documents and Settings\Owner\Local Settings\temp\me_cWHQp3gu60beeBH Object is locked skipped
C:\Documents and Settings\Owner\Local Settings\temp\me_FISbVWHqcLY21xK Object is locked skipped
C:\Documents and Settings\Owner\Local Settings\temp\me_LyrSSmKkkdByKyp Object is locked skipped
C:\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Owner\ntuser.dat Object is locked skipped
C:\Documents and Settings\Owner\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\Owner\Shadow.log Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Adobe\Acrobat\Whapi\CreatePDFWinColor.ico Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Adobe\Acrobat\Whapi\CreatePDFWinGray.ico Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Adobe\Acrobat\Whapi\SearchPDFWinColor.ico Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Adobe\Acrobat\Whapi\SearchPDFWinGray.ico Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Adobe\Acrobat\Whapi\WHAppList.xml Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\bartcache\0\0201D20472 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\bartcache\0\0201D205A1 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\bartcache\0\0201D2145A Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\bartcache\0\0201D260CF Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\bartcache\0\0201E068C0 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\bartcache\0\0201E08A81 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\bartcache\0\2B0000199A Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\bartcache\0\2B00001F8B Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\bartcache\0\2B000020ED Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\bartcache\0\2B00002103 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\bartcache\0\2B00002922 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\bartcache\1\0201D20472 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\bartcache\1\0201D205A1 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\bartcache\1\0201D2145A Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\bartcache\1\0201D260CF Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\bartcache\1\0201E068C0 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\bartcache\1\0201E08A81 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\bartcache\1\157DA8053337C55B5F63667FD6D00D12 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\bartcache\1\2B0000199A Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\bartcache\1\2B00001F8B Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\bartcache\1\2B000020ED Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\bartcache\1\2B00002103 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\bartcache\1\2B00002922 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\bartcache\1\2BBAB3916994827382C159D7C60DF1CD Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\bartcache\1\2D68CD4BCC7092C7A4C352B76D7C1453 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\bartcache\1\476F1DA422B28EF8C4AF9AC3D866C6FC Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\bartcache\1\5F1D4BB89889D7A7982C1DA80E9F5373 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\bartcache\1\618138ED033780882147B43F21511B55 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\bartcache\1\729D27A367FF71EF720B16BBA6FCD4CC Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\bartcache\1\7725252A1AB051DEE26C8A0AECABDB1F Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\bartcache\1\8735332E56556A475DC229B39279A14E Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\bartcache\1\8EDBA6E53CCD34C91C6CEEFE0D56CA7F Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\bartcache\1\A8E528706D22E0F98D998BF1DBB03EB4 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\bartcache\1\B75898D76A9C9692260B0314FB514138 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\bartcache\1\BC75DF0F2B743EB6881BFBD81CFAD3F7 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\bartcache\1\DCC7C2A85C0D17830FD7766DC8DAF1BB Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\bartcache\129\0201D2152A Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\bartcache\129\0201D261F9 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\bartcache\129\0201D283E8 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\bartcache\129\0201E00D1C Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\bartcache\129\2B0000125A Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\bartcache\129\2B0000144F Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\bartcache\129\2B00001A10 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\bartcache\129\2B00001B53 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\bartcache\129\2B00001E3B Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\bartcache\129\2B00001F85 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\bartcache\129\2B00002040 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\bartcache\136\20736F63636572 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\bartcache\3\0201D214EC Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\bartcache\3\05696D73656E64 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\bartcache\3\2B00000C2B Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\bartcache\96\0201D214EC Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\bartcache\96\05696D73656E64 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\bartcache\96\2B00000C2B Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\Resources\CurrentSettings.xml Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\soccer4life286\cert8.db Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\soccer4life286\key3.db Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\soccer4life286\Resources\CurrentSettings.xml Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\soccer4life286\secmod.db Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\soccer4life286\urlcache\aim13.tmp Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\soccer4life286\urlcache\aim4.tmp Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\soccer4life286\urlcache\aimA2.tmp Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\soccer4life286\urlcache\aimC.tmp Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\soccer4life286\urlcache\aimD9.tmp Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\soccer4life286\urlcache\urlcache.dat Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Aim\etqjnwpm\soccer4life286\userinfo.bag Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Apple Computer\iTunes\iTunes.pref Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\desktop.ini Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\interMute\SpamSubtract\updates\badwords.re Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\interMute\SpamSubtract\updates\words.re Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Macromedia\Flash Player\#SharedObjects\89FEGD8M\att-motion.espn.go.com\motion\echo\echoContainer170.swf\ECHO.sol Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Macromedia\Flash Player\#SharedObjects\89FEGD8M\static.espn.go.com\motion\fsp\FSPRoot\espnmotion_cv.swf\fspSettings.sol Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Macromedia\Flash Player\#SharedObjects\89FEGD8M\static.userplane.com\presence\m\presence.swf\presence.sol Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Macromedia\Flash Player\#SharedObjects\89FEGD8M\www.youtube.com\soundData.sol Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#att-motion.espn.go.com\settings.sol Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#static.espn.go.com\settings.sol Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#static.userplane.com\settings.sol Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.youtube.com\settings.sol Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Microsoft\CLR Security Config\v1.0.3705\security.config Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Microsoft\CLR Security Config\v1.0.3705\security.config.cch Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Microsoft\CLR Security Config\v1.1.4322\security.config Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Microsoft\CLR Security Config\v1.1.4322\security.config.cch Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Microsoft\Internet Explorer\brndlog.txt Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Microsoft\Internet Explorer\Desktop.htt Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Microsoft\Internet Explorer\Internet Explorer Wallpaper.bmp Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Microsoft\Internet Explorer\Quick Launch\desktop.ini Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Microsoft\Internet Explorer\Quick Launch\RealOne Player.lnk Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Microsoft\Media Player\00986F70.wpl Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Microsoft\Office\MSO1033.acl Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Microsoft\Office\Recent\Templates.LNK Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Microsoft\Office\Word.pip Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Microsoft\Protect\CREDHIST Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Microsoft\Templates\Normal.dot Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Microsoft\Windows\Themes\Custom.theme Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Mozilla\Firefox\Desktop Background.bmp Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Mozilla\Firefox\pluginreg.dat Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\bookmarkbackups\bookmarks-2006-06-04.html Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\bookmarkbackups\bookmarks-2006-06-05.html Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\bookmarkbackups\bookmarks-2006-06-14.html Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\bookmarks.bak Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\bookmarks.html Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\cert8.db Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\chrome\userChrome-example.css Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\chrome\userContent-example.css Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\compatibility.ini Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\compreg.dat Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\cookies.txt Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\downloads.rdf Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\extensions.cache Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\extensions.ini Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\extensions.rdf Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\formhistory.dat Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\history.dat Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\key3.db Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\localstore.rdf Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\mimeTypes.rdf Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\prefs.js Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\search.rdf Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\secmod.db Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\signons.txt Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\xpti.dat Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Mozilla\Firefox\profiles.ini Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Real\rnadmin\rnsystem.dat Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Sonic\Update Manager\sumdb.dat Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Symantec\Shared\Options.VcPref Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Talkback\MozillaOrg\Firefox15\Win32\2006042618\manifest.ini Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Talkback\MozillaOrg\Firefox15\Win32\2006042618\permdata.box Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Talkback\MozillaOrg\Firefox15\Win32\2006050817\manifest.ini Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Talkback\MozillaOrg\Firefox15\Win32\2006050817\permdata.box Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Talkback\MozillaOrg\Firefox15\Win32\2006050817\Talkback.ini Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Webroot\Spy Sweeper\Data\alerts.dat Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Webroot\Spy Sweeper\Data\alwayskr.tmp Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Webroot\Spy Sweeper\Data\image01.gif Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Webroot\Spy Sweeper\Data\image02.gif Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Webroot\Spy Sweeper\Data\image03.gif Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Webroot\Spy Sweeper\Data\image04.gif Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Webroot\Spy Sweeper\Data\image05.gif Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Webroot\Spy Sweeper\Data\NewNews.txt Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Webroot\Spy Sweeper\Data\spynews.htm Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Application Data\Webroot\Spy Sweeper\Logs\060604115158.ses Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Cookies\[email protected][1].txt Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Cookies\rich@ad[2].txt Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Cookies\[email protected][1].txt Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Cookies\rich@aim[1].txt Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Cookies\[email protected][1].txt Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Cookies\[email protected][1].txt Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Cookies\[email protected][1].txt Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Cookies\[email protected][2].txt Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Cookies\rich@google[1].txt Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Cookies\rich@live[1].txt Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Cookies\rich@msn[1].txt Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Cookies\rich@myfreepaysite[2].txt Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Cookies\rich@myspace[1].txt Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Cookies\rich@ohmyspace[1].txt Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Cookies\rich@piczo[1].txt Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Cookies\[email protected][1].txt Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Cookies\[email protected][1].txt Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Desktop\AoE2demo.exe Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Desktop\Ares.lnk Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Desktop\joey.m3u Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Desktop\Microsoft Age of Empires II Trial.lnk Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Desktop\Microsoft Word.lnk Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Desktop\Windows Media Player.lnk Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Favorites\Desktop.ini Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Favorites\HP's Recommended Web Sites\Ameritrade.url Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Favorites\HP's Recommended Web Sites\Detto-Move My Data.url Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Favorites\HP's Recommended Web Sites\Genealogy.url Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Favorites\HP's Recommended Web Sites\Internet Service Providers\America Online.url Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Favorites\HP's Recommended Web Sites\Internet Service Providers\Get High-Speed Internet.url Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Favorites\HP's Recommended Web Sites\Internet Service Providers\MSN.url Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Favorites\HP's Recommended Web Sites\Kid'sEdge.url Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Favorites\HP's Recommended Web Sites\Norton Antivirus.url Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Favorites\HP's Recommended Web Sites\Online Backup.url Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Favorites\HP's Recommended Web Sites\Password Manager.url Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Favorites\HP's Recommended Web Sites\PopSubtract.url Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Favorites\HP's Recommended Web Sites\Software Offers.url Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Favorites\HP's Recommended Web Sites\Yahoo! Best of the Web.url Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Favorites\Links\Customize Links.url Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Favorites\Links\Free Hotmail.url Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Favorites\Links\Windows Media.url Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Favorites\Links\Windows.url Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Favorites\MSN.com.url Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Favorites\Radio Station Guide.url Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Ahead\Nero Home\bgscncfg.dat Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Ahead\Nero Home\bl.db Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Ahead\Nero Home\indexstore.db Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Apple Computer\iTunes\iTunes.pref Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\ApplicationHistory\csc.exe.3e4ac0af.ini Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\ApplicationHistory\hpqimzone.exe.9b7949a.ini.inuse Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\ApplicationHistory\hpqthb08.exe.ccbceb54.ini Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\fusioncache.dat Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\GDIPFONTCACHEV1.DAT Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\HP\Digital Imaging\db\administrativeInfo.dbf Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\HP\Digital Imaging\db\albumImagesTable.cdx Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\HP\Digital Imaging\db\albumImagesTable.dbf Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\HP\Digital Imaging\db\albumTable.cdx Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\HP\Digital Imaging\db\albumTable.dbf Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\HP\Digital Imaging\db\CB_Server_Errors.txt Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\HP\Digital Imaging\db\EXIFTable.cdx Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\HP\Digital Imaging\db\EXIFTable.dbf Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\HP\Digital Imaging\db\imageTable.cdx Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\HP\Digital Imaging\db\imageTable.dbf Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\HP\Digital Imaging\db\imageTable.fpt Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\HP\Digital Imaging\db\keywordImagesTable.cdx Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\HP\Digital Imaging\db\keywordImagesTable.dbf Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\HP\Digital Imaging\db\keywordTable.cdx Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\HP\Digital Imaging\db\keywordTable.dbf Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\HP\Digital Imaging\db\managedFolderTable.dbf Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\HP\Digital Imaging\db\pathnameTable.cdx Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\HP\Digital Imaging\db\pathnameTable.dbf Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\HP\Digital Imaging\db\propertiesTable.cdx Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\HP\Digital Imaging\db\propertiesTable.dbf Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\HP\Digital Imaging\db\ROFImagesTable.cdx Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\HP\Digital Imaging\db\ROFImagesTable.dbf Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\HP\Digital Imaging\db\ROFTable.cdx Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\HP\Digital Imaging\db\ROFTable.dbf Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\HP\Digital Imaging\handle.dat Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\HP\Digital Imaging\oov1_skindefV3.dat Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\IconCache.db Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\IsolatedStorage\rukylg3y.baz\ipmnpbof.15h\StrongName.xitmqsrqvpqpovqi5kx5u3ghwej4ru23\AssemFiles\hpqedit.settings Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\IsolatedStorage\rukylg3y.baz\ipmnpbof.15h\StrongName.xitmqsrqvpqpovqi5kx5u3ghwej4ru23\identity.dat Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\IsolatedStorage\rukylg3y.baz\ipmnpbof.15h\StrongName.xitmqsrqvpqpovqi5kx5u3ghwej4ru23\info.dat Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Microsoft\Internet Explorer\MSIMGSIZ.DAT Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Microsoft\Media Player\CurrentDatabase_59R.wmdb Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Microsoft\Media Player\wmpfolders.wmdb Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Microsoft\Wallpaper1.bmp Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Microsoft\Windows Media\9.0\WMSDKNS.DTD Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Microsoft\Windows Media\9.0\WMSDKNS.XML Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\01504D35d01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\032C15EFd01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\032D85BDd01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\050B5558d01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\070A9C81d01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\0791F913d01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\0884CB8Bd01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\089B2B7Ad01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\09553C44d01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\09A9FDB9d01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\0A86C076d01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\0C144B11d01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\0C71B3B4d01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\0D29BF68d01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\0D6EBF5Bd01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\0E12ED60d01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\0FD133D5d01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\0FF7EF2Bd01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\111F5587d01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\132D85ADd01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\161AA453d01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\163F9B87d01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\1678D195d01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\179FB1C9d01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\1BAFBC37d01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\1C0E00F4d01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\1C471426d01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\1CAF898Dd01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\1CF3FD12d01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\1DA8D381d01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\1F11593Fd01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\1F3438DBd01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\1F4DDBB2d01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\215AC66Cd01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\21E962FAd01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\232D859Dd01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\23ADA19Ed01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\269ED737d01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\2A0DEAA3d01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\2AA1E1D8d01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\2B0BD3C8d01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\2C8503BCd01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\2DA59AC6d01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\2E8B46C5d01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\30866640d01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\320B4A0Fd01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\325CBF84d01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\32C48DCAd01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\341D0A38d01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\35B27B51d01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\360066ADd01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\36430456d01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\370CBF60d01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\380FE1C7d01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\3896F938d01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\38EB8765d01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\3E1D5C94d01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\3F0E3B26d01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\3F36BA60d01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\3FC6E751d01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\4107CE98d01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\4215300Ad01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\4254A308d01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\42A4A081d01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\42A5A081d01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\4345277Bd01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\436B6C2Ad01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\44576BFAd01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\45400709d01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\456FDEA0d01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\457B90DBd01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\4603C2B6d01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\4656E7CDd01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\483A7B3Cd01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\491294E1d01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\49A8EC0Ad01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\49D6A707d01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\49DAA707d01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\4A92F89Dd01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\4B0EA707d01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\4B6B4B4Cd01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\4B88D617d01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\4BD8A707d01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\Application Data\Mozilla\Firefox\Profiles\259ql8pn.default\Cache\4BFEA707d01 Object is locked skipped
C:\Documents and Settings\Rich.COMPUTER\Local Settings\A
  • 0

#67
kahdah
Posted 17 May 2008 - 06:24 PM

kahdah

    GeekU Teacher

  • Retired Staff
  • 15,822 posts
Hi that log was cut off can you please try to post the rest of it.
Thanks.
  • 0

#68
rich06
Posted 17 May 2008 - 07:20 PM

rich06

    Member

  • Topic Starter
  • Member
  • PipPip
  • 59 posts
next

Edited by rich06, 17 May 2008 - 07:40 PM.

  • 0

#69
rich06
Posted 17 May 2008 - 07:26 PM

rich06

    Member

  • Topic Starter
  • Member
  • PipPip
  • 59 posts
next

Edited by rich06, 17 May 2008 - 07:41 PM.

  • 0

#70
rich06
Posted 17 May 2008 - 07:27 PM

rich06

    Member

  • Topic Starter
  • Member
  • PipPip
  • 59 posts
next

Edited by rich06, 17 May 2008 - 07:41 PM.

  • 0

Advertisements

#71
rich06
Posted 17 May 2008 - 07:27 PM

rich06

    Member

  • Topic Starter
  • Member
  • PipPip
  • 59 posts
next

Edited by rich06, 17 May 2008 - 07:41 PM.

  • 0

#72
rich06
Posted 17 May 2008 - 07:28 PM

rich06

    Member

  • Topic Starter
  • Member
  • PipPip
  • 59 posts
next

Edited by rich06, 17 May 2008 - 07:42 PM.

  • 0

#73
rich06
Posted 17 May 2008 - 07:38 PM

rich06

    Member

  • Topic Starter
  • Member
  • PipPip
  • 59 posts
FORGET THE OTHERS. I ATTACHED THE FILE IN THREE PARTS

Attached Files


  • 0

#74
rich06
Posted 17 May 2008 - 07:39 PM

rich06

    Member

  • Topic Starter
  • Member
  • PipPip
  • 59 posts
third part

Attached Files


  • 0

#75
kahdah
Posted 17 May 2008 - 09:56 PM

kahdah

    GeekU Teacher

  • Retired Staff
  • 15,822 posts
Please download ATF Cleaner by Atribune.
Double-click ATF-Cleaner.exe to run the program.
Under Main choose: Select All
Click the Empty Selected button.
If you use Firefox browserClick Firefox at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
If you use Opera browserClick Opera at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
Click Exit on the Main menu to close the program.
For Technical Support, double-click the e-mail address located at the bottom of each menu.
===================
EMpty the QUarantine folder within MalwareBytes antimalware.
You can do that by going to the Quarantine tab when you open up the program and tell it to remove what is present.
===============================
PLease post back with another Hijackthis log and let me know how things are running?
  • 0
Back to Virus, Spyware, Malware Removal · Next Unread Topic →




Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

  1. Geeks to Go Community
  2. → Security
  3. → Virus, Spyware, Malware Removal

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP