Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

W32.IRCBot [RESOLVED]


  • This topic is locked This topic is locked

#1
paulelsa

paulelsa

    Member

  • Member
  • PipPip
  • 30 posts
I protect my HP Windows XP with Symantec Ant-virus Corporate Edition, Spybot and Adaware 2007 (I had the SE Personal version until it stopped being supported.) Sometimes when doing the Adaware scan, Symantec will detect W32.IRCBot. This happens only during Adaware scans and only since I upgraded to the 2007 version – but not for every scan. When I do Symantec Scans it’s not detected – even if I scan in safe mode. I tried un-installing and re-installing Adaware with no luck.
  • 0

Advertisements


#2
andrewuk

andrewuk

    Trusted Helper

  • Malware Removal
  • 5,297 posts
Hi paulelsa

welcome to geekstogo :)

lets do a deeper scan of your machine for me to analyse.

Please download Deckard's System Scanner (DSS) and save it to your Desktop.
  • Close all other windows before proceeding.
  • Double-click on dss.exe and follow the prompts.
  • When it has finished, dss will open two Notepads main.txt and extra.txt -- please copy (CTRL+A and then CTRL+C) and paste (CTRL+V) the contents of main.txt and extra.txt in your next reply.

you may need to post the logs over 2 replies to ensure all the information is posted.

andrewuk
  • 0

#3
paulelsa

paulelsa

    Member

  • Topic Starter
  • Member
  • PipPip
  • 30 posts
Deckard's System Scanner v20071014.68
Run by HP_Administrator on 2008-05-03 11:30:15
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

Successfully created a Deckard's System Scanner Restore Point.


-- Last 5 Restore Point(s) --
23: 2008-05-03 01:30:30 UTC - RP29 - Deckard's System Scanner Restore Point
22: 2008-05-02 06:59:07 UTC - RP28 - Software Distribution Service 3.0
21: 2008-05-01 06:44:45 UTC - RP27 - Software Distribution Service 3.0
20: 2008-04-30 07:30:57 UTC - RP26 - System Checkpoint
19: 2008-04-29 07:04:35 UTC - RP25 - System Checkpoint


-- First Restore Point --
1: 2008-04-07 07:04:20 UTC - RP7 - System Checkpoint


Backed up registry hives.
Performed disk cleanup.

System Drive C: has 10.16 GiB (less than 15%) free.


-- HijackThis (run as HP_Administrator.exe) ------------------------------------

Unable to find log (file not found); running clone.
-- HijackThis Clone ------------------------------------------------------------


Emulating logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2008-05-03 11:34:20
Platform: Windows XP Service Pack 2 (5.01.2600)
MSIE: Internet Explorer (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\system32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe
C:\WINDOWS\ehome\ehRecvr.exe
C:\WINDOWS\ehome\ehSched.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe
C:\Program Files\Maxtor\OneTouch\Utils\SyncServices.exe
C:\Program Files\Retrospect\Retrospect Express HD 1.1\retrorun.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
C:\WINDOWS\system32\ati2evxx.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\ehome\ehmsas.exe
C:\WINDOWS\system\hpsysdrv.exe
C:\hp\KBD\kbd.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\ALCWZRD.EXE
C:\WINDOWS\ALCMTR.EXE
C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\VPTray.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Help and Support Additions\Pavilion\XPEWWBF4\plugin\bin\PCHButton.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Internode\mum.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\HP_Administrator\My Documents\My Downloads\dss.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.h...a...&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.h...a...&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com.au/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft....k/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft....k/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.h...a...&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft....k/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft....k/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\GoogleToolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.0.1225.9868\swg.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\GoogleToolbar2.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] "C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe" /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] "C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE" /SYNC
O4 - HKLM\..\Run: [PHIME2002A] "C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE" /IMEName
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [zzzHPSETUP] E:\Setup.exe \RESET
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [Acme.PCHButton] C:\PROGRA~1\HELPAN~1\Pavilion\XPEWWBF4\plugin\bin\pchbutton.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [InternodeUsage] C:\PROGRA~1\INTERN~2\mum.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - Startup: MailWasherPro.lnk = C:\Program Files\FireTrust\MailWasher Pro\MailWasher.exe
O4 - Global Startup: Event Reminder.lnk = C:\Program Files\PrintMaster 16\pmremind.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\MSOffice\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - (file missing)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft....k/?linkid=39204
O16 - DPF: {44990301-3C9D-426D-81DF-AAB636FA4345} (Symantec Script Runner Class) - http://www.symantec....abs/tgctlsr.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.micros...b?1175582327703
O16 - DPF: {8BC53B30-32E4-4ED3-BEF9-DB761DB77453} (CInstallLPCtrl Object) - http://u3.sandisk.co...LPInstaller.CAB
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoft...free/asinst.cab
O16 - DPF: {B1E2B96C-12FE-45E2-BEF1-44A219113CDD} (SABScanProcesses Class) - http://www.superadbl...ivex/sabspx.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.m...ash/swflash.cab
O18 - Protocol: belarc - {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - C:\Program Files\Belarc\Advisor\System\BAVoilaX.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\MSN Messenger\msgrapp.8.1.0178.00.dll
O18 - Protocol: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\MSN Messenger\msgrapp.8.1.0178.00.dll
O18 - Protocol: mso-offdap - {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Program Files\Common Files\Microsoft Shared\Web Components\10\OWC10.DLL
O18 - Protocol: mso-offdap11 - {32505114-5902-49B2-880A-1F7738E5A384} - C:\Program Files\Common Files\Microsoft Shared\Web Components\11\OWC11.DLL
O18 - Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL
O20 - Winlogon Notify: cbawwvs - C:\WINDOWS\system32\cbawwvs.dll (file missing)
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\system32\WRLogonNTF.dll (file missing)
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\ati2evxx.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: DefWatch - Symantec Corporation - C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NBService - Unknown owner - C:\Program Files\Nero\Nero 7\Nero
O23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe
O23 - Service: MaxSyncService (NTService1) - Unknown owner - C:\Program Files\Maxtor\OneTouch\Utils\SyncServices.exe
O23 - Service: Retrospect Express HD Helper (RetroExp Helper) - EMC Dantz - C:\Program Files\Retrospect\Retrospect Express HD 1.1\rthlpsvc.exe
O23 - Service: Retrospect Express HD Launcher (RetroExpLauncher) - EMC Dantz - C:\Program Files\Retrospect\Retrospect Express HD 1.1\retrorun.exe
O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe


--
End of file - 13028 bytes

-- File Associations -----------------------------------------------------------

All associations okay.


-- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------

R1 BANTExt (Belarc SMBios Access) - c:\windows\system32\drivers\bantext.sys
R1 SASDIFSV - c:\program files\superantispyware\sasdifsv.sys
R3 IrBus (Infrared bus filter driver for eHome remote controls) - c:\windows\system32\drivers\irbus.sys <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System>
R3 Iviaspi (IVI ASPI Shell) - c:\windows\system32\drivers\iviaspi.sys <Not Verified; InterVideo, Inc.; InterVideo ASPI Shell>
R3 NCHSSVAD (SoundTap Recorder) - c:\windows\system32\drivers\nchssvad.sys <Not Verified; NCH Swift Sound; NCH Swift Sound Virtual Audio Device>
R3 Pfc (Padus ASPI Shell) - c:\windows\system32\drivers\pfc.sys <Not Verified; Padus, Inc.; Padus® ASPI Shell>

S2 npkcrypt - c:\program files\nexon\maplestory\npkcrypt.sys (file missing)
S2 ssoftnt4 - c:\windows\system32\drivers\ssoftnt4.sys (file missing)
S3 NPPTNT2 - c:\windows\system32\npptnt2.sys <Not Verified; INCA Internet Co., Ltd.; nProtect NPSC Kernel Mode Driver for NT>
S3 SABProcEnum - c:\program files\internet explorer\sabprocenum.sys (file missing)
S3 SASENUM - c:\program files\superantispyware\sasenum.sys <Not Verified; SuperAdBlocker, Inc.; SuperAntiSpyware>


-- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------

R2 Apple Mobile Device - "c:\program files\common files\apple\mobile device support\bin\applemobiledeviceservice.exe" <Not Verified; Apple, Inc.; Apple Mobile Device Service>
R2 Bonjour Service (##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##) - "c:\program files\bonjour\mdnsresponder.exe" <Not Verified; Apple Computer, Inc.; Bonjour>
R2 NTService1 (MaxSyncService) - "c:\program files\maxtor\onetouch\utils\syncservices.exe" <Not Verified; ; SyncServices>
R2 RetroExpLauncher (Retrospect Express HD Launcher) - c:\program files\retrospect\retrospect express hd 1.1\retrorun.exe <Not Verified; EMC Dantz; Retrospect Express HD>

S2 RetroExp Helper (Retrospect Express HD Helper) - "c:\program files\retrospect\retrospect express hd 1.1\rthlpsvc.exe" <Not Verified; EMC Dantz; Retrospect Express HD>
S3 FLEXnet Licensing Service - "c:\program files\common files\macrovision shared\flexnet publisher\fnplicensingservice.exe" <Not Verified; Macrovision Europe Ltd.; FLEXnet Publisher (32 bit)>
S3 NBService - c:\program files\nero\nero 7\nero backitup\nbservice.exe


-- Device Manager: Disabled ----------------------------------------------------

Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
Description: Wireless PCI 802.11b/g adapter WN4201B
Device ID: PCI\VEN_1260&DEV_3890&SUBSYS_42031113&REV_01\4&2E9A5DB2&0&18F0
Manufacturer: Accton
Name: Wireless PCI 802.11b/g adapter WN4201B
PNP Device ID: PCI\VEN_1260&DEV_3890&SUBSYS_42031113&REV_01\4&2E9A5DB2&0&18F0
Service: PRISM_A00


-- Scheduled Tasks -------------------------------------------------------------

2008-05-03 02:07:22 330 --ah----- C:\WINDOWS\Tasks\MP Scheduled Scan.job
2008-05-01 17:27:23 284 --a------ C:\WINDOWS\Tasks\AppleSoftwareUpdate.job


-- Files created between 2008-04-03 and 2008-05-03 -----------------------------

2008-04-25 14:30:05 0 d-------- C:\WINDOWS\Performance
2008-04-25 14:29:26 0 d-------- C:\Documents and Settings\All Users\Application Data\Microsoft Corporation
2008-04-25 14:28:41 0 d-------- C:\Program Files\Microsoft Windows Vista Upgrade Advisor
2008-04-04 16:19:13 0 d-------- C:\Program Files\Bonjour
2008-04-04 14:18:19 0 dr-h----- C:\Documents and Settings\HP_Administrator\Recent


-- Find3M Report ---------------------------------------------------------------

2008-05-03 11:29:21 0 d-------- C:\Documents and Settings\HP_Administrator\Application Data\MailWasherPro
2008-05-02 16:51:26 0 d-------- C:\Documents and Settings\HP_Administrator\Application Data\Internode
2008-05-01 17:30:37 0 d-------- C:\Program Files\Safari
2008-05-01 17:27:19 0 d-------- C:\Program Files\Apple Software Update
2008-04-30 16:51:51 27761 --a------ C:\Documents and Settings\HP_Administrator\Application Data\com.kennettnet.MusicRescueProfiles.plist
2008-04-30 16:51:50 3304 --a------ C:\Documents and Settings\HP_Administrator\Application Data\com.kennettnet.MusicRescue.plist
2008-04-27 21:32:13 0 d-------- C:\Documents and Settings\HP_Administrator\Application Data\U3
2008-04-26 15:34:54 10 --a------ C:\WINDOWS\popcinfo.dat
2008-04-26 14:03:20 664 --a------ C:\WINDOWS\system32\d3d9caps.dat
2008-04-23 17:24:37 0 d-------- C:\Program Files\FrostWire
2008-04-23 16:34:56 0 d-------- C:\Documents and Settings\HP_Administrator\Application Data\NCH Swift Sound
2008-04-23 16:34:54 0 d-------- C:\Program Files\NCH Swift Sound
2008-04-23 16:11:15 0 d-------- C:\Program Files\LimeWire
2008-04-20 21:20:14 0 d-------- C:\Documents and Settings\HP_Administrator\Application Data\Azureus
2008-04-17 20:40:55 0 d-------- C:\Program Files\Common Files\Symantec Shared
2008-04-06 18:04:59 0 d-------- C:\Documents and Settings\HP_Administrator\Application Data\foobar2000
2008-04-05 08:41:51 0 d-------- C:\Documents and Settings\HP_Administrator\Application Data\Adobe
2008-04-04 21:15:03 0 d-------- C:\Program Files\Common Files\Wise Installation Wizard
2008-04-04 16:30:57 0 d-------- C:\Program Files\Common Files\Adobe
2008-04-03 17:40:17 0 d-------- C:\Program Files\iTunes
2008-04-03 17:40:06 0 d-------- C:\Program Files\iPod
2008-04-03 17:35:27 0 d-------- C:\Program Files\QuickTime
2008-04-01 17:29:01 127813076 --a------ C:\SYM_REGISTRY_BACKUP.reg
2008-03-27 13:25:38 0 d-------- C:\Program Files\QUICKENW
2008-03-27 13:12:13 0 d-------- C:\Program Files\SUPERAntiSpyware
2008-03-26 11:03:03 0 d-------- C:\Program Files\Common Files
2008-03-26 11:03:03 0 d-------- C:\Program Files\Common Files\Macrovision Shared
2008-03-26 09:54:35 0 d-------- C:\Program Files\MagicISO
2008-03-24 14:17:49 0 d-------- C:\Program Files\GameSpy Arcade
2008-03-24 14:12:29 0 d-------- C:\Program Files\Microsoft Games
2008-03-21 17:12:57 97116 ---h----- C:\WINDOWS\system32\mlfcache.dat
2008-03-20 21:01:11 0 d-------- C:\Documents and Settings\HP_Administrator\Application Data\Apple Computer
2008-03-19 19:19:52 0 d-------- C:\Program Files\Lavasoft
2008-03-17 21:07:09 0 d-------- C:\Program Files\RSSoft
2008-03-17 20:27:48 0 d-------- C:\Program Files\Sunbelt Software
2008-03-16 20:15:47 0 d-------- C:\Program Files\Common Files\Blizzard Entertainment
2008-03-16 14:18:03 0 d-------- C:\Program Files\TrojanHunter 4.5
2008-03-16 14:17:14 0 d-------- C:\Program Files\TrojanHunter 4.6
2008-03-16 14:11:30 30 -----n--- C:\WINDOWS\mscpt.dat
2008-03-16 13:39:23 4667 -----n--- C:\Documents and Settings\HP_Administrator\Application Data\Cabos.plist
2008-03-16 13:38:10 0 d-------- C:\Program Files\Ares
2008-03-16 10:22:18 0 d-------- C:\Program Files\Zuma Deluxe
2008-03-15 15:42:54 0 d-------- C:\Program Files\Azureus
2008-03-09 13:52:41 0 d-------- C:\Program Files\Canon
2008-02-10 14:58:19 3463 -----n--- C:\WINDOWS\unins000.dat
2008-02-10 14:56:22 691545 -----n--- C:\WINDOWS\unins000.exe


-- Registry Dump ---------------------------------------------------------------

*Note* empty entries & legit default entries are not shown


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray"="C:\WINDOWS\ehome\ehtray.exe" [10/08/2004 11:04 AM]
"IMJPMIG8.1"="C:\WINDOWS\IME\imjp8_1\IMJPMIG.exe" [11/08/2004 05:00 AM]
"MSPY2002"="C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe" [11/08/2004 05:00 AM]
"PHIME2002ASync"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe" [11/08/2004 05:00 AM]
"PHIME2002A"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe" [11/08/2004 05:00 AM]
"hpsysdrv"="c:\windows\system\hpsysdrv.exe" [07/05/1998 04:04 PM]
"AlcxMonitor"="ALCXMNTR.EXE" [04/04/2003 02:21 AM C:\WINDOWS\ALCXMNTR.EXE]
"KBD"="C:\HP\KBD\KBD.EXE" [11/02/2003 08:02 PM]
"Recguard"="C:\WINDOWS\SMINST\RECGUARD.EXE" [14/04/2004 08:43 PM]
"AGRSMMSG"="AGRSMMSG.exe" [29/06/2004 05:06 PM C:\WINDOWS\AGRSMMSG.exe]
"PS2"="C:\WINDOWS\system32\ps2.exe" [16/10/2002 04:57 PM]
"ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [26/08/2004 09:00 PM]
"zzzHPSETUP"="E:\Setup.exe" []
"SoundMan"="SOUNDMAN.EXE" [21/09/2005 10:24 AM C:\WINDOWS\SOUNDMAN.EXE]
"AlcWzrd"="ALCWZRD.EXE" [21/09/2005 03:32 PM C:\WINDOWS\ALCWZRD.EXE]
"Alcmtr"="ALCMTR.EXE" [03/05/2005 06:43 PM C:\WINDOWS\ALCMTR.EXE]
"vptray"="C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe" [07/10/2003 12:39 PM]
"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [20/07/2007 04:01 PM]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [28/03/2008 11:37 PM]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [30/03/2008 10:36 AM]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Acme.PCHButton"="C:\PROGRA~1\HELPAN~1\Pavilion\XPEWWBF4\plugin\bin\pchbutton.exe" [15/09/2004 04:12 PM]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [10/08/2004 10:00 PM]
"InternodeUsage"="C:\PROGRA~1\INTERN~2\mum.exe" [02/03/2008 03:38 PM]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe" [16/11/2006 07:04 PM]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [20/06/2007 03:56 PM]

C:\Documents and Settings\HP_Administrator\Start Menu\Programs\Startup\
MailWasherPro.lnk - C:\Program Files\FireTrust\MailWasher Pro\MailWasher.exe [22/07/2007 10:51:02 AM]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Event Reminder.lnk - C:\Program Files\PrintMaster 16\pmremind.exe [20/01/2004 3:10:40 AM]
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe [29/05/2004 5:31:38 AM]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"InstallVisualStyle"=C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
"InstallTheme"=C:\WINDOWS\Resources\Themes\Royale.theme

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"DisableRegistryTools"=0 (0x0)

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [20/12/2006 12:55 PM 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL 12/06/2007 08:08 PM 294912 C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\cbawwvs]
cbawwvs.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
"Authentication Packages"= msv1_0 C:\\WINDOWS\\system32\\ddccc

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk
backup=C:\WINDOWS\pss\Adobe Reader Speed Launch.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Synchronizer.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Reader Synchronizer.lnk
backup=C:\WINDOWS\pss\Adobe Reader Synchronizer.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Billminder.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Billminder.lnk
backup=C:\WINDOWS\pss\Billminder.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^HP Image Zone Fast Start.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\HP Image Zone Fast Start.lnk
backup=C:\WINDOWS\pss\HP Image Zone Fast Start.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^LG SyncManager.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\LG SyncManager.lnk
backup=C:\WINDOWS\pss\LG SyncManager.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Quicken Startup.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Quicken Startup.lnk
backup=C:\WINDOWS\pss\Quicken Startup.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^HP_Administrator^Start Menu^Programs^Startup^MailWasher Free.lnk]
path=C:\Documents and Settings\HP_Administrator\Start Menu\Programs\Startup\MailWasher Free.lnk
backup=C:\WINDOWS\pss\MailWasher Free.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^HP_Administrator^Start Menu^Programs^Startup^Microsoft Office Fast Start.lnk]
path=C:\Documents and Settings\HP_Administrator\Start Menu\Programs\Startup\Microsoft Office Fast Start.lnk
backup=C:\WINDOWS\pss\Microsoft Office Fast Start.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^HP_Administrator^Start Menu^Programs^Startup^Microsoft Office Find Fast Indexer.lnk]
path=C:\Documents and Settings\HP_Administrator\Start Menu\Programs\Startup\Microsoft Office Find Fast Indexer.lnk
backup=C:\WINDOWS\pss\Microsoft Office Find Fast Indexer.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^HP_Administrator^Start Menu^Programs^Startup^Microsoft Office Shortcut Bar.lnk]
path=C:\Documents and Settings\HP_Administrator\Start Menu\Programs\Startup\Microsoft Office Shortcut Bar.lnk
backup=C:\WINDOWS\pss\Microsoft Office Shortcut Bar.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\!AVG Anti-Spyware]
"C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Photo Downloader]
"C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
"C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ares]
"C:\Program Files\Ares\Ares.exe" -h

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AutoTBar]
c:\Program Files\HP\Digital Imaging\bin\AUTOTBAR.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ClamWin]
"C:\Program Files\ClamWin\bin\ClamTray.exe" --logon

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPHmon06]
C:\WINDOWS\system32\hphmon06.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPHUPD06]
"c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
"C:\Program Files\iTunes\iTunesHelper.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MaxtorOneTouch]
C:\Program Files\Maxtor\OneTouch\utils\Onetouch.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
"C:\Program Files\Messenger\msmsgs.exe" /background

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
"C:\Program Files\MSN Messenger\msnmsgr.exe" /background

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PDUiP6600DMon]
"C:\Program Files\Canon\Memory Card Utility\iP6600D\PDUiP6600DMon.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
"C:\Program Files\QuickTime\QTTask.exe" -atboottime

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Red Swoosh]
C:\Program Files\RSSoft\RedSwoosh.exe /S

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RetroExpress]
"C:\PROGRA~1\RETROS~1\RETROS~1.1\RetroExpress.exe" /h

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
"C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SUPERAntiSpyware]
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\THGuard]
"C:\Program Files\TrojanHunter 4.6\THGuard.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Defender]
"C:\Program Files\Windows Defender\MSASCui.exe" -hide


[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\D]
AutoRun\command- C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Info.exe protect.ed 480 480




-- Hosts -----------------------------------------------------------------------

127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com

7902 more entries in hosts file.


-- End of Deckard's System Scanner: finished at 2008-05-03 11:36:32 ------------
  • 0

#4
paulelsa

paulelsa

    Member

  • Topic Starter
  • Member
  • PipPip
  • 30 posts
Deckard's System Scanner v20071014.68
Extra logfile - please post this as an attachment with your post.
--------------------------------------------------------------------------------

-- System Information ----------------------------------------------------------

Microsoft Windows XP Professional (build 2600) SP 2.0
Architecture: X86; Language: English

CPU 0: Intel® Pentium® 4 CPU 3.20GHz
CPU 1: Intel® Pentium® 4 CPU 3.20GHz
Percentage of Memory in Use: 62%
Physical Memory (total/avail): 511.29 MiB / 193.16 MiB
Pagefile Memory (total/avail): 1479.24 MiB / 873.54 MiB
Virtual Memory (total/avail): 2047.88 MiB / 1921.35 MiB

C: is Fixed (NTFS) - 144.38 GiB total, 10.16 GiB free.
D: is Fixed (FAT32) - 4.66 GiB total, 0.54 GiB free.
E: is CDROM (No Media)
F: is Removable (No Media)
G: is Removable (No Media)
H: is Removable (No Media)
I: is Removable (No Media)
J: is CDROM (No Media)

\\.\PHYSICALDRIVE0 - SAMSUNG SP1614C - 149.05 GiB - 2 partitions
\PARTITION0 - Unknown - 4.66 GiB - D:
\PARTITION1 (bootable) - Installable File System - 144.38 GiB - C:

\\.\PHYSICALDRIVE2 - Generic USB CF Reader USB Device

\\.\PHYSICALDRIVE4 - Generic USB MS Reader USB Device

\\.\PHYSICALDRIVE1 - Generic USB SD Reader USB Device

\\.\PHYSICALDRIVE3 - Generic USB SM Reader USB Device



-- Security Center -------------------------------------------------------------

AUOptions is scheduled to auto-install.
Windows Internal Firewall is disabled.

FirstRunDisabled is set.
AntiVirusDisableNotify is set.

FW: Sunbelt Personal Firewall v4.5.916 T (Sunbelt)

[HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%ProgramFiles%\\iTunes\\iTunes.exe"="%ProgramFiles%\\iTunes\\iTunes.exe:*:enabled:iTunes"
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"

[HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Updates from HP\\309731\\Program\\Updates from HP.exe"="C:\\Program Files\\Updates from HP\\309731\\Program\\Updates from HP.exe:*:Enabled:BackWeb for Pavilion"
"C:\\Program Files\\Java\\j2re1.4.2_03\\bin\\javaw.exe"="C:\\Program Files\\Java\\j2re1.4.2_03\\bin\\javaw.exe:*:Enabled:javaw"
"C:\\Program Files\\LimeWire\\LimeWire.exe"="C:\\Program Files\\LimeWire\\LimeWire.exe:*:Enabled:LimeWire"
"C:\\Program Files\\Outlook Express\\msimn.exe"="C:\\Program Files\\Outlook Express\\msimn.exe:*:Enabled:Outlook Express"
"C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\\Program Files\\BitTorrent\\btdownloadgui.exe"="C:\\Program Files\\BitTorrent\\btdownloadgui.exe:*:Enabled:btdownloadgui"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\\WINDOWS\\system32\\java.exe"="C:\\WINDOWS\\system32\\java.exe:*:Enabled:Java™ Platform SE binary"
"C:\\Program Files\\Ares\\Ares.exe"="C:\\Program Files\\Ares\\Ares.exe:*:Enabled:Ares"
"C:\\Program Files\\NewSoft\\Presto! PageManager 6\\NetGroup.exe"="C:\\Program Files\\NewSoft\\Presto! PageManager 6\\NetGroup.exe:*:Enabled:NewSoft Network Group"
"C:\\Program Files\\Nero\\Nero 7\\Nero Home\\NeroHome.exe"="C:\\Program Files\\Nero\\Nero 7\\Nero Home\\NeroHome.exe:*:Enabled:Nero Home"
"C:\\Program Files\\Small Rockets\\The Red Ace\\RedAce.exe"="C:\\Program Files\\Small Rockets\\The Red Ace\\RedAce.exe:*:Enabled:RedAce.exe"
"C:\\Program Files\\Azureus\\Azureus.exe"="C:\\Program Files\\Azureus\\Azureus.exe:*:Enabled:Azureus"
"C:\\Program Files\\Nero\\Nero 7\\Nero ShowTime\\ShowTime.exe"="C:\\Program Files\\Nero\\Nero 7\\Nero ShowTime\\ShowTime.exe:*:Enabled:Nero ShowTime"
"C:\\Program Files\\Sunbelt Software\\Personal Firewall 4\\kpf4gui.exe"="C:\\Program Files\\Sunbelt Software\\Personal Firewall 4\\kpf4gui.exe:*:Enabled:Sunbelt Kerio Personal Firewall 4 - GUI"
"C:\\Program Files\\Sunbelt Software\\Personal Firewall 4\\kpf4ss.exe"="C:\\Program Files\\Sunbelt Software\\Personal Firewall 4\\kpf4ss.exe:*:Enabled:Sunbelt Kerio Personal Firewall 4 - Service"
"C:\\Program Files\\Bonjour\\mDNSResponder.exe"="C:\\Program Files\\Bonjour\\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\\Program Files\\iTunes\\iTunes.exe"="C:\\Program Files\\iTunes\\iTunes.exe:*:Enabled:iTunes"
"C:\\Program Files\\Sunbelt Software\\Personal Firewall\\kpf4gui.exe"="C:\\Program Files\\Sunbelt Software\\Personal Firewall\\kpf4gui.exe:*:Enabled:Sunbelt Firewall GUI"
"C:\\Program Files\\FrostWire\\FrostWire.exe"="C:\\Program Files\\FrostWire\\FrostWire.exe:*:Enabled:LimeWire"


-- Environment Variables -------------------------------------------------------

ALLUSERSPROFILE=C:\Documents and Settings\All Users
APPDATA=C:\Documents and Settings\HP_Administrator\Application Data
CLASSPATH=.;C:\Program Files\Java\jre1.6.0_03\lib\ext\QTJava.zip
CommonProgramFiles=C:\Program Files\Common Files
COMPUTERNAME=PAUL
ComSpec=C:\WINDOWS\system32\cmd.exe
FP_NO_HOST_CHECK=NO
HOMEDRIVE=C:
HOMEPATH=\Documents and Settings\HP_Administrator
LOGONSERVER=\\PAUL
NUMBER_OF_PROCESSORS=2
OS=Windows_NT
Path=C:\Program Files\Mozilla Firefox;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;c:\Python22;C:\Program Files\PC-Doctor for Windows\services;C:\Program Files\ATI Technologies\ATI Control Panel;C:\Program Files\Smart Projects\IsoBuster;C:\Program Files\QuickTime\QTSystem\
PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
PROCESSOR_ARCHITECTURE=x86
PROCESSOR_IDENTIFIER=x86 Family 15 Model 3 Stepping 4, GenuineIntel
PROCESSOR_LEVEL=15
PROCESSOR_REVISION=0304
ProgramFiles=C:\Program Files
PROMPT=$P$G
QTJAVA=C:\Program Files\Java\jre1.6.0_03\lib\ext\QTJava.zip
SESSIONNAME=Console
SystemDrive=C:
SystemRoot=C:\WINDOWS
TEMP=C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp
TMP=C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp
USERDOMAIN=PAUL
USERNAME=HP_Administrator
USERPROFILE=C:\Documents and Settings\HP_Administrator
windir=C:\WINDOWS


-- User Profiles ---------------------------------------------------------------

HP_Administrator (admin)
Matty
Johnny
Administrator (admin)


-- Add/Remove Programs ---------------------------------------------------------

--> C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
--> C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
--> C:\Program Files\Nero\Nero 7\nero\uninstall\UNNERO.exe /UNINSTALL
--> C:\WINDOWS\IsUninst.exe -fC:\WINDOWS\orun32.isu
--> c:\WINDOWS\system32\\MSIEXEC.EXE /x {9541FED0-327F-4df0-8B96-EF57EF622F19}
--> C:\WINDOWS\UNNeroBackItUp.exe /UNINSTALL
--> C:\WINDOWS\UNNeroMediaHome.exe /UNINSTALL
--> C:\WINDOWS\UNNeroShowTime.exe /UNINSTALL
--> C:\WINDOWS\UNNeroVision.exe /UNINSTALL
--> C:\WINDOWS\UNRecode.exe /UNINSTALL
--> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{39DA87A1-0B26-4562-A70C-2A6147366E47}\Setup.exe"
--> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9F765BD0-B900-4EDE-A90B-61C8A9E95C42}\Setup.exe"
--> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{BAD59025-5B73-4E12-B789-0028C5A573C2}\Setup.exe"
--> rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Ad-Aware 2007 --> MsiExec.exe /I{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}
Adobe Anchor Service CS3 --> MsiExec.exe /I{A4464AC3-D85E-4649-8748-706191063DF6}
Adobe Asset Services CS3 --> MsiExec.exe /I{7302810D-7ACF-4339-B27B-57016CAADDCD}
Adobe Bridge CS3 --> MsiExec.exe /I{FABA59CC-347B-478B-B2A7-37BF0885CACB}
Adobe Bridge Start Meeting --> MsiExec.exe /I{CE52110A-7773-444F-9E5D-4A45E4792DB6}
Adobe Camera Raw 4.0 --> MsiExec.exe /I{AED353B9-E6D7-406F-B007-2C55C5265EB3}
Adobe CMaps --> MsiExec.exe /I{D8FC8E35-D397-4C16-87AE-141A625221E4}
Adobe Default Language CS3 --> MsiExec.exe /I{D446BA40-1F5F-44EB-A794-0AC14F809C79}
Adobe Device Central CS3 --> MsiExec.exe /I{265FCC3B-4814-4B2B-89D6-217DFB8AD886}
Adobe ExtendScript Toolkit 2 --> MsiExec.exe /I{F36CFE58-47C0-4D75-995B-E0172563FA83}
Adobe Flash Player 9 ActiveX --> C:\WINDOWS\system32\Macromed\Flash\FlashUtil9c.exe -uninstallUnlock
Adobe Flash Player Plugin --> C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Fonts All --> MsiExec.exe /I{162DDD86-C087-4E59-B7A8-0C1D8F884A9A}
Adobe Help Viewer 1.1 --> MsiExec.exe /I{F3697BA5-C8D8-4925-ACCA-F486C76BAD33}
Adobe Linguistics CS3 --> MsiExec.exe /I{E5C28906-EC86-404E-BB4F-6AB2590451FF}
Adobe PDF Library Files --> MsiExec.exe /I{91D829E6-F1D1-433F-861F-0552DFED0EAD}
Adobe Photoshop CS3 --> C:\Program Files\Common Files\Adobe\Installers\8d0dc9390f2c596455e1446b5918a40\Setup.exe
Adobe Photoshop CS3 --> MsiExec.exe /I{F32F1F7C-322D-46B9-B69A-5C3EDC88B74C}
Adobe Reader 8.1.2 --> MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A81200000003}
Adobe Setup --> MsiExec.exe /I{CBF7A9A4-C0D4-4BA0-8991-C9B7D90A5298}
Adobe Stock Photos CS3 --> MsiExec.exe /I{73B79E83-490B-460D-B0D6-2C7B73980325}
Adobe Type Support --> MsiExec.exe /I{A78A65E4-1D88-477A-83B4-3EC540F6A55A}
Adobe Version Cue CS3 Client --> MsiExec.exe /I{BF18C55F-791F-4C17-AB75-E397EE01C14B}
Adobe WinSoft Linguistics Plugin --> MsiExec.exe /I{51DC4D9C-F729-48A7-9CE0-BC77529ECCA2}
Adobe XMP Panels CS3 --> MsiExec.exe /I{F0CF6455-EDD8-41C6-A96A-223874E660CC}
Adobe® Photoshop® Album Starter Edition 3.0 --> MsiExec.exe /I{4BDFD2CE-6329-42E4-9801-9B3D1F10D79B}
Adobe® Photoshop® Album Starter Edition 3.0.1 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C9618743-1A5C-461E-91C4-E013A3D70F3C}\Setup.exe" -l0x9
Agere Systems PCI Soft Modem --> agrsmdel
Amazon MP3 Downloader 1.0.2 --> C:\Program Files\Amazon\MP3 Downloader\Uninstall.exe
Apple Mobile Device Support --> MsiExec.exe /I{44734179-8A79-4DEE-BB08-73037F065543}
Apple Software Update --> MsiExec.exe /I{02DFF6B1-1654-411C-8D7B-FD6052EF016F}
ArcSoft PhotoStudio 5 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{03F1CC67-5BD8-4C36-8394-76311B2AE69A}\setup.exe" -l0x9 -uninst
ATI Control Panel --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0BEDBD4E-2D34-47B5-9973-57E62B29307C}\setup.exe"
ATI Display Driver --> rundll32 C:\WINDOWS\system32\atiiiexx.dll,[email protected] -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
AVG Anti-Spyware 7.5 --> C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\Uninstall.exe
Azureus Vuze --> C:\Program Files\Azureus\uninstall.exe
Belarc Advisor 7.2 --> C:\PROGRA~1\Belarc\Advisor\Uninstall.exe C:\PROGRA~1\Belarc\Advisor\INSTALL.LOG
BitTorrent 4.0.1 --> "C:\Program Files\BitTorrent\uninstall.exe"
Canon iP6600D --> C:\WINDOWS\system32\CNMCP7D.exe "-PRINTERNAMECanon iP6600D" "-HELPERDLLC:\Documents and Settings\All Users\Application Data\CanonBJ\IJPrinter\CNMWINDOWS\Canon iP6600D Installer\Inst2\cnmis.dll" "-RCDLLcnmi0409.dll"
Canon iP6600D Memory Card Utility --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{86D28491-78AB-445C-A507-6F3FA81D7611}\setup.exe" /PDUUninstall
Canon Utilities Easy-PhotoPrint --> C:\Program Files\Canon\Easy-PhotoPrint\uninst.exe uninst.ini
CD-LabelPrint --> "C:\Program Files\Canon\CD-LabelPrint\Uninstal.exe" Canon.CDLabelPrint.Application
Collectorz.com Book Collector --> C:\PROGRA~1\COLLEC~1\COLLEC~1.COM\BOOKCO~1\UNWISE.EXE C:\PROGRA~1\COLLEC~1\COLLEC~1.COM\BOOKCO~1\install.log
Collectorz.com Movie Collector --> C:\PROGRA~1\COLLEC~1\COLLEC~1.COM\MOVIEC~1\UNWISE.EXE C:\PROGRA~1\COLLEC~1\COLLEC~1.COM\MOVIEC~1\install.log
Collectorz.com Music Collector --> C:\PROGRA~1\COLLEC~1\COLLEC~1.COM\MUSICC~1\UNWISE.EXE C:\PROGRA~1\COLLEC~1\COLLEC~1.COM\MUSICC~1\install.log
coverXP (remove only) --> "C:\Program Files\coverXP\cxp-uninst.exe"
DBXTriever 2.92 --> "C:\Program Files\DBXTriever\unins000.exe"
DivX Codec --> C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
DivX Content Uploader --> C:\Program Files\DivX\DivXContentUploaderUninstall.exe /CUPLOADER
DivX Converter --> C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
DivX Player --> C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER
DivX Web Player --> C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
Easy-WebPrint --> C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Canon\Easy-WebPrint\Uninst.isu"
Easy CD and DVD Cover Creator 4.0 --> C:\Program Files\Easy CD & DVD Cover Creator\uninst.exe
Easy Internet Sign-up --> C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{8105684D-8CA6-440D-8F58-7E5FD67A499D} /l1033
ECQ Electronic Tally Board --> rundll32.exe dfshim.dll,ShArpMaintain Ecq.TallyClient.application, Culture=neutral, PublicKeyToken=b2436f06f22c56e0, processorArchitecture=x86
Exact Audio Copy 0.95b4 --> C:\Program Files\Exact Audio Copy\uninst.exe
Express Rip --> C:\Program Files\NCH Swift Sound\ExpressRip\uninst.exe
Fellowes/NEATO MediaFACE --> C:\PROGRA~1\MEDIAF~1\UNWISE.EXE C:\PROGRA~1\MEDIAF~1\INSTALL.LOG
foobar2000 v0.9.4.4 --> "C:\Program Files\foobar2000\uninstall.exe"
Freez iPod Video Converter --> "C:\Program Files\Smallvideosoft\Freez iPod Video Converter\unins000.exe"
FrostWire 4.13.5 --> C:\Program Files\FrostWire\Uninstall.exe
GameSpy Arcade --> C:\PROGRA~1\GAMESP~1\UNWISE.EXE C:\PROGRA~1\GAMESP~1\INSTALL.LOG
Golden Records --> C:\Program Files\NCH Swift Sound\Golden\uninst.exe
Google Earth --> MsiExec.exe /I{1E04F83B-2AB9-4301-9EF7-E86307F79C72}
Google Toolbar for Internet Explorer --> regsvr32 /u /s "c:\program files\google\googletoolbar2.dll"
GPL MPEG-1/2 DirectShow Decoder Filter --> MsiExec.exe /I{870815CA-6B60-47B6-88DD-A67F42D2F03E}
Help and Support Additions --> C:\PROGRA~1\HELPAN~1\UNWISE.EXE C:\PROGRA~1\HELPAN~1\INSTALL.LOG
High Definition Audio Driver Package - KB835221 --> C:\WINDOWS\$NtUninstallKB835221WXP$\spuninst\spuninst.exe
Hijackthis 1.99.1 --> "C:\Program Files\Hijackthis\unins000.exe"
HijackThis 1.99.1 --> C:\Program Files\Hijackthis\HijackThis.exe /uninstall
Hotfix for Windows Media Format SDK (KB902344) --> "C:\WINDOWS\$NtUninstallKB902344$\spuninst\spuninst.exe"
HotRecorder 4Voip 2.1.6 --> C:\PROGRA~1\HOTREC~1\Setup.exe /remove /q0
HP Deskjet Preloaded Printer Drivers --> MsiExec.exe /X{F419D20A-7719-4639-8E30-C073A040D878}
HP Document Viewer 5.3 --> C:\Program Files\HP\Digital Imaging\DocumentViewer\hpzscr01.exe -datfile hpqbud04.dat
HP Image Zone 5.3 --> C:\Program Files\HP\Digital Imaging\uninstall\hpzscr01.exe -datfile hpqscr01.dat
HP Image Zone for Media Center PC --> MsiExec.exe /X{8D0C57BC-4942-4960-BB6D-142456D6F233}
HP Imaging Device Functions 5.3 --> C:\Program Files\HP\Digital Imaging\DigitalImagingMonitor\hpzscr01.exe -datfile hpqbud01.dat
HP Photo & Imaging 3.5 - HP Devices --> C:\Program Files\HP\Digital Imaging\{15B9DC72-73F9-4d99-9E28-848D66DA8D99}\setup\hpzscr01.exe -datfile hpiscr01.dat
HP PSC & OfficeJet 4.0 --> "C:\Program Files\HP\Digital Imaging\{A1062847-0846-427A-92A1-BB8251A91E91}\setup\hpzscr01.exe" -datfile hposcr04.dat
HP Scanjet 4800 series --> C:\Program Files\HP\Digital Imaging\{469436E4-A436-4a2f-8113-239EE6D1A60F}\setup\hpzscr01.exe -datfile hpgscr06.dat
HP Software Update --> MsiExec.exe /X{15EE79F4-4ED1-4267-9B0F-351009325D7D}
HP Solution Center & Imaging Support Tools 5.3 --> C:\Program Files\HP\Digital Imaging\eSupport\hpzscr01.exe -datfile hpqbud05.dat
InterActual Player --> C:\Program Files\InterActual\InterActual Player\inuninst.exe
InterVideo WinDVD Creator 2 --> "C:\Program Files\InstallShield Installation Information\{2FCE4FC5-6930-40E7-A4F1-F862207424EF}\setup.exe" REMOVEALL
InterVideo WinDVD Player --> "C:\Program Files\InstallShield Installation Information\{91810AFC-A4F8-4EBA-A5AA-B198BBC81144}\setup.exe" REMOVEALL
IrfanView (remove only) --> C:\Program Files\IrfanView\iv_uninstall.exe
IsoBuster 2.2 --> "C:\Program Files\Smart Projects\IsoBuster\Uninst\unins000.exe"
iTunes --> MsiExec.exe /I{585776BC-4BD6-4BD2-A19A-1D6CB44A403B}
Java 2 Runtime Environment, SE v1.4.2_03 --> MsiExec.exe /I{7148F0A8-6813-11D6-A77B-00B0D0142030}
Java™ 6 Update 2 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160020}
Java™ 6 Update 3 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160030}
Java™ SE Runtime Environment 6 Update 1 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160010}
JPEG Recovery 2.0 --> C:\WINDOWS\system32\UNWISE.EXE C:\WINDOWS\system32\jpegrecovery20.log
KBD --> C:\HP\KBD\KBD.EXE uninstalled
LG Internetkit --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{67ECDB7E-24E0-4A80-81EE-ED2DF1352D27}\setup.exe" -l0x9 -removeonly
LG PhoneManager --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5EE65592-88FD-48AA-98CA-EE9BDB1FF518}\setup.exe" -l0x9 -removeonly
LG SyncManager --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{92636B62-9423-4246-82FE-69E2F4158350}\setup.exe" -l0x9 -removeonly
LG USB Modem driver --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C3ABE126-2BB2-4246-BFE1-6797679B3579}\setup.exe" -l0x9 -removeonly
LimeWire 4.16.7 --> "C:\Program Files\LimeWire\uninstall.exe"
LiveUpdate 1.80 (Symantec Corporation) --> C:\Program Files\Symantec\LiveUpdate\LSETUP.EXE /U
Magic ISO Maker v5.4 (build 0245) --> C:\PROGRA~1\MagicISO\UNWISE.EXE C:\PROGRA~1\MagicISO\INSTALL.LOG
Magic ISO Maker v5.4 (build 0247) --> C:\PROGRA~1\MagicISO\UNWISE.EXE C:\PROGRA~1\MagicISO\INSTALL.LOG
MailNavigator v.1.11 --> "C:\Program Files\MailNavigator\uninstall.exe"
MailWasher Pro --> "C:\Program Files\FireTrust\MailWasher Pro\unins000.exe"
MapleStory --> MsiExec.exe /I{F99C5427-4D78-43E2-B97E-F4C4E622D612}
Maxtor OneTouch III --> C:\Program Files\Common Files\InstallShield\Driver\8\Intel 32\IDriver.exe /M{60EEB642-E9E0-45A2-A676-B9D8FE17C4A9} /l1033
Media Center Karaoke Plug-in --> MsiExec.exe /I{348054A0-6F9A-4EF9-BBB0-827C14C20D86}
Microsoft Base Smart Card Cryptographic Service Provider Package --> "C:\WINDOWS\$NtUninstallbasecsp$\spuninst\spuninst.exe"
Microsoft Encarta Encyclopedia Standard - WE 2004 --> MsiExec.exe /I{045A0044-9149-45C6-A806-F2BF9CFCE762}
Microsoft Halo --> "C:\Program Files\Microsoft Games\Halo\UNINSTAL.EXE" /runtemp /addremove
Microsoft Office Excel Viewer 2003 --> MsiExec.exe /I{90840409-6000-11D3-8CFE-0150048383C9}
Microsoft Office PowerPoint Viewer 2003 --> MsiExec.exe /X{90AF0409-6000-11D3-8CFE-0150048383C9}
Microsoft Office Professional Edition 2003 --> MsiExec.exe /I{90110409-6000-11D3-8CFE-0150048383C9}
Microsoft Web Publishing Wizard 1.52 --> RunDll32 ADVPACK.DLL,LaunchINFSection C:\WINDOWS\INF\wpie4x86.inf,WebPostUninstall
Microsoft Works 7.0 --> MsiExec.exe /I{764D06D8-D8DE-411E-A1C8-D9E9380F8A84}
Monkey's Audio --> "C:\Program Files\Monkey's Audio\unins000.exe"
Mozilla Firefox (2.0.0.14) --> C:\PROGRA~1\Mozilla Firefox\uninstall\helper.exe
MSN --> C:\Program Files\MSN\MsnInstaller\msninst.exe /Action:ARP
MSXML 6.0 Parser (KB933579) --> MsiExec.exe /I{0A869A65-8C94-4F7C-A5C7-972D3C8CED9E}
Music Rescue 3.1.6 --> "C:\Program Files\Music Rescue\unins000.exe"
NCH Toolbox Uninstall --> C:\Program Files\NCH Swift Sound\ToolBox\uninst.exe
Nero 7 Ultra Edition --> MsiExec.exe /I{235BBFC6-D863-4066-A01A-3BD504C31033}
Outlook Express Quick Backup --> C:\WINDOWS\st6unst.exe -n "C:\Program Files\Outlook Express Quick Backup\ST6UNST.LOG"
Panda ActiveScan --> C:\WINDOWS\system32\ASUninst.exe Panda ActiveScan
PC-Doctor for Windows --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1F7CCFA3-D926-4882-B2A5-A0217ED25597}\Setup.exe"
PC Inspector File Recovery --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0DD140D3-9563-481E-AA75-BA457CBDAEF2}\Setup.exe" -l0x9
Photosmart 320,370,7400,8100,8400 Series --> C:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\setup\hpzscr01.exe -datfile hphscr01.dat
PixRecovery --> C:\Program Files\PixRecovery\GLF64.exe /handle:pir
PrintMaster 16 --> MsiExec.exe /I{78A974B6-F864-41AE-9F5A-0AAF7D40E884}
PS2 --> C:\WINDOWS\system32\ps2.exe uninstall
Python 2.2 combined Win32 extensions --> C:\Python22\Lib\SITE-P~1\UNWISE~1.EXE C:\Python22\Lib\SITE-P~1\w32inst.log
Python 2.2.1 --> C:\Python22\UNWISE.EXE C:\Python22\INSTALL.LOG
Quicken 2002 Personal Plus --> C:\WINDOWS\IsUninst.exe -f"C:\Program Files\QUICKENW\Uninst.isu"
QuickTime --> MsiExec.exe /I{1838C5A2-AB32-4145-85C1-BB9B8DFA24CD}
RealArcade --> C:\Program Files\Real\RealArcade\Update\rnuninst.exe RealNetworks|RealArcade|1.2
RealPlayer --> C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
Realtek High Definition Audio Driver --> RtlUpd.exe -r
Recover My Files --> "C:\Program Files\GetData\Recover My Files\unins000.exe"
Red Swoosh --> C:\Program Files\RSSoft\Uninstall.exe
Retrospect Express HD 1.1 --> MsiExec.exe /I{A4952AA3-FCBF-4D28-9DC4-A3935FDC5805}
Rhapsody Player Engine --> MsiExec.exe /I{84F1DE76-C48C-4281-87A0-CC9548D1E7F9}
Safari --> MsiExec.exe /I{40589552-3892-409E-B92C-9F5032A4B2F0}
Security Update for Step By Step Interactive Training (KB923723) --> "C:\WINDOWS\$NtUninstallKB923723$\spuninst\spuninst.exe"
Shockwave --> C:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~1\Install.log
Sonic RecordNow! --> MsiExec.exe /I{9541FED0-327F-4DF0-8B96-EF57EF622F19}
SoundTap --> C:\Program Files\NCH Swift Sound\SoundTap\uninst.exe
Spybot - Search & Destroy --> "C:\Program Files\Spybot - Search & Destroy\unins001.exe"
Spybot - Search & Destroy 1.5.2.20 --> "C:\WINDOWS\unins000.exe"
Sunbelt Personal Firewall --> MsiExec.exe /X{BFD080F6-3BF0-40E1-9507-9CA969C35870}
SUPERAntiSpyware Free Edition --> MsiExec.exe /X{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}
Switch --> C:\Program Files\NCH Swift Sound\Switch\uninst.exe
Symantec AntiVirus Client --> MsiExec.exe /X{0EFC6259-3AD8-4CD2-BC57-D4937AF5CC0E}
Updates from HP --> C:\WINDOWS\BWUnin-6.3.2.62.exe -AppId 309731
WavePad Uninstall --> C:\Program Files\NCH Swift Sound\WavePad\uninst.exe
Windows Defender --> MsiExec.exe /I{A06275F4-324B-4E85-95E6-87B2CD729401}
Windows Imaging Component --> "C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"
Windows Live Messenger --> MsiExec.exe /I{571700F0-DB9D-4B3A-B03D-35A14BB5939F}
Windows Live Sign-in Assistant --> MsiExec.exe /I{49672EC2-171B-47B4-8CE7-50D7806360D7}
Windows Media Format SDK Hotfix - KB891122 --> "C:\WINDOWS\$NtUninstallKB891122$\spuninst\spuninst.exe"
Windows Presentation Foundation --> MsiExec.exe /X{BAF78226-3200-4DB4-BE33-4D922A799840}
Windows Vista Upgrade Advisor --> MsiExec.exe /I{C6AA3FB7-804F-4808-AD91-B62D6ED9B788}
WinRAR archiver --> C:\Program Files\WinRAR\uninstall.exe
XML Paper Specification Shared Components Pack 1.0 -->


-- Application Event Log -------------------------------------------------------

Event Record #/Type3259 / Error
Event Submitted/Written: 05/03/2008 09:06:56 AM
Event ID/Source: 1002 / Application Hang
Event Description:
Hanging application WINWORD.EXE, version 11.0.6568.0, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

Event Record #/Type3256 / Warning
Event Submitted/Written: 05/02/2008 09:50:29 PM
Event ID/Source: 6 / Norton AntiVirus
Event Description:
Scan could not access Drive J:\ since the device is not ready.

Event Record #/Type3255 / Warning
Event Submitted/Written: 05/02/2008 09:50:29 PM
Event ID/Source: 6 / Norton AntiVirus
Event Description:
Scan could not access Drive I:\ since the device is not ready.

Event Record #/Type3254 / Warning
Event Submitted/Written: 05/02/2008 09:50:29 PM
Event ID/Source: 6 / Norton AntiVirus
Event Description:
Scan could not access Drive H:\ since the device is not ready.

Event Record #/Type3253 / Warning
Event Submitted/Written: 05/02/2008 09:50:29 PM
Event ID/Source: 6 / Norton AntiVirus
Event Description:
Scan could not access Drive G:\ since the device is not ready.



-- Security Event Log ----------------------------------------------------------

No Errors/Warnings found.


-- System Event Log ------------------------------------------------------------

Event Record #/Type40411 / Warning
Event Submitted/Written: 05/03/2008 09:05:53 AM
Event ID/Source: 36 / W32Time
Event Description:
The time service has not been able to synchronize the system time
for 49152 seconds because none of the time providers has been able to
provide a usable time stamp. The system clock is unsynchronized.

Event Record #/Type40373 / Error
Event Submitted/Written: 05/02/2008 04:47:52 PM
Event ID/Source: 7000 / Service Control Manager
Event Description:
The ssoftnt4 service failed to start due to the following error:
%%2

Event Record #/Type40372 / Error
Event Submitted/Written: 05/02/2008 04:47:52 PM
Event ID/Source: 7000 / Service Control Manager
Event Description:
The npkcrypt service failed to start due to the following error:
%%3

Event Record #/Type40342 / Warning
Event Submitted/Written: 05/01/2008 04:24:17 PM
Event ID/Source: 1003 / Dhcp
Event Description:
Your computer was not able to renew its address from the network (from the
DHCP Server) for the Network Card with network address 00112FA5B227. The following
error occurred:
%%121.
Your computer will continue to try and obtain an address on its own from
the network address (DHCP) server.

Event Record #/Type40328 / Error
Event Submitted/Written: 05/01/2008 04:24:07 PM
Event ID/Source: 7000 / Service Control Manager
Event Description:
The ssoftnt4 service failed to start due to the following error:
%%2



-- End of Deckard's System Scanner: finished at 2008-05-03 11:36:32 ------------
  • 0

#5
andrewuk

andrewuk

    Trusted Helper

  • Malware Removal
  • 5,297 posts
in this psot we will remove the malware i can see and do a couple more scans to see what else we can find.

the scans will likely take 3 hours, quite possibly much longer. so just let them run.


====STEP 1====
Click here to download HJTInstall.exe
  • Save HJTInstall.exe to your desktop.
  • Doubleclick on the HJTInstall.exe icon on your desktop.
  • By default it will install to C:\Program Files\Trend Micro\HijackThis .
  • Click on Install.
  • It will create a HijackThis icon on the desktop.
  • Once installed, it will launch Hijackthis.
dont run it yet, we are about to in the next step



====STEP 2====
Please download the OTMoveIt2 by OldTimer and Save it to your desktop.

Do NOT run it yet



Please re-open HiJackThis and scan. Check the boxes next to all the entries listed below.

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.h...a...&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.h...a...&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.h...a...&pf=desktop
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O20 - Winlogon Notify: cbawwvs - C:\WINDOWS\system32\cbawwvs.dll (file missing)

Now close all windows other than HiJackThis, then click Fix Checked. Close HiJackThis.



Please double-click OTMoveIt2.exe to run it. (Vista users, please right click on OTMoveit2.exe and select "Run as an Administrator")
  • Copy the file paths below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy):

    [kill explorer]
    C:\WINDOWS\ALCWZRD.EXE
    C:\WINDOWS\ALCMTR.EXE
    C:\WINDOWS\system32\cbawwvs.dll
    purity
    HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\D
    [start explorer]
  • Return to OTMoveIt2, right click in the "Paste List of Files/Folders to Move" window (under the light Yellow bar) and choose Paste.
  • Click the red Moveit! button.
  • A log of files and folders moved will be created in the c:\_OTMoveIt\MovedFiles folder in the form of Date and Time (mmddyyyy_hhmmss.log). Please open this log in Notepad and post its contents in your next reply.
  • Close OTMoveIt2
If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes.



====STEP 3====
Please download ATF Cleaner by Atribune.
This program is for XP and Windows 2000 onlyDouble-click ATF-Cleaner.exe to run the program.
Under Main choose: Select All
Click the Empty Selected button.
If you use Firefox browserClick Firefox at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
If you use Opera browserClick Opera at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
Click Exit on the Main menu to close the program.
For Technical Support, double-click the e-mail address located at the bottom of each menu.



====STEP 4====
Please download Malwarebytes' Anti-Malware from Here or Here

Double Click mbam-setup.exe to install the application.
  • Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select "Perform Full Scan", then click Scan.
  • The scan may take some time to finish,so please be patient.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Make sure that everything is checked, and click Remove Selected.
  • When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
  • The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
  • Copy&Paste the entire report in your next reply.
Extra Note:
If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediatly.


====STEP 5====
Please do an online scan with Kaspersky WebScanner

Click on Accept

You will be promted to install an ActiveX component from Kaspersky, Click Yes.
  • The program will launch and then begin downloading the latest definition files:
  • Once the files have been downloaded click on NEXT
  • Now click on Scan Settings
  • In the scan settings make that the following are selected:
    • Scan using the following Anti-Virus database:
    Extended (if available otherwise Standard)
    • Scan Options:
    Scan Archives
    Scan Mail Bases
  • Click OK
  • Now under select a target to scan:Select My Computer
  • This will program will start and scan your system.
  • The scan will take a while so be patient and let it run.
  • Once the scan is complete it will display if your system has been infected.
    • Now click on the Save as Text button:
  • Save the file to your desktop.
  • Copy and paste that information in your next post.


In your next reply could i see:
1. the OTMoveIT log
2. the malwarebytes log
3. the kaspersky scan log
4. a new DSS scan (there will only be one log)

The text from these files may exceed the maximum post length for this forum. Hence, you may need to post the information over 2 or more posts.

andrewuk
  • 0

#6
paulelsa

paulelsa

    Member

  • Topic Starter
  • Member
  • PipPip
  • 30 posts
OT Move it Log

Explorer killed successfully
C:\WINDOWS\ALCWZRD.EXE moved successfully.
C:\WINDOWS\ALCMTR.EXE moved successfully.
File/Folder C:\WINDOWS\system32\cbawwvs.dll not found.
< purity >
< HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\D >
Registry key HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\D\\ deleted successfully.
Explorer started successfully

OTMoveIt2 by OldTimer - Version 1.0.4.1 log created on 05032008_162730

Malwarebytes' Anti-Malware 1.11
Database version: 710

Scan type: Full Scan (C:\|D:\|)
Objects scanned: 216279
Time elapsed: 2 hour(s), 23 minute(s), 50 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 3
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 1
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CURRENT_USER\Software\UpMedia (Adware.SmartShopper) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\FCOVM (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemoveRP (Trojan.Vundo) -> Quarantined and deleted successfully.

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
C:\WINDOWS\system32\UpMedia (Adware.SmartShopper) -> Quarantined and deleted successfully.

Files Infected:
(No malicious items detected)
  • 0

#7
paulelsa

paulelsa

    Member

  • Topic Starter
  • Member
  • PipPip
  • 30 posts
KASPERSKY ONLINE SCANNER REPORT Part One
Sunday, May 04, 2008 7:19:49 AM
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 3/05/2008
Kaspersky Anti-Virus database records: 736972
Scan Settings
Scan using the following antivirus database extended
Scan Archives true
Scan Mail Bases true
Scan Target My Computer
C:\
D:\
E:\
F:\
G:\
H:\
I:\
J:\
Scan Statistics
Total number of scanned objects 164696
Number of viruses found 3
Number of infected objects 7
Number of suspicious objects 0
Duration of the scan process 02:48:18

Infected Object Name Virus Name Last Action
C:\26023421ccea30f0e6d92be360398f\msxml4-KB927978-enu.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3e9297591745ecf0fa0e1f1adb09d27d_267cc0a1-72b7-4298-9c01-e84f9d83e485 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\eHome\logs\ehRecvr.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\Support\MPLog-04042007-185329.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0AA80000.VBN Infected: Virus.Win32.Virut.n skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0AB80000.VBN Infected: Virus.Win32.Virut.n skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0ABC0001.VBN Infected: Virus.Win32.Virut.n skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0AC00000.VBN Infected: Virus.Win32.Virut.n skipped
C:\Documents and Settings\All Users\Application Data\{3CF1EF0D-29E2-4553-A9ED-4D514B45A07D}\offline\IFYTMEALEMIPAUUDEJFAETIRFFFFFF0\autoupdate.jpg Object is locked skipped
C:\Documents and Settings\All Users\Application Data\{3CF1EF0D-29E2-4553-A9ED-4D514B45A07D}\offline\IFYTMEALEMIPBLEPGFARETIRFFFFFF0\blazemp.lng Object is locked skipped
C:\Documents and Settings\All Users\Application Data\{3CF1EF0D-29E2-4553-A9ED-4D514B45A07D}\offline\IFYTMEALEMIPHEPTARETIRELFFFFFF0\blazemp.chm Object is locked skipped
C:\Documents and Settings\All Users\Application Data\{3CF1EF0D-29E2-4553-A9ED-4D514B45A07D}\offline\IFYTMEALEMIPLYCMDFTRGTDRFFFFFF0\Lyrics.mdb Object is locked skipped
C:\Documents and Settings\All Users\Documents\Recorded TV\TempRec\TempSBE\MSDVRMM_2622895147_54001664_134272 Object is locked skipped
C:\Documents and Settings\All Users\Documents\Recorded TV\TempRec\TempSBE\SBE1.tmp Object is locked skipped
C:\Documents and Settings\All Users\Documents\Recorded TV\TempRec\{DC935059-5B87-4087-9572-E397C614A46D}.TmpSBE Object is locked skipped
C:\Documents and Settings\All Users\Start Menu\Programs\Download programs.exe Infected: Backdoor.Win32.Hupigon.bnca skipped
  • 0

#8
paulelsa

paulelsa

    Member

  • Topic Starter
  • Member
  • PipPip
  • 30 posts
KASPERSKY ONLINE SCANNER REPORT Part One
Sunday, May 04, 2008 7:19:49 AM
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 3/05/2008
Kaspersky Anti-Virus database records: 736972
Scan Settings
Scan using the following antivirus database extended
Scan Archives true
Scan Mail Bases true
Scan Target My Computer
C:\
D:\
E:\
F:\
G:\
H:\
I:\
J:\
Scan Statistics
Total number of scanned objects 164696
Number of viruses found 3
Number of infected objects 7
Number of suspicious objects 0
Duration of the scan process 02:48:18

Infected Object Name Virus Name Last Action
C:\26023421ccea30f0e6d92be360398f\msxml4-KB927978-enu.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3e9297591745ecf0fa0e1f1adb09d27d_267cc0a1-72b7-4298-9c01-e84f9d83e485 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\eHome\logs\ehRecvr.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\Support\MPLog-04042007-185329.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0AA80000.VBN Infected: Virus.Win32.Virut.n skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0AB80000.VBN Infected: Virus.Win32.Virut.n skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0ABC0001.VBN Infected: Virus.Win32.Virut.n skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0AC00000.VBN Infected: Virus.Win32.Virut.n skipped
C:\Documents and Settings\All Users\Application Data\{3CF1EF0D-29E2-4553-A9ED-4D514B45A07D}\offline\IFYTMEALEMIPAUUDEJFAETIRFFFFFF0\autoupdate.jpg Object is locked skipped
C:\Documents and Settings\All Users\Application Data\{3CF1EF0D-29E2-4553-A9ED-4D514B45A07D}\offline\IFYTMEALEMIPBLEPGFARETIRFFFFFF0\blazemp.lng Object is locked skipped
C:\Documents and Settings\All Users\Application Data\{3CF1EF0D-29E2-4553-A9ED-4D514B45A07D}\offline\IFYTMEALEMIPHEPTARETIRELFFFFFF0\blazemp.chm Object is locked skipped
C:\Documents and Settings\All Users\Application Data\{3CF1EF0D-29E2-4553-A9ED-4D514B45A07D}\offline\IFYTMEALEMIPLYCMDFTRGTDRFFFFFF0\Lyrics.mdb Object is locked skipped
C:\Documents and Settings\All Users\Documents\Recorded TV\TempRec\TempSBE\MSDVRMM_2622895147_54001664_134272 Object is locked skipped
C:\Documents and Settings\All Users\Documents\Recorded TV\TempRec\TempSBE\SBE1.tmp Object is locked skipped
C:\Documents and Settings\All Users\Documents\Recorded TV\TempRec\{DC935059-5B87-4087-9572-E397C614A46D}.TmpSBE Object is locked skipped
C:\Documents and Settings\All Users\Start Menu\Programs\Download programs.exe Infected: Backdoor.Win32.Hupigon.bnca skipped
  • 0

#9
paulelsa

paulelsa

    Member

  • Topic Starter
  • Member
  • PipPip
  • 30 posts
Kasperspy 2

C:\Documents and Settings\HP_Administrator\Application Data\MailWasherPro\tmpLog.txt Object is locked skipped
C:\Documents and Settings\HP_Administrator\Application Data\MailWasherPro\Training\Training archive - junk.rot135 Object is locked skipped
C:\Documents and Settings\HP_Administrator\Application Data\MailWasherPro\Training\Training archive - legitimate.rot135 Object is locked skipped
C:\Documents and Settings\HP_Administrator\Application Data\MailWasherPro\Trash.rot135 Object is locked skipped
C:\Documents and Settings\HP_Administrator\Application Data\Motive\Acme\plugin\log\pchbtn.log Object is locked skipped
C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\2ccwm9c6.default\cert8.db Object is locked skipped
C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\2ccwm9c6.default\history.dat Object is locked skipped
C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\2ccwm9c6.default\key3.db Object is locked skipped
C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\2ccwm9c6.default\parent.lock Object is locked skipped
C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\2ccwm9c6.default\search.sqlite Object is locked skipped
C:\Documents and Settings\HP_Administrator\Application Data\Mozilla\Firefox\Profiles\2ccwm9c6.default\urlclassifier2.sqlite Object is locked skipped
C:\Documents and Settings\HP_Administrator\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\HP_Administrator\Incomplete\T-3545425-she kiss.mp3 Infected: Trojan-Downloader.WMA.Wimad.n skipped
C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Ahead\Nero Home\bl.db Object is locked skipped
C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Ahead\Nero Home\bl.db-journal Object is locked skipped
C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Ahead\Nero Home\is2.db Object is locked skipped
C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Ahead\Nero Home\is2.db-journal Object is locked skipped
C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Microsoft\Media Player\CurrentDatabase_219.wmdb Object is locked skipped
C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Mozilla\Firefox\Profiles\2ccwm9c6.default\Cache\_CACHE_001_ Object is locked skipped
C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Mozilla\Firefox\Profiles\2ccwm9c6.default\Cache\_CACHE_002_ Object is locked skipped
C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Mozilla\Firefox\Profiles\2ccwm9c6.default\Cache\_CACHE_003_ Object is locked skipped
C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Mozilla\Firefox\Profiles\2ccwm9c6.default\Cache\_CACHE_MAP_ Object is locked skipped
C:\Documents and Settings\HP_Administrator\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\hpodvd09.log Object is locked skipped
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat Object is locked skipped
C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\HP_Administrator\ntuser.dat Object is locked skipped
C:\Documents and Settings\HP_Administrator\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\HP_Administrator\Shared\sort of dunno nothin.mp3 Infected: Trojan-Downloader.WMA.Wimad.n skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temp\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temp\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\Program Files\Canon\Easy-PhotoPrint\uninst.ini Object is locked skipped
C:\Program Files\Collectorz\Collectorz.com\Book Collector\Data\Images\NewThinkingfortheNewMille1442_f.jpg Object is locked skipped
C:\Program Files\Collectorz\Collectorz.com\Book Collector\Data\Images\Quicken99forWindowsforDum1398_f.jpg Object is locked skipped
C:\Program Files\Collectorz\Collectorz.com\Book Collector\Data\Images\RageWilburSmithWilburA1347_f.jpg Object is locked skipped
C:\Program Files\Collectorz\Collectorz.com\Book Collector\Data\Images\TerraAustralisIncognitaThe1320_f.jpg Object is locked skipped
C:\Program Files\Collectorz\Collectorz.com\Book Collector\Data\Images\TheDiamondHuntersWilburS1306_f.jpg Object is locked skipped
C:\Program Files\Collectorz\Collectorz.com\Book Collector\Data\Images\TheWinningAttitudeKenneth1530_f.gif Object is locked skipped
C:\Program Files\Collectorz\Collectorz.com\Book Collector\Data\Images\WangoolbaPrinceAmongstDingo1336_f.jpg Object is locked skipped
C:\Program Files\Collectorz\Collectorz.com\Book Collector\Data\Images\Windows98forDummiesAndy1412_f.jpg Object is locked skipped
C:\Program Files\Collectorz\Collectorz.com\Book Collector\Data\Images\WindowsXPForDummies2ndEd1424_f.jpg Object is locked skipped
C:\Program Files\Collectorz\Collectorz.com\Game Collector\Data\Images\DragonballZBudokaiTenkaichi396_f.jpg Object is locked skipped
C:\Program Files\Collectorz\Collectorz.com\Game Collector\Data\Images\NeedforSpeedCarbonPlaySta393_f.jpg Object is locked skipped
C:\Program Files\HP\Digital Imaging\bin\hpqrif08.dll Object is locked skipped
C:\Program Files\InstallShield Installation Information\{03F1CC67-5BD8-4C36-8394-76311B2AE69A}\setup.ilg Object is locked skipped
C:\Program Files\InstallShield Installation Information\{44A537A5-859C-43A6-8285-C0668142A090}\Setup.ilg Object is locked skipped
C:\Program Files\InstallShield Installation Information\{4C7E5204-EE48-4F10-BC65-04FA36713B6D}\setup.ilg Object is locked skipped
C:\Program Files\InstallShield Installation Information\{580183A6-FF92-11D5-9294-0050BA073EEC}\setup.ilg Object is locked skipped
C:\Program Files\InstallShield Installation Information\{BCE46757-7674-4416-BEDB-68205A60409E}\setup.ilg Object is locked skipped
C:\Program Files\InstallShield Installation Information\{C1D14C0D-FDAA-4DF2-8441-A902805CCE8C}\setup.ilg Object is locked skipped
C:\Program Files\Sunbelt Software\Personal Firewall\logs\debug.log Object is locked skipped
C:\Program Files\Sunbelt Software\Personal Firewall\logs\debug.log.idx Object is locked skipped
C:\Program Files\Sunbelt Software\Personal Firewall\logs\error.log Object is locked skipped
C:\Program Files\Sunbelt Software\Personal Firewall\logs\error.log.idx Object is locked skipped
C:\Program Files\Sunbelt Software\Personal Firewall\logs\hips.log Object is locked skipped
C:\Program Files\Sunbelt Software\Personal Firewall\logs\hips.log.idx Object is locked skipped
C:\Program Files\Sunbelt Software\Personal Firewall\logs\ids.log Object is locked skipped
C:\Program Files\Sunbelt Software\Personal Firewall\logs\ids.log.idx Object is locked skipped
C:\Program Files\Sunbelt Software\Personal Firewall\logs\network.log Object is locked skipped
C:\Program Files\Sunbelt Software\Personal Firewall\logs\network.log.idx Object is locked skipped
C:\Program Files\Sunbelt Software\Personal Firewall\logs\system.log Object is locked skipped
C:\Program Files\Sunbelt Software\Personal Firewall\logs\system.log.idx Object is locked skipped
C:\Program Files\Sunbelt Software\Personal Firewall\logs\warning.log Object is locked skipped
C:\Program Files\Sunbelt Software\Personal Firewall\logs\warning.log.idx Object is locked skipped
C:\Program Files\Sunbelt Software\Personal Firewall\logs\web.log Object is locked skipped
C:\Program Files\Sunbelt Software\Personal Firewall\logs\web.log.idx Object is locked
  • 0

#10
paulelsa

paulelsa

    Member

  • Topic Starter
  • Member
  • PipPip
  • 30 posts
Kasperspy 3

C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc10.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc11.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc12.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc13\Boys01.bmp Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc13\Boys02.bmp Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc13\Boys04.bmp Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc13\Boys05.bmp Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc13\Boys06.bmp Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc13\Boys07.bmp Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc13\Boys08.bmp Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc13\Boys09.bmp Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc13\Boys10.bmp Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc13\Boys11.bmp Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc13\John01.bmp Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc13\John02.bmp Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc13\Matthew01.bmp Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc13\Matthew02.bmp Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc13\Thumbs.db Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc13\Whitehaven boys 1.bmp Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc13\Whitehaven boys 10.bmp Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc13\Whitehaven boys 2.bmp Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc13\Whitehaven boys 3.bmp Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc13\Whitehaven boys 4.bmp Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc13\Whitehaven boys 5.bmp Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc13\Whitehaven boys 6.bmp Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc13\Whitehaven boys 7.bmp Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc13\Whitehaven Boys 8.bmp Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc13\Whitehaven boys 9.bmp Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc13\Whitehaven john 1.bmp Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc13\Whitehaven john 2.bmp Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc13\Whitehaven matthew 1.bmp Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc13\Whitehaven matthew 2.bmp Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc14\IMG_0411.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc14\IMG_0412.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc14\IMG_0413.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc14\IMG_0414.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc14\IMG_0415.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc14\IMG_0416.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc14\IMG_0417.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc14\IMG_0418.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc14\IMG_0419.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc14\IMG_0420.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc14\IMG_0421.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc14\IMG_0422.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc14\IMG_0423.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc14\IMG_0424.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc14\IMG_0425.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc14\IMG_0426.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc14\IMG_0427.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc14\IMG_0434.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc14\IMG_0435.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc14\IMG_0436.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc14\IMG_0437.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc14\IMG_0438.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc14\IMG_0439.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc14\IMG_0440.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc14\IMG_0441.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc14\IMG_0443.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc14\IMG_0444.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc14\IMG_0445.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc14\IMG_0446.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc14\IMG_0447.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc14\Picture 001.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc14\Picture 002.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc14\Picture 003.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc14\Picture 004.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc14\Picture 005.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc14\Picture 006.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc14\Thumbs.db Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc15\Andrea 30s.bmp Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc15\andrea.jpeg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc15\Dad and Paul (Baby).bmp Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc15\Elsa 1yo.bmp Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc15\Louise 21st.bmp Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc15\Mum kids, Sydney.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc15\Paul Car.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc15\Peter BBQ.bmp Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc15\Porcelain.BMP Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc15\Sunk Boat.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc15\Thumbs.db Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc15\ZbThumbnail.info Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\01 Big Banana.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\03 Matthew Suit.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\07 Matthew Bridge 1.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\09 Bridge View 1.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\102_0286.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\102_0287.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\102_0288.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\102_0289.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\102_0290.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\102_0291.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\102_0292.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\102_0293.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\102_0295.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\102_0296.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\103_0303.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\103_0304.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\103_0305.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\103_0306.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\103_0307.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\103_0308.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\103_0309.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\103_0310.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\103_0311.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\103_0312.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\103_0313.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\103_0322.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\11 Bridge View 2.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\12 Bridge View 3.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\17 Kids Tucker Box.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\18 Tucker Box.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\22 Mum Andrea Laura.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\24 Kids Ice Blocks.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\28 Museum John Paper.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\33 Kids Mums Cake 1.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\36 Mum Elsa 1.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\37 Mum Elsa 2.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\44 Sheraton Group 2.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\48 Louise Aimee Elsa Sheraton.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\49 Aimee Elsa Mum Sheraton.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\51 Laura.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\54 Mums Birthday 3.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\55 Evan Wendy.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\62 Pt Nepean Matthew Fort.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\63 Pt Nepean Tunnel 2.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\64 Pt Nepean Ship.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\65 McCrae Matthew John.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\68 McCrae Playground.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\Be Cool.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\Christmas Group 2.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\dig picture 011.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\dig picture 027.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\IMG_0323.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\IMG_0324.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\IMG_0325.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\IMG_0332.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\IMG_0333.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\IMG_0334.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\IMG_0336.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\IMG_0337.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\IMG_0338.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\IMG_0339.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\IMG_0340.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\IMG_0341.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\IMG_0342.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\IMG_0343.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\IMG_0344.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\IMG_0346.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\IMG_0347.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\IMG_0348.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\IMG_0349.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\IMG_0350.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\IMG_0356.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\IMG_0357.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\IMG_0360.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\IMG_0361.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\IMG_0362.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\IMG_0363.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\IMG_0364.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\IMG_0365.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\IMG_0366.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\IMG_0367.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\IMG_0371.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\IMG_0374.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\IMG_0375.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\IMG_0376.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\IMG_0377.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\Mama Cathy Drive.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\Mama Cathy Elsa.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\Mama Drive.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\Mama Roses.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\Mama Side.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\Matthew John Christmas 1.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\MatthewSide.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\Pool 2.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\Pool Bridge.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\Thumbs.db Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc16\Wall Flowers.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc17\Dennis Boys.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc17\Ely, Matthew, John.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc17\Grace& us.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc17\Mama's House.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc17\Paul, Mama, Ely.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc17\Phil Fam.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc17\Philippine Group.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc17\Philippines Family.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc17\Sisters & Mama.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc17\Sisters&us.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc17\Thumbs.db Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc17\ZbThumbnail.info Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc18\102_0272.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc18\102_0275.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc18\102_0276.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc18\102_0277.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc18\102_0278.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc18\102_0279.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc18\102_0280.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc18\102_0281.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc18\102_0282.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc18\102_0283.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc18\102_0284.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc18\102_0285.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc18\102_0286.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc18\102_0287.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc18\102_0288.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc18\102_0289.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc18\102_0290.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc18\102_0291.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc18\102_0292.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc18\102_0293.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc18\102_0294.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc18\102_0295.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc18\102_0296.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc18\103_0301.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc18\103_0303.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc18\103_0304.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc18\103_0305.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc18\103_0306.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc18\103_0307.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc18\103_0308.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc18\103_0309.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc18\103_0310.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc18\103_0311.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc18\103_0312.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc18\103_0313.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc18\103_0314.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc18\103_0315.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc18\103_0316.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc18\103_0317.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc18\103_0318.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc18\103_0319.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc18\103_0320.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc18\103_0321.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc18\103_0322.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc18\Thumbs.db Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\01 Big Banana.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\02 Sydney Tower 1.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\03 Sydney Tower 2.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\04 Sydney Tower 3.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\05 Maritime Helicopter.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\06 Maritime Navy.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\07 Matthew Bridge 1.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\08 Matthew Opera House.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\09 Bridge View 1.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\10 Matthew Bridge 2.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\11 Bridge View 2.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\12 Bridge View 3.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\13 John Opera House.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\14 Elsa John Opera House.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\15 Family Bridge.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\16 Family Opera House.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\17 Kids Tucker Box.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\18 Tucker Box.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\19 Kids Room.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\20 Kids Upstairs 1.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\21 Kids Upstairs 2.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\22 Mum Andrea Laura.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\23 Peter Sharon.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\24 Kids Ice Blocks.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\25 Museum Dinosaurs 1.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\26 Museum Dinosaurs 2.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\27 Museum Teradachtyl.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\28 Museum John Paper.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\29 John Phar Lap.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\30 Matthew Phar Lap.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\31 Kids Mums 1.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\32 Kids Mums 2.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\33 Kids Mums Cake 1.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\34 Kids Mums Cake 2.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\35 Kids Mums Cake 3.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\36 Mum Elsa 1.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\37 Mum Elsa 2.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\38 Sheraton Andrea Louise Aimee.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\39 Sheraton Peter Sharon.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\40 Sheraton Mum 1.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\41 Sheraton Mum 2.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\42 Sheraton Mum Cake.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\43 Sheraton Group 1.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\44 Sheraton Group 2.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\45 Elsa Sheraton.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\46 Elsa Paul Sheraton.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\47 Louise Elsa Paul Sheraton.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\48 Louise Aimee Elsa Sheraton.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\49 Aimee Elsa Mum Sheraton.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\50 Louise Mum Elsa Sheraton.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\51 Laura.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\52 Mums Birthday 1.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\53 Mums Birthday 2.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\54 Mums Birthday 3.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\55 Evan Wendy.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\56 Jessie Alex John Laura.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\57 Pt Nepean Mum Elsa Kids.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\58 Pt Nepean Mum Elsa 1.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\59 Pt Nepean Mum Elsa 2.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\60 Pt Nepean Mum Boys.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\61 Pt Nepean Tunnel 1.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\62 Pt Nepean Matthew Fort.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\63 Pt Nepean Tunnel 2.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\64 Pt Nepean Ship.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\65 McCrae Matthew John.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\66 McCrae Mum.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\67 McCrae Boat Shed.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\68 McCrae Playground.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\69 Holbrook Submarine 1.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\70 Holbrook Submarine 2.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\71 Cockington Green Train.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\72 Cockington Green.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\73 Parliament Steps.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\74 Senate Matthew John.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\75 Parliament House.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\76 Black Mtn Matthew John 1.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\77 Black Mtn View.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\78 Black Mtn Matthew John 2.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\79 Black Mountain Tower.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\Thumbs.db Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc19\ZbThumbnail.info Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\Boys Lights.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\Boys Nativity.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\Bright River 2.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\Brunch 1.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\Brunch 2.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\Brunch 3.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\Brunch 4.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\Brunch 5.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\Cap Resort.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\Cathedral 1.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\Cathedral 2.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\Cathy Mama Sizzler.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\Cathy's Meal Sizzler.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\Christmas Group 1.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\Christmas Group 2.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\Close Cow.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\Day Lilies.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\Elsa Up Tree 1.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\Elsa Up Tree 2.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\Front Flowers 2.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\Front Flowers.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\John Carols 2.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\John Carols.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\John Nativity.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\Lookout.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\Mama Boys Bull.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\Mama Cathy Back.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\Mama Cathy Carport.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\Mama Cathy Drive.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\Mama Cathy Elsa.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\Mama Cathy Mango Tree.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\Mama Cathy Roses.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\Mama Christmas 1.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\Mama Christmas 2.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\Mama Drive.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\Mama Flowers.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\Mama Lounge.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\Mama Mango Tree.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\Mama Mangoes.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\Mama Recliner.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\Mama Roses.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\Mama Side 2.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\Mama Side.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\Mama TV.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\Mama's Cake.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\Matthew Band.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\Matthew Carols 2.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\Matthew Carols.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\Matthew Cello.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\Matthew John Christmas 1.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\Pool 1.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\Pool 2.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\Pool Bridge.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\Riverside 1.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\Riverside 2.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\Riverside 3.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\Riverside 4.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\Sizzler 1.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\Sizzler 2.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\Small Brunch 5.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\Thumbs.db Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\Wall Flowers 2.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\Wall Flowers.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\Yeppoon Beach.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc20\ZbThumbnail.info Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc21\Daddy.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc21\MakingPuzzle.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc21\MatthewSide.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc21\Me.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc21\Simpsons.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc21\Simpsons2.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc21\Simpsons3.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc21\Thumbs.db Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc21\YuGiOhPuzzle.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Andrea 115 Cumberland Rd.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Andrea 1964 Zoo.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Andrea Brisbie Is Q Flowers.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Andrea Currumbin Q.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Andrea Louise Paul Oct 64 Lake Mtn V.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Andrea McCrae.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Andrea's 4th Birthday.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Barries and The Robinsons Wynnum Q.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Caravan Garden McCrae.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Chairlift Dromana.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Children Outside Caravan Jan 64 Russos Robinson.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Currumbin Q.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Dad & Paul Beach Jan 1960 2.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Dad & Paul Beach Jan 1960.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Dad Louise & Paul Feb 1960.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Dad Louise Andrea Peter McCrae.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Dark 1.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Dark 2.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\ehthumbs.db Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Family Currumbin Q.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Family outside Caravan 1964 McCrae.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\From Top of Ayers Rock 1969.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Gold Coast Q Pool Girls Sept 67.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Ian Barrie June 1961.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Ian Car Torquay 3.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Ian Judith Wedding 1.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Ian Judith Wedding 2.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Ian Judith Wedding Party.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Ian Judith Wedding with Papa.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Jimmy Louise Billy Oct 1960.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\John & Viv's Wedding.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Judith & Louise July 1959.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Judith 19-1-58.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Judith 1975.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Judith Paul Louise Andrea Dromana Vic.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Judith Sorrento V 1967.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Judith Wendy John's Wedding.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Liesel 2.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Liesel.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Louise & Her Mum July 1959 2.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Louise & her Mum July 1959.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Louise & Judith July 1959.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Louise 1960 McCrae Drink.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Louise 6-61 Boundary Bend.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Louise and Paul Dec 1960.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Louise Andrea Paul Beach.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Louise Dec 1959 2.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Louise Dec 1959.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Louise Feb 1960.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Louise Jan 1961 Swing 2.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Louise Jan 1961 Swing.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Louise July 1959 14 Weeks.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Louise July 1959.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Louise Ken Julieanne Jan 64 Ponies Rosebud.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Louise McCrae Plait Hat.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Louise Mildura Bridge June 61.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Louise Oct1959.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Louise October 1959.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Louise Sept 1959 2.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Louise Sept 1959.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Louise September 1959.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Louise Xmas 1961 Nurse.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Louise, Andrea, Jennifer Andrew Oct 64 115 Cumberland Rd.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\McCrae March '58.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\McCrae March 58 Noel Paul Mum.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\McCrae Mum Seagulls March '58.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\McCrae Mum Seagulls March 58.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Mum & Louise Jan 1960.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Mum Louise & Paul Dec 1959 McCrae.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Mum Louise Surf Beach.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Mum Paul & Louise Dec 1959.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Mum Paul & Louise June 1961.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Mum Paul & Louise McCrae Jan 1961.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Mum Paul Kangaroo.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Mum Paul Louise 1961.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Mum Paul Louise Feb 1961.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Mum's Big Catch Boundary Bend 1961.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Mum, Louise Portsea 1961.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Nerang River Judith Sept 67.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Party 115 Cumberland Rd Pascoe Vale.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul & Brian Beach Jan 1960.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul & Dad Beach Sept 1959.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul & Fish 19-1-58.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul & Grandparents 2-3-58 Curtis St Essendon.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul & His Nana August 1959.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul & his Nana July 1959.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul & Ken Ponies Jan 64 Rosebud.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul & Louise 1960 Logs.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul & Louise 1962.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul & Louise Birds Coburg 1960.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul & Louise Carrum Beach August 1961.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul & Louise Dec 1959 1.JPG Object is locked skipped
C:\RECYCLER\S-1-5-2
  • 0

Advertisements


#11
paulelsa

paulelsa

    Member

  • Topic Starter
  • Member
  • PipPip
  • 30 posts
Kasperspy 4

C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul & Louise Dec 1959 1.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul & Louise Dec 1959 2.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul & Louise Dec 1959 3.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul & Louise Dec 1959 4.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul & Louise Feb 1960.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul & Louise Jan 1961 (2).JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul & Louise Jan 1961.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul & Louise July 1959 2.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul & Louise July 1959.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul & Louise June 1961 Swan Hill.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul & Louise June 1961.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul & Louise Mt Buffalo June 1961.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul & Louise Swan Hill June 1961.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul & Mum 19-1-58 (Edit).JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul & Mum 19-1-58.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul & Mum Dec 1959.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul & Mum Sorrento Dec 1959.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul 12-2-58.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul 12.2.58 Baby (Damaged).JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul 19.1.58 (2).JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul 19.1.58.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul 1960 Beach.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul 1960 Moorooduc.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul 1960 Slide.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul 1960.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul 1961 June .JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul 4 Months.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul 6-12-57.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul 6.12.57.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul 789 Sydney Rd September 1959.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul Car 1960.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul Cessna Gold Coast Sept 67.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul Dad 12-2-58.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul Dec 1959 Beach.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul Dec 1959.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul Dec 1960.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul Hose Jan 611.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul in Bath Jan 1959.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul In Water Dec 1959.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul Jan 1959 (2).JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul Jan 1959 McCrae .JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul Jan 1959 McCrae.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul Jan 1959.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul Judith 28.12.57.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul June 1961.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul Lilo Jan 1960.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul Louise & Ian Barrie Melton June 1961.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul Louise Andrea Feb 64.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul Louise Andrea Oct 1964 Lake Mtn Vic.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul Louise Andrea Peter 115 Cumberland Rd Pascoe Vale.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul Louise Andrea Peter Judith 115 Cumberland Rd.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul Louise Andrea Peter School Ball.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul Louise Jimmy & Billy Pt. Leo 1960 Oct.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul Louise July 1961.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul Louise Yarrawonga 5-61.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul Nana 2-3-58.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul Nov 1959.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul On Tractor July 1959 2.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul On Tractor July 1959.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul Papa 2-3-58.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul Peter See Saw.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul Rattle 19-1-58.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul Sept '58 789 Sydney Rd.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul Sept 1959 with Teddy.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul Sept 58.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul Teddy Sept 1959.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul Wendy 2-3-58.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul's 8th Birthday.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul's 9th Birthday Belgrave Vic.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul's 9th Birthday Party Belgrave Vic.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Paul's Party 1961 Nov.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Peter 115 Cumberland Rd Pascoe Vale Trike.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Peter Feb 65.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Peter Jan. 64.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Peter Trike Feb 65.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Peter.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Picnic In Boat Shed McCrae Robinsons Russos.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Picnic with Donnellys 1961.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Police Jan 1959 McCrae.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Portsea V 1967.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Puffing Billy Belgrave Vic.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Queensliff V Ferry.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Russo Family McCrae.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Sarah Lloyd 2 Sept 67.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Sarah Lloyd Sept 67.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Taronga Park Zoo Sydney Andrea, Louise, Paul, Peter, Judith.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Tasmania Cattle on beach Judith Andrea.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Thumbs.db Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Undera June 1961 (2).JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Undera June 1961.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Val & Brian Beach Jan 1960.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\Xmas 1961.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc22\ZbThumbnail.info Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc23\Aled Lounge.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc23\Cheryl John Aled.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc23\Close Roxy.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc23\Elda Elsa.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc23\garden puzzle1.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc23\garden puzzle2.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc23\Garden puzzle3.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc23\Garden puzzle4.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc23\garden puzzle5.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc23\garden puzzle6.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc23\Homer Heart.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc23\John making puzzle.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc23\John running away from Roxy.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc23\Judy Aitport fountain.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc23\Judy Backyard.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc23\Judy inside.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc23\Judy small plane.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc23\Kirsty.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc23\Luggage Tractor.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc23\Matthew Aled Kirsty.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc23\Matthew Lounge.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc23\Matthew Trumpet Group.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc23\matthew Trumpet.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc23\Me with Roxy.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc23\Petrol Truck.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc23\Ricky Computer.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc23\Roxy elsa's leg.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc23\Roxy on my lap.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc23\Roxy sleep.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc23\Roxy Toys.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc23\Small plane.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc23\Thumbs.db Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc23\Vigin blue side.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc23\Virgin Blue front.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc23\ZbThumbnail.info Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc24\9 cake all kids.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc24\9 cake group 1.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc24\9 cake matthew john doug.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc24\9 party group 1.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc24\9 party group 2.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc24\Boys Millaa Millaa Falls.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc24\Boys PD.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc24\Brenton.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc24\Bunjee Tower.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc24\Cook Anchor Canon.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc24\Cooktown Altar.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc24\Cooktown Fishing.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc24\Cooktown Grassy Hill.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc24\Cooktown Museum.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc24\Elsa Cooktown Beach.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc24\Elsa Fisherman's Wharf.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc24\Elsa Naty 1.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc24\Elsa Naty 2.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc24\Elsa Seaview.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc24\Endeavour Grassy.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc24\Family Milla Millaa Falls.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc24\Group PD.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc24\Group Shop.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc24\John Barrine.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc24\John Crate.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc24\Kids Barrine.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc24\Kids Fig 1.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc24\Kids Fig 2.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc24\Kids Water PD.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc24\Kuranda Car 1.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc24\Kuranda Car 2.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc24\Light house grassy.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc24\Matthew cut 9 cake.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc24\Matthew John Tree.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc24\Matthew Michael PD.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc24\Matthew Sand PD.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc24\Matthew with 9 cake.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc24\Matthew's 9 Cake.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc24\Michael John X-Box.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc24\Naty Garden.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc24\Naty.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc24\Party.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc24\Paul Cooktown Beach.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc24\Paul Croc Sign.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc24\Paul Seaview.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc24\Peter.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc24\Sandercocks &Us.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc24\Stephanie PD.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc24\Thumbs.db Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc24\Vander Schans Group.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc24\Vicky Grace Elsa.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc24\ZbThumbnail.info Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\All of us.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Ann, Ian, Kids.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Back Swings.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Back View 1.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Back View 2.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Bananas.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\bdaygroup.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Bill Yolanda Boys.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Camel boys.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Car Port.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Col Merla Elsa.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Cut Cake.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\cut michael.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\cut steph.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Elsa, Matthew, Baby.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Elsa, Paul, Kids.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Family Photos.bmp Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Family.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Front Drive.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Front House.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Front View.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Fun Zone.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Green Island.bmp Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Ian, Elsa, Ann,kids.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Ian, Elsa, Paul.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Inside Lounge.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Jacks 1.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Jacks 2.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\John Cake 1.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\John Cake 2.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\John Cake 3.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\John Cakes.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\John Jacks.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\John Party Cakes 1.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\John Party Cakes 2.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\John Party Kids.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\John Party Old Group 1.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\John School 03.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\John with BDay Cake.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\John.bmp Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Kids Hall of Fame.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Kitchen.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Linda Her Mum etc.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Linda Her Mum Michael etc.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Lounge 2.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Lounge.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Matthew (tie) John.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Matthew Grade1.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Matthew Jaeman John.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Matthew John Sizzler.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Matthew Newspaper.bmp Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Matthew School .jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Matthew School.bmp Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Matthew Tiger.bmp Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Matthew, John Bikes.bmp Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Matthew, John Reindeer.bmp Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Matthew, John, Qantas.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Matthew, John.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Matthew, Liane, Catherine.bmp Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Matthew,John, Eileen-rose.bmp Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Matthew,John.bmp Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Matthew.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Michael.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Nelly.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Papa, Ann,Kids.bmp Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Paul Elsa Sizzler.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Paul Matthew Sizzler.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Peter Birthday 1.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Peter Birthday 2.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Roxy Basket.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Roxy Bath.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Roxy Bowl.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Sade.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Samantha and Bolten.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Santa with boys.bmp Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Serma & Kids.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Spa.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Steph.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Swings.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Thumbs.db Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Toothless Matthew.bmp Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Topiary.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\Upside Swing.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc25\ZbThumbnail.info Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc26\Baby Matthew.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc26\Elsa & Paul.bmp Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc26\Elsa Mama.bmp Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc26\Matthew Mirror .bmp Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc26\Matthew Mirror.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc26\Michael Matthew.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc26\Mum Aimee.bmp Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc26\Paul & Elsa - Cebu.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc26\Paul Elsa Cake.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc26\Paul Elsa Wed.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc26\Sarah, Aimee, Baby.bmp Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc26\Thumbs.db Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc26\Wed Cake.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc26\ZbThumbnail.info Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc7.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc8.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-2817493743-2047055789-1221764228-1006\Dc9.jpg Object is locked skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
C:\System Volume Information\_restore{3767C009-A46C-49FB-93A6-55E31FDAFA20}\RP29\change.log Object is locked skipped
C:\USERDATA\.gtk-bookmarks Object is locked skipped
C:\USERDATA\.limewire\.NetworkShare\Incomplete\LimeWireWinInstaller.exe.info Object is locked skipped
C:\USERDATA\.limewire\.NetworkShare\Incomplete\LimeWireWinInstaller.exe.part Object is locked skipped
C:\USERDATA\.limewire\.NetworkShare\LimeWireWin4.12.11.exe Object is locked skipped
C:\USERDATA\.limewire\.NetworkShare\LimeWireWin4.12.6-fixed.exe Object is locked skipped
C:\USERDATA\.limewire\.NetworkShare\LimeWireWinInstaller 1.exe Object is locked skipped
C:\USERDATA\.limewire\.NetworkShare\LimeWireWinInstaller 2.exe Object is locked skipped
C:\USERDATA\.limewire\.NetworkShare\LimeWireWinInstaller 3.exe Object is locked skipped
C:\USERDATA\.limewire\.NetworkShare\LimeWireWinInstaller.exe Object is locked skipped
C:\USERDATA\.limewire\412splashfree.png Object is locked skipped
C:\USERDATA\.limewire\49splashfree.png Object is locked skipped
C:\USERDATA\.limewire\createtimes.cache Object is locked skipped
C:\USERDATA\.limewire\data.ser Object is locked skipped
C:\USERDATA\.limewire\fileurns.bak Object is locked skipped
C:\USERDATA\.limewire\fileurns.cache Object is locked skipped
C:\USERDATA\.limewire\filters.props Object is locked skipped
C:\USERDATA\.limewire\gnutella.net Object is locked skipped
C:\USERDATA\.limewire\installation.props Object is locked skipped
C:\USERDATA\.limewire\library.dat Object is locked skipped
C:\USERDATA\.limewire\limewire.props Object is locked skipped
C:\USERDATA\.limewire\pub1.key Object is locked skipped
C:\USERDATA\.limewire\public.key Object is locked skipped
C:\USERDATA\.limewire\questions.props Object is locked skipped
C:\USERDATA\.limewire\responses.cache Object is locked skipped
C:\USERDATA\.limewire\secureMessage.key Object is locked skipped
C:\USERDATA\.limewire\simpp.xml Object is locked skipped
C:\USERDATA\.limewire\spam.dat Object is locked skipped
C:\USERDATA\.limewire\tables.props Object is locked skipped
C:\USERDATA\.limewire\themes\black_theme\01_star.gif Object is locked skipped
C:\USERDATA\.limewire\themes\black_theme\02_star.gif Object is locked skipped
C:\USERDATA\.limewire\themes\black_theme\03_star.gif Object is locked skipped
C:\USERDATA\.limewire\themes\black_theme\04_star.gif Object is locked skipped
C:\USERDATA\.limewire\themes\black_theme\05_star.gif Object is locked skipped
C:\USERDATA\.limewire\themes\black_theme\chat.gif Object is locked skipped
C:\USERDATA\.limewire\themes\black_theme\dir_closed.gif Object is locked skipped
C:\USERDATA\.limewire\themes\black_theme\dir_open.gif Object is locked skipped
C:\USERDATA\.limewire\themes\black_theme\forward_dn.gif Object is locked skipped
C:\USERDATA\.limewire\themes\black_theme\forward_up.gif Object is locked skipped
C:\USERDATA\.limewire\themes\black_theme\kill.gif Object is locked skipped
C:\USERDATA\.limewire\themes\black_theme\kill_on.gif Object is locked skipped
C:\USERDATA\.limewire\themes\black_theme\lime.gif Object is locked skipped
C:\USERDATA\.limewire\themes\black_theme\logo.gif Object is locked skipped
C:\USERDATA\.limewire\themes\black_theme\notsearching.gif Object is locked skipped
C:\USERDATA\.limewire\themes\black_theme\pause_dn.gif Object is locked skipped
C:\USERDATA\.limewire\themes\black_theme\pause_up.gif Object is locked skipped
C:\USERDATA\.limewire\themes\black_theme\play_dn.gif Object is locked skipped
C:\USERDATA\.limewire\themes\black_theme\play_up.gif Object is locked skipped
C:\USERDATA\.limewire\themes\black_theme\question.gif Object is locked skipped
C:\USERDATA\.limewire\themes\black_theme\rewind_dn.gif Object is locked skipped
C:\USERDATA\.limewire\themes\black_theme\rewind_up.gif Object is locked skipped
C:\USERDATA\.limewire\themes\black_theme\searching.gif Object is locked skipped
C:\USERDATA\.limewire\themes\black_theme\splash.png Object is locked skipped
C:\USERDATA\.limewire\themes\black_theme\splashpro.png Object is locked skipped
C:\USERDATA\.limewire\themes\black_theme\stop_dn.gif Object is locked skipped
C:\USERDATA\.limewire\themes\black_theme\stop_up.gif Object is locked skipped
C:\USERDATA\.limewire\themes\black_theme\theme.txt Object is locked skipped
C:\USERDATA\.limewire\themes\black_theme\warning.gif Object is locked skipped
C:\USERDATA\.limewire\themes\black_theme.lwtp Object is locked skipped
C:\USERDATA\.limewire\themes\classic_theme\01_star.gif Object is locked skipped
C:\USERDATA\.limewire\themes\classic_theme\02_star.gif Object is locked skipped
C:\USERDATA\.limewire\themes\classic_theme\03_star.gif Object is locked skipped
C:\USERDATA\.limewire\themes\classic_theme\04_star.gif Object is locked skipped
C:\USERDATA\.limewire\themes\classic_theme\05_star.gif Object is locked skipped
C:\USERDATA\.limewire\themes\classic_theme\chat.gif Object is locked skipped
C:\USERDATA\.limewire\themes\classic_theme\dir_closed.gif Object is locked skipped
C:\USERDATA\.limewire\themes\classic_theme\dir_open.gif Object is locked skipped
C:\USERDATA\.limewire\themes\classic_theme\forward_dn.gif Object is locked skipped
C:\USERDATA\.limewire\themes\classic_theme\forward_up.gif Object is locked skipped
C:\USERDATA\.limewire\themes\classic_theme\kill.gif Object is locked skipped
C:\USERDATA\.limewire\themes\classic_theme\logo.gif Object is locked skipped
C:\USERDATA\.limewire\themes\classic_theme\notsearching.gif Object is locked skipped
C:\USERDATA\.limewire\themes\classic_theme\pause_dn.gif Object is locked skipped
C:\USERDATA\.limewire\themes\classic_theme\pause_up.gif Object is locked skipped
C:\USERDATA\.limewire\themes\classic_theme\play_dn.gif Object is locked skipped
C:\USERDATA\.limewire\themes\classic_theme\play_up.gif Object is locked skipped
C:\USERDATA\.limewire\themes\classic_theme\question.gif Object is locked skipped
C:\USERDATA\.limewire\themes\classic_theme\rewind_dn.gif Object is locked skipped
C:\USERDATA\.limewire\themes\classic_theme\rewind_up.gif Object is locked skipped
C:\USERDATA\.limewire\themes\classic_theme\search.gif Object is locked skipped
C:\USERDATA\.limewire\themes\classic_theme\searching.gif Object is locked skipped
C:\USERDATA\.limewire\themes\classic_theme\splash.png Object is locked skipped
C:\USERDATA\.limewire\themes\classic_theme\splashpro.png Object is locked skipped
C:\USERDATA\.limewire\themes\classic_theme\stop_dn.gif Object is locked skipped
C:\USERDATA\.limewire\themes\classic_theme\stop_up.gif Object is locked skipped
C:\USERDATA\.limewire\themes\classic_theme\theme.txt Object is locked skipped
C:\USERDATA\.limewire\themes\classic_theme\warning.gif Object is locked skipped
C:\USERDATA\.limewire\themes\classic_theme.lwtp Object is locked skipped
C:\USERDATA\.limewire\themes\limewire_theme\01_star.gif Object is locked skipped
C:\USERDATA\.limewire\themes\limewire_theme\02_star.gif Object is locked skipped
C:\USERDATA\.limewire\themes\limewire_theme\03_star.gif Object is locked skipped
C:\USERDATA\.limewire\themes\limewire_theme\04_star.gif Object is locked skipped
C:\USERDATA\.limewire\themes\limewire_theme\05_star.gif Object is locked skipped
C:\USERDATA\.limewire\themes\limewire_theme\chat.gif Object is locked skipped
C:\USERDATA\.limewire\themes\limewire_theme\dir_closed.gif Object is locked skipped
C:\USERDATA\.limewire\themes\limewire_theme\dir_open.gif Object is locked skipped
C:\USERDATA\.limewire\themes\limewire_theme\forward_dn.gif Object is locked skipped
C:\USERDATA\.limewire\themes\limewire_theme\forward_up.gif Object is locked skipped
C:\USERDATA\.limewire\themes\limewire_theme\kill.gif Object is locked skipped
C:\USERDATA\.limewire\themes\limewire_theme\kill_on.gif Object is locked skipped
C:\USERDATA\.limewire\themes\limewire_theme\lime.gif Object is locked skipped
C:\USERDATA\.limewire\themes\limewire_theme\logo.gif Object is locked skipped
C:\USERDATA\.limewire\themes\limewire_theme\notsearching.gif Object is locked skipped
C:\USERDATA\.limewire\themes\limewire_theme\pause_dn.gif Object is locked skipped
C:\USERDATA\.limewire\themes\limewire_theme\pause_up.gif Object is locked skipped
C:\USERDATA\.limewire\themes\limewire_theme\play_dn.gif Object is locked skipped
C:\USERDATA\.limewire\themes\limewire_theme\play_up.gif Object is locked skipped
C:\USERDATA\.limewire\themes\limewire_theme\question.gif Object is locked skipped
C:\USERDATA\.limewire\themes\limewire_theme\rewind_dn.gif Object is locked skipped
C:\USERDATA\.limewire\themes\limewire_theme\rewind_up.gif Object is locked skipped
C:\USERDATA\.limewire\themes\limewire_theme\searching.gif Object is locked skipped
C:\USERDATA\.limewire\themes\limewire_theme\splash.png Object is locked skipped
C:\USERDATA\.limewire\themes\limewire_theme\splashpro.png Object is locked skipped
C:\USERDATA\.limewire\themes\limewire_theme\stop_dn.gif Object is locked skipped
C:\USERDATA\.limewire\themes\limewire_theme\stop_up.gif Object is locked skipped
C:\USERDATA\.limewire\themes\limewire_theme\theme.txt Object is locked skipped
C:\USERDATA\.limewire\themes\limewire_theme\warning.gif Object is locked skipped
C:\USERDATA\.limewire\themes\limewire_theme.lwtp Object is locked skipped
C:\USERDATA\.limewire\themes\other_theme\01_star.gif Object is locked skipped
C:\USERDATA\.limewire\themes\other_theme\02_star.gif Object is locked skipped
C:\USERDATA\.limewire\themes\other_theme\03_star.gif Object is locked skipped
C:\USERDATA\.limewire\themes\other_theme\04_star.gif Object is locked skipped
C:\USERDATA\.limewire\themes\other_theme\05_star.gif Object is locked skipped
C:\USERDATA\.limewire\themes\other_theme\chat.gif Object is locked skipped
C:\USERDATA\.limewire\themes\other_theme\forward_dn.gif Object is locked skipped
C:\USERDATA\.limewire\themes\other_theme\forward_up.gif Object is locked skipped
C:\USERDATA\.limewire\themes\other_theme\kill.gif Object is locked skipped
C:\USERDATA\.limewire\themes\other_theme\kill_on.gif Object is locked skipped
C:\USERDATA\.limewire\themes\other_theme\logo.png Object is locked skipped
C:\USERDATA\.limewire\themes\other_theme\notsearching.png Object is locked skipped
C:\USERDATA\.limewire\themes\other_theme\pause_dn.gif Object is locked skipped
C:\USERDATA\.limewire\themes\other_theme\pause_up.gif Object is locked skipped
C:\USERDATA\.limewire\themes\other_theme\play_dn.gif Object is locked skipped
C:\USERDATA\.limewire\themes\other_theme\play_up.gif Object is locked skipped
C:\USERDATA\.limewire\themes\other_theme\question.gif Object is locked skipped
C:\USERDATA\.limewire\themes\other_theme\rewind_dn.gif Object is locked skipped
C:\USERDATA\.limewire\themes\other_theme\rewind_up.gif Object is locked skipped
C:\USERDATA\.limewire\themes\other_theme\searching.gif Object is locked skipped
C:\USERDATA\.limewire\themes\other_theme\splash.png Object is locked skipped
C:\USERDATA\.limewire\themes\other_theme\splashpro.png Object is locked skipped
C:\USERDATA\.limewire\themes\other_theme\stop_dn.gif Object is locked skipped
C:\USERDATA\.limewire\themes\other_theme\stop_up.gif Object is locked skipped
C:\USERDATA\.limewire\themes\other_theme\theme.txt Object is locked skipped
C:\USERDATA\.limewire\themes\other_theme\warning.gif Object is locked skipped
C:\USERDATA\.limewire\themes\other_theme.lwtp Object is locked skipped
C:\USERDATA\.limewire\themes\windows_theme\01_star.gif Object is locked skipped
C:\USERDATA\.limewire\themes\windows_theme\02_star.gif Object is locked skipped
C:\USERDATA\.limewire\themes\windows_theme\03_star.gif Object is locked skipped
C:\USERDATA\.limewire\themes\windows_theme\04_star.gif Object is locked skipped
C:\USERDATA\.limewire\themes\windows_theme\05_star.gif Object is locked skipped
C:\USERDATA\.limewire\themes\windows_theme\chat.gif Object is locked skipped
C:\USERDATA\.limewire\themes\windows_theme\forward_dn.gif Object is locked skipped
C:\USERDATA\.limewire\themes\windows_theme\forward_up.gif Object is locked skipped
C:\USERDATA\.limewire\themes\windows_theme\kill.gif Object is locked skipped
C:\USERDATA\.limewire\themes\windows_theme\kill_on.gif Object is locked skipped
C:\USERDATA\.limewire\themes\windows_theme\logo.png Object is locked skipped
C:\USERDATA\.limewire\themes\windows_theme\notsearching.png Object is locked skipped
C:\USERDATA\.limewire\themes\windows_theme\pause_dn.gif Object is locked skipped
C:\USERDATA\.limewire\themes\windows_theme\pause_up.gif Object is locked skipped
C:\USERDATA\.limewire\themes\windows_theme\play_dn.gif Object is locked skipped
C:\USERDATA\.limewire\themes\windows_theme\play_up.gif Object is locked skipped
C:\USERDATA\.limewire\themes\windows_theme\question.gif Object is locked skipped
C:\USERDATA\.limewire\themes\windows_theme\rewind_dn.gif Object is locked skipped
C:\USERDATA\.limewire\themes\windows_theme\rewind_up.gif Object is locked skipped
C:\USERDATA\.limewire\themes\windows_theme\searching.gif Object is locked skipped
C:\USERDATA\.limewire\themes\windows_theme\splash.png Object is locked skipped
C:\USERDATA\.limewire\themes\windows_theme\splashpro.png Object is locked skipped
C:\USERDATA\.limewire\themes\windows_theme\stop_dn.gif Object is locked skipped
C:\USERDATA\.limewire\themes\windows_theme\stop_up.gif Object is locked skipped
C:\USERDATA\.limewire\themes\windows_theme\theme.txt Object is locked skipped
C:\USERDATA\.limewire\themes\windows_theme\warning.gif Object is locked skipped
C:\USERDATA\.limewire\themes\windows_theme.lwtp Object is locked skipped
C:\USERDATA\.limewire\update.xml Object is locked skipped
C:\USERDATA\.limewire\version.key Object is locked skipped
C:\USERDATA\.limewire\version.xml Object is locked skipped
C:\USERDATA\.limewire\xml\data\audio.sxml Object is locked skipped
C:\USERDATA\.limewire\xml\data\delete_me Object is locked skipped
C:\USERDATA\.limewire\xml\data\image.sxml Object is locked skipped
C:\USERDATA\.limewire\xml\data\video.sxml Object is locked skipped
C:\USERDATA\.limewire\xml\misc\application.gif Object is locked skipped
C:\USERDATA\.limewire\xml\misc\audio.gif Object is locked skipped
C:\USERDATA\.limewire\xml\misc\document.gif Object is locked skipped
C:\USERDATA\.limewire\xml\misc\image.gif Object is locked skipped
C:\USERDATA\.limewire\xml\misc\video.gif Object is locked skipped
C:\USERDATA\.limewire\xml\schemas\application.xsd Object is locked skipped
C:\USERDATA\.limewire\xml\schemas\audio.xsd Object is locked skipped
C:\USERDATA\.limewire\xml\schemas\document.xsd Object is locked skipped
C:\USERDATA\.limewire\xml\schemas\image.xsd Object is locked skipped
C:\USERDATA\.limewire\xml\schemas\video.xsd Object is locked skipped
C:\USERDATA\Application Data\.bittorrent\data\metainfo\4d2c6477078a3aadb9383d0a97080b32846c2f1c Object is locked skipped
C:\USERDATA\Application Data\.bittorrent\data\metainfo\60cbded40c67dfffc86e8b3269eadebded8e943a Object is locked skipped
C:\USERDATA\Application Data\.bittorrent\data\resume\4d2c6477078a3aadb9383d0a97080b32846c2f1c Object is locked skipped
C:\USERDATA\Application Data\.bittorrent\data\resume\60cbded40c67dfffc86e8b3269eadebded8e943a Object is locked skipped
C:\USERDATA\Application Data\.bittorrent\data\resume\65c96e1982929fe344ccc60f17a25605b95d28f4 Object is locked skipped
C:\USERDATA\Application Data\.bittorrent\data\ui_config Object is locked skipped
C:\USERDATA\Application Data\.bittorrent\data\ui_state Object is locked skipped
C:\USERDATA\Application Data\Adobe\Acrobat\6.0\AcroForm\MRUFormsList Object is locked skipped
C:\USERDATA\Application Data\Adobe\Acrobat\6.0\AdobeComFnt06.lst Object is locked skipped
C:\USERDATA\Application Data\Adobe\Acrobat\6.0\Collab\OfflineDocs Object is locked skipped
C:\USERDATA\Application Data\Adobe\Acrobat\6.0\Collab\Reviews Object is locked skipped
C:\USERDATA\Application Data\Adobe\Acrobat\6.0\Preferences\AutoFillDefaults.dat Object is locked skipped
C:\USERDATA\Application Data\Adobe\Acrobat\6.0\Preferences\defaultHeuristics.dat Object is locked skipped
C:\USERDATA\Application Data\Adobe\Acrobat\6.0\TMGrpPrm.sav Object is locked skipped
C:\USERDATA\Application Data\Adobe\Acrobat\7.0\AdobeCMapFnt07.lst Object is locked skipped
C:\USERDATA\Application Data\Adobe\Acrobat\7.0\AdobeSysFnt07.lst Object is locked skipped
C:\USERDATA\Application Data\Adobe\Acrobat\7.0\Collab\RSS Object is locked skipped
C:\USERDATA\Application Data\Adobe\Acrobat\7.0\JavaScripts\glob.settings.js Object is locked skipped
C:\USERDATA\Application Data\Adobe\Acrobat\7.0\JSADM.exv Object is locked skipped
C:\USERDATA\Application Data\Adobe\Acrobat\7.0\Messages\ENU\read0700win_ENUadbe0700.pdf Object is locked skipped
C:\USERDATA\Application Data\Adobe\Acrobat\7.0\Preferences\AutoFillDefaults.dat Object is locked skipped
C:\USERDATA\Application Data\Adobe\Acrobat\7.0\Preferences\defaultHeuristics.dat Object is locked skipped
C:\USERDATA\Application Data\Adobe\Acrobat\7.0\Updater\AdbeRdr709_en_US.exe Object is locked skipped
C:\USERDATA\Application Data\Adobe\Acrobat\7.0\Updater\rvRestart.txt Object is locked skipped
C:\USERDATA\Application Data\Adobe\Acrobat\7.0\Updater\udlog.txt Object is locked skipped
C:\USERDATA\Application Data\Adobe\Acrobat\7.0\Updater\udstore.js Object is locked skipped
C:\USERDATA\Application Data\Adobe\Acrobat\7.0\UserCache.bin Object is locked skipped
C:\USERDATA\Application Data\Adobe\Acrobat\8.0\AdobeCMapFnt08.lst Object is locked skipped
C:\USERDATA\Application Data\Adobe\Acrobat\8.0\AdobeSysFnt08.lst Object is locked skipped
C:\USERDATA\Application Data\Adobe\Acrobat\8.0\UserCache.bin Object is locked skipped
C:\USERDATA\Application Data\AdobeUM\AcRdB7_0_8.sta Object is locked skipped
C:\USERDATA\Application Data\AdobeUM\AcRdB7_0_9.sta Object is locked skipped
C:\USERDATA\Application Data\Apple Computer\iTunes\CD Info.cidb Object is locked skipped
C:\USERDATA\Application Data\Apple Computer\iTunes\iTunes.pref Object is locked skipped
C:\USERDATA\Application Data\Apple Computer\iTunes\iTunesPrefs.xml Object is locked skipped
C:\USERDATA\Application Data\Apple Computer\QuickTime\QTPlayerSession.xml Object is locked skipped
C:\USERDATA\Application Data\Arcsoft\ArcSoft PhotoStudio\5.0\album.ini Object is locked skipped
C:\USERDATA\Application Data\Arcsoft\ArcSoft PhotoStudio\5.0\Pstudio.ini Object is locked skipped
C:\USERDATA\Application Data\Arcsoft\ArcSoft PhotoStudio\5.0\pstudio.mcr Object is locked skipped
C:\USERDATA\Application Data\Arcsoft\ArcSoft PhotoStudio\5.0\PSTUDIO.SN Object is locked skipped
C:\USERDATA\Application Data\Arcsoft\PhotoBase\3.0\PhotoBase.INI Object is locked skipped
C:\USERDATA\Application Data\BearShare\Data\DataBase\DataDir\ContentDirs.db Object is locked skipped
C:\USERDATA\Application Data\BearShare\Data\DataBase\DataDir\ContentFile.db Object is locked skipped
C:\USERDATA\Application Data\BearShare\Data\DataBase\DataDir\DownloadFile.db Object is locked skipped
C:\USERDATA\Application Data\BearShare\Data\DataBase\DataDir\PartsHashes.db Object is locked skipped
C:\USERDATA\Application Data\BearShare\Data\DataBase\DataDir\Playlists.db Object is locked skipped
C:\USERDATA\Application Data\BearShare\Data\DataBase\LgDir\log.0000000001 Object is locked skipped
C:\USERDATA\Application Data\
  • 0

#12
andrewuk

andrewuk

    Trusted Helper

  • Malware Removal
  • 5,297 posts
can i see the new DSS scan please (i got all i needed from what you posted from the kaspersky scan :) )

andrewuk
  • 0

#13
paulelsa

paulelsa

    Member

  • Topic Starter
  • Member
  • PipPip
  • 30 posts
C:\USERDATA\Application Data\BearShare\Data\DataBase\LgDir\log.0000000001 Object is locked skipped
C:\USERDATA\Application Data\BearShare\Data\DataBase\__db.001 Object is locked skipped
C:\USERDATA\Application Data\BearShare\Data\DataBase\__db.002 Object is locked skipped
C:\USERDATA\Application Data\BearShare\Data\DataBase\__db.003 Object is locked skipped
C:\USERDATA\Application Data\BearShare\Data\DataBase\__db.004 Object is locked skipped
C:\USERDATA\Application Data\BearShare\Data\DataBase\__db.005 Object is locked skipped
C:\USERDATA\Application Data\BearShare\Data\DataBase\__db.006 Object is locked skipped
C:\USERDATA\Application Data\BearShare\Data\rjn.a92 Object is locked skipped
C:\USERDATA\Application Data\BearShare\Data\shistory.im Object is locked skipped
C:\USERDATA\Application Data\BearShare\IMPictures\479713.gif Object is locked skipped
C:\USERDATA\Application Data\BearShare\IMPictures\5671559.jpg Object is locked skipped
C:\USERDATA\Application Data\BearShare\IMPictures\5923814.gif Object is locked skipped
C:\USERDATA\Application Data\BearShare\IMPictures\Thumbs.db Object is locked skipped
C:\USERDATA\Application Data\BitTorrent\bittorrent.log Object is locked skipped
C:\USERDATA\Application Data\BitTorrent\data\metainfo\9a261f1a8175939f5cb7d79b97a1cc2d37651b58 Object is locked skipped
C:\USERDATA\Application Data\BitTorrent\data\metainfo\a1b4da1d5c3b6ed48c6db1239578116dd53de1c8 Object is locked skipped
C:\USERDATA\Application Data\BitTorrent\data\metainfo\aa332bbb25663d0818796118e93050d5d361d643 Object is locked skipped
C:\USERDATA\Application Data\BitTorrent\data\metainfo\c2bb84a4998a07f476c1e21cf839a80eab9b8f1a Object is locked skipped
C:\USERDATA\Application Data\BitTorrent\data\metainfo\cdf8c6f01cdea0f2e0ba49bea29d7c776efc4c93 Object is locked skipped
C:\USERDATA\Application Data\BitTorrent\data\resume\9a261f1a8175939f5cb7d79b97a1cc2d37651b58 Object is locked skipped
C:\USERDATA\Application Data\BitTorrent\data\resume\a1b4da1d5c3b6ed48c6db1239578116dd53de1c8 Object is locked skipped
C:\USERDATA\Application Data\BitTorrent\data\resume\cdf8c6f01cdea0f2e0ba49bea29d7c776efc4c93 Object is locked skipped
C:\USERDATA\Application Data\BitTorrent\data\routing_table Object is locked skipped
C:\USERDATA\Application Data\BitTorrent\data\torrents\9a261f1a8175939f5cb7d79b97a1cc2d37651b58 Object is locked skipped
C:\USERDATA\Application Data\BitTorrent\data\torrents\a1b4da1d5c3b6ed48c6db1239578116dd53de1c8 Object is locked skipped
C:\USERDATA\Application Data\BitTorrent\data\torrents\cdf8c6f01cdea0f2e0ba49bea29d7c776efc4c93 Object is locked skipped
C:\USERDATA\Application Data\BitTorrent\data\torrent_config Object is locked skipped
C:\USERDATA\Application Data\BitTorrent\data\ui_config Object is locked skipped
C:\USERDATA\Application Data\BitTorrent\data\ui_state Object is locked skipped
C:\USERDATA\Application Data\Cabos\createtimes.cache Object is locked skipped
C:\USERDATA\Application Data\Cabos\fileurns.bak Object is locked skipped
C:\USERDATA\Application Data\Cabos\fileurns.cache Object is locked skipped
C:\USERDATA\Application Data\Cabos\gnutella.net Object is locked skipped
C:\USERDATA\Application Data\Cabos\library.dat Object is locked skipped
C:\USERDATA\Application Data\Cabos\limewire.props Object is locked skipped
C:\USERDATA\Application Data\Cabos\spam.dat Object is locked skipped
C:\USERDATA\Application Data\Cabos\ttree.cache Object is locked skipped
C:\USERDATA\Application Data\Cabos.plist Object is locked skipped
C:\USERDATA\Application Data\Canon\SCGRD244.PV0 Object is locked skipped
C:\USERDATA\Application Data\Canon\SCGRD244.PV1 Object is locked skipped
C:\USERDATA\Application Data\CD-LabelPrint\1.0\ColorSpec.hst Object is locked skipped
C:\USERDATA\Application Data\CD-LabelPrint\1.0\ImageCache.ic Object is locked skipped
C:\USERDATA\Application Data\desktop.ini Object is locked skipped
C:\USERDATA\Application Data\DivX\DivX Player\Database.dat Object is locked skipped
C:\USERDATA\Application Data\DivX\DivX Player\DownloadQueue.dlq Object is locked skipped
C:\USERDATA\Application Data\FrostWire\createtimes.cache Object is locked skipped
C:\USERDATA\Application Data\FrostWire\fileurns.bak Object is locked skipped
C:\USERDATA\Application Data\FrostWire\fileurns.cache Object is locked skipped
C:\USERDATA\Application Data\FrostWire\filters.props Object is locked skipped
C:\USERDATA\Application Data\FrostWire\frostwire.props Object is locked skipped
C:\USERDATA\Application Data\FrostWire\gnutella.net Object is locked skipped
C:\USERDATA\Application Data\FrostWire\installation.props Object is locked skipped
C:\USERDATA\Application Data\FrostWire\library.dat Object is locked skipped
C:\USERDATA\Application Data\FrostWire\META-INF\MANIFEST.MF Object is locked skipped
C:\USERDATA\Application Data\FrostWire\pub1.key Object is locked skipped
C:\USERDATA\Application Data\FrostWire\pub2.key Object is locked skipped
C:\USERDATA\Application Data\FrostWire\pub3.key Object is locked skipped
C:\USERDATA\Application Data\FrostWire\pub4.key Object is locked skipped
C:\USERDATA\Application Data\FrostWire\questions.props Object is locked skipped
C:\USERDATA\Application Data\FrostWire\simpp.xml Object is locked skipped
C:\USERDATA\Application Data\FrostWire\spam.dat Object is locked skipped
C:\USERDATA\Application Data\FrostWire\tables.props Object is locked skipped
C:\USERDATA\Application Data\FrostWire\themes\frostwire_theme\kill.png Object is locked skipped
C:\USERDATA\Application Data\FrostWire\themes\frostwire_theme\kill_on.png Object is locked skipped
C:\USERDATA\Application Data\FrostWire\themes\frostwire_theme\theme.txt Object is locked skipped
C:\USERDATA\Application Data\FrostWire\themes\frostwire_theme.lwtp Object is locked skipped
C:\USERDATA\Application Data\FrostWire\themes\windows_theme\chat.gif Object is locked skipped
C:\USERDATA\Application Data\FrostWire\themes\windows_theme\kill.png Object is locked skipped
C:\USERDATA\Application Data\FrostWire\themes\windows_theme\kill_on.png Object is locked skipped
C:\USERDATA\Application Data\FrostWire\themes\windows_theme\theme.txt Object is locked skipped
C:\USERDATA\Application Data\FrostWire\themes\windows_theme.lwtp Object is locked skipped
C:\USERDATA\Application Data\FrostWire\xml\data\delete_me Object is locked skipped
C:\USERDATA\Application Data\FrostWire\xml\misc\application.gif Object is locked skipped
C:\USERDATA\Application Data\FrostWire\xml\misc\audio.gif Object is locked skipped
C:\USERDATA\Application Data\FrostWire\xml\misc\document.gif Object is locked skipped
C:\USERDATA\Application Data\FrostWire\xml\misc\image.gif Object is locked skipped
C:\USERDATA\Application Data\FrostWire\xml\misc\video.gif Object is locked skipped
C:\USERDATA\Application Data\FrostWire\xml\schemas\application.xsd Object is locked skipped
C:\USERDATA\Application Data\FrostWire\xml\schemas\audio.xsd Object is locked skipped
C:\USERDATA\Application Data\FrostWire\xml\schemas\document.xsd Object is locked skipped
C:\USERDATA\Application Data\FrostWire\xml\schemas\image.xsd Object is locked skipped
C:\USERDATA\Application Data\FrostWire\xml\schemas\video.xsd Object is locked skipped
C:\USERDATA\Application Data\GdiplusUpgrade_MSIApproach_Wrapper.log Object is locked skipped
C:\USERDATA\Application Data\Google\GoogleEarth\myplaces.backup.kml Object is locked skipped
C:\USERDATA\Application Data\Google\GoogleEarth\myplaces.kml Object is locked skipped
C:\USERDATA\Application Data\Google\GoogleEarth\myplaces.kml.tmp Object is locked skipped
C:\USERDATA\Application Data\Google\GoogleEarth\myplaces.old Object is locked skipped
C:\USERDATA\Application Data\Google\Local Search History\google%2Eimages.w Object is locked skipped
C:\USERDATA\Application Data\Google\Local Search History\google%2Enews.w Object is locked skipped
C:\USERDATA\Application Data\Google\Local Search History\google%2Esite.w Object is locked skipped
C:\USERDATA\Application Data\Google\Local Search History\google%2Eweb.w Object is locked skipped
C:\USERDATA\Application Data\Help\WinHlp32.BMK Object is locked skipped
C:\USERDATA\Application Data\HelpFilesUpdatePatch_HELPFILEREPLACE.log Object is locked skipped
C:\USERDATA\Application Data\HelpFilesUpdatePatch_PRINTHELPWRAPPER.log Object is locked skipped
C:\USERDATA\Application Data\HP\CRMLogs\ImageZone.htm Object is locked skipped
C:\USERDATA\Application Data\HP\CRMLogs\SolutionCenter.htm Object is locked skipped
C:\USERDATA\Application Data\HP\ScLogs\SolutionCenter.htm Object is locked skipped
C:\USERDATA\Application Data\inifile41.ini Object is locked skipped
C:\USERDATA\Application Data\internaldb1942.dat Object is locked skipped
C:\USERDATA\Application Data\Internode\InternodeHistory.txt Object is locked skipped
C:\USERDATA\Application Data\Internode\nodephone_2006-11.csv Object is locked skipped
C:\USERDATA\Application Data\Internode\nodephone_2006-12.csv Object is locked skipped
C:\USERDATA\Application Data\Internode\nodephone_2007-01.csv Object is locked skipped
C:\USERDATA\Application Data\Internode\nodephone_2007-02.csv Object is locked skipped
C:\USERDATA\Application Data\Internode\Realtek RTL8139_810x Family Fast Ethernet NIC - Packet Scheduler Miniport.txt Object is locked skipped
C:\USERDATA\Application Data\InterVideo\WinDVD\5.0\Bookmark\ATA_DVD-602453654_Auto.bmk Object is locked skipped
C:\USERDATA\Application Data\InterVideo\WinDVD\5.0\Bookmark\HP_PAVILION-1672072149_Auto.bmk Object is locked skipped
C:\USERDATA\Application Data\InterVideo\WinDVD\5.0\Bookmark\LOGICAL VOLUME IDENTIFIER-822392623_Auto.bmk Object is locked skipped
C:\USERDATA\Application Data\InterVideo\WinDVD\5.0\Bookmark\LOGICAL VOLUME IDENTIFIER-890166326_Auto.bmk Object is locked skipped
C:\USERDATA\Application Data\InterVideo\WinDVD\5.0\Bookmark\MY_DISC128445485_Auto.bmk Object is locked skipped
C:\USERDATA\Application Data\InterVideo\WinDVD\5.0\Bookmark\UNTITLED-519272027_Auto.bmk Object is locked skipped
C:\USERDATA\Application Data\InterVideo\WinDVD\5.0\Bookmark\VOLUMELABEL124511135_Auto.bmk Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\description.ini Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-01-14 13-17-49.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-01-19 20-56-25.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-01-22 15-23-59.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-01-23 20-10-36.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-01-26 21-07-37.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-01-29 12-05-25.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-01-30 19-32-59.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-02-05 09-32-49.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-02-07 17-00-12.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-02-08 21-17-01.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-02-09 22-02-38.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-02-15 16-12-45.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-02-19 11-22-06.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-02-21 19-32-50.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-02-28 17-24-50.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-03-02 20-39-03.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-03-13 20-39-15.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-03-14 15-45-20.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-03-20 16-56-08.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-03-23 19-00-15.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-03-26 12-04-08.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-03-26 20-43-56.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-04-03 20-10-58.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-04-08 10-10-06.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-04-08 21-22-52.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-04-11 17-01-42.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-04-16 20-16-17.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-04-18 20-16-11.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-04-24 19-43-34.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-04-29 17-45-18.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-05-06 09-20-48.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-05-11 19-56-38.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-05-13 21-04-56.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-05-20 19-31-08.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-05-24 21-21-40.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-06-07 21-21-03.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-06-17 10-32-10.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-06-19 17-52-37.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-06-22 09-53-31.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-07-04 21-35-50.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-07-07 19-39-50.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-07-09 17-59-12.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-07-11 15-16-46.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-07-11 20-54-05.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-07-12 17-25-47.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-07-18 21-02-34.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-07-19 20-45-58.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-07-23 21-14-54.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-07-30 20-54-01.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-07-31 16-01-41.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-08-02 18-23-30.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-08-04 20-51-04.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-08-05 19-08-38.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-08-06 17-52-45.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-08-07 17-15-26.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-08-08 18-16-09.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-08-09 20-07-13.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-08-12 12-17-06.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-08-13 17-42-20.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-08-14 21-06-17.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-08-20 17-44-49.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-08-28 16-17-35.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-09-02 17-37-39.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-09-05 16-05-33.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-09-08 21-17-44.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-09-11 17-41-11.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-09-16 16-17-33.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-09-21 10-14-41.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-09-22 09-09-36.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-09-24 14-25-09.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-09-28 19-16-48.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-09-30 21-01-31.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-10-08 18-32-04.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-10-11 20-47-02.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-10-22 21-17-50.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-10-26 08-39-08.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-10-26 21-17-53.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-10-30 20-55-24.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-11-01 16-38-24.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-11-02 19-22-13.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-11-05 17-10-56.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-11-15 17-00-52.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-11-20 15-52-45.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-11-25 21-12-49.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-12-02 21-05-46.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-12-16 22-26-25.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-12-23 13-35-28.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-12-25 22-24-51.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-12-26 12-05-10.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-12-26 12-48-10.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-12-27 17-23-22.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-12-31 13-32-59.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-12-31 21-38-09.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2007-01-14 18-25-07.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2007-01-17 16-47-13.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2007-01-21 20-53-59.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2007-01-29 18-00-16.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2007-02-03 17-47-27.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2007-02-04 20-51-51.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2007-02-07 20-11-04.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2007-02-11 18-44-54.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2007-02-13 21-06-54.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2007-02-15 22-00-39.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2007-02-17 09-09-27.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2007-02-17 11-29-12.txt Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Quarantine\auto-quarantine- 2007-01-14 18-27-05.bckp Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Quarantine\auto-quarantine- 2007-01-17 16-57-46.bckp Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Quarantine\auto-quarantine- 2007-01-21 21-05-42.bckp Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Quarantine\auto-quarantine- 2007-01-29 18-24-47.bckp Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Quarantine\auto-quarantine- 2007-02-03 17-47-41.bckp Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Quarantine\auto-quarantine- 2007-02-04 21-24-22.bckp Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Quarantine\auto-quarantine- 2007-02-07 20-20-11.bckp Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Quarantine\auto-quarantine- 2007-02-11 19-15-58.bckp Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Quarantine\auto-quarantine- 2007-02-13 21-07-20.bckp Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Quarantine\auto-quarantine- 2007-02-15 22-00-52.bckp Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\Quarantine\auto-quarantine- 2007-02-17 11-40-41.bckp Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\settings.awc Object is locked skipped
C:\USERDATA\Application Data\Lavasoft\Ad-Aware\stats.awd Object is locked skipped
C:\USERDATA\Application Data\Leadertech\PowerRegister\PowerReg.dat Object is locked skipped
C:\USERDATA\Application Data\Logitech\SetPoint\user.xml Object is locked skipped
C:\USERDATA\Application Data\Macromedia\Flash Player\#SharedObjects\9GLEK9T4\bigpondguide.com\flash\gateway_api.swf\bptv_settings.sol Object is locked skipped
C:\USERDATA\Application Data\Macromedia\Flash Player\#SharedObjects\9GLEK9T4\bigpondguide.com\flash\gateway_api.swf\rules.sol Object is locked skipped
C:\USERDATA\Application Data\Macromedia\Flash Player\#SharedObjects\9GLEK9T4\cartoonnetwork.com\CN_users.sol Object is locked skipped
C:\USERDATA\Application Data\Macromedia\Flash Player\#SharedObjects\9GLEK9T4\cartoonnetwork.com\tools\media\trade\tradezone.swf\TradingZone.sol Object is locked skipped
C:\USERDATA\Application Data\Macromedia\Flash Player\#SharedObjects\9GLEK9T4\cartoonorbit.cartoonnetwork.com\CN_users.sol Object is locked skipped
C:\USERDATA\Application Data\Macromedia\Flash Player\#SharedObjects\9GLEK9T4\cosmos.bcst.yahoo.com\vidPlayer.sol Object is locked skipped
C:\USERDATA\Application Data\Macromedia\Flash Player\#SharedObjects\9GLEK9T4\cpxinteractive.com\tigerswf170606.sol Object is locked skipped
C:\USERDATA\Application Data\Macromedia\Flash Player\#SharedObjects\9GLEK9T4\i.cartoonnetwork.com\CN_users.sol Object is locked skipped
C:\USERDATA\Application Data\Macromedia\Flash Player\#SharedObjects\9GLEK9T4\localhost\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\rf.swf\swr_wizard_so2.sol Object is locked skipped
C:\USERDATA\Application Data\Macromedia\Flash Player\#SharedObjects\9GLEK9T4\mediaonenetwork.net\MediaOne.sol Object is locked skipped
C:\USERDATA\Application Data\Macromedia\Flash Player\#SharedObjects\9GLEK9T4\naiadsystems.com\naiad.sol Object is locked skipped
C:\USERDATA\Application Data\Macromedia\Flash Player\#SharedObjects\9GLEK9T4\revenue.net\revu4001intl572006.sol Object is locked skipped
C:\USERDATA\Application Data\Macromedia\Flash Player\#SharedObjects\9GLEK9T4\skinvideo.com\guba.com.sol Object is locked skipped
C:\USERDATA\Application Data\Macromedia\Flash Player\#SharedObjects\9GLEK9T4\skinvideo.com\skinvideo.com.sol Object is locked skipped
C:\USERDATA\Application Data\Macromedia\Flash Player\#SharedObjects\9GLEK9T4\static.espn.go.com\motion\fsp\FSPRoot\espnmotion_cv.swf\fspSettings.sol Object is locked skipped
C:\USERDATA\Application Data\Macromedia\Flash Player\#SharedObjects\9GLEK9T4\static.userplane.com\presence\presence.swf\presence_1.sol Object is locked skipped
C:\USERDATA\Application Data\Macromedia\Flash Player\#SharedObjects\9GLEK9T4\video.google.com\googleplayer.swf\mediaPlayerUserSettings.sol Object is locked skipped
C:\USERDATA\Application Data\Macromedia\Flash Player\#SharedObjects\9GLEK9T4\virginradio.co.uk\thestation\webcams\virginwebcam.swf\vrwebcam.sol Object is locked skipped
C:\USERDATA\Application Data\Macromedia\Flash Player\#SharedObjects\9GLEK9T4\www.2.livejasmin.com\flash\freechat041.swf\jasminmember01.sol Object is locked skipped
C:\USERDATA\Application Data\Macromedia\Flash Player\#SharedObjects\9GLEK9T4\www.cartoonnetwork.com\CN_users.sol Object is locked skipped
C:\USERDATA\Application Data\Macromedia\Flash Player\#SharedObjects\9GLEK9T4\www.ifilm.com\flash\container.swf\settings.sol Object is locked skipped
C:\USERDATA\Application Data\Macromedia\Flash Player\#SharedObjects\9GLEK9T4\www.metacafe.com\MetacafeFlashVideoPlayer.sol Object is locked skipped
C:\USERDATA\Application Data\Macromedia\Flash Player\#SharedObjects\9GLEK9T4\www.nrl.com\Portals\0\stub.swf\nrl_bandwidth_choice.sol Object is locked skipped
C:\USERDATA\Application Data\Macromedia\Flash Player\#SharedObjects\9GLEK9T4\www.skinvideo.com\f\skinVideoMain.swf\guba_video.sol Object is locked skipped
C:\USERDATA\Application Data\Macromedia\Flash Player\#SharedObjects\9GLEK9T4\www.youtube.com\soundData.sol Object is locked skipped
C:\USERDATA\Application Data\Macromedia\Flash Player\#SharedObjects\9GLEK9T4\yieldmanager.com\flow260506.sol Object is locked skipped
C:\USERDATA\Application Data\Macromedia\Flash Player\#SharedObjects\9GLEK9T4\youtube.com\soundData.sol Object is locked skipped
C:\USERDATA\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#bigpondguide.com\settings.sol Object is locked skipped
C:\USERDATA\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#cartoonnetwork.com\settings.sol Object is locked skipped
C:\USERDATA\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#cartoonorbit.cartoonnetwork.com\settings.sol Object is locked skipped
C:\USERDATA\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#cosmos.bcst.yahoo.com\settings.sol Object is locked skipped
C:\USERDATA\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#cpxinteractive.com\settings.sol Object is locked skipped
C:\USERDATA\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#go.holdencampaign.com.au\settings.sol Object is locked skipped
C:\USERDATA\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#i.cartoonnetwork.com\settings.sol Object is locked skipped
C:\USERDATA\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#local\settings.sol Object is locked skipped
C:\USERDATA\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#mediaonenetwork.net\settings.sol Object is locked skipped
C:\USERDATA\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#naiadsystems.com\settings.sol Object is locked skipped
C:\USERDATA\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#revenue.net\settings.sol Object is locked skipped
C:\USERDATA\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#skinvideo.com\settings.sol Object is locked skipped
C:\USERDATA\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#static.espn.go.com\settings.sol Object is locked skipped
C:\USERDATA\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#static.userplane.com\settings.sol Object is locked skipped
C:\USERDATA\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#video.google.com\settings.sol Object is locked skipped
C:\USERDATA\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#virginradio.co.uk\settings.sol Object is locked skipped
C:\USERDATA\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.2.livejasmin.com\settings.sol Object is locked skipped
C:\USERDATA\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.cartoonnetwork.com\settings.sol Object is locked skipped
C:\USERDATA\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.ifilm.com\settings.sol Object is locked skipped
C:\USERDATA\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.metacafe.com\settings.sol Object is locked skipped
C:\USERDATA\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.nrl.com\settings.sol Object is locked skipped
C:\USERDATA\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.skinvideo.com\settings.sol Object is locked skipped
C:\USERDATA\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.youtube.com\settings.sol Object is locked skipped
C:\USERDATA\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#yieldmanager.com\settings.sol Object is locked skipped
C:\USERDATA\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#youtube.com\settings.sol Object is locked skipped
C:\USERDATA\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol Object is locked skipped
C:\USERDATA\Application Data\Microsoft\Address Book\HP_Administrator.wab Object is locked skipped
C:\USERDATA\Application Data\Microsoft\Address Book\HP_Administrator.wab~ Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CLR Security Config\v1.0.3705\security.config Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CLR Security Config\v1.0.3705\security.config.cch Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CLR Security Config\v1.0.3705\security.config.old Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CLR Security Config\v1.1.4322\security.config Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CLR Security Config\v1.1.4322\security.config.cch Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CLR Security Config\v1.1.4322\security.config.cch.256.8186296 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CLR Security Config\v1.1.4322\security.config.cch.2716.7899671 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\Credentials\S-1-5-21-3138567174-1692925254-182846090-1006\Credentials Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\Content\00813F57C0CBB9A83349C874FD014078 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\Content\08A1C9C30288A186F932D2F6CE954534 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\Content\119EFCC56A568F53AA7025356F876799 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\Content\23B523C9E7746F715D33C6527C18EB9D Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\Content\2BF68F4714092295550497DD56F57004 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\Content\303572DF538EDD8B1D606185F1D559B8 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\Content\3C83474D61E624A4F9844DF935AFE217 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\Content\486CC6AFD08942336C61FCD401C4A1D1 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\Content\55D5B35A7CC768E78826C2935CCC178A Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\Content\56BDEAABA957B2AEC25CCE688FEE4362 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\Content\5C45AD19E3530EC4218F560AFC04C3F7 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\Content\5F74056C561F814B7771CB2993A44DEB Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\Content\60E31627FDA0A46932B0E5948949F2A5 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\Content\696F3DE637E6DE85B458996D49D759AD Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\Content\6C68A73125F3238F044A8115D96841B6 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\Content\6EE3F4B30DD5A19E5ECECC8051B4EDE0 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\Content\71644221AC231DBD2359C18EBB2118DC Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\Content\730D5998294EC1DD878D90791B588994 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\Content\74BFD122C0875EC75DBE5C6DB4C59019 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\Content\7735880A01E3F94F763761958A7A8191 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\Content\79841F8EF00FBA86D33CC5A47696F165 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\Content\7C8A03C4580C6B04FDF34357F3474EDC Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\Content\8EDCF682921FE94F4A02A43CD1A28E6B Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\Content\904590238400AD963F77FAAAADC9BAB5 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\Content\930D1D196EE05A60D0FD6680AB99D0D5 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\Content\A44F4E7CB3133FF765C39A53AD8FCFDD Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\Content\A722DD0408D31B48F1599878CA31591F Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\Content\A8FABA189DB7D25FBA7CAC806625FD30 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\Content\B2F4B1D39F0694C6CDB433BC3CCF1418 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\Content\B69D763EB21649DA26F20618312DEE70 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\Content\B82262A5D5DA4DDACE9EDA7F787D0DEB Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\Content\C571B417AAF1F617555A0486AB3F5361 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\Content\C69FAAD80E5717FDD06CDA402566AD77 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\Content\CFC456E7E410D69E2C6F3E2DB75C7DB3 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\Content\E6024EAC88E6B6165D49FE3C95ADD735 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\Content\E891C648621A40AC7F773694A17FE76C Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\Content\F482C95F83F1B59228F1B1E720F2EDF1 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\Content\FB788E090BC1F3AA2FBC9E8FB2859601 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\MetaData\00813F57C0CBB9A83349C874FD014078 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\MetaData\08A1C9C30288A186F932D2F6CE954534 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\MetaData\119EFCC56A568F53AA7025356F876799 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\MetaData\23B523C9E7746F715D33C6527C18EB9D Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\MetaData\2BF68F4714092295550497DD56F57004 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\MetaData\303572DF538EDD8B1D606185F1D559B8 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\MetaData\3C83474D61E624A4F9844DF935AFE217 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\MetaData\486CC6AFD08942336C61FCD401C4A1D1 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\MetaData\55D5B35A7CC768E78826C2935CCC178A Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\MetaData\56BDEAABA957B2AEC25CCE688FEE4362 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\MetaData\5C45AD19E3530EC4218F560AFC04C3F7 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\MetaData\5F74056C561F814B7771CB2993A44DEB Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\MetaData\60E31627FDA0A46932B0E5948949F2A5 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\MetaData\696F3DE637E6DE85B458996D49D759AD Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\MetaData\6C68A73125F3238F044A8115D96841B6 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\MetaData\6EE3F4B30DD5A19E5ECECC8051B4EDE0 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\MetaData\71644221AC231DBD2359C18EBB2118DC Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\MetaData\730D5998294EC1DD878D90791B588994 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\MetaData\74BFD122C0875EC75DBE5C6DB4C59019 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\MetaData\7735880A01E3F94F763761958A7A8191 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\MetaData\79841F8EF00FBA86D33CC5A47696F165 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\MetaData\7C8A03C4580C6B04FDF34357F3474EDC Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\MetaData\8EDCF682921FE94F4A02A43CD1A28E6B Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\MetaData\904590238400AD963F77FAAAADC9BAB5 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\MetaData\930D1D196EE05A60D0FD6680AB99D0D5 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\MetaData\A44F4E7CB3133FF765C39A53AD8FCFDD Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\MetaData\A722DD0408D31B48F1599878CA31591F Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\MetaData\A8FABA189DB7D25FBA7CAC806625FD30 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\MetaData\B2F4B1D39F0694C6CDB433BC3CCF1418 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\MetaData\B69D763EB21649DA26F20618312DEE70 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\MetaData\B82262A5D5DA4DDACE9EDA7F787D0DEB Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\MetaData\C571B417AAF1F617555A0486AB3F5361 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\MetaData\C69FAAD80E5717FDD06CDA402566AD77 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\MetaData\CFC456E7E410D69E2C6F3E2DB75C7DB3 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\MetaData\E6024EAC88E6B6165D49FE3C95ADD735 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\MetaData\E891C648621A40AC7F773694A17FE76C Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\MetaData\F482C95F83F1B59228F1B1E720F2EDF1 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\CryptnetUrlCache\MetaData\FB788E090BC1F3AA2FBC9E8FB2859601 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\Crypto\RSA\S-1-5-21-3138567174-1692925254-182846090-1006\21ded613f2be71a66f3104061ddb00d3_267cc0a1-72b7-4298-9c01-e84f9d83e485 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\Crypto\RSA\S-1-5-21-3138567174-1692925254-182846090-1006\65dba0f110c5574d44890fc7f2abbda5_267cc0a1-72b7-4298-9c01-e84f9d83e485 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\Crypto\RSA\S-1-5-21-3138567174-1692925254-182846090-1006\6b29ae44e85efac3c72ff4d1865d73f1_267cc0a1-72b7-4298-9c01-e84f9d83e485 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\Crypto\RSA\S-1-5-21-3138567174-1692925254-182846090-1006\7b90a71bfc56f2582e916a51aed6df9a_267cc0a1-72b7-4298-9c01-e84f9d83e485 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\Crypto\RSA\S-1-5-21-3138567174-1692925254-182846090-1006\83aa4cc77f591dfc2374580bbd95f6ba_267cc0a1-72b7-4298-9c01-e84f9d83e485 Object is locked skipped
C:\USERDATA\Application Data\Microsoft\eHome\ehshell.config Object is locked skipped
C:\USERDATA\Application Data\Microsoft\eHome\mcl_images\0cb78ce0-77ab-4d99-a9a6-f7a4e95133d6-thumb.png Object is locked skipped
C:\USERDATA\Application Data\Microsoft\eHome\mcl_images\37baf479-af2f-4ac8-8416-25a4aae4da8a.png Object is locked skipped
C:\USERDATA\Application Data\Microsoft\eHome\mcl_images\700d5bd4-8de5-4588-99c4-4517ef168283-thumb.png Object is locked skipped
C:\USERDATA\Application Data\Microsoft\eHome\mcl_images\adb5525e-e56b-436e-a3dc-423fe5857f65-thumb.png Object is locked skipped
C:\USERDATA\Application Data\Microsoft\eHome\mcl_images\ehthumbs.db Object is locked skipped
C:\USERDATA\Application Data\Microsoft\HTML Help\hh.dat Object is locked skipped
C:\USERDATA\Application Data\Microsoft\IMJP8_1\imjp81u.dic Object is locked skipped
C:\USERDATA\Application Data\Microsoft\Installer\{121634B0-2F4B-11D3-ADA3-00C04F52DD52}\Icon386ED4E3.exe Object is locked skipped
C:\USERDATA\Application Data\Microsoft\Installer\{7C95AA5F-8416-4B13-BECA-139AF94D6274}\Icon7C95AA5F.exe Object is locked skipped
C:\USERDATA\Application Data\Microsoft\Installer\{A990EAA7-8941-4621-BC27-4F16261D3180}\1033.MST Object is locked skipped
C:\USERDATA\Application Data\Microsoft\Installer\{A990EAA7-8941-4621-BC27-4F16261D3180}\ARPPRODUCTICON.exe Object is locked skipped
C:\USERDATA\Application Data\Microsoft\Installer\{A990EAA7-8941-4621-BC27-4F16261D3180}\NewShortcut2_8315396A5EA1419DBEC4978284BDF556.exe Object is locked skipped
C:\USERDATA\Application Data\Microsoft\Installer\{A990EAA7-8941-4621-BC27-4F16261D3180}\NewShortcut3_8315396A5EA1419DBEC4978284BDF556.exe Object is locked skipped
C:\USERDATA\Application Data\Microsoft\Internet Explorer\brndlog.bak Object is locked skipped
C:\USERDATA\Application Data\Microsoft\Internet Explorer\brndlog.txt Object is locked skipped
C:\USERDATA\Application Data\Microsoft\Internet Explorer\Desktop.htt Object is locked skipped
C:\USERDATA\Application Data\Microsoft\Internet Explorer\Quick Launch\desktop.ini Object is locked skipped
C:\USERDATA\Application Data\Microsoft\Internet Explorer\Quick Launch\FrostWire 4.10.9 Beta.lnk Object is locked skipped
C:\USERDATA\Application Data\Microsoft\Internet Explorer\Quick Launch\iTunes.lnk Object is locked skipped
C:\USERDATA\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk Object is locked skipped
C:\USERDATA\Application Data\Microsoft\Internet Explorer\Quick Launch\Media Center.lnk Object is locked skipped
C:\USERDATA\Application Data\Microsoft\Internet Explorer\Quick Launch\Morpheus.lnk Object is locked skipped
C:\USERDATA\Application Data\Microsoft\Internet Explorer\Quick Launch\QuickTime Player.lnk Object is locked skipped
C:\USERDATA\Application Data\Microsoft\Internet Explorer\Quick Launch\RealArcade.lnk Object is locked skipped
C:\USERDATA\Application Data\Microsoft\Internet Explorer\Quick Launch\RealPlayer.lnk Object is locked skipped
C:\USERDATA\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf Object is locked skipped
C:\USERDATA\Application Data\Microsoft\Internet Explorer\Quick Launch\Trojan Remover.lnk Object is locked skipped
C:\USERDATA\Application Data\Microsoft\Internet Explorer\Quick Launch\TrojanHunter Scanner.lnk Object is locked skipped
C:\USERDATA\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk Object is locked skipped
C:\USERDATA\Application Data\Microsoft\Media Player\0055DC29.wpl Object is locked skipped
C:\USERDATA\Application Data\Microsoft\MMC\dfrg Object is locked skipped
C:\USERDATA\Application Data\Microsoft\MSN Messenger\3564916280\Backgrounds\map.dat Object is locked skipped
C:\USERDATA\Application Data\Microsoft\MSN Messenger\3564916280\Backgrounds\TFR26.dat Object is locked skipped
C:\USERDATA\Application Data\Microsoft\MSN Messenger\3564916280\Backgrounds\TFR27.dat Object is locked skipped
C:\USERDATA\Application Data\Microsoft\MSN Messenger\3564916280\Backgrounds\TFR28.dat Object is locked skipped
C:\USERDATA\Application Data\Microsoft\MSN Messenger\3564916280\Backgrounds\TFR29.dat Object is locked skipped
C:\USERDATA\Application Data\Microsoft\MSN Messenger\3564916280\Backgrounds\TFR2A.dat Object is locked skipped
C:\USERDATA\Application Data\Microsoft\MSN Messenger\3564916280\DynamicBackgrounds\map.dat Object is locked skipped
C:\USERDATA\Application Data\Microsoft\MSN Messenger\3564916280\DynamicBackgrounds\TFR2E.dat Object is locked skipped
C:\USERDATA\Application Data\Microsoft\MSN Messenger\3564916280\DynamicBackgrounds\TFR39.dat Object is locked skipped
C:\USERDATA\Application Data\Microsoft\MSN Messenger\3564916280\DynamicBackgrounds\TFR44.dat Object is locked skipped
C:\USERDATA\Application Data\Microsoft\MSN Messenger\3564916280\DynamicBackgrounds\TFR4F.dat Object is locked skipped
C:\USERDATA\Application Data\Microsoft\MSN Messenger\3564916280\History\map.dat Object is locked skipped
C:\USERDATA\Application Data\Microsoft\MSN Messenger\3564916280\ListCache.dat Object is locked skipped
C:\USERDATA\Application Data\Microsoft\MSN Messenger\3564916280\MapFile\TFR25.dat Object is locked skipped
C:\USERDATA\Application Data\Microsoft\MSN Messenger\3564916280\MapFile\TFR57.dat Object is locked skipped
C:\USERDATA\Application Data\Microsoft\MSN Messenger\3564916280\MapFile\TFR58.dat Object is locked skipped
C:\USERDATA\Application Data\Microsoft\MSN Messenger\3564916280\MapFile\TFR77.dat Object is locked skipped
C:\USERDATA\Application Data\Microsoft\MSN Messenger\3564916280\MapFile\TFRD9.dat Object is locked skipped
C:\USERDATA\Application Data\Microsoft\MSN Messenger\3564916280\sqmdata00.sqm Object is locked skipped
C:\USERDATA\Application Data\Microsoft\MSN Messenger\3564916280\sqmdata01.sqm Object is locked skipped
C:\USERDATA\Application Data\Microsoft\MSN Messenger\3564916280&
  • 0

#14
paulelsa

paulelsa

    Member

  • Topic Starter
  • Member
  • PipPip
  • 30 posts
Deckard's System Scanner v20071014.68
Run by HP_Administrator on 2008-05-04 07:28:18
Computer is in Normal Mode.
--------------------------------------------------------------------------------

System Drive C: has 10.2 GiB (less than 15%) free.


-- HijackThis (run as HP_Administrator.exe) ------------------------------------

Unable to find log (file not found); running clone.
-- HijackThis Clone ------------------------------------------------------------


Emulating logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2008-05-04 07:28:22
Platform: Windows XP Service Pack 2 (5.01.2600)
MSIE: Internet Explorer (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\system32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe
C:\WINDOWS\ehome\ehRecvr.exe
C:\WINDOWS\ehome\ehSched.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe
C:\Program Files\Maxtor\OneTouch\Utils\SyncServices.exe
C:\Program Files\Retrospect\Retrospect Express HD 1.1\retrorun.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
C:\WINDOWS\system32\ati2evxx.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\ehome\ehmsas.exe
C:\WINDOWS\system\hpsysdrv.exe
C:\hp\KBD\kbd.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\ALCWZRD.EXE
C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\VPTray.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Help and Support Additions\Pavilion\XPEWWBF4\plugin\bin\PCHButton.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Internode\mum.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\FireTrust\MailWasher Pro\MailWasher.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Documents and Settings\HP_Administrator\Desktop\Virus Spy Protect\dss.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com.au/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft....k/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft....k/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft....k/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft....k/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\GoogleToolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.0.1225.9868\swg.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\GoogleToolbar2.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] "C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe" /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] "C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE" /SYNC
O4 - HKLM\..\Run: [PHIME2002A] "C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE" /IMEName
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [zzzHPSETUP] E:\Setup.exe \RESET
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [Acme.PCHButton] C:\PROGRA~1\HELPAN~1\Pavilion\XPEWWBF4\plugin\bin\pchbutton.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [InternodeUsage] C:\PROGRA~1\INTERN~2\mum.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - Startup: MailWasherPro.lnk = C:\Program Files\FireTrust\MailWasher Pro\MailWasher.exe
O4 - Global Startup: Event Reminder.lnk = C:\Program Files\PrintMaster 16\pmremind.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\MSOffice\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - (file missing)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky...can_unicode.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft....k/?linkid=39204
O16 - DPF: {44990301-3C9D-426D-81DF-AAB636FA4345} (Symantec Script Runner Class) - http://www.symantec....abs/tgctlsr.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.micros...b?1175582327703
O16 - DPF: {8BC53B30-32E4-4ED3-BEF9-DB761DB77453} (CInstallLPCtrl Object) - http://u3.sandisk.co...LPInstaller.CAB
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoft...free/asinst.cab
O16 - DPF: {B1E2B96C-12FE-45E2-BEF1-44A219113CDD} (SABScanProcesses Class) - http://www.superadbl...ivex/sabspx.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.m...ash/swflash.cab
O18 - Protocol: belarc - {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - C:\Program Files\Belarc\Advisor\System\BAVoilaX.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\MSN Messenger\msgrapp.8.1.0178.00.dll
O18 - Protocol: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\MSN Messenger\msgrapp.8.1.0178.00.dll
O18 - Protocol: mso-offdap - {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Program Files\Common Files\Microsoft Shared\Web Components\10\OWC10.DLL
O18 - Protocol: mso-offdap11 - {32505114-5902-49B2-880A-1F7738E5A384} - C:\Program Files\Common Files\Microsoft Shared\Web Components\11\OWC11.DLL
O18 - Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\system32\WRLogonNTF.dll (file missing)
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\ati2evxx.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: DefWatch - Symantec Corporation - C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NBService - Unknown owner - C:\Program Files\Nero\Nero 7\Nero
O23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe
O23 - Service: MaxSyncService (NTService1) - Unknown owner - C:\Program Files\Maxtor\OneTouch\Utils\SyncServices.exe
O23 - Service: Retrospect Express HD Helper (RetroExp Helper) - EMC Dantz - C:\Program Files\Retrospect\Retrospect Express HD 1.1\rthlpsvc.exe
O23 - Service: Retrospect Express HD Launcher (RetroExpLauncher) - EMC Dantz - C:\Program Files\Retrospect\Retrospect Express HD 1.1\retrorun.exe
O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe


--
End of file - 12672 bytes

-- Files created between 2008-04-04 and 2008-05-04 -----------------------------

2008-05-03 19:42:06 0 d-------- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab
2008-05-03 19:42:03 0 d-------- C:\WINDOWS\system32\Kaspersky Lab
2008-05-03 19:42:01 0 d-------- C:\WINDOWS\LastGood
2008-05-03 16:37:25 0 d-------- C:\Documents and Settings\HP_Administrator\Application Data\Malwarebytes
2008-05-03 16:37:08 0 d-------- C:\Program Files\Malwarebytes' Anti-Malware
2008-05-03 16:37:08 0 d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-04-25 14:30:05 0 d-------- C:\WINDOWS\Performance
2008-04-25 14:29:26 0 d-------- C:\Documents and Settings\All Users\Application Data\Microsoft Corporation
2008-04-25 14:28:41 0 d-------- C:\Program Files\Microsoft Windows Vista Upgrade Advisor
2008-04-04 16:19:13 0 d-------- C:\Program Files\Bonjour
2008-04-04 14:18:19 0 dr-h----- C:\Documents and Settings\HP_Administrator\Recent


-- Find3M Report ---------------------------------------------------------------

2008-05-03 19:02:27 0 d-------- C:\Documents and Settings\HP_Administrator\Application Data\U3
2008-05-03 18:55:26 10 --a------ C:\WINDOWS\popcinfo.dat
2008-05-03 16:05:52 0 d-------- C:\Documents and Settings\HP_Administrator\Application Data\MailWasherPro
2008-05-02 16:51:26 0 d-------- C:\Documents and Settings\HP_Administrator\Application Data\Internode
2008-05-01 17:30:37 0 d-------- C:\Program Files\Safari
2008-05-01 17:27:19 0 d-------- C:\Program Files\Apple Software Update
2008-04-30 16:51:51 27761 --a------ C:\Documents and Settings\HP_Administrator\Application Data\com.kennettnet.MusicRescueProfiles.plist
2008-04-30 16:51:50 3304 --a------ C:\Documents and Settings\HP_Administrator\Application Data\com.kennettnet.MusicRescue.plist
2008-04-26 14:03:20 664 --a------ C:\WINDOWS\system32\d3d9caps.dat
2008-04-23 17:24:37 0 d-------- C:\Program Files\FrostWire
2008-04-23 16:34:56 0 d-------- C:\Documents and Settings\HP_Administrator\Application Data\NCH Swift Sound
2008-04-23 16:34:54 0 d-------- C:\Program Files\NCH Swift Sound
2008-04-23 16:11:15 0 d-------- C:\Program Files\LimeWire
2008-04-20 21:20:14 0 d-------- C:\Documents and Settings\HP_Administrator\Application Data\Azureus
2008-04-17 20:40:55 0 d-------- C:\Program Files\Common Files\Symantec Shared
2008-04-06 18:04:59 0 d-------- C:\Documents and Settings\HP_Administrator\Application Data\foobar2000
2008-04-05 08:41:51 0 d-------- C:\Documents and Settings\HP_Administrator\Application Data\Adobe
2008-04-04 21:15:03 0 d-------- C:\Program Files\Common Files\Wise Installation Wizard
2008-04-04 16:30:57 0 d-------- C:\Program Files\Common Files\Adobe
2008-04-03 17:40:17 0 d-------- C:\Program Files\iTunes
2008-04-03 17:40:06 0 d-------- C:\Program Files\iPod
2008-04-03 17:35:27 0 d-------- C:\Program Files\QuickTime
2008-04-01 17:29:01 127813076 --a------ C:\SYM_REGISTRY_BACKUP.reg
2008-03-27 13:25:38 0 d-------- C:\Program Files\QUICKENW
2008-03-27 13:12:13 0 d-------- C:\Program Files\SUPERAntiSpyware
2008-03-26 11:03:03 0 d-------- C:\Program Files\Common Files
2008-03-26 11:03:03 0 d-------- C:\Program Files\Common Files\Macrovision Shared
2008-03-26 09:54:35 0 d-------- C:\Program Files\MagicISO
2008-03-24 14:17:49 0 d-------- C:\Program Files\GameSpy Arcade
2008-03-24 14:12:29 0 d-------- C:\Program Files\Microsoft Games
2008-03-21 17:12:57 97116 ---h----- C:\WINDOWS\system32\mlfcache.dat
2008-03-20 21:01:11 0 d-------- C:\Documents and Settings\HP_Administrator\Application Data\Apple Computer
2008-03-19 19:19:52 0 d-------- C:\Program Files\Lavasoft
2008-03-17 21:07:09 0 d-------- C:\Program Files\RSSoft
2008-03-17 20:27:48 0 d-------- C:\Program Files\Sunbelt Software
2008-03-16 20:15:47 0 d-------- C:\Program Files\Common Files\Blizzard Entertainment
2008-03-16 14:18:03 0 d-------- C:\Program Files\TrojanHunter 4.5
2008-03-16 14:17:14 0 d-------- C:\Program Files\TrojanHunter 4.6
2008-03-16 14:11:30 30 -----n--- C:\WINDOWS\mscpt.dat
2008-03-16 13:39:23 4667 -----n--- C:\Documents and Settings\HP_Administrator\Application Data\Cabos.plist
2008-03-16 13:38:10 0 d-------- C:\Program Files\Ares
2008-03-16 10:22:18 0 d-------- C:\Program Files\Zuma Deluxe
2008-03-15 15:42:54 0 d-------- C:\Program Files\Azureus
2008-03-09 13:52:41 0 d-------- C:\Program Files\Canon
2008-02-10 14:58:19 3463 -----n--- C:\WINDOWS\unins000.dat
2008-02-10 14:56:22 691545 -----n--- C:\WINDOWS\unins000.exe


-- Registry Dump ---------------------------------------------------------------

*Note* empty entries & legit default entries are not shown


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray"="C:\WINDOWS\ehome\ehtray.exe" [10/08/2004 11:04 AM]
"IMJPMIG8.1"="C:\WINDOWS\IME\imjp8_1\IMJPMIG.exe" [11/08/2004 05:00 AM]
"MSPY2002"="C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe" [11/08/2004 05:00 AM]
"PHIME2002ASync"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe" [11/08/2004 05:00 AM]
"PHIME2002A"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe" [11/08/2004 05:00 AM]
"hpsysdrv"="c:\windows\system\hpsysdrv.exe" [07/05/1998 04:04 PM]
"KBD"="C:\HP\KBD\KBD.EXE" [11/02/2003 08:02 PM]
"Recguard"="C:\WINDOWS\SMINST\RECGUARD.EXE" [14/04/2004 08:43 PM]
"AGRSMMSG"="AGRSMMSG.exe" [29/06/2004 05:06 PM C:\WINDOWS\AGRSMMSG.exe]
"PS2"="C:\WINDOWS\system32\ps2.exe" [16/10/2002 04:57 PM]
"ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [26/08/2004 09:00 PM]
"zzzHPSETUP"="E:\Setup.exe" []
"SoundMan"="SOUNDMAN.EXE" [21/09/2005 10:24 AM C:\WINDOWS\SOUNDMAN.EXE]
"AlcWzrd"="ALCWZRD.EXE" []
"vptray"="C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe" [07/10/2003 12:39 PM]
"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [20/07/2007 04:01 PM]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [28/03/2008 11:37 PM]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [30/03/2008 10:36 AM]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Acme.PCHButton"="C:\PROGRA~1\HELPAN~1\Pavilion\XPEWWBF4\plugin\bin\pchbutton.exe" [15/09/2004 04:12 PM]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [10/08/2004 10:00 PM]
"InternodeUsage"="C:\PROGRA~1\INTERN~2\mum.exe" [02/03/2008 03:38 PM]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe" [16/11/2006 07:04 PM]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [20/06/2007 03:56 PM]

C:\Documents and Settings\HP_Administrator\Start Menu\Programs\Startup\
MailWasherPro.lnk - C:\Program Files\FireTrust\MailWasher Pro\MailWasher.exe [22/07/2007 10:51:02 AM]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Event Reminder.lnk - C:\Program Files\PrintMaster 16\pmremind.exe [20/01/2004 3:10:40 AM]
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe [29/05/2004 5:31:38 AM]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"InstallVisualStyle"=C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
"InstallTheme"=C:\WINDOWS\Resources\Themes\Royale.theme

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"DisableRegistryTools"=0 (0x0)

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [20/12/2006 12:55 PM 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL 12/06/2007 08:08 PM 294912 C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
"Authentication Packages"= msv1_0 C:\\WINDOWS\\system32\\ddccc

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
SecurityProviders msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll,

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk
backup=C:\WINDOWS\pss\Adobe Reader Speed Launch.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Synchronizer.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Reader Synchronizer.lnk
backup=C:\WINDOWS\pss\Adobe Reader Synchronizer.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Billminder.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Billminder.lnk
backup=C:\WINDOWS\pss\Billminder.lnkCommon Startup
  • 0

#15
andrewuk

andrewuk

    Trusted Helper

  • Malware Removal
  • 5,297 posts
in this post we will clear the infections found in the kaspersky scan, repair your LSA keys, scan an odd looking file, update your out of date java and do a final scan.

we will then see how your machine is running.


====STEP 1====
Please double-click OTMoveIt2.exe to run it. (Vista users, please right click on OTMoveit2.exe and select "Run as an Administrator")
  • Copy the file paths below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy):

    [kill explorer]
    C:\Documents and Settings\All Users\Start Menu\Programs\Download programs.exe
    C:\Documents and Settings\HP_Administrator\Incomplete\T-3545425-she kiss.mp3
    C:\Documents and Settings\HP_Administrator\Shared\sort of dunno nothin.mp3
    C:\WINDOWS\popcinfo.dat
    purity 
    [start explorer]
  • Return to OTMoveIt2, right click in the "Paste List of Files/Folders to Move" window (under the light Yellow bar) and choose Paste.
  • Click the red Moveit! button.
  • A log of files and folders moved will be created in the c:\_OTMoveIt\MovedFiles folder in the form of Date and Time (mmddyyyy_hhmmss.log). Please open this log in Notepad and post its contents in your next reply.
  • Close OTMoveIt2
If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes.


====STEP 2====
The steps that I am about to suggest involve modifying the registry. Modfying the registry can be dangerous so we will make a backup of the registry first.
Modification of the registry can be EXTREMELY dangerous if you do not know exactly what you are doing so follow the steps that are listed below EXACTLY. if you cannot preform some of these steps or if you have ANY questions please ask BEFORE proceeding.

Backing Up Your Registry
  • Go Here and download ERUNT
    (ERUNT (Emergency Recovery Utility NT) is a free program that allows you to keep a complete backup of your registry and restore it when needed.)
  • Install ERUNT by following the prompts
    (use the default install settings but say no to the portion that asks you to add ERUNT to the start-up folder, if you like you can enable this option later)
  • Start ERUNT
    (either by double clicking on the desktop icon or choosing to start the program at the end of the setup)
  • Choose a location for the backup
    (the default location is C:\WINDOWS\ERDNT which is acceptable).
  • Make sure that at least the first two check boxes are ticked
  • Press OK
  • Press YES to create the folder.
Registry Modifications


Registry Modifications

Next, lets remove the unwanted items.

Please open Notepad
  • Click Start , then Run
  • Type notepad .exe in the Run Box.
Please copy the contents of the code box below into the notepad. To do this highlight the contents of the box and right click on it.

Save it to your desktop has fixit.reg (filetype = any)

REGEDIT4

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
"Authentication Packages"=hex(7):6d,73,76,31,5f,30,00,00

NOTICE: This file was written specifically for this user, for use on that particular machine.
Running this on another machine may cause damage to your operating sysytem


Locate fixit.reg on your Desktop and double-click on it.
You will receive a prompt similar to: "Do you wish to merge the information into the registry?".
Answer "Yes" and wait for a message to appear similar to "Merged Successfully".

Please reply back letting me know if it merged correctly.

(In case you are unsure how to create a reg file, take a look here with screenshots.)



====STEP 3====
Jotti File Submission:

Please go to Jotti's malware scan
Copy and paste the following file path into the "File to upload & scan"box on the top of the page:
E:\Setup.exe \RESET

Click on the submit button

Please post the results of the scan in your next reply.

If Jotti is busy, try the same atVirustotal



====STEP 4====
Clearing the Java cache:
there is a nice set of instructions http://www.java.com/.../5000020300.xml

  • Click Start > Control Panel.
  • Double-click the Java icon in the control panel and then the Java Control Panel will appear.
  • Click Settings under Temporary Internet Files and the Temporary Files Settings dialog box appears.
  • Click Delete Files and the Delete Temporary Files dialog box appears.
  • Make sure all three boxes are ticked: Downloaded Applets, Downloaded Applications and Other Files and then Click OK on Delete Temporary Files window. Note: This deletes all the Downloaded Applications and Applets from the cache.
  • Click OK on Temporary Files Settings window.
Upgrading Java:
  • Download the latest version of Java Runtime Environment (JRE) 6 Update 6.
  • Scroll down to where it says "The J2SE Runtime Environment (JRE) allows end-users to run Java applications".
  • Click the "Download" button to the right.
  • Select your Platform and check the box that says: "I agree to the Java SE Runtime Environment 6 License Agreement.".
  • Click on Continue.
  • Click on the link to download Windows Offline Installation (jre-6u6-windows-i586-p.exe) and save it to your desktop. Do NOT use the Sun Download Manager..
  • Close any programs you may have running - especially your web browser.
  • Go to Start > Control Panel, double-click on Add/Remove programs and remove all older versions of Java.
  • Check any item with Java Runtime Environment (JRE or J2SE) in the name.
  • Click the Remove or Change/Remove button.
  • Repeat as many times as necessary to remove each Java version.
  • Reboot your computer once all Java components are removed.
  • Then from your desktop double-click on the download to install the newest version.


====STEP 5====
Download and scan with SUPERAntiSpyware Free for Home Users
  • Double-click SUPERAntiSpyware.exe and use the default settings for installation.
  • An icon will be created on your desktop. Double-click that icon to launch the program.
  • If asked to update the program definitions, click "Yes". If not, update the definitions before scanning by selecting "Check for Updates". (If you encounter any problems while downloading the updates, manually download and unzip them from here.)
  • Under "Configuration and Preferences", click the Preferences button.
  • Click the Scanning Control tab.
  • Under Scanner Options make sure the following are checked (leave all others unchecked):
    • Close browsers before scanning.
    • Scan for tracking cookies.
    • Terminate memory threats before quarantining.
  • Click the "Close" button to leave the control center screen.
  • Back on the main screen, under "Scan for Harmful Software" click Scan your computer.
  • On the left, make sure you check C:\Fixed Drive.
  • On the right, under "Complete Scan", choose Perform Complete Scan.
  • Click "Next" to start the scan. Please be patient while it scans your computer.
  • After the scan is complete, a Scan Summary box will appear with potentially harmful items that were detected. Click "OK".
  • Make sure everything has a checkmark next to it and click "Next".
  • A notification will appear that "Quarantine and Removal is Complete". Click "OK" and then click the "Finish" button to return to the main menu.
  • If asked if you want to reboot, click "Yes".
  • To retrieve the removal information after reboot, launch SUPERAntispyware again.
    • Click Preferences, then click the Statistics/Logs tab.
    • Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.
    • If there are several logs, click the current dated log and press View log. A text file will open in your default text editor.
    • Please copy and paste the Scan Log results in your next reply.
  • Click Close to exit the program.


In your next reply could i see:
1. the OTMoveIT log
2. the jotti report
3. the SUPERantispyware scan
4. a DSS log
5. some idea of how your machine is running now

The text from these files may exceed the maximum post length for this forum. Hence, you may need to post the information over 2 or more posts.

andrewuk
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP