Computer Help and Spyware Removal Computer Help and Spyware Removal Computer Help and Spyware Removal Computer Help Forums Windows Startup Programs Database Virus, Spyware, and Malware Removal Guides Computer Tutorials Uninstall Database File Database Computer Glossary Computer Resources
 

Welcome Guest ( Log In | Click here to Register a free account now! )



Register a free account to unlock additional features at BleepingComputer.com
Welcome to Bleeping Computer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.
Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.
MalwareByte's Anti-Malware Download

> Forum Guidelines

Read this topic before posting a log.


DO NOT post a ComboFix log unless requested to.


Only members of the HijackThis Team or Moderators are allowed to help people with logs. Anyone else should refrain from posting to another user's log.


When posting a log please put the type of infection you have in the topic title. IE: Winfixer, Virtumonde, WinTools, WebSearch, Home Search Assistant, etc.


Do not bump your topic. We try to resolve logs on a first come/first served basis. By bumping your log you will be pushed back in line due to the new date of your bump.

3 Pages V  < 1 2 3 >  
Reply to this topicStart new topic
> Winantivirus And Other Popup Problems
Navydood
post Oct 5 2006, 06:34 PM
Post #16


Member
**

Group: Members
Posts: 26
Joined: 3-October 06
Member No.: 88,275
Part 6

C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\GT6JW5QV\11409088[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\GT6JW5QV\11563874[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\GT6JW5QV\9226550[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\GT6JW5QV\9D5CA2B6BD4657C198ADAE1525F[1].jpg Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\GT6JW5QV\aboutus[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\GT6JW5QV\AllServices[1].xml Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\GT6JW5QV\background[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\GT6JW5QV\bd-global-nav-divit[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\GT6JW5QV\bg-leftnav[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\GT6JW5QV\bg_rcol_main[1].jpg Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\GT6JW5QV\buy_now[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\GT6JW5QV\CAJQ6XVV.8087843544127422 Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\GT6JW5QV\catalogmenuselect[1].js Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\GT6JW5QV\category[1].css Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\GT6JW5QV\cn253624[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\GT6JW5QV\desktop.ini Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\GT6JW5QV\eminimall.v3[2].js Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\GT6JW5QV\FCDCEDDD26923DFD13F7A57FB69985[1].jpg Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\GT6JW5QV\grngrad_5x35[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\GT6JW5QV\h1gradient[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\GT6JW5QV\hd_bks_nr_top[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\GT6JW5QV\hrule[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\GT6JW5QV\ie[1].htm Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\GT6JW5QV\k-search-2.1.53-au[2].js Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\GT6JW5QV\KonaLibInline_new[2].js Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\GT6JW5QV\left[1].png Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\GT6JW5QV\mac_en[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\GT6JW5QV\malware[1].png Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\GT6JW5QV\nav_overview_on[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\GT6JW5QV\new_blog[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\GT6JW5QV\pcc2006-200px[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\GT6JW5QV\pipe[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\GT6JW5QV\px[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\GT6JW5QV\qc_shredder_100x75[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\GT6JW5QV\qc_summary2_100x84[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\GT6JW5QV\scripts[1].js Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\GT6JW5QV\search[1].css Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\GT6JW5QV\search[1].xml Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\GT6JW5QV\search[2].css Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\GT6JW5QV\tab[1].js Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\GT6JW5QV\tab_gifts06_cold[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\GT6JW5QV\topbuttons[1].xml Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\GT6JW5QV\topnav_division5155_on[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\GT6JW5QV\twflag[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\GT6JW5QV\user_offline[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\GT6JW5QV\vbulletin_menu[1].js Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\GT6JW5QV\WL[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\IVCNIFY5\032106_fastnfree_f9[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\IVCNIFY5\092206_recommends_f5[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\IVCNIFY5\10744765[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\IVCNIFY5\16_16_ico[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\IVCNIFY5\48x48_photomissing_icon[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\IVCNIFY5\5963825[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\IVCNIFY5\active-background[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\IVCNIFY5\active-right[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\IVCNIFY5\admin_account[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\IVCNIFY5\background[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\IVCNIFY5\BD269A90F8235777FBFB2353F88F15[1].jpg Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\IVCNIFY5\bg_actionmid[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\IVCNIFY5\browse_comingsoon[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\IVCNIFY5\button_check_out_on_sm[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\IVCNIFY5\C11A4B5B27397DE2072B2B0B0AC[1].jpg Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\IVCNIFY5\CANSBJ29.lpk Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\IVCNIFY5\CAVYI973.5794926388179427 Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\IVCNIFY5\comingsoon[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\IVCNIFY5\cp[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\IVCNIFY5\D4A743C1398E1744E8F22862BB55[1].jpg Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\IVCNIFY5\dcs[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\IVCNIFY5\DFFC58C37F1A746CF7FF40FB15C83D[1].swf Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\IVCNIFY5\Expo[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\IVCNIFY5\ff_popup_top[1].htm Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\IVCNIFY5\FixedLayerManager[1].js Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\IVCNIFY5\globalFunctions_45[1].js Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\IVCNIFY5\header-logo[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\IVCNIFY5\home-mast-homeoffice[1].png Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\IVCNIFY5\index[1].htm Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\IVCNIFY5\infection-box-left[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\IVCNIFY5\internet-security-10[1].swf Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\IVCNIFY5\isbnInquiry[1].htm Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\IVCNIFY5\jpflag[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\IVCNIFY5\keywords;kw=arts+crafts;dcopt=ist;cat=14339;list=all;sz=728x90;tile=1;ord=1
159141408468;[1] Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\IVCNIFY5\map-220-white_us[1].swf Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\IVCNIFY5\msn_b[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\IVCNIFY5\ONUSdateIDv3[1].jpg Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\IVCNIFY5\scan-online-a_17[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\IVCNIFY5\sendtofriend[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\IVCNIFY5\stg[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\IVCNIFY5\style1[1].css Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\IVCNIFY5\summary_mod_bt_wh[1].jpg Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\IVCNIFY5\table[1].js Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\IVCNIFY5\tab_bnu06_cold[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\IVCNIFY5\thupblue2_14x14[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\IVCNIFY5\top100[1].htm Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\IVCNIFY5\topnav_division5360_on[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\IVCNIFY5\topnav_vert_div[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\IVCNIFY5\vbspell[1].js Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\IVCNIFY5\zoom_gray[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\IVCNIFY5\[1] Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\OPEFG5I7\0000003493_000000000000000348226[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\OPEFG5I7\11202694[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\OPEFG5I7\11[1].jpg Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\OPEFG5I7\23942030[1].jpg Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\OPEFG5I7\469356-trojanspm-lx[1].htm Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\OPEFG5I7\4700304[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\OPEFG5I7\7CE57843948D6DF13E79A2DE4E15C[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\OPEFG5I7\7D38F59040AC91A388243732C926DD[1].jpg Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\OPEFG5I7\ab_inactive[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\OPEFG5I7\backgroundtile[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\OPEFG5I7\banner[1].htm Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\OPEFG5I7\baseline[1].htm Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\OPEFG5I7\bd-home-tab-bullet[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\OPEFG5I7\bd-home-tab-topg[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\OPEFG5I7\CA1RZDVP.gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\OPEFG5I7\caret_blue[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\OPEFG5I7\ce_survey_header_about_you[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\OPEFG5I7\chat-now[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\OPEFG5I7\cleardot[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\OPEFG5I7\clearpixel[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\OPEFG5I7\dbllinonputty[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\OPEFG5I7\default[1].htm Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\OPEFG5I7\desktop.ini Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\OPEFG5I7\footer[1].js Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\OPEFG5I7\footer_latestbuzz_over[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\OPEFG5I7\hdr_buyitused[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\OPEFG5I7\index_cds2[1].htm Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\OPEFG5I7\logo[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\OPEFG5I7\logo[2].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\OPEFG5I7\logo_dod_75x75[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\OPEFG5I7\menu_open[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\OPEFG5I7\mxflag[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\OPEFG5I7\openWindow[1].js Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\OPEFG5I7\plain[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\OPEFG5I7\p_trans[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\OPEFG5I7\rbox[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\OPEFG5I7\scripts[1].js Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\OPEFG5I7\search[1].xml Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\OPEFG5I7\search[2].xml Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\OPEFG5I7\stage1-state[1].htm Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\OPEFG5I7\SubjBullet[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\OPEFG5I7\s[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\OPEFG5I7\table[1].css Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\OPEFG5I7\tab_dvd_cold[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\OPEFG5I7\tab_hdr_latestthreats_wh[1].jpg Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\OPEFG5I7\thdownblue_17x17[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\OPEFG5I7\tn-about[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\OPEFG5I7\tn-partners-over[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\OPEFG5I7\topnav_division6241_on[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\OPEFG5I7\toppromo_fastfree05[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\OPEFG5I7\VirusInfo[1].js Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\OPEFG5I7\visualcart_prodid[1].js Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\OPEFG5I7\WhatUSReads[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\OPEFG5I7\What_else[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\OPEFG5I7\win_bonanza_srv_rct_oct[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\OPEFG5I7\yg_formcharcount[2].js Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\S5270LM7\0000010432_000000000000000348061[1].jpg Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\S5270LM7\0000051909_000000000000000347693[1].jpg Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\S5270LM7\10665890[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\S5270LM7\11326158[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\S5270LM7\11386843[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\S5270LM7\11407320[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\S5270LM7\5781633[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\S5270LM7\70x25.tab.v3[1].png Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\S5270LM7\75EB3A216217719ED4ABF92AC78B6D[1].jpg Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\S5270LM7\89C42CAED585F789A5842EA72FAEE[1].jpg Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\S5270LM7\admin_aboutshipping[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\S5270LM7\ad_2bg[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\S5270LM7\afteryourvisit[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\S5270LM7\arrow-small-blue-right[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\S5270LM7\bd-home-tab-scannow[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\S5270LM7\bg_mod_alerts[1].jpg Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\S5270LM7\blu[2].css Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\S5270LM7\bottom-right-corner[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\S5270LM7\Box[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\S5270LM7\btn_Find[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\S5270LM7\CA4D2B0P.lpk Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\S5270LM7\caflag[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\S5270LM7\CAP5R7UW.gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\S5270LM7\careers[1].htm Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\S5270LM7\CAZEX4LN.htm Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\S5270LM7\ce_survey_header_products[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\S5270LM7\cleardot[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\S5270LM7\collapse_thead[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\S5270LM7\Configure[1].txt Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\S5270LM7\desktop.ini Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\S5270LM7\dom_2.0.5[2].js Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\S5270LM7\footer_ONC_off[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\S5270LM7\footer_storelocator_off[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\S5270LM7\fort[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\S5270LM7\gradient_navigation2[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\S5270LM7\header-language04[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\S5270LM7\inactive-navigate-back[1].png Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\S5270LM7\layout[1].css Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\S5270LM7\logo[1].png Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\S5270LM7\logo_bn05[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\S5270LM7\main-ja_JP[1].css Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\S5270LM7\menuicon[1].jpg Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\S5270LM7\menuicon[1].png Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\S5270LM7\newsletter_btn[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\S5270LM7\orange_arrow[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\S5270LM7\riskrate-high[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\S5270LM7\scan-online-a_06[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\S5270LM7\scan-online-b_05[1].jpg Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\S5270LM7\search[1].xml Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\S5270LM7\search[2].xml Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\S5270LM7\segment[1].css Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\S5270LM7\sIFR-screen[1].css Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\S5270LM7\sort_up_1[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\S5270LM7\style1[1].css Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\S5270LM7\tn-home-over[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\S5270LM7\topnav_division5758_off[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\S5270LM7\uh_tcrn[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\UD05QPWB\092506_craft_f8v2[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\UD05QPWB\11671576[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\UD05QPWB\7CB737112435D91EBEA6B69DFFD64A[1].jpg Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\UD05QPWB\8299302[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\UD05QPWB\admin_colon[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\UD05QPWB\affiliates[1].css Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\UD05QPWB\affiliate[1].css Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\UD05QPWB\bd-global-nav-mid-hover[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\UD05QPWB\bkgrd-btn-standard[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\UD05QPWB\bkgrd_nav-tabs-white[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\UD05QPWB\blank[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\UD05QPWB\browser[1].js Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\UD05QPWB\CAG92VWX.HTM Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\UD05QPWB\ce_survey_header_over6D48C[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\UD05QPWB\cnflag[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\UD05QPWB\collapse_thead[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\UD05QPWB\coUAprint[1].css Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\UD05QPWB\css_menu[1].js Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\UD05QPWB\desktop.ini Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\UD05QPWB\divider_dot_horiz1[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\UD05QPWB\E53A645F037BD0687C85EB9DCE5[1].jpg Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\UD05QPWB\F94837436DFE3E95F08AA0AAC7F9[1].jpg Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\UD05QPWB\ff_popup_bottom[1].htm Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\UD05QPWB\ff_popup_info[1].htm Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\UD05QPWB\footer[1].js Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\UD05QPWB\gradient_header[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\UD05QPWB\guidingwords_en[1].txt Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\UD05QPWB\header-language01[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\UD05QPWB\helpMercury_gen[1].css Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\UD05QPWB\home-mast-smallbusiness[1].png Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\UD05QPWB\home_main_il1[1].jpg Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\UD05QPWB\inline_bag_lookinside[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\UD05QPWB\jewel[1].png Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\UD05QPWB\main[1].js Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\UD05QPWB\msft[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\UD05QPWB\override[1].css Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\UD05QPWB\plus[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\UD05QPWB\productConstructors_45[1].js Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\UD05QPWB\productpages[1].css Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\UD05QPWB\qsearch3_vline_dots[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\UD05QPWB\ratestar_filled[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\UD05QPWB\receipt_super_new[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\UD05QPWB\scan-online-a_18[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\UD05QPWB\Shopping[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\UD05QPWB\str[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\UD05QPWB\subnav_colon[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\UD05QPWB\thdownblue_14x14[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\UD05QPWB\topnav_division5360_over[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\UD05QPWB\user[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\UD05QPWB\vbulletin_md5[1].js Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\UD05QPWB\war_general[1].css Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\UD05QPWB\www.bitdefender[1].com Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\UD05QPWB\yg_browser[2].js Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\W9YV8L27\092506_atmovies_f4[1].jpg Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\W9YV8L27\11098752[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\W9YV8L27\11386223[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\W9YV8L27\34[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\W9YV8L27\71897FD62FFF7055CC9FAB85DB318E[1].jpg Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\W9YV8L27\8454188[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\W9YV8L27\9270[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\W9YV8L27\active-navigate-forward[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\W9YV8L27\ansbg_rateleft[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\W9YV8L27\bd-home-tab-buynow[1].png Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\W9YV8L27\beforeyourvisit[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\W9YV8L27\blank[1].htm Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\W9YV8L27\books_storefront[1].css Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\W9YV8L27\box[1].js Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\W9YV8L27\bullet[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\W9YV8L27\bullet_risk_low_7x7[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\W9YV8L27\CAAB03RW.gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\W9YV8L27\CACRKRWT.lpk Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\W9YV8L27\CAS5YR4L.276662791408761 Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\W9YV8L27\clear[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\W9YV8L27\clientSniffer_45[1].js Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\W9YV8L27\context-introduce[1].htm Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\W9YV8L27\copyright[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\W9YV8L27\coUA[1].css Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\W9YV8L27\default[1].css Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\W9YV8L27\default[1].htm Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\W9YV8L27\F97138B8EA29DC82EB8B4E8A4E677[1].jpg Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\W9YV8L27\ff_popup[1].htm Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\W9YV8L27\hkflag[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\W9YV8L27\ico_arrow_more[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\W9YV8L27\infection-box-right[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\W9YV8L27\keywords;kw=skin+care+tips;dcopt=ist;list=all;sz=180x150;tile=4;ord=1159141
408312;[1] Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\W9YV8L27\linePagination[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\W9YV8L27\MNdisc_16x16[1].png Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\W9YV8L27\nav_next[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\W9YV8L27\nav_page[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\W9YV8L27\newpaperbacks[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\W9YV8L27\normal-background[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\W9YV8L27\printer[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\W9YV8L27\prototypeNodes[1].js Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\W9YV8L27\ptwidget_default_icon[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\W9YV8L27\purchaseWizard[1].css Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\W9YV8L27\qsearch4_search[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\W9YV8L27\quote[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\W9YV8L27\reply[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\W9YV8L27\SafetyCenter[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\W9YV8L27\scan-online-a_15[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\W9YV8L27\scripts[1].js Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\W9YV8L27\searchhi[1].js Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\W9YV8L27\spacer[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\W9YV8L27\spacer[2].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\W9YV8L27\tab_membership_cold[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\W9YV8L27\threat_level_low[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\W9YV8L27\topnav_division5155_over[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\W9YV8L27\tsglive230[1].png Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\W9YV8L27\vcart_btn_checkout[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\W9YV8L27\virusMap_135x79[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\WZ1FY6RX\092506_books_f1[1].jpg Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\WZ1FY6RX\10998750[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\WZ1FY6RX\10999754[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\WZ1FY6RX\13-1x1[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\WZ1FY6RX\4A634D_FindYourStore[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\WZ1FY6RX\Ad-800x600[1].htm Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\WZ1FY6RX\AddtoCart_btn[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\WZ1FY6RX\ansbg_actionmid[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\WZ1FY6RX\aslframe[1].htm Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\WZ1FY6RX\aslframe[2].htm Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\WZ1FY6RX\auflag[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\WZ1FY6RX\b2_searchisbn[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\WZ1FY6RX\background[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\WZ1FY6RX\bd-home-tab-rss[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\WZ1FY6RX\bkgrd_header_hho[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\WZ1FY6RX\CAFISGBA.htm Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\WZ1FY6RX\ce_survey_header_fitting_room[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\WZ1FY6RX\cleardot[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\WZ1FY6RX\cutie-is10[1].jpg Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\WZ1FY6RX\D0409ED55352A6E597485977D34AE3[1].jpg Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\WZ1FY6RX\default[1].htm Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\WZ1FY6RX\event_2.0.5[2].js Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\WZ1FY6RX\FAQ[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\WZ1FY6RX\feedback[1].htm Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\WZ1FY6RX\footer_oncreditcard_off[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\WZ1FY6RX\gnav_bg_off_bt[1].jpg Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\WZ1FY6RX\gnav_bg_top_off[1].jpg Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\WZ1FY6RX\gradient_message[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\WZ1FY6RX\hdr_lrg_Buyitnew[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\WZ1FY6RX\implementation-native-plugin[1].png Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\WZ1FY6RX\inactive-navigate-forward[1].png Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\WZ1FY6RX\mode_threaded[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\WZ1FY6RX\navbits_start[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\WZ1FY6RX\passport[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\WZ1FY6RX\results[1].htm Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\WZ1FY6RX\scan-online-b_04[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\WZ1FY6RX\search[1].xml Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\WZ1FY6RX\search[2].xml Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\WZ1FY6RX\security[1].png Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\WZ1FY6RX\sep_vert_dot1[1].jpg Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\WZ1FY6RX\sidebar_left_corner_CCCC99[1].gif Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\WZ1FY6RX\skin-care-tips_W0QQfclZ4QQfkrZ1QQfnuZ1QQfsooZ1QQfsopZ3[1] Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\WZ1FY6RX\s_code[2].js Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\WZ1FY6RX\tab[1].css Object is locked skipped
C:\Documents and Settings\Heidi\Local Settings\Temporary Internet Files\Content.IE5\WZ1FY6RX\tab_home_hot[1]
Go to the top of the page
 
+Quote Post
Navydood
post Oct 5 2006, 06:35 PM
Post #17


Member
**

Group: Members
Posts: 26
Joined: 3-October 06
Member No.: 88,275
Should be the last one:




C:\Documents and Settings\Heidi\My Documents\My Pictures\Sample Images\Flower\Thumbs.db Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\My Pictures\Sample Images\Nature\Nature1.JPG Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\My Pictures\Sample Images\Nature\Nature2.JPG Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\My Pictures\Sample Images\Nature\Nature3.JPG Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\My Pictures\Sample Images\Nature\Nature4.JPG Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\My Pictures\Sample Images\Nature\Nature5.JPG Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\My Pictures\Sample Images\Nature\Thumbs.db Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\My Pictures\Sample Images\Travel\Thumbs.db Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\My Pictures\Sample Images\Travel\Travel1.JPG Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\My Pictures\Sample Images\Travel\Travel2.JPG Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\My Pictures\Sample Images\Travel\Travel3.JPG Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\My Pictures\Sample Images\Travel\Travel4.JPG Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\My Pictures\Sample Images\Travel\Travel5.JPG Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\My Pictures\Thumbs.db Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\My Scans\misc\New Folder\DSCN0046.JPG Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\My Scans\misc\New Folder\DSCN0047.JPG Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\My Scans\misc\New Folder\DSCN0167.JPG Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\My Scans\misc\New Folder\DSCN0265.JPG Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\My Scans\misc\New Folder\DSCN0278.JPG Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\My Scans\misc\New Folder\DSCN0279.JPG Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\My Scans\misc\New Folder\DSCN0284.JPG Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\My Scans\misc\New Folder\DSCN0285.JPG Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\My Scans\misc\New Folder\DSCN0286.JPG Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\My Scans\misc\New Folder\DSCN0287.JPG Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\My Scans\misc\New Folder\DSCN0288.JPG Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\My Scans\misc\New Folder\DSCN0289.JPG Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\My Scans\misc\New Folder\DSCN0290.JPG Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\My Scans\misc\New Folder\DSCN0291.JPG Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\My Scans\misc\New Folder\DSCN0294.JPG Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\My Scans\misc\New Folder\DSCN0295.JPG Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\My Scans\misc\New Folder\DSCN0333.JPG Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\My Scans\misc\New Folder\Thumbs.db Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\My Scans\misc\Thumbs.db Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\My Scans\Thumbs.db Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\My Videos\Desktop.ini Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\My Webs\desktop.ini Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\My Webs\_vti_pvt\botinfs.cnf Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\My Webs\_vti_pvt\bots.cnf Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\My Webs\_vti_pvt\deptodoc.btr Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\My Webs\_vti_pvt\doctodep.btr Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\My Webs\_vti_pvt\fpdbw.ico Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\My Webs\_vti_pvt\linkinfo.btr Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\My Webs\_vti_pvt\service.cnf Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\My Webs\_vti_pvt\service.lck Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\My Webs\_vti_pvt\services.cnf Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\My Webs\_vti_pvt\structure.cnf Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\New Compressed (zipped) Folder.zip Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\Powerpoint\powerpoint.ppt Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\Powerpoint\Thumbs.db Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\resume and supp. docs\ACCOMPLISHMENTS AND AWARDS.doc Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\resume and supp. docs\cover letter 2.rtf Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\resume and supp. docs\cover letter.doc Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\resume and supp. docs\cover letter.rtf Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\resume and supp. docs\EMPLOYMENT INFORMATION.doc Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\resume and supp. docs\Job Search Log.xls Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\resume and supp. docs\ref list.doc Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\resume and supp. docs\reference list.rmr Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\resume and supp. docs\Resume-paragraph style.doc Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\resume and supp. docs\Resume-Standard 0806.doc Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\resume and supp. docs\SALARIES.doc Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\resume and supp. docs\SKILLS USED AS A MEDICAL OFFICE ASSISTANT.doc Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\resume and supp. docs\thank you letter.doc Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\resume and supp. docs\Thumbs.db Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\ResumeMaker\cover letter TCCCR.rtf Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\taxes 2005\TaxCut\Daniel Levasseur 2005 Tax Return.T05 Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\taxes 2005\TurboTax\2004 Levasseur D Tax Return.pdf Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\taxes 2005\TurboTax\2004 Levasseur D Tax Return.tax Object is locked skipped
C:\Documents and Settings\Heidi\My Documents\Thumbs.db Object is locked skipped
C:\Documents and Settings\Heidi\NetHood\My Web Sites on MSN\Desktop.ini Object is locked skipped
C:\Documents and Settings\Heidi\NetHood\My Web Sites on MSN\target.lnk Object is locked skipped
C:\Documents and Settings\Heidi\ntuser.dat Object is locked skipped
C:\Documents and Settings\Heidi\NTUSER.DAT.LOG Object is locked skipped
C:\Documents and Settings\Heidi\ntuser.ini Object is locked skipped
C:\Documents and Settings\Heidi\SendTo\Compressed (zipped) Folder.ZFSendToTarget Object is locked skipped
C:\Documents and Settings\Heidi\SendTo\Desktop (create shortcut).DeskLink Object is locked skipped
C:\Documents and Settings\Heidi\SendTo\desktop.ini Object is locked skipped
C:\Documents and Settings\Heidi\SendTo\Mail Recipient.MAPIMail Object is locked skipped
C:\Documents and Settings\Heidi\SendTo\My Documents.mydocs Object is locked skipped
C:\Documents and Settings\Heidi\Start Menu\desktop.ini Object is locked skipped
C:\Documents and Settings\Heidi\Start Menu\Programs\Accessories\Accessibility\desktop.ini Object is locked skipped
C:\Documents and Settings\Heidi\Start Menu\Programs\Accessories\Accessibility\Magnifier.lnk Object is locked skipped
C:\Documents and Settings\Heidi\Start Menu\Programs\Accessories\Accessibility\Narrator.lnk Object is locked skipped
C:\Documents and Settings\Heidi\Start Menu\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk Object is locked skipped
C:\Documents and Settings\Heidi\Start Menu\Programs\Accessories\Accessibility\Utility Manager.lnk Object is locked skipped
C:\Documents and Settings\Heidi\Start Menu\Programs\Accessories\Address Book.lnk Object is locked skipped
C:\Documents and Settings\Heidi\Start Menu\Programs\Accessories\Command Prompt.lnk Object is locked skipped
C:\Documents and Settings\Heidi\Start Menu\Programs\Accessories\desktop.ini Object is locked skipped
C:\Documents and Settings\Heidi\Start Menu\Programs\Accessories\Entertainment\desktop.ini Object is locked skipped
C:\Documents and Settings\Heidi\Start Menu\Programs\Accessories\Entertainment\Windows Media Player.lnk Object is locked skipped
C:\Documents and Settings\Heidi\Start Menu\Programs\Accessories\Notepad.lnk Object is locked skipped
C:\Documents and Settings\Heidi\Start Menu\Programs\Accessories\Program Compatibility Wizard.lnk Object is locked skipped
C:\Documents and Settings\Heidi\Start Menu\Programs\Accessories\Synchronize.lnk Object is locked skipped
C:\Documents and Settings\Heidi\Start Menu\Programs\Accessories\Tour Windows XP.lnk Object is locked skipped
C:\Documents and Settings\Heidi\Start Menu\Programs\Accessories\Windows Explorer.lnk Object is locked skipped
C:\Documents and Settings\Heidi\Start Menu\Programs\desktop.ini Object is locked skipped
C:\Documents and Settings\Heidi\Start Menu\Programs\Internet Explorer.lnk Object is locked skipped
C:\Documents and Settings\Heidi\Start Menu\Programs\Outlook Express.lnk Object is locked skipped
C:\Documents and Settings\Heidi\Start Menu\Programs\Remote Assistance.lnk Object is locked skipped
C:\Documents and Settings\Heidi\Start Menu\Programs\Startup\desktop.ini Object is locked skipped
C:\Documents and Settings\Heidi\Start Menu\Programs\Windows Media Player.lnk Object is locked skipped
C:\Documents and Settings\Heidi\Templates\amipro.sam Object is locked skipped
C:\Documents and Settings\Heidi\Templates\excel.xls Object is locked skipped
C:\Documents and Settings\Heidi\Templates\excel4.xls Object is locked skipped
C:\Documents and Settings\Heidi\Templates\lotus.wk4 Object is locked skipped
C:\Documents and Settings\Heidi\Templates\powerpnt.ppt Object is locked skipped
C:\Documents and Settings\Heidi\Templates\presenta.shw Object is locked skipped
C:\Documents and Settings\Heidi\Templates\quattro.wb2 Object is locked skipped
C:\Documents and Settings\Heidi\Templates\sndrec.wav Object is locked skipped
C:\Documents and Settings\Heidi\Templates\winword.doc Object is locked skipped
C:\Documents and Settings\Heidi\Templates\winword2.doc Object is locked skipped
C:\Documents and Settings\Heidi\Templates\wordpfct.wpd Object is locked skipped
C:\Documents and Settings\Heidi\Templates\wordpfct.wpg Object is locked skipped
C:\Documents and Settings\Heidi\UserData\0LMZ0DQR\oWindowsUpdate[1].xml Object is locked skipped
C:\Documents and Settings\Heidi\UserData\index.dat Object is locked skipped
C:\Documents and Settings\Heidi\UserData\SLINW9IV\oXMLStoreUnit[1].xml Object is locked skipped
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\Program Files\InstallShield Installation Information\{EE7C3A14-1D20-49F6-B903-491561076F0F}\setup.ilg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc101.WAV Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc103\DSCN0353.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc103\DSCN0354.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc103\Thumbs.db Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc104\Thumbs.db Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc105\DSCN0355.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc105\DSCN0356.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc105\Thumbs.db Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc107.tmp Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc108\AG00319_.gif Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc108\AG00500_.gif Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc108\j0151191.wmf Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc108\j0162965.gif Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc108\j0336576.gif Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc108\j0387174.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc108\so01601_.wmf Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc108\so02060_.wmf Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc108\Thumbs.db Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc109\Thumbs.db Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc113\Repository\2004\August\23\Flower1.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc113\Repository\2004\August\23\Flower2.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc113\Repository\2004\August\23\Flower3.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc113\Repository\2004\August\23\Flower4.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc113\Repository\2004\August\23\Flower5.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc113\Repository\2004\August\23\Nature1.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc113\Repository\2004\August\23\Nature2.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc113\Repository\2004\August\23\Nature3.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc113\Repository\2004\August\23\Thumbs.db Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc114\DSCN0023.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc114\DSCN0082.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc114\DSCN0163.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc114\scan0001.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc114\scan0002.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc114\scan0003.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc114\scan0004.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc114\scan0005.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc114\Thumbs.db Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc115\2006-05-19-1606-09.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc115\2006-05-19-1607-55.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc115\2006-05-19-1609-06.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc115\scan0001-1.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc115\scan0001.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc115\scan0002.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc115\scan0003.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc115\scan0004.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc115\scan0005.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc115\scan0006.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc115\scan0007.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc115\scan0008.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc115\scan0009.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc115\scan0010.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc115\scan0011.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc115\Thumbs.db Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc118\2006-05-19-1606-09.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc118\2006-05-19-1607-55.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc118\2006-05-19-1609-06.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc118\Thumbs.db Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc119\DSCN0023.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc119\scan0001.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc119\scan0002.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc119\scan0007.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc119\scan0011.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc119\scan0014.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc119\scan0015.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc119\scan0016.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc119\scan0017.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc119\scan0018.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc119\scan0019.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc119\scan0020.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc119\scan0021.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc119\scan0022.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc119\scan0029.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc119\scan0030.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc119\scan0038.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc119\scan0039.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc119\Thumbs.db Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc120\2006-05-19-1606-09.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc120\2006-05-19-1607-55.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc120\2006-05-19-1609-06.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc120\DSCN0163.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc120\scan0003.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc120\scan0004.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc120\scan0005.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc120\scan0009.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc120\scan0010.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc120\scan0012.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc120\scan0013.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc120\scan0051.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc120\Thumbs.db Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc121\DSCN0082.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc121\scan0027.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc121\scan0028.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc121\scan0031.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc121\scan0034.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc121\scan0042.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc121\scan0043.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc121\scan0044.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc121\scan0045.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc121\scan0046.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc121\scan0048.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc121\scan0049.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc121\scan0050.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc121\Thumbs.db Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc122\scan0035.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc122\scan0037.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc122\scan0040.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc122\scan0041.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc122\scan0047.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc122\Thumbs.db Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc123.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc124.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc125.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc126.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc127.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc128.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc129.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc130.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc131.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc132.rmr Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc133.lnk Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc134.lnk Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc135.log Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc136.url Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc137.lnk Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc138.txt Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc139.url Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc140.shs Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc141.shs Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc142.doc Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc143.rmr Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc144.doc Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc145.tif Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc146.mdb Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc147.doc Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc148.tif Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc149.shs Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc150.url Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc155.lnk Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc156.lnk Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc159.lnk Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc160.lnk Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc161.lnk Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc162.lnk Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc163.lnk Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc164.lnk Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc165.lnk Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc167.lnk Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc171.lnk Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc173.lnk Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc174.erp Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc76.orig Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc77.orig Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc78.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc79.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc83.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc84.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc86.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc95.ppt Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc96.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc97.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc98.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-1482476501-1390067357-725345543-1005\Dc99.JPG Object is locked skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
C:\VundoFix Backups\ahuiMRT.dll.bad Infected: Packed.Win32.Klone.k skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\Downloaded Program Files\CONFLICT.1\daas.log Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped

Scan process completed.
Go to the top of the page
 
+Quote Post
Cretemonster
post Oct 5 2006, 07:54 PM
Post #18





Guests
Now that was different. blink.gif

Seems there are an awful lot of items locked and quite the load of temporoary files.

If you have anything stored in a temporary folder,please place it somewhere safe as the next step will remove all cookies and temp files from the PC.


Make sure the Recycle Bin is empty.


Open Internet Explorer,
Select Tools,
Select Internet Options
Select Delete Cookies and Delete Files(Check the box for Delete all offline content)


Please download ATF Cleaner by Atribune.
This program is for XP and Windows 2000 only
    Double-click ATF-Cleaner.exe to run the program.
    Under Main choose: Select All
    Click the Empty Selected button.
If you use Firefox browser
    Click Firefox at the top and choose: Select All
    Click the Empty Selected button.
    NOTE: If you would like to keep your saved passwords, please click No at the prompt.
If you use Opera browser
    Click Opera at the top and choose: Select All
    Click the Empty Selected button.
    NOTE: If you would like to keep your saved passwords, please click No at the prompt.
Click Exit on the Main menu to close the program.
For Technical Support, double-click the e-mail address located at the bottom of each menu.


Restart the computer and shut down any running applications you dont absolutley have to have running.

Make sure the only window open is Internet Explorer and run the Kaspersky scan again.

Please do not do anything with the PC while the scan is running.

Post the new Kaspersky log in the next reply,please.

This post has been edited by Cretemonster: Oct 5 2006, 07:54 PM
Go to the top of the page
 
+Quote Post
Navydood
post Oct 6 2006, 03:18 PM
Post #19


Member
**

Group: Members
Posts: 26
Joined: 3-October 06
Member No.: 88,275
Hi Crete -

I have run that same scan 3 more times now, once after installing ATF and doing what you said, once after checking my McAfee Firewall and blocking access to Microsoft FrontPage and again after blocking Windows Explorer access to the internet. Each time I used ATF to clear files and restart but I still have 6 or 7 pages of posts that Kapersky is skipping. I also noticed either yesterday or the day before my system time in the toolbar is now on 24hour time (like the military) and the date is being shown as YY-MM-DD (for example today is 06-10-06). I will post the Kapersky scans if you want but like I said they are the same as yesterday. I did save all of them though.

Navydood
Go to the top of the page
 
+Quote Post
Cretemonster
post Oct 6 2006, 04:26 PM
Post #20





Guests
Open HijackThis and access the Misc Tools section by one of the 2 methods below.

Open HijackThis and click on "Open the Misc Tools Section"

Open HijackThis and click on "Config" and then click on "Misc Tools"

Once in the Misc Tools Section--> Click on the "Open ADS Spy" tab

UNcheck the 2 boxes to the top left:

Quick Scan (Windows base folders only)

Ignore safe system info streams

Clicks Scan and once completed,click Save Log.

Post that log in the next reply.


Have you checked you clock configurations?

Right Click the clock and Select Adjust Date/Time
Go to the top of the page
 
+Quote Post
Navydood
post Oct 6 2006, 05:07 PM
Post #21


Member
**

Group: Members
Posts: 26
Joined: 3-October 06
Member No.: 88,275
Hi Crete -

Here is the results of that log. I tried to reset the clock but to no avail, I think that is part of the virus thingy.

C:\Documents and Settings\All Users\Documents\Install_AIM.exe : Zone.Identifier (26 bytes)
C:\Documents and Settings\All Users\Documents\My Music\Sample Music\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\All Users\Documents\My Music\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\All Users\Documents\My Pictures\For Sharing\0001\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\All Users\Documents\My Pictures\For Sharing\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\All Users\Documents\My Pictures\Sample Pictures\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\All Users\Documents\My Pictures\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\All Users\Documents\zlsSetup_55_062_000.exe : Zone.Identifier (26 bytes)
C:\Documents and Settings\Brianna\My Documents\homework\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\3 Doors Down\Away from the Sun\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\3 Doors Down\The Better Life\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\Ashlee Simpson\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\Dashboard Confessional\A Mark, A Mission, A Brand, A Scar\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\Dashboard Confessional\The Places You Have Come to Fear the Most\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\Dashboard Confessional\The Swiss Army Romance\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\Dashboard Confessional\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\Death Cab for Cutie\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\Death Cab for Cutie\We Have the Facts and We're Voting Yes\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\Default\Elocation\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\Default\The Fallout\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\Garth Brooks\The Hits\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\Hootie & the Blowfish\Cracked Rear View\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\Incubus\Crow Left of the Murder\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\Incubus\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\Kelly Clarkson\Breakaway\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\Local bleep\groupthink 2 faces.mp3 : Zone.Identifier (26 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\Local bleep\groupthink i know you.mp3 : Zone.Identifier (26 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\Michelle Branch\The Spirit Room\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\mix cd's\homecoming mix\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\Mudvayne\The End of All Things to Come\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\NickelBack\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\Nirvana\Nirvana\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\Now, Vol. 18\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\Pearl Jam\Ten\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\Stevie Ray Vaughan and Double Trouble\Greatest Hits\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\Stone Temple Pilots\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\Switchfoot\The Beautiful Letdown\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\Tim McGraw\Tim McGraw and the Dancehall Doctors\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\Tonic\Lemon Parade\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\Usher\Confessions\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Pictures\0002\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Pictures\0005\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Pictures\0012\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Pictures\0015\0014\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Pictures\0015\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Pictures\2006-05 (May)\july 06\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Pictures\2006-05 (May)\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Pictures\prom\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Pictures\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Scans\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Videos\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Dan\Desktop\ATF-Cleaner.exe : Zone.Identifier (26 bytes)
C:\Documents and Settings\Dan\Desktop\combofix.exe : Zone.Identifier (26 bytes)
C:\Documents and Settings\Dan\Desktop\hijackthis_sfx.exe : Zone.Identifier (26 bytes)
C:\Documents and Settings\Dan\Desktop\hosts\HOSTS : Zone.Identifier (26 bytes)
C:\Documents and Settings\Dan\Desktop\hosts\License.txt : Zone.Identifier (26 bytes)
C:\Documents and Settings\Dan\Desktop\hosts\mvps.bat : Zone.Identifier (26 bytes)
C:\Documents and Settings\Dan\Desktop\hosts\PrivacyPolicy.txt : Zone.Identifier (26 bytes)
C:\Documents and Settings\Dan\Desktop\hosts\readme.txt : Zone.Identifier (26 bytes)
C:\Documents and Settings\Dan\Desktop\hosts.zip : Zone.Identifier (26 bytes)
C:\Documents and Settings\Dan\Desktop\SL_00014819.jpg : Zone.Identifier (26 bytes)
C:\Documents and Settings\Dan\Desktop\SL_00017220.jpg : Zone.Identifier (26 bytes)
C:\Documents and Settings\Dan\Desktop\SmitfraudFix.cmd : Zone.Identifier (26 bytes)
C:\Documents and Settings\Dan\Desktop\spywareblastersetup351.exe : Zone.Identifier (26 bytes)
C:\Documents and Settings\Dan\Desktop\WindowsXP-KB896688-x86-ENU.exe : Zone.Identifier (26 bytes)
C:\Documents and Settings\Dan\My Documents\My Pictures\0001\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Dan\My Documents\My Pictures\0002\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Dan\My Documents\My Pictures\0003\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Dan\My Documents\My Pictures\0004\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Dan\My Documents\My Pictures\Crash\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Dan\My Documents\My Pictures\Family\PC310438.JPG : Zone.Identifier (26 bytes)
C:\Documents and Settings\Dan\My Documents\My Pictures\Family\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Dan\My Documents\My Pictures\Great shot\PC310432.JPG : Zone.Identifier (26 bytes)
C:\Documents and Settings\Dan\My Documents\My Pictures\Great shot\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Dan\My Documents\My Pictures\Joke Photos\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Dan\My Documents\My Pictures\junk\MBed7.JPG : Zone.Identifier (26 bytes)
C:\Documents and Settings\Dan\My Documents\My Pictures\junk\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Dan\My Documents\My Pictures\Military\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Dan\My Documents\My Pictures\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Dan\My Documents\My Pictures\w\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Dan\My Documents\My Pictures\x\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Dan\My Documents\My Pictures\z\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Dan\My Documents\ResumeMaker\Level I.doc : Zone.Identifier (26 bytes)
C:\Documents and Settings\Emily\My Documents\curpics\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Emily\My Documents\My Music\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Emily\My Documents\My Pictures\0004\13th bday\0002\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Emily\My Documents\My Pictures\0004\13th bday\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Emily\My Documents\My Pictures\0004\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Emily\My Documents\My Pictures\2-20-2006 (2)\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Emily\My Documents\My Pictures\2006-09 (Sep)\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Emily\My Documents\My Pictures\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Emily\My Documents\oooyyyy.exe : Zone.Identifier (26 bytes)
C:\Documents and Settings\Emily\My Documents\Thumbs.db : encryptable (0 bytes)
C:\WINDOWS\system32\drivers\etc\HOSTS : Zone.Identifier (26 bytes)
C:\WINDOWS\system32\SrchSTS.exe : Zone.Identifier (26 bytes)
C:\WINDOWS\system32\swreg.exe : Zone.Identifier (26 bytes)
C:\WINDOWS\system32\swsc.exe : Zone.Identifier (26 bytes)
Go to the top of the page
 
+Quote Post
Cretemonster
post Oct 6 2006, 07:06 PM
Post #22





Guests
That log must be huge as well,see if you can attach it to the next post so I can view the entire thing.

See if you can locate this file too??

C:\Documents and Settings\Emily\My Documents\oooyyyy.exe

If found,please have it scanned at the site below.
http://www.virustotal.com/en/indexf.html

Save any results to Notepad and post them back here.
Go to the top of the page
 
+Quote Post
Navydood
post Oct 6 2006, 07:45 PM
Post #23


Member
**

Group: Members
Posts: 26
Joined: 3-October 06
Member No.: 88,275
Crete -

I can't attach the log I have no option available for that. I ran the file through virustotal and below are the results:

AntiVir 7.2.0.25 10.06.2006 no virus found
Authentium 4.93.8 10.06.2006 no virus found
Avast 4.7.892.0 10.06.2006 no virus found
AVG 386 10.06.2006 no virus found
BitDefender 7.2 10.07.2006 no virus found
CAT-QuickHeal 8.00 10.06.2006 no virus found
ClamAV devel-20060426 10.07.2006 no virus found
DrWeb 4.33 10.06.2006 no virus found
eTrust-InoculateIT 23.73.15 10.06.2006 no virus found
eTrust-Vet 30.3.3118 10.06.2006 no virus found
Ewido 4.0 10.06.2006 no virus found
Fortinet 2.82.0.0 10.07.2006 no virus found
F-Prot 3.16f 10.06.2006 no virus found
F-Prot4 4.2.1.29 10.06.2006 no virus found
Ikarus 0.2.65.0 10.07.2006 no virus found
Kaspersky 4.0.2.24 10.07.2006 no virus found
McAfee 4868 10.06.2006 no virus found
Microsoft 1.1603 10.07.2006 no virus found
NOD32v2 1.1794 10.06.2006 no virus found
Norman 5.90.23 10.06.2006 no virus found
Panda 9.0.0.4 10.06.2006 no virus found
Sophos 4.10.0 10.05.2006 no virus found
TheHacker 6.0.1.093 10.06.2006 no virus found
UNA 1.83 10.06.2006 no virus found
VBA32 3.11.1 10.06.2006 no virus found
VirusBuster 4.3.7:9 10.06.2006 no virus found


Aditional Information
File size: 1291979 bytes
MD5: f94a6cfb9bb30fd8a404806531112c5c
SHA1: f86b90cf1d5ea93a717463492f60ce63694ed809
Go to the top of the page
 
+Quote Post
Cretemonster
post Oct 7 2006, 03:11 AM
Post #24





Guests
Allright,whats in the ADS Spy Scan below this entry:

C:\WINDOWS\system32\swsc.exe : Zone.Identifier (26 bytes)
Go to the top of the page
 
+Quote Post
Navydood
post Oct 7 2006, 08:30 AM
Post #25


Member
**

Group: Members
Posts: 26
Joined: 3-October 06
Member No.: 88,275
Hi Crete -

Nothing at all is below that line, that is the end of the scan. I just reran it again to be sure and it came up the same way. I am posting the log of adsspy that I just ran a minute ago below:

C:\Documents and Settings\All Users\Documents\Install_AIM.exe : Zone.Identifier (26 bytes)
C:\Documents and Settings\All Users\Documents\My Music\Sample Music\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\All Users\Documents\My Music\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\All Users\Documents\My Pictures\For Sharing\0001\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\All Users\Documents\My Pictures\For Sharing\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\All Users\Documents\My Pictures\Sample Pictures\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\All Users\Documents\My Pictures\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\All Users\Documents\zlsSetup_55_062_000.exe : Zone.Identifier (26 bytes)
C:\Documents and Settings\Brianna\My Documents\homework\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\3 Doors Down\Away from the Sun\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\3 Doors Down\The Better Life\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\Ashlee Simpson\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\Dashboard Confessional\A Mark, A Mission, A Brand, A Scar\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\Dashboard Confessional\The Places You Have Come to Fear the Most\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\Dashboard Confessional\The Swiss Army Romance\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\Dashboard Confessional\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\Death Cab for Cutie\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\Death Cab for Cutie\We Have the Facts and We're Voting Yes\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\Default\Elocation\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\Default\The Fallout\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\Garth Brooks\The Hits\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\Hootie & the Blowfish\Cracked Rear View\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\Incubus\Crow Left of the Murder\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\Incubus\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\Kelly Clarkson\Breakaway\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\Local bleep\groupthink 2 faces.mp3 : Zone.Identifier (26 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\Local bleep\groupthink i know you.mp3 : Zone.Identifier (26 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\Michelle Branch\The Spirit Room\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\mix cd's\homecoming mix\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\Mudvayne\The End of All Things to Come\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\NickelBack\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\Nirvana\Nirvana\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\Now, Vol. 18\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\Pearl Jam\Ten\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\Stevie Ray Vaughan and Double Trouble\Greatest Hits\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\Stone Temple Pilots\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\Switchfoot\The Beautiful Letdown\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\Tim McGraw\Tim McGraw and the Dancehall Doctors\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\Tonic\Lemon Parade\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Music\Usher\Confessions\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Pictures\0002\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Pictures\0005\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Pictures\0012\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Pictures\0015\0014\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Pictures\0015\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Pictures\2006-05 (May)\july 06\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Pictures\2006-05 (May)\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Pictures\prom\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Pictures\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Scans\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Brianna\My Documents\My Videos\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Dan\Desktop\ATF-Cleaner.exe : Zone.Identifier (26 bytes)
C:\Documents and Settings\Dan\Desktop\combofix.exe : Zone.Identifier (26 bytes)
C:\Documents and Settings\Dan\Desktop\hijackthis_sfx.exe : Zone.Identifier (26 bytes)
C:\Documents and Settings\Dan\Desktop\hosts\HOSTS : Zone.Identifier (26 bytes)
C:\Documents and Settings\Dan\Desktop\hosts\License.txt : Zone.Identifier (26 bytes)
C:\Documents and Settings\Dan\Desktop\hosts\mvps.bat : Zone.Identifier (26 bytes)
C:\Documents and Settings\Dan\Desktop\hosts\PrivacyPolicy.txt : Zone.Identifier (26 bytes)
C:\Documents and Settings\Dan\Desktop\hosts\readme.txt : Zone.Identifier (26 bytes)
C:\Documents and Settings\Dan\Desktop\hosts.zip : Zone.Identifier (26 bytes)
C:\Documents and Settings\Dan\Desktop\SL_00014819.jpg : Zone.Identifier (26 bytes)
C:\Documents and Settings\Dan\Desktop\SL_00017220.jpg : Zone.Identifier (26 bytes)
C:\Documents and Settings\Dan\Desktop\SmitfraudFix.cmd : Zone.Identifier (26 bytes)
C:\Documents and Settings\Dan\Desktop\spywareblastersetup351.exe : Zone.Identifier (26 bytes)
C:\Documents and Settings\Dan\Desktop\WindowsXP-KB896688-x86-ENU.exe : Zone.Identifier (26 bytes)
C:\Documents and Settings\Dan\My Documents\My Pictures\0001\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Dan\My Documents\My Pictures\0002\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Dan\My Documents\My Pictures\0003\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Dan\My Documents\My Pictures\0004\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Dan\My Documents\My Pictures\Crash\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Dan\My Documents\My Pictures\Family\PC310438.JPG : Zone.Identifier (26 bytes)
C:\Documents and Settings\Dan\My Documents\My Pictures\Family\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Dan\My Documents\My Pictures\Great shot\PC310432.JPG : Zone.Identifier (26 bytes)
C:\Documents and Settings\Dan\My Documents\My Pictures\Great shot\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Dan\My Documents\My Pictures\Joke Photos\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Dan\My Documents\My Pictures\junk\MBed7.JPG : Zone.Identifier (26 bytes)
C:\Documents and Settings\Dan\My Documents\My Pictures\junk\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Dan\My Documents\My Pictures\Military\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Dan\My Documents\My Pictures\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Dan\My Documents\My Pictures\w\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Dan\My Documents\My Pictures\x\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Dan\My Documents\My Pictures\z\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Dan\My Documents\ResumeMaker\Level I.doc : Zone.Identifier (26 bytes)
C:\Documents and Settings\Emily\My Documents\curpics\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Emily\My Documents\My Music\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Emily\My Documents\My Pictures\0004\13th bday\0002\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Emily\My Documents\My Pictures\0004\13th bday\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Emily\My Documents\My Pictures\0004\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Emily\My Documents\My Pictures\2-20-2006 (2)\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Emily\My Documents\My Pictures\2006-09 (Sep)\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Emily\My Documents\My Pictures\Thumbs.db : encryptable (0 bytes)
C:\Documents and Settings\Emily\My Documents\oooyyyy.exe : Zone.Identifier (26 bytes)
C:\Documents and Settings\Emily\My Documents\Thumbs.db : encryptable (0 bytes)
C:\WINDOWS\system32\drivers\etc\HOSTS : Zone.Identifier (26 bytes)
C:\WINDOWS\system32\drivers\etc\HOSTS.MVP : Zone.Identifier (26 bytes)
C:\WINDOWS\system32\SrchSTS.exe : Zone.Identifier (26 bytes)
C:\WINDOWS\system32\swreg.exe : Zone.Identifier (26 bytes)
C:\WINDOWS\system32\swsc.exe : Zone.Identifier (26 bytes)
Go to the top of the page
 
+Quote Post
Cretemonster
post Oct 7 2006, 11:36 AM
Post #26





Guests
Will you upload a copy of that file please.

C:\Documents and Settings\Emily\My Documents\oooyyyy.exe

Upload here
http://www.uploadmalware.com/


Let me see a HijackThis Start Up log.

Open HijackThis and Click the "Open Misc Tools Section" tab.

Select Generate StartUpList log and make sure that both Boxes beside it are checked:

Put a check by:
List all minor sections(Full)
and
List Empty Sections(Complete)

It will produce a NotePad Page,I need you to copy the entire contents of that page to the next reply.
Go to the top of the page
 
+Quote Post
Navydood
post Oct 7 2006, 04:21 PM
Post #27


Member
**

Group: Members
Posts: 26
Joined: 3-October 06
Member No.: 88,275
Hi Crete -

Sorry took so long to reply, I submitted that file (the site told me to inform you of that) and here is the HijackThis log:

StartupList report, 06-10-07, 16:16:52
StartupList version: 1.52.2
Started from : C:\Program Files\HijackThis\HijackThis.EXE
Detected: Windows XP SP2 (WinNT 5.01.2600)
Detected: Internet Explorer v6.00 SP2 (6.00.2900.2180)
* Using default options
* Including empty and uninteresting sections
* Showing rarely important sections
==================================================

Running processes:

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\mcafee.com\agent\mcdetect.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Files\McAfee.com\VSO\mcvsshld.exe
C:\Program Files\McAfee.com\VSO\oasclnt.exe
c:\progra~1\mcafee.com\vso\mcvsescn.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\SiteAdvisor\4144\SiteAdv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\HijackThis\HijackThis.exe

--------------------------------------------------

Listing of startup folders:

Shell folders Startup:
[C:\Documents and Settings\Dan\Start Menu\Programs\Startup]
*No files*

Shell folders AltStartup:
*Folder not found*

User shell folders Startup:
*Folder not found*

User shell folders AltStartup:
*Folder not found*

Shell folders Common Startup:
[C:\Documents and Settings\All Users\Start Menu\Programs\Startup]
HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.exe

Shell folders Common AltStartup:
*Folder not found*

User shell folders Common Startup:
*Folder not found*

User shell folders Alternate Common Startup:
*Folder not found*

--------------------------------------------------

Checking Windows NT UserInit:

[HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
UserInit = C:\WINDOWS\system32\userinit.exe,

[HKLM\Software\Microsoft\Windows\CurrentVersion\Winlogon]
*Registry key not found*

[HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
*Registry value not found*

[HKCU\Software\Microsoft\Windows\CurrentVersion\Winlogon]
*Registry key not found*

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

AGRSMMSG = AGRSMMSG.exe
NvCplDaemon = RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
nwiz = nwiz.exe /install
NvMediaCenter = RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
C-Media Mixer = Mixer.exe /startup
PrinTray = C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\printray.exe
SunJavaUpdateSched = C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
HP Software Update = C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
MCAgentExe = c:\PROGRA~1\mcafee.com\agent\mcagent.exe
MCUpdateExe = c:\PROGRA~1\mcafee.com\agent\mcupdate.exe
VSOCheckTask = "C:\PROGRA~1\McAfee.com\VSO\mcmnhdlr.exe" /checktask
VirusScan Online = C:\Program Files\McAfee.com\VSO\mcvsshld.exe
OASClnt = C:\Program Files\McAfee.com\VSO\oasclnt.exe
MPFExe = C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce

*No values found*

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnceEx

*No values found*

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices

*No values found*

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce

*No values found*

--------------------------------------------------

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run

ctfmon.exe = C:\WINDOWS\system32\ctfmon.exe

--------------------------------------------------

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce

*No values found*

--------------------------------------------------

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnceEx

*Registry key not found*

--------------------------------------------------

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\RunServices

*No values found*

--------------------------------------------------

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce

*Registry key not found*

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Run

*Registry key not found*

--------------------------------------------------

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Run

*Registry key not found*

--------------------------------------------------

Autorun entries in Registry subkeys of:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

[OptionalComponents]
*No values found*

--------------------------------------------------

Autorun entries in Registry subkeys of:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce
*No subkeys found*

--------------------------------------------------

Autorun entries in Registry subkeys of:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnceEx
*No subkeys found*

--------------------------------------------------

Autorun entries in Registry subkeys of:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices
*No subkeys found*

--------------------------------------------------

Autorun entries in Registry subkeys of:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce
*No subkeys found*

--------------------------------------------------

Autorun entries in Registry subkeys of:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
*No subkeys found*

--------------------------------------------------

Autorun entries in Registry subkeys of:
HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce
*No subkeys found*

--------------------------------------------------

Autorun entries in Registry subkeys of:
HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnceEx
*Registry key not found*

--------------------------------------------------

Autorun entries in Registry subkeys of:
HKCU\Software\Microsoft\Windows\CurrentVersion\RunServices
*No subkeys found*

--------------------------------------------------

Autorun entries in Registry subkeys of:
HKCU\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce
*Registry key not found*

--------------------------------------------------

Autorun entries in Registry subkeys of:
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Run
*Registry key not found*

--------------------------------------------------

Autorun entries in Registry subkeys of:
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Run
*Registry key not found*

--------------------------------------------------

File association entry for .EXE:
HKEY_CLASSES_ROOT\exefile\shell\open\command

(Default) = "%1" %*

--------------------------------------------------

File association entry for .COM:
HKEY_CLASSES_ROOT\comfile\shell\open\command

(Default) = "%1" %*

--------------------------------------------------

File association entry for .BAT:
HKEY_CLASSES_ROOT\batfile\shell\open\command

(Default) = "%1" %*

--------------------------------------------------

File association entry for .PIF:
HKEY_CLASSES_ROOT\piffile\shell\open\command

(Default) = "%1" %*

--------------------------------------------------

File association entry for .SCR:
HKEY_CLASSES_ROOT\scrfile\shell\open\command

(Default) = "%1" /S

--------------------------------------------------

File association entry for .HTA:
HKEY_CLASSES_ROOT\htafile\shell\open\command

(Default) = C:\WINDOWS\System32\mshta.exe "%1" %*

--------------------------------------------------

File association entry for .TXT:
HKEY_CLASSES_ROOT\txtfile\shell\open\command

(Default) = %SystemRoot%\system32\NOTEPAD.EXE %1

--------------------------------------------------

Enumerating Active Setup stub paths:
HKLM\Software\Microsoft\Active Setup\Installed Components
(* = disabled by HKCU twin)

[>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
StubPath = C:\WINDOWS\inf\unregmp2.exe /ShowWMP

[>{26923b43-4d38-484f-9b9e-de460746276c}] *
StubPath = %systemroot%\system32\shmgrate.exe OCInstallUserConfigIE

[>{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS] *
StubPath = RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP

[>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}] *
StubPath = %systemroot%\system32\shmgrate.exe OCInstallUserConfigOE

[{2C7339CF-2B09-4501-B3F3-F3508C9228ED}] *
StubPath = %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll

[{44BBA840-CC51-11CF-AAFA-00AA00B6015C}] *
StubPath = "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install

[{44BBA842-CC51-11CF-AAFA-00AA00B6015B}] *
StubPath = rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT

[{4b218e3e-bc98-4770-93d3-2731b9329278}] *
StubPath = %SystemRoot%\System32\rundll32.exe setupapi,InstallHinfSection MarketplaceLinkInstall 896 %systemroot%\inf\ie.inf

[{5945c046-1e7d-11d1-bc44-00c04fd912be}] *
StubPath = rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser

[{6BF52A52-394A-11d3-B153-00C04F79FAA6}] *
StubPath = rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp10.inf,PerUserStub

[{7790769C-0471-11d2-AF11-00C04FA35D02}] *
StubPath = "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install

[{89820200-ECBD-11cf-8B85-00AA005B4340}] *
StubPath = regsvr32.exe /s /n /i:U shell32.dll

[{89820200-ECBD-11cf-8B85-00AA005B4383}] *
StubPath = %SystemRoot%\system32\ie4uinit.exe

[{89B4C1CD-B018-4511-B0A1-5476DBF70820}] *
StubPath = C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\mscories.dll,Install

--------------------------------------------------

Enumerating ICQ Agent Autostart apps:
HKCU\Software\Mirabilis\ICQ\Agent\Apps

*Registry key not found*

--------------------------------------------------

Load/Run keys from C:\WINDOWS\WIN.INI:

load=*INI section not found*
run=*INI section not found*

Load/Run keys from Registry:

HKLM\..\Windows NT\CurrentVersion\WinLogon: load=*Registry value not found*
HKLM\..\Windows NT\CurrentVersion\WinLogon: run=*Registry value not found*
HKLM\..\Windows\CurrentVersion\WinLogon: load=*Registry key not found*
HKLM\..\Windows\CurrentVersion\WinLogon: run=*Registry key not found*
HKCU\..\Windows NT\CurrentVersion\WinLogon: load=*Registry value not found*
HKCU\..\Windows NT\CurrentVersion\WinLogon: run=*Registry value not found*
HKCU\..\Windows\CurrentVersion\WinLogon: load=*Registry key not found*
HKCU\..\Windows\CurrentVersion\WinLogon: run=*Registry key not found*
HKCU\..\Windows NT\CurrentVersion\Windows: load=
HKCU\..\Windows NT\CurrentVersion\Windows: run=*Registry value not found*
HKLM\..\Windows NT\CurrentVersion\Windows: load=*Registry value not found*
HKLM\..\Windows NT\CurrentVersion\Windows: run=*Registry value not found*
HKLM\..\Windows NT\CurrentVersion\Windows: AppInit_DLLs=*Registry value not found*

--------------------------------------------------

Shell & screensaver key from C:\WINDOWS\SYSTEM.INI:

Shell=*INI section not found*
SCRNSAVE.EXE=*INI section not found*
drivers=*INI section not found*

Shell & screensaver key from Registry:

Shell=Explorer.exe
SCRNSAVE.EXE=*Registry value not found*
drivers=*Registry value not found*

Policies Shell key:

HKCU\..\Policies: Shell=*Registry value not found*
HKLM\..\Policies: Shell=*Registry value not found*

--------------------------------------------------

Checking for EXPLORER.EXE instances:

C:\WINDOWS\Explorer.exe: PRESENT!

C:\Explorer.exe: not present
C:\WINDOWS\Explorer\Explorer.exe: not present
C:\WINDOWS\System\Explorer.exe: not present
C:\WINDOWS\System32\Explorer.exe: not present
C:\WINDOWS\Command\Explorer.exe: not present
C:\WINDOWS\Fonts\Explorer.exe: not present

--------------------------------------------------

Checking for superhidden extensions:

.lnk: HIDDEN! (arrow overlay: yes)
.pif: HIDDEN! (arrow overlay: yes)
.exe: not hidden
.com: not hidden
.bat: not hidden
.hta: not hidden
.scr: not hidden
.shs: HIDDEN!
.shb: HIDDEN!
.vbs: not hidden
.vbe: not hidden
.wsh: not hidden
.scf: HIDDEN! (arrow overlay: NO!)
.url: HIDDEN! (arrow overlay: yes)
.js: not hidden
.jse: not hidden

--------------------------------------------------

Verifying REGEDIT.EXE integrity:

- Regedit.exe found in C:\WINDOWS
- .reg open command is normal (regedit.exe %1)
- Company name OK: 'Microsoft Corporation'
- Original filename OK: 'REGEDIT.EXE'
- File description: 'Registry Editor'

Registry check passed

--------------------------------------------------

Enumerating Browser Helper Objects:

(no name) - C:\Program Files\SiteAdvisor\4144\SiteAdv.dll - {089FD14D-132B-48FC-8861-0048AE113215}

--------------------------------------------------

Enumerating Task Scheduler jobs:

Disk Cleanup.job

--------------------------------------------------

Enumerating Download Program Files:

[CKAVWebScan Object]
InProcServer32 = C:\WINDOWS\system32\Kaspersky Lab\Kaspersky Online Scanner\kavwebscan.dll
CODEBASE = http://www.kaspersky.com/kos/eng/partner/d...can_unicode.cab

[Windows Genuine Advantage Validation Tool]
InProcServer32 = C:\WINDOWS\system32\legitcheckcontrol.dll
CODEBASE = http://go.microsoft.com/fwlink/?linkid=39204

[ewidoOnlineScan Control]
InProcServer32 = C:\WINDOWS\DOWNLO~1\EWIDOO~1.DLL
CODEBASE = http://download.ewido.net/ewidoOnlineScan.cab

[Trend Micro ActiveX Scan Agent 6.5]
InProcServer32 = C:\WINDOWS\Downloaded Program Files\Housecall_ActiveX.dll
CODEBASE = http://housecall65.trendmicro.com/housecal...ivex/hcImpl.cab

[Office Update Installation Engine]
InProcServer32 = C:\WINDOWS\opuc.dll
CODEBASE = http://office.microsoft.com/officeupdate/content/opuc.cab

[Snapfish Activia]
InProcServer32 = C:\WINDOWS\Downloaded Program Files\SnapfishActivia1000.ocx
CODEBASE = http://photo.walgreens.com/WalgreensActivia.cab

[McAfee.com Operating System Class]
InProcServer32 = C:\WINDOWS\system32\mcinsctl.dll
CODEBASE = http://download.mcafee.com/molbin/shared/m...01/mcinsctl.cab

[BDSCANONLINE Control]
InProcServer32 = C:\WINDOWS\DOWNLO~1\oscan8.ocx
CODEBASE = http://download.bitdefender.com/resources/scan8/oscan8.cab

[Windows Live Safety Center Base Module]
InProcServer32 = C:\WINDOWS\Downloaded Program Files\wlscBase.dll
CODEBASE = http://cdn.scan.safety.live.com/resource/d...wlscbase969.cab

[WUWebControl Class]
InProcServer32 = C:\WINDOWS\system32\wuweb.dll
CODEBASE = http://v5.windowsupdate.microsoft.com/v5co...b?1098502163500

[MUWebControl Class]
InProcServer32 = C:\WINDOWS\system32\muweb.dll
CODEBASE = http://update.microsoft.com/microsoftupdat...b?1138238271109

[Java Plug-in]
InProcServer32 = C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
CODEBASE = http://java.sun.com/update/1.5.0/jinstall-...indows-i586.cab

[ActiveScan Installer Class]
InProcServer32 = C:\WINDOWS\Downloaded Program Files\asinst.dll
CODEBASE = http://acs.pandasoftware.com/activescan/as5free/asinst.cab

[F-Secure Online Scanner 3.0]
InProcServer32 = C:\WINDOWS\Downloaded Program Files\CONFLICT.1\fscax.dll
CODEBASE = http://support.f-secure.com/ols3/fscax.cab

[DwnldGroupMgr Class]
InProcServer32 = C:\WINDOWS\system32\McGDMgr.dll
CODEBASE = http://download.mcafee.com/molbin/shared/m...,26/mcgdmgr.cab

[Java Plug-in]
InProcServer32 = C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
CODEBASE = http://java.sun.com/update/1.5.0/jinstall-...indows-i586.cab

[Java Plug-in 1.5.0_06]
InProcServer32 = C:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dll
CODEBASE = http://java.sun.com/update/1.5.0/jinstall-...indows-i586.cab

[Shockwave Flash Object]
InProcServer32 = C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx
CODEBASE = http://download.macromedia.com/pub/shockwa...ash/swflash.cab

[McFreeScan Class]
InProcServer32 = C:\WINDOWS\McAfee.com\FreeScan\mcfscan.dll
CODEBASE = http://download.mcafee.com/molbin/iss-loc/...861/mcfscan.cab

--------------------------------------------------

Enumerating Winsock LSP files:

NameSpace #1: C:\WINDOWS\System32\mswsock.dll
NameSpace #2: C:\WINDOWS\System32\winrnr.dll
NameSpace #3: C:\WINDOWS\System32\mswsock.dll
Protocol #1: C:\WINDOWS\system32\mswsock.dll
Protocol #2: C:\WINDOWS\system32\mswsock.dll
Protocol #3: C:\WINDOWS\system32\mswsock.dll
Protocol #4: C:\WINDOWS\system32\rsvpsp.dll
Protocol #5: C:\WINDOWS\system32\rsvpsp.dll
Protocol #6: C:\WINDOWS\system32\mswsock.dll
Protocol #7: C:\WINDOWS\system32\mswsock.dll
Protocol #8: C:\WINDOWS\system32\mswsock.dll
Protocol #9: C:\WINDOWS\system32\mswsock.dll
Protocol #10: C:\WINDOWS\system32\mswsock.dll
Protocol #11: C:\WINDOWS\system32\mswsock.dll
Protocol #12: C:\WINDOWS\system32\mswsock.dll
Protocol #13: C:\WINDOWS\system32\mswsock.dll
Protocol #14: C:\WINDOWS\system32\mswsock.dll
Protocol #15: C:\WINDOWS\system32\mswsock.dll

--------------------------------------------------

Enumerating Windows NT/2000/XP services

Microsoft ACPI Driver: System32\DRIVERS\ACPI.sys (system)
Microsoft Kernel Acoustic Echo Canceller: system32\drivers\aec.sys (manual start)
AFD Networking Support Environment: \SystemRoot\System32\drivers\afd.sys (system)
Agere Systems Soft Modem: System32\DRIVERS\AGRSM.sys (manual start)
Service for WDM 3D Audio Driver: system32\drivers\ALCXSENS.SYS (manual start)
Service for Realtek AC97 Audio (WDM): system32\drivers\ALCXWDM.SYS (manual start)
Alerter: %SystemRoot%\System32\svchost.exe -k LocalService (disabled)
Application Layer Gateway Service: %SystemRoot%\System32\alg.exe (manual start)
AMD K7 Processor Driver: System32\DRIVERS\amdk7.sys (system)
Application Management: %SystemRoot%\system32\svchost.exe -k netsvcs (manual start)
ASP.NET State Service: %SystemRoot%\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe (manual start)
RAS Asynchronous Media Driver: System32\DRIVERS\asyncmac.sys (manual start)
Standard IDE/ESDI Hard Disk Controller: System32\DRIVERS\atapi.sys (system)
ATM ARP Client Protocol: System32\DRIVERS\atmarpc.sys (manual start)
Windows Audio: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Audio Stub Driver: System32\DRIVERS\audstub.sys (manual start)
Antivirus Filter Driver: \SystemRoot\system32\drivers\av5flt.sys (manual start)
Background Intelligent Transfer Service: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Computer Browser: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
CD-ROM Driver: System32\DRIVERS\cdrom.sys (system)
Indexing Service: %SystemRoot%\system32\cisvc.exe (manual start)
ClipBook: %SystemRoot%\system32\clipsrv.exe (disabled)
C-Media PCI Audio Driver (WDM): system32\drivers\cmaudio.sys (manual start)
COM+ System Application: C:\WINDOWS\System32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235} (manual start)
Cryptographic Services: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart)
DCOM Server Process Launcher: %SystemRoot%\system32\svchost -k DcomLaunch (autostart)
DHCP Client: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Disk Driver: System32\DRIVERS\disk.sys (system)
Logical Disk Manager Administrative Service: %SystemRoot%\System32\dmadmin.exe /com (manual start)
dmboot: System32\drivers\dmboot.sys (disabled)
dmio: System32\drivers\dmio.sys (disabled)
dmload: System32\drivers\dmload.sys (disabled)
Logical Disk Manager: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start)
Microsoft Kernel DLS Syntheiszer: system32\drivers\DMusic.sys (manual start)
DNS Client: %SystemRoot%\System32\svchost.exe -k NetworkService (autostart)
Microsoft Kernel DRM Audio Descrambler: system32\drivers\drmkaud.sys (manual start)
Error Reporting Service: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Event Log: %SystemRoot%\system32\services.exe (autostart)
COM+ Event System: C:\WINDOWS\System32\svchost.exe -k netsvcs (manual start)
ewido anti-spyware 4.0 driver: \??\C:\Program Files\ewido anti-spyware 4.0\guard.sys (system)
ewido anti-spyware 4.0 guard: C:\Program Files\ewido anti-spyware 4.0\guard.exe (disabled)
Fast User Switching Compatibility: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start)
Floppy Disk Controller Driver: System32\DRIVERS\fdc.sys (manual start)
VIA Rhine-Family Fast Ethernet Adapter Driver Service: system32\DRIVERS\fetnd5bv.sys (manual start)
VIA PCI 10/100Mb Fast Ethernet Adapter NT Driver: System32\DRIVERS\fetnd5.sys (manual start)
VIA Rhine Family Fast Ethernet Adapter Driver Service: System32\DRIVERS\fetnd5b.sys (manual start)
Floppy Disk Driver: System32\DRIVERS\flpydisk.sys (manual start)
FltMgr: system32\drivers\fltmgr.sys (system)
Volume Manager Driver: System32\DRIVERS\ftdisk.sys (system)
Game Port Enumerator: System32\DRIVERS\gameenum.sys (manual start)
Generic Packet Classifier: System32\DRIVERS\msgpc.sys (manual start)
Help and Support: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Human Interface Device Access: %SystemRoot%\System32\svchost.exe -k netsvcs (disabled)
Microsoft HID Class Driver: system32\DRIVERS\hidusb.sys (manual start)
IEEE-1284.4 Driver HPZid412: system32\DRIVERS\HPZid412.sys (manual start)
Print Class Driver for IEEE-1284.4 HPZipr12: system32\DRIVERS\HPZipr12.sys (manual start)
USB to IEEE-1284.4 Translation Driver HPZius12: system32\DRIVERS\HPZius12.sys (manual start)
HTTP: System32\Drivers\HTTP.sys (manual start)
HTTP SSL: %SystemRoot%\System32\svchost.exe -k HTTPFilter (manual start)
i8042 Keyboard and PS/2 Mouse Port Driver: System32\DRIVERS\i8042prt.sys (system)
CD-Burning Filter Driver: System32\DRIVERS\imapi.sys (system)
IMAPI CD-Burning COM Service: C:\WINDOWS\System32\imapi.exe (manual start)
IPv6 Windows Firewall Driver: system32\drivers\ip6fw.sys (manual start)
IP Traffic Filter Driver: System32\DRIVERS\ipfltdrv.sys (manual start)
IP in IP Tunnel Driver: System32\DRIVERS\ipinip.sys (manual start)
IP Network Address Translator: System32\DRIVERS\ipnat.sys (manual start)
IPSEC driver: System32\DRIVERS\ipsec.sys (system)
IR Enumerator Service: System32\DRIVERS\irenum.sys (manual start)
PnP ISA/EISA Bus Driver: System32\DRIVERS\isapnp.sys (system)
Keyboard Class Driver: System32\DRIVERS\kbdclass.sys (system)
Microsoft Kernel Wave Audio Mixer: system32\drivers\kmixer.sys (manual start)
Server: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Workstation: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
TCP/IP NetBIOS Helper: %SystemRoot%\System32\svchost.exe -k LocalService (autostart)
lredbooo: \??\C:\DOCUME~1\Dan\LOCALS~1\Temp\lredbooo.sys (manual start)
McAfee WSC Integration: c:\program files\mcafee.com\agent\mcdetect.exe (autostart)
McAfee.com McShield: c:\PROGRA~1\mcafee.com\vso\mcshield.exe (autostart)
McAfee Task Scheduler: c:\PROGRA~1\mcafee.com\agent\mctskshd.exe (autostart)
McAfee SecurityCenter Update Manager: C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe (manual start)
Machine Debug Manager: "C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe" (autostart)
Messenger: %SystemRoot%\System32\svchost.exe -k netsvcs (disabled)
NetMeeting Remote Desktop Sharing: C:\WINDOWS\System32\mnmsrvc.exe (manual start)
Mouse Class Driver: System32\DRIVERS\mouclass.sys (system)
Mouse HID Driver: System32\DRIVERS\mouhid.sys (manual start)
MPFIREWL: System32\Drivers\MpFirewall.sys (system)
McAfee Personal Firewall Service: C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe (autostart)
WebDav Client Redirector: System32\DRIVERS\mrxdav.sys (manual start)
MRXSMB: System32\DRIVERS\mrxsmb.sys (system)
Distributed Transaction Coordinator: C:\WINDOWS\System32\msdtc.exe (manual start)
Windows Installer: C:\WINDOWS\system32\msiexec.exe /V (manual start)
Microsoft Streaming Service Proxy: system32\drivers\MSKSSRV.sys (manual start)
Microsoft Streaming Clock Proxy: system32\drivers\MSPCLOCK.sys (manual start)
Microsoft Streaming Quality Manager Proxy: system32\drivers\MSPQM.sys (manual start)
Microsoft System Management BIOS Driver: System32\DRIVERS\mssmbios.sys (manual start)
NaiAvFilter1: system32\drivers\naiavf5x.sys (manual start)
Remote Access NDIS TAPI Driver: System32\DRIVERS\ndistapi.sys (manual start)
NDIS Usermode I/O Protocol: System32\DRIVERS\ndisuio.sys (manual start)
Remote Access NDIS WAN Driver: System32\DRIVERS\ndiswan.sys (manual start)
NetBIOS Interface: System32\DRIVERS\netbios.sys (system)
NetBios over Tcpip: System32\DRIVERS\netbt.sys (system)
Network DDE: %SystemRoot%\system32\netdde.exe (disabled)
Network DDE DSDM: %SystemRoot%\system32\netdde.exe (disabled)
Net Logon: %SystemRoot%\System32\lsass.exe (manual start)
Network Connections: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start)
Network Location Awareness (NLA): %SystemRoot%\System32\svchost.exe -k netsvcs (manual start)
NT LM Security Support Provider: %SystemRoot%\System32\lsass.exe (manual start)
Removable Storage: %SystemRoot%\system32\svchost.exe -k netsvcs (manual start)
nv: System32\DRIVERS\nv4_mini.sys (manual start)
NVIDIA Display Driver Service: %SystemRoot%\system32\nvsvc32.exe (autostart)
IPX Traffic Filter Driver: System32\DRIVERS\nwlnkflt.sys (manual start)
IPX Traffic Forwarder Driver: System32\DRIVERS\nwlnkfwd.sys (manual start)
Parallel port driver: System32\DRIVERS\parport.sys (manual start)
PCI Bus Driver: System32\DRIVERS\pci.sys (system)
Padus ASPI Shell: system32\drivers\pfc.sys (manual start)
Plug and Play: %SystemRoot%\system32\services.exe (autostart)
Pml Driver HPZ12: C:\WINDOWS\system32\HPZipm12.exe (autostart)
IPSEC Services: %SystemRoot%\System32\lsass.exe (autostart)
WAN Miniport (PPTP): System32\DRIVERS\raspptp.sys (manual start)
StarForce Protection Environment Driver v6: \SystemRoot\System32\drivers\prodrv06.sys (system)
StarForce Protection Helper Driver v2: System32\drivers\prohlp02.sys (system)
StarForce Protection Synchronization Driver v1: System32\drivers\prosync1.sys (system)
Protected Storage: %SystemRoot%\system32\lsass.exe (autostart)
QoS Packet Scheduler: System32\DRIVERS\psched.sys (manual start)
Direct Parallel Link Driver: System32\DRIVERS\ptilink.sys (manual start)
Remote Access Auto Connection Driver: System32\DRIVERS\rasacd.sys (system)
Remote Access Auto Connection Manager: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start)
WAN Miniport (L2TP): System32\DRIVERS\rasl2tp.sys (manual start)
Remote Access Connection Manager: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start)
Remote Access PPPOE Driver: System32\DRIVERS\raspppoe.sys (manual start)
Direct Parallel: System32\DRIVERS\raspti.sys (manual start)
Rdbss: System32\DRIVERS\rdbss.sys (system)
RDPCDD: System32\DRIVERS\RDPCDD.sys (system)
Remote Desktop Help Session Manager: C:\WINDOWS\system32\sessmgr.exe (manual start)
Digital CD Audio Playback Filter Driver: System32\DRIVERS\redbook.sys (system)
Routing and Remote Access: %SystemRoot%\System32\svchost.exe -k netsvcs (disabled)
Remote Procedure Call (RPC) Locator: %SystemRoot%\System32\locator.exe (manual start)
Remote Procedure Call (RPC): %SystemRoot%\system32\svchost -k rpcss (autostart)
QoS RSVP: %SystemRoot%\System32\rsvp.exe (manual start)
Security Accounts Manager: %SystemRoot%\system32\lsass.exe (autostart)
Smart Card: %SystemRoot%\System32\SCardSvr.exe (manual start)
Task Scheduler: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Secdrv: System32\DRIVERS\secdrv.sys (manual start)
Secondary Logon: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
System Event Notification: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart)
Serenum Filter Driver: System32\DRIVERS\serenum.sys (manual start)
Serial port driver: System32\DRIVERS\serial.sys (system)
StarForce Protection Helper Driver: System32\drivers\sfhlp01.sys (system)
Windows Firewall/Internet Connection Sharing (ICS): %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Shell Hardware Detection: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Microsoft Kernel Audio Splitter: system32\drivers\splitter.sys (manual start)
Print Spooler: %SystemRoot%\system32\spoolsv.exe (autostart)
System Restore Filter Driver: \SystemRoot\System32\DRIVERS\sr.sys (disabled)
System Restore Service: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Srv: System32\DRIVERS\srv.sys (manual start)
SSDP Discovery Service: %SystemRoot%\System32\svchost.exe -k LocalService (manual start)
Windows Image Acquisition (WIA): %SystemRoot%\System32\svchost.exe -k imgsvc (autostart)
Software Bus Driver: System32\DRIVERS\swenum.sys (manual start)
Microsoft Kernel GS Wavetable Synthesizer: system32\drivers\swmidi.sys (manual start)
MS Software Shadow Copy Provider: C:\WINDOWS\System32\dllhost.exe /Processid:{C1F7CC7E-4211-40C0-83A9-170E5A9DE773} (manual start)
Microsoft Kernel System Audio Device: system32\drivers\sysaudio.sys (manual start)
Performance Logs and Alerts: %SystemRoot%\system32\smlogsvc.exe (manual start)
Telephony: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start)
TCP/IP Protocol Driver: System32\DRIVERS\tcpip.sys (system)
Terminal Device Driver: System32\DRIVERS\termdd.sys (system)
Terminal Services: %SystemRoot%\System32\svchost -k DComLaunch (manual start)
Themes: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
tmcomm: \??\C:\WINDOWS\system32\drivers\tmcomm.sys (autostart)
Distributed Link Tracking Client: %SystemRoot%\system32\svchost.exe -k netsvcs (autostart)
Windows User Mode Driver Framework: C:\WINDOWS\system32\wdfmgr.exe (autostart)
Microcode Update Driver: System32\DRIVERS\update.sys (manual start)
Universal Plug and Play Device Host: %SystemRoot%\System32\svchost.exe -k LocalService (manual start)
Uninterruptible Power Supply: %SystemRoot%\System32\ups.exe (manual start)
Microsoft USB Generic Parent Driver: system32\DRIVERS\usbccgp.sys (manual start)
Microsoft USB 2.0 Enhanced Host Controller Miniport Driver: System32\DRIVERS\usbehci.sys (manual start)
USB2 Enabled Hub: System32\DRIVERS\usbhub.sys (manual start)
Microsoft USB PRINTER Class: system32\DRIVERS\usbprint.sys (manual start)
USB Scanner Driver: system32\DRIVERS\usbscan.sys (manual start)
USB Mass Storage Driver: system32\DRIVERS\USBSTOR.SYS (manual start)
Microsoft USB Universal Host Controller Miniport Driver: System32\DRIVERS\usbuhci.sys (manual start)
VGA Display Controller.: \SystemRoot\System32\drivers\vga.sys (system)
VIA AGP Filter: System32\DRIVERS\viaagp1.sys (system)
ViaIde: System32\DRIVERS\viaide.sys (system)
vsdatant: System32\vsdatant.sys (disabled)
Volume Shadow Copy: %SystemRoot%\System32\vssvc.exe (manual start)
Windows Time: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Remote Access IP ARP Driver: System32\DRIVERS\wanarp.sys (manual start)
Microsoft WINMM WDM Audio Compatibility Driver: system32\drivers\wdmaud.sys (manual start)
WebClient: %SystemRoot%\System32\svchost.exe -k LocalService (disabled)
Windows Management Instrumentation: %systemroot%\system32\svchost.exe -k netsvcs (autostart)
Windows Media Connect (WMC): c:\program files\windows media connect\mswmccds.exe (manual start)
Windows Media Connect (WMC) Helper: C:\Program Files\Windows Media Connect\mswmcls.exe (manual start)
Portable Media Serial Number Service: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start)
WMI Performance Adapter: C:\WINDOWS\System32\wbem\wmiapsrv.exe (manual start)
Windows Socket 2.0 Non-IFS Service Provider Support Environment: \SystemRoot\System32\drivers\ws2ifsl.sys (disabled)
Security Center: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Automatic Updates: %systemroot%\system32\svchost.exe -k netsvcs (autostart)
Wireless Zero Configuration: %SystemRoot%\System32\svchost.exe -k netsvcs (autostart)
Network Provisioning Service: %SystemRoot%\System32\svchost.exe -k netsvcs (manual start)


--------------------------------------------------

Enumerating Windows NT logon/logoff scripts:
*No scripts set to run*

Windows NT checkdisk command:
BootExecute = autocheck autochk *

Windows NT 'Wininit.ini':
PendingFileRenameOperations: *Registry value not found*

--------------------------------------------------

Enumerating ShellServiceObjectDelayLoad items:

PostBootReminder: C:\WINDOWS\system32\SHELL32.dll
CDBurn: C:\WINDOWS\system32\SHELL32.dll
WebCheck: C:\WINDOWS\System32\webcheck.dll
SysTray: C:\WINDOWS\System32\stobject.dll

--------------------------------------------------
Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\policies\Explorer\Run

*No values found*

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\policies\Explorer\Run

*No values found*

--------------------------------------------------

End of report, 35,773 bytes
Report generated in 0.125 seconds

Command line options:
/verbose - to add additional info on each section
/complete - to include empty sections and unsuspicious data
/full - to include several rarely-important sections
/force9x - to include Win9x-only startups even if running on WinNT
/forcent - to include WinNT-only startups even if running on Win9x
/forceall - to include all Win9x and WinNT startups, regardless of platform
/history - to list version history only
Go to the top of the page
 
+Quote Post
Cretemonster
post Oct 7 2006, 06:37 PM
Post #28





Guests
Do you do any Online Gaming?
Go to the top of the page
 
+Quote Post
Navydood
post Oct 7 2006, 06:39 PM
Post #29


Member
**

Group: Members
Posts: 26
Joined: 3-October 06
Member No.: 88,275
Crete -

I play Cassino online and that's the extent of it.
Go to the top of the page
 
+Quote Post
Cretemonster
post Oct 7 2006, 06:51 PM
Post #30





Guests
You have some items in the startup log that bother me but I need to research them further.

lredbooo: \??\C:\DOCUME~1\Dan\LOCALS~1\Temp\lredbooo.sys (manual start)


Windows Socket 2.0 Non-IFS Service Provider Support Environment: \SystemRoot\System32\drivers\ws2ifsl.sys (disabled)

Google the bold part and you will see why this entry bothers me.

It is suppose to have a legit purpose for some apps but I cant clarify which apps that would be.


That file you submitted is some sort of setup file,have you had Limewire or other P2P apps installed on the machine?


Give me a little time to test it tonight and post back in the morning and let me know how the machine boots up?
Go to the top of the page
 
+Quote Post
« Next Oldest · HijackThis Logs and Virus/Trojan/Spyware/Malware Removal · Next Newest »
 

3 Pages V  < 1 2 3 >
Reply to this topicStart new topic
2 User(s) are reading this topic (2 Guests and 0 Anonymous Users)
0 Members:

 

Display Mode: Standard · Switch to: Linear+ · Switch to: Outline

Track this topic · Email this topic · Print this topic · Subscribe to this forum

Lo-Fi Version Time is now: 22nd November 2009 - 12:54 AM


Advertise   |   About Us   |   Terms of Use   |   Privacy Policy   |   Contact Us   |   Site Map   |   Chat   |   Tutorials   |   Uninstall List
Discussion Forums   |   The Computer Glossary   |   Resources   |   RSS Feeds   |   Startups   |   The File Database   |   Virus Removal Guides

© 2003-2009 All Rights Reserved Bleeping Computer LLC.

Powered By IP.Board © 2009  IPS, Inc.