BleepingComputer.com: Google Redirect - Please Help

Jump to content

Forum Guidelines

Posted Image Read the following topic before creating a new topic in this forum. It contains instructions on the what we would like you to post, which will enable us to help you more quickly.

Preparation Guide For Use Before Using Malware Removal Tools and Requesting Help


Posted Image Unfortunately, with the amount of logs we receive per day, the average response time is 5 days. I want to assure you, though, that your topic will be looked at and responded to. So please be patient.


Posted Image DO NOT RUN ComboFix unless requested to.


Posted Image Only members of the Malware Response Team or Moderators are allowed to help people with logs. Anyone else should refrain from posting to another user's log.


Posted Image When posting a log please put the type of infection you have in the topic title. IE: Winfixer, Virtumonde, WinTools, WebSearch, Home Search Assistant, etc.


Posted Image Do not bump your topic. We try to resolve logs on a first come/first served basis. By bumping your log you will be pushed back in line due to the new date of your bump.
  • 2 Pages +
  • 1
  • 2
  • You cannot start a new topic
  • This topic is locked

Google Redirect - Please Help

#16 User is offline   CatByte 

  • Bleepin' curls!
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Malware Response Team
  • Posts: 7,856
  • Joined: 09-November 08
  • Gender:Not Telling
  • Location:Canada

Posted 07 April 2011 - 09:53 PM

I was concerned about all the deletions from that last combofix run and unfortunately it has just been posted that there was a bug in the version that was run on your machine which has since been fixed, but it feleted quite a number of files and folders which it shouldn't have, so we need to dequarantine them, but I need to know exactly what has transpired since, did you do the system restore after the combofix run what is the status of the computer now, is it still acting as though it is infected, please post the content of the quarantine folder so I can see what we need to put back

Click Start>Run and copy/paste the following bolded text into the Run box and click OK:

C:\Qoobox\ComboFix-quarantined-files.txt

A report should pop open for you. Please post the contents in your next reply.


My sincere apologies for the inconvenience this must have caused, but sometimes this happens and can't be helped, but it's easily fixed.
The help you receive here is free. If you wish to show your appreciation, then you may Posted Image
Microsoft MVP - 2010, 2011

#17 User is offline   daddysgirl574 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 18
  • Joined: 04-April 11

Posted 08 April 2011 - 06:01 AM

I did the System Restore AFTER Combofix ran as computer froze/would not reboot. AFTER THIS RESTORE, I ran Malwarebytes. It deleted/quarantined about 6 items, but said I needed to reboot. Before I rebooted, I posted the Combofix and Malwarebytes log in case I had a problem after the reboot. When I did the Malwarebytes reboot, there was a problem, screen came up about possible recent hardware or other change giving the options for "last known good...Safe Mode, etc." I selected "last known good..." so I don't know exactly what it restored to at this point except that it was before I Uninstalled CA Antivirus but possibly after I disabled CA Antivirus because it has a big red X by it.

I JUST NOW WENT IN AND DID A COUPLE OF Google, Live and Bing SEARCHES and Searching appears to be normal. Note, I currently have no virus scan active.

________________
2011-04-07 20:48:12 . 2011-04-07 20:48:12 1,032 ----a-w- C:\Qoobox\Quarantine\Registry_backups\AddRemove-Windows Media Format Runtime.reg.dat
2011-04-07 20:48:03 . 2011-04-07 20:48:03 952 ----a-w- C:\Qoobox\Quarantine\Registry_backups\ShellExecuteHooks-{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}.reg.dat
2011-04-07 20:47:59 . 2011-04-07 20:47:59 141 ----a-w- C:\Qoobox\Quarantine\Registry_backups\HKLM-Run-SPC_Monitor.reg.dat
2011-04-07 20:47:59 . 2011-04-07 20:47:59 146 ----a-w- C:\Qoobox\Quarantine\Registry_backups\HKLM-Run-SPC230NC_Monitor.reg.dat
2011-04-07 20:47:59 . 2011-04-07 20:47:59 157 ----a-w- C:\Qoobox\Quarantine\Registry_backups\HKLM-Run-QuickTime Task.reg.dat
2011-04-07 20:47:58 . 2011-04-07 20:47:59 152 ----a-w- C:\Qoobox\Quarantine\Registry_backups\HKLM-Run-D-Link AirPlus G.reg.dat
2011-04-07 20:47:58 . 2011-04-07 20:47:58 161 ----a-w- C:\Qoobox\Quarantine\Registry_backups\HKLM-Run-ATIPTA.reg.dat
2011-04-07 20:47:58 . 2011-04-07 20:47:58 195 ----a-w- C:\Qoobox\Quarantine\Registry_backups\HKCU-Run-SUPERAntiSpyware.reg.dat
2011-04-07 20:41:09 . 2011-04-07 20:41:09 119,199 ----a-w- C:\Qoobox\Quarantine\C\Program Files\iPod\bin\_iPodService_.exe.zip
2011-04-07 20:40:46 . 2011-04-07 20:40:46 2,128 ----a-w- C:\Qoobox\Quarantine\Registry_backups\Service_WpdUsb.reg.dat
2011-04-07 20:40:46 . 2011-04-07 20:40:46 2,584 ----a-w- C:\Qoobox\Quarantine\Registry_backups\Service_WISTechVIDCAP.reg.dat
2011-04-07 20:40:46 . 2011-04-07 20:40:46 2,974 ----a-w- C:\Qoobox\Quarantine\Registry_backups\Service_UleadBurningHelper.reg.dat
2011-04-07 20:40:46 . 2011-04-07 20:40:46 142,950 ----a-w- C:\Qoobox\Quarantine\Registry_backups\Service_SPC230NC.reg.dat
2011-04-07 20:40:46 . 2011-04-07 20:40:46 3,260 ----a-w- C:\Qoobox\Quarantine\Registry_backups\Service_SASKUTIL.reg.dat
2011-04-07 20:40:46 . 2011-04-07 20:40:46 3,112 ----a-w- C:\Qoobox\Quarantine\Registry_backups\Service_SASDIFSV.reg.dat
2011-04-07 20:40:46 . 2011-04-07 20:40:46 2,636 ----a-w- C:\Qoobox\Quarantine\Registry_backups\Service_RTL8023xp.reg.dat
2011-04-07 20:40:46 . 2011-04-07 20:40:46 40,142 ----a-w- C:\Qoobox\Quarantine\Registry_backups\Service_Ps2.reg.dat
2011-04-07 20:40:46 . 2011-04-07 20:40:46 2,228 ----a-w- C:\Qoobox\Quarantine\Registry_backups\Service_PRISM_A02.reg.dat
2011-04-07 20:40:46 . 2011-04-07 20:40:46 10,178 ----a-w- C:\Qoobox\Quarantine\Registry_backups\Service_PcdrNdisuio.reg.dat
2011-04-07 20:40:45 . 2011-04-07 20:40:45 2,112 ----a-w- C:\Qoobox\Quarantine\Registry_backups\Service_PAEAFLT.reg.dat
2011-04-07 20:40:45 . 2011-04-07 20:40:45 2,454 ----a-w- C:\Qoobox\Quarantine\Registry_backups\Service_msvad_simple.reg.dat
2011-04-07 20:40:45 . 2011-04-07 20:40:45 2,056 ----a-w- C:\Qoobox\Quarantine\Registry_backups\Service_MHNDRV.reg.dat
2011-04-07 20:40:45 . 2011-04-07 20:40:45 4,156 ----a-w- C:\Qoobox\Quarantine\Registry_backups\Service_MHN.reg.dat
2011-04-07 20:40:45 . 2011-04-07 20:40:45 2,862 ----a-w- C:\Qoobox\Quarantine\Registry_backups\Service_HCWBT8XX.reg.dat
2011-04-07 20:40:45 . 2011-04-07 20:40:45 3,210 ----a-w- C:\Qoobox\Quarantine\Registry_backups\Service_fasttx2k.reg.dat
2011-04-07 20:40:45 . 2011-04-07 20:40:45 3,148 ----a-w- C:\Qoobox\Quarantine\Registry_backups\Service_ehRecvr.reg.dat
2011-04-07 20:40:45 . 2011-04-07 20:40:45 2,584 ----a-w- C:\Qoobox\Quarantine\Registry_backups\Service_dsNcAdpt.reg.dat
2011-04-07 20:40:45 . 2011-04-07 20:40:45 1,162 ----a-w- C:\Qoobox\Quarantine\Registry_backups\Legacy_UleadBurningHelper.reg.dat
2011-04-07 20:40:45 . 2011-04-07 20:40:45 1,276 ----a-w- C:\Qoobox\Quarantine\Registry_backups\Legacy_SASKUTIL.reg.dat
2011-04-07 20:40:45 . 2011-04-07 20:40:45 1,276 ----a-w- C:\Qoobox\Quarantine\Registry_backups\Legacy_SASDIFSV.reg.dat
2011-04-07 20:40:45 . 2011-04-07 20:40:45 1,390 ----a-w- C:\Qoobox\Quarantine\Registry_backups\Legacy_fasttx2k.reg.dat
2011-04-07 20:40:45 . 2011-04-07 20:40:45 1,070 ----a-w- C:\Qoobox\Quarantine\Registry_backups\Legacy_ehRecvr.reg.dat
2011-04-07 20:37:20 . 2011-04-07 20:37:21 279,551 ----a-w- C:\Qoobox\Quarantine\[4]-Submit_2011-04-07_16.37.19.zip
2011-04-07 15:27:30 . 2005-05-25 19:18:18 24,613 ----a-w- C:\Qoobox\Quarantine\C\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\IadHide5.dll.vir
2011-04-07 12:02:10 . 2011-04-07 12:02:12 1,006,778 ----a-w- C:\Qoobox\Quarantine\C\Documents and Settings\HP_Administrator\Desktop\rkill.scr.vir
2011-04-06 21:31:58 . 2004-05-01 03:01:14 53 ----a-w- C:\Qoobox\Quarantine\D\Autorun.inf.vir
2011-04-06 21:27:39 . 2011-04-07 20:39:54 9,689 ----a-w- C:\Qoobox\Quarantine\Registry_backups\tcpip.reg
2011-04-06 21:21:41 . 2011-04-07 20:41:10 447 ----a-w- C:\Qoobox\Quarantine\catchme.log
2011-04-06 21:08:13 . 2011-04-07 20:35:10 4,345,411 ----a-w- C:\Qoobox\Quarantine\C\Documents and Settings\HP_Administrator\Desktop\ComboFix.exe.vir
2011-04-06 14:30:10 . 2011-04-06 14:30:10 10,816,936 ----a-w- C:\Qoobox\Quarantine\C\Documents and Settings\HP_Administrator\Desktop\SUPERAntiSpyware.exe.vir
2011-04-06 11:12:47 . 2011-01-25 20:09:18 768,944 ----a-w- C:\Qoobox\Quarantine\C\Program Files\ESET\ESET Online Scanner\esets_apiW_a.dll.vir
2011-04-06 11:12:47 . 2011-01-25 20:09:18 373,424 ----a-w- C:\Qoobox\Quarantine\C\Program Files\ESET\ESET Online Scanner\esets_apiW.dll.vir
2011-04-06 11:12:47 . 2011-01-25 20:09:16 365,184 ----a-w- C:\Qoobox\Quarantine\C\Program Files\ESET\ESET Online Scanner\esets_apiA.dll.vir
2011-04-06 02:19:37 . 2011-04-07 15:29:09 52,736 ----a-w- C:\Qoobox\Quarantine\C\Documents and Settings\HP_Administrator\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10007.dll.vir
2011-04-06 02:19:32 . 2011-04-06 02:19:32 63,488 ----a-w- C:\Qoobox\Quarantine\C\Documents and Settings\HP_Administrator\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10006.dll.vir
2011-04-06 02:19:30 . 2011-04-06 02:19:30 52,224 ----a-w- C:\Qoobox\Quarantine\C\Documents and Settings\HP_Administrator\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10005.dll.vir
2011-04-06 02:19:27 . 2011-04-06 02:19:27 117,760 ----a-w- C:\Qoobox\Quarantine\C\Documents and Settings\HP_Administrator\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL.vir
2011-04-05 23:23:45 . 2011-04-05 23:23:46 625,664 ----a-w- C:\Qoobox\Quarantine\C\Documents and Settings\HP_Administrator\Desktop\dds.scr.vir
2011-04-05 16:28:29 . 2011-04-05 16:28:29 245,400 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Java\jre6\bin\unicows.dll.vir
2011-04-05 16:07:51 . 2011-04-05 16:07:51 0 ----a-w- C:\Qoobox\Quarantine\C\Documents and Settings\HP_Administrator\oisrijtfzf.tmp.vir
2011-04-05 15:42:48 . 2011-04-05 15:42:52 1,377,112 ----a-w- C:\Qoobox\Quarantine\C\Documents and Settings\HP_Administrator\Desktop\tdsskiller.exe.vir
2011-04-01 19:05:41 . 2011-04-01 19:05:41 323,072 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\atiiiexx32.dll.vir
2011-03-16 22:24:21 . 2011-03-16 22:24:21 2,423,752 ----a-w- C:\Qoobox\Quarantine\C\Documents and Settings\HP_Administrator\Desktop\SUPERAntispyware\SUPERAntiSpyware.exe.vir
2011-03-01 01:41:04 . 2011-03-01 01:41:04 374,784 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\System.Windows.Browser.ni.dll.vir
2011-03-01 01:40:54 . 2011-03-01 01:40:54 138,240 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\System.ServiceModel.Web.ni.dll.vir
2011-03-01 01:40:50 . 2011-03-01 01:40:50 844,288 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\System.Xml.ni.dll.vir
2011-03-01 01:40:49 . 2011-03-01 01:40:49 652,288 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\System.Net.ni.dll.vir
2011-03-01 01:40:43 . 2011-03-01 01:40:43 665,088 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\System.ni.dll.vir
2011-02-27 03:40:54 . 2011-03-09 16:49:40 53,248 ----a-w- C:\Qoobox\Quarantine\C\Program Files\MediaMall\PlayOn.exe.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 253,952 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\Microsoft.VisualBasic.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\mscorrc.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 536,576 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\System.Core.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 233,472 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\system.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 225,280 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\System.Net.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 413,696 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\System.Runtime.Serialization.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 520,192 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\System.ServiceModel.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 73,728 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\System.ServiceModel.Web.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 143,360 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\System.Windows.Browser.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 319,488 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\System.Xml.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\ar\Microsoft.VisualBasic.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\ar\mscorlib.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\ar\mscorrc.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\ar\system.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\bg\Microsoft.VisualBasic.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 5,120 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\bg\mscorlib.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\bg\mscorrc.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\bg\system.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\ca\Microsoft.VisualBasic.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\ca\mscorlib.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\ca\mscorrc.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\ca\system.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\cs\Microsoft.VisualBasic.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\cs\mscorlib.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\cs\mscorrc.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\cs\system.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\da\Microsoft.VisualBasic.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\da\mscorlib.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\da\mscorrc.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\da\system.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\de\Microsoft.VisualBasic.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\de\mscorlib.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\de\mscorrc.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\de\system.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\el\Microsoft.VisualBasic.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 5,120 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\el\mscorlib.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\el\mscorrc.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\el\system.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\es\Microsoft.VisualBasic.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\es\mscorlib.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\es\mscorrc.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\es\system.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\et\Microsoft.VisualBasic.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\et\mscorlib.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\et\mscorrc.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\et\system.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\eu\Microsoft.VisualBasic.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\eu\mscorlib.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\eu\mscorrc.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\eu\system.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\fi\Microsoft.VisualBasic.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\fi\mscorlib.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\fi\mscorrc.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\fi\system.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\fr\Microsoft.VisualBasic.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\fr\mscorlib.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\fr\mscorrc.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\fr\system.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\he\Microsoft.VisualBasic.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\he\mscorlib.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\he\mscorrc.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\he\system.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\hr\Microsoft.VisualBasic.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\hr\mscorlib.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\hr\mscorrc.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\hr\system.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\hu\Microsoft.VisualBasic.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\hu\mscorlib.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\hu\mscorrc.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\hu\system.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\id\Microsoft.VisualBasic.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\id\mscorlib.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\id\mscorrc.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\id\system.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\it\Microsoft.VisualBasic.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\it\mscorlib.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\it\mscorrc.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\it\system.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\ja\Microsoft.VisualBasic.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\ja\mscorlib.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\ja\mscorrc.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\ja\system.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\ko\Microsoft.VisualBasic.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\ko\mscorlib.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\ko\mscorrc.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\ko\system.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\lt\Microsoft.VisualBasic.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\lt\mscorlib.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\lt\mscorrc.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\lt\system.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\lv\Microsoft.VisualBasic.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\lv\mscorlib.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\lv\mscorrc.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\lv\system.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\ms\Microsoft.VisualBasic.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\ms\mscorlib.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\ms\mscorrc.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\ms\system.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\nl\Microsoft.VisualBasic.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\nl\mscorlib.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\nl\mscorrc.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\nl\system.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\no\Microsoft.VisualBasic.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\no\mscorlib.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\no\mscorrc.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\no\system.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\pl\Microsoft.VisualBasic.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\pl\mscorlib.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\pl\mscorrc.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\pl\system.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\pt\Microsoft.VisualBasic.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\pt\mscorlib.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\pt\mscorrc.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\pt\system.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\pt-BR\Microsoft.VisualBasic.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\pt-BR\mscorlib.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\pt-BR\mscorrc.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\pt-BR\system.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\ro\Microsoft.VisualBasic.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\ro\mscorlib.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\ro\mscorrc.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\ro\system.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\ru\Microsoft.VisualBasic.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 5,120 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\ru\mscorlib.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\ru\mscorrc.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\ru\system.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\sk\Microsoft.VisualBasic.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\sk\mscorlib.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\sk\mscorrc.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\sk\system.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\sl\Microsoft.VisualBasic.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\sl\mscorlib.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\sl\mscorrc.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\sl\system.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\sr-Cyrl-CS\Microsoft.VisualBasic.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 5,120 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\sr-Cyrl-CS\mscorlib.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\sr-Cyrl-CS\mscorrc.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\sr-Cyrl-CS\system.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\sr-Latn-CS\Microsoft.VisualBasic.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\sr-Latn-CS\mscorlib.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\sr-Latn-CS\mscorrc.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\sr-Latn-CS\system.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\sv\Microsoft.VisualBasic.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\sv\mscorlib.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\sv\mscorrc.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\sv\system.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\th\Microsoft.VisualBasic.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 5,120 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\th\mscorlib.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\th\mscorrc.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\th\system.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\tr\Microsoft.VisualBasic.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\tr\mscorlib.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\tr\mscorrc.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\tr\system.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\uk\Microsoft.VisualBasic.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 5,120 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\uk\mscorlib.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\uk\mscorrc.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\uk\system.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\vi\Microsoft.VisualBasic.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\vi\mscorlib.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\vi\mscorrc.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\vi\system.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\zh-Hans\Microsoft.VisualBasic.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\zh-Hans\mscorlib.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 3,584 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\zh-Hans\mscorrc.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 3,584 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\zh-Hans\system.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,096 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\zh-Hant\Microsoft.VisualBasic.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\zh-Hant\mscorlib.resources.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 3,584 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\zh-Hant\mscorrc.dll.vir
2011-01-29 07:06:50 . 2011-01-29 07:06:50 4,608 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\zh-Hant\system.resources.dll.vir
2011-01-29 05:18:58 . 2011-01-29 05:18:58 73,552 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\coregen.exe.vir
2011-01-20 18:33:12 . 2011-03-03 05:16:15 487,424 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Common Files\ffdshowEx\erdmpg-5.3a.dll.vir
2010-06-23 11:52:05 . 2010-06-23 11:52:05 3,182,592 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll.vir
2010-06-23 11:51:47 . 2010-06-23 11:51:47 626,688 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll.vir
2010-06-23 11:51:13 . 2010-06-23 11:51:13 5,025,792 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll.vir
2010-06-11 13:12:17 . 2010-06-11 13:12:17 11,797,504 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web\d987cf1de4ba688da92e212a374232c2\System.Web.ni.dll.vir
2010-05-10 18:41:30 . 2010-05-10 18:41:30 67,656 ----a-w- C:\Qoobox\Quarantine\C\Documents and Settings\HP_Administrator\Desktop\SUPERAntispyware\SASKUTIL.SYS.vir
2010-04-14 23:01:15 . 2010-02-24 18:11:40 23,920 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\drivers\povrtdev.sys.vir
2010-02-17 18:25:48 . 2010-02-17 18:25:48 12,872 ----a-w- C:\Qoobox\Quarantine\C\Documents and Settings\HP_Administrator\Desktop\SUPERAntispyware\sasdifsv.sys.vir
2010-02-04 14:09:57 . 2010-02-04 14:09:57 0 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\6334.exe.vir
2010-02-04 13:49:56 . 2010-02-04 13:49:56 0 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\18467.exe.vir
2010-01-25 22:55:12 . 2001-08-18 03:36:30 5,632 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\ptpusb.dll.vir
2010-01-25 22:55:11 . 2004-08-04 05:56:46 159,232 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\ptpusd.dll.vir
2009-11-07 05:07:08 . 2009-11-07 05:07:08 49,488 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\netfxperf.dll.vir
2009-11-07 05:07:04 . 2009-11-07 05:07:04 297,808 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\mscoree.dll.vir
2009-11-07 05:06:46 . 2009-11-07 05:06:46 1,130,824 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\dfshim.dll.vir
2009-08-07 22:23:13 . 2007-09-26 18:28:46 8,576 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\drivers\PAEAFLT.sys.vir
2009-08-07 22:23:13 . 2007-12-31 20:19:50 461,056 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\drivers\SPC230NC.SYS.vir
2009-08-07 22:23:13 . 2008-01-04 14:25:30 135,680 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\SPC230NC.AX.vir
2009-08-07 22:23:12 . 2007-12-10 19:55:26 323,584 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\Philips\SPC230NC\Monitor.exe.vir
2009-06-08 20:09:16 . 2008-07-06 12:06:10 89,088 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll.vir
2009-06-08 20:06:55 . 2008-07-06 12:06:10 117,760 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\prntvpt.dll.vir
2009-06-08 20:06:54 . 2008-07-06 12:06:10 575,488 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\xpsshhdr.dll.vir
2009-06-08 20:06:52 . 2008-07-06 12:06:10 1,676,288 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\xpssvcs.dll.vir
2009-06-08 19:38:17 . 2009-06-08 19:38:19 2,959,376 ----a-w- C:\Qoobox\Quarantine\C\Documents and Settings\HP_Administrator\Desktop\dotnetfx35setup.exe.vir
2009-03-08 18:22:30 . 2009-03-08 18:22:30 49,152 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\msrating.dll.mui.vir
2009-03-08 18:22:18 . 2009-03-08 18:22:18 2,560 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\mshta.exe.mui.vir
2009-03-08 18:21:44 . 2009-03-08 18:21:44 12,288 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Internet Explorer\iexplore.exe.mui.vir
2009-03-08 18:21:06 . 2009-03-08 18:21:06 4,096 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\ie4uinit.exe.mui.vir
2009-03-08 18:20:54 . 2009-03-08 18:20:54 81,920 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\iedkcs32.dll.mui.vir
2009-03-08 08:35:32 . 2010-05-06 10:41:48 743,424 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Internet Explorer\iedvtool.dll.vir
2009-03-08 08:35:12 . 2009-03-08 08:35:12 233,984 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Internet Explorer\jsprofilerui.dll.vir
2009-03-08 08:35:04 . 2009-03-08 08:35:04 144,384 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Internet Explorer\ExtExport.exe.vir
2009-03-08 08:35:04 . 2009-08-07 08:48:40 100,352 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Internet Explorer\iecompat.dll.vir
2009-03-08 08:35:04 . 2009-03-08 08:35:04 118,272 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Internet Explorer\JSProfilerCore.dll.vir
2009-03-08 08:35:02 . 2009-03-08 08:35:02 521,216 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Internet Explorer\jsdbgui.dll.vir
2009-03-08 08:35:02 . 2009-03-08 08:35:02 121,344 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Internet Explorer\jsdebuggeride.dll.vir
2009-03-08 08:33:18 . 2010-05-06 10:41:53 12,800 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Internet Explorer\xpshims.dll.vir
2009-01-07 22:20:54 . 2009-01-07 22:20:54 134,144 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Internet Explorer\sqmapi.dll.vir
2009-01-02 18:41:32 . 2002-06-11 02:46:58 57,344 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Internet Explorer\PLUGINS\NPEvery.dll.vir
2009-01-02 18:16:33 . 1999-04-21 10:08:34 29,184 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\Popup.ocx.vir
2008-11-04 18:48:40 . 2010-12-20 23:09:00 38,224 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\drivers\mbamswissarmy.sys.vir
2008-07-30 01:10:04 . 2008-07-30 01:10:04 73,720 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\dxva2.dll.vir
2008-07-30 01:10:04 . 2008-07-30 01:10:04 493,048 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\evr.dll.vir
2008-07-30 01:10:04 . 2008-07-30 01:10:04 26,112 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\TsWpfWrp.exe.vir
2008-07-29 23:59:58 . 2008-07-29 23:59:58 161,296 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\UIAutomationCore.dll.vir
2008-07-29 23:24:50 . 2008-07-29 23:24:50 881,664 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe.vir
2008-07-29 23:24:50 . 2008-07-29 23:24:50 622,080 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\icardagt.exe.vir
2008-07-29 23:24:50 . 2008-07-29 23:24:50 11,264 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\icardres.dll.vir
2008-07-29 23:24:50 . 2008-07-29 23:24:50 97,800 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\infocardapi.dll.vir
2008-07-29 23:24:50 . 2008-07-29 23:24:50 37,384 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\infocardcpl.cpl.vir
2008-07-29 23:16:38 . 2008-07-29 23:16:38 132,096 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe.vir
2008-07-29 09:49:58 . 2008-07-29 09:49:58 586,240 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\icardres.dll.mui.vir
2008-07-25 15:16:40 . 2008-07-25 15:16:40 34,312 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe.vir
2008-06-25 00:30:43 . 2008-06-25 00:30:46 667,648 ----a-w- C:\Qoobox\Quarantine\C\Documents and Settings\HP_Administrator\Desktop\Norton_Removal_Tool.exe.vir
2008-05-13 17:13:36 . 2008-05-13 17:13:36 77,824 ----a-w- C:\Qoobox\Quarantine\C\Documents and Settings\HP_Administrator\Desktop\SUPERAntispyware\SASSEH.DLL.vir
2008-03-18 16:37:43 . 2007-08-27 17:33:56 16,896 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\dltwav32.acm.vir
2008-03-14 05:54:54 . 2008-03-14 05:54:54 102,484 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\Downloaded Program Files\JuniperSetup.ocx.vir
2008-02-11 17:41:56 . 2007-08-08 22:23:08 77,824 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\cSystemInfoAX.ocx.vir
2008-01-16 20:25:41 . 2007-11-22 15:52:06 942,080 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\SftMask_IX86_U_60.ocx.vir
2007-12-16 15:17:06 . 2009-08-06 23:23:46 16,736 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\mucltui.dll.mui.vir
2007-12-16 15:17:06 . 2009-08-06 23:23:46 274,288 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\mucltui.dll.vir
2007-12-15 00:09:19 . 2004-02-13 20:58:24 65,536 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\hcwdlg.ocx.vir
2007-12-15 00:07:17 . 2004-08-04 04:08:04 48,640 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\stream.sys.vir
2007-12-15 00:01:15 . 2002-12-17 16:15:00 77,824 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\hcwsplit.ax.vir
2007-12-15 00:01:15 . 2002-12-18 22:02:00 69,632 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\hcwfread.ax.vir
2007-12-15 00:01:15 . 1999-04-27 21:26:10 11,264 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\hcwhook.dll.vir
2007-12-15 00:01:15 . 2006-01-24 16:17:16 524,353 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\HCWTVWND.dll.vir
2007-12-15 00:01:14 . 1999-05-28 18:18:42 12,288 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\btgpio32.dll.vir
2007-12-15 00:01:14 . 2005-12-22 16:54:22 229,432 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\hcwpnp32.dll.vir
2007-12-15 00:01:14 . 2005-12-16 21:38:30 94,264 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\hcwi2c32.dll.vir
2007-12-15 00:01:14 . 2002-10-23 18:58:04 90,174 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\bt848wst.dll.vir
2007-12-15 00:01:14 . 2004-05-27 23:23:38 73,728 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\Hcwsnap.ax.vir
2007-12-15 00:01:14 . 2005-02-08 16:18:18 213,050 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\Hcwchan.dll.vir
2007-12-15 00:01:14 . 2003-11-07 18:45:18 106,559 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\Hcwtvdlg.dll.vir
2007-12-15 00:01:14 . 2006-01-25 21:14:06 472,644 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\drivers\HCWBT8xx.sys.vir
2007-12-15 00:01:07 . 2004-08-31 15:01:36 36,921 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\Hcwutl32.dll.vir
2007-12-14 16:39:44 . 2006-10-04 14:05:26 39,424 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\AppPatch\acadproc.dll.vir
2007-12-14 16:21:57 . 2006-03-21 03:23:12 23,040 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\kb913800.exe.vir
2007-12-14 16:02:53 . 2005-08-03 23:29:52 47,616 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Windows Media Player\msoobci.dll.vir
2007-12-14 16:02:52 . 2006-11-01 23:31:38 1,669,120 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Windows Media Player\wmsetsdk.exe.vir
2007-12-04 15:44:43 . 2009-08-06 23:24:18 21,728 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\wucltui.dll.mui.vir
2007-12-04 15:44:43 . 2009-08-06 23:24:00 17,632 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\wuaueng.dll.mui.vir
2007-12-04 15:44:43 . 2009-08-06 23:24:12 15,072 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\wuaucpl.cpl.mui.vir
2007-12-04 15:44:43 . 2009-08-06 23:24:06 15,064 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\wuapi.dll.mui.vir
2007-10-19 12:08:57 . 1998-11-23 19:10:06 90,112 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\ccrpTmr6.dll.vir
2007-10-11 07:08:02 . 2002-11-27 13:30:00 60,419 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\Wvfile.ocx.vir
2007-10-11 07:08:01 . 2002-11-15 09:25:18 225,280 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\ufmanager.dll.vir
2007-10-11 07:08:01 . 1998-06-30 18:13:16 78,608 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\VB5DB.DLL.vir
2007-10-11 07:08:01 . 1996-11-07 23:48:12 368,912 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\vbar332.dll.vir
2007-10-11 07:08:01 . 2002-11-27 13:30:00 27,648 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\Vox2wav.ocx.vir
2007-10-11 07:08:00 . 2002-11-15 09:23:30 69,632 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\u2lfinra.dll.vir
2007-10-11 07:07:59 . 2002-11-27 13:30:00 55,811 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\tegods.ocx.vir
2007-10-11 07:07:58 . 2004-03-08 13:00:00 508,419 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\Ssdata32.ocx.vir
2007-10-11 07:07:58 . 2004-03-08 13:00:00 621,568 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\Ssdatb32.ocx.vir
2007-10-11 07:07:58 . 2004-03-09 04:00:00 224,016 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\TABCTL32.OCX.vir
2007-10-11 07:07:57 . 2002-09-06 19:59:02 1,269,760 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\sscsdk80.dll.vir
2007-10-11 07:07:56 . 2002-05-03 16:56:40 790,528 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\sscdlg.dll.vir
2007-10-11 07:07:56 . 2002-10-04 20:34:42 2,498,560 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\sscrc.dll.vir
2007-10-11 07:07:55 . 2002-11-15 05:58:12 793,173 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\sacommoncontrols.dll.vir
2007-10-11 07:07:55 . 2002-11-27 13:30:00 96,771 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\Sdcvtx.ocx.vir
2007-10-11 07:07:55 . 2005-10-10 19:08:22 475,136 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\shlObj70.ocx.vir
2007-10-11 07:07:42 . 2006-09-04 17:57:12 270,880 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\MyCommandButton.ocx.vir
2007-10-11 07:07:38 . 2000-05-22 03:00:00 118,976 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\MSADODC.OCX.vir
2007-10-11 07:07:38 . 2000-07-15 03:00:00 77,824 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\MSBIND.DLL.vir
2007-10-11 07:07:37 . 1996-12-02 03:00:00 18,944 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\Implode.dll.vir
2007-10-11 07:07:37 . 2002-11-15 07:13:22 221,184 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\keycode.dll.vir
2007-10-11 07:07:34 . 2002-11-15 03:38:16 495,688 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\ExportModeller.dll.vir
2007-10-11 07:07:34 . 2002-11-15 06:00:06 873,028 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\filedialog.dll.vir
2007-10-11 07:07:33 . 2002-11-27 13:30:00 75,776 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\DWSPY36.dll.vir
2007-10-11 07:07:33 . 2002-12-30 16:57:52 671,801 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\exlate32.dll.vir
2007-10-11 07:07:32 . 1997-02-25 12:53:38 70,144 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\CTNEDT32.OCX.vir
2007-10-11 07:07:19 . 2002-11-15 08:57:14 172,102 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\CRAnalyzer.dll.vir
2007-10-11 07:07:18 . 2002-09-22 18:32:46 60,416 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\A16_Tmrs.ocx.vir
2007-10-11 07:07:18 . 2002-05-18 23:28:46 159,744 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\afiost.ocx.vir
2007-10-11 07:07:18 . 2004-01-23 14:42:26 282,624 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\AniGIF.ocx.vir
2007-09-26 23:24:42 . 2007-09-26 23:24:42 12,800 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\agrsmsvc.exe.vir
2007-08-18 00:09:34 . 2007-08-18 00:09:34 13,312 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\agrscoin.dll.vir
2007-08-17 01:11:00 . 2007-08-17 01:11:00 250,544 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\KeyHelp.ocx.vir
2007-08-13 23:54:10 . 2007-08-13 23:54:10 33,792 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Internet Explorer\custsat.dll.vir
2007-08-13 23:54:10 . 2010-05-06 10:41:50 247,808 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Internet Explorer\ieproxy.dll.vir
2007-08-13 23:40:52 . 2009-03-08 18:22:46 1,241,088 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\ieframe.dll.mui.vir
2007-08-13 23:38:48 . 2009-03-08 18:21:06 10,240 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\advpack.dll.mui.vir
2007-07-31 00:18:34 . 2009-08-06 23:23:46 215,920 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\muweb.dll.vir
2007-07-12 08:49:16 . 2007-08-22 17:51:38 97,152 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\drivers\Rtnicxp.sys.vir
2007-06-22 19:03:10 . 2007-06-22 19:03:10 23,552 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\drivers\dsNcAdpt.sys.vir
2006-12-24 23:50:14 . 2005-07-28 18:33:06 40,960 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\GButton.ocx.vir
2006-12-24 23:49:42 . 1998-06-26 04:00:00 89,600 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\MSCAL.OCX.vir
2006-12-24 23:49:42 . 1999-05-07 04:00:00 244,232 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\MsFlxGrd.ocx.vir
2006-12-24 23:49:41 . 2001-01-12 16:02:36 53,248 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\MDCustomPanels.ocx.vir
2006-12-24 23:49:32 . 2004-02-23 14:44:22 236,544 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\DivXdec.ax.vir
2006-10-19 02:47:22 . 2006-10-19 02:47:22 1,543,680 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\WMVDECOD.dll.vir
2006-10-19 02:47:22 . 2006-10-19 02:47:22 1,574,912 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\WMVENCOD.dll.vir
2006-10-19 02:47:22 . 2006-10-19 02:47:22 1,382,912 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\WMVSDECD.dll.vir
2006-10-19 02:47:22 . 2006-10-19 02:47:22 767,488 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\WMVSENCD.dll.vir
2006-10-19 02:47:22 . 2006-10-19 02:47:22 656,896 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\WMVXENCD.dll.vir
2006-10-19 02:47:22 . 2006-10-19 02:47:22 2,603,008 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\WpdShext.dll.vir
2006-10-19 02:47:22 . 2006-10-19 02:47:22 38,400 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\wpdshextres.dll.vir
2006-10-19 02:47:22 . 2006-10-19 02:47:22 133,632 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\WPDShServiceObj.dll.vir
2006-10-19 02:47:20 . 2006-10-19 02:47:20 198,144 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Windows Media Player\wmpnssci.dll.vir
2006-10-19 02:47:20 . 2008-06-24 22:12:58 295,936 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\wmpeffects.dll.vir
2006-10-19 02:47:20 . 2006-10-19 02:47:20 613,376 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\wmpmde.dll.vir
2006-10-19 02:47:20 . 2006-10-19 02:47:20 130,048 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\wmpps.dll.vir
2006-10-19 02:47:18 . 2006-10-19 02:47:18 284,160 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\PortableDeviceApi.dll.vir
2006-10-19 02:47:18 . 2006-10-19 02:47:18 101,888 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\PortableDeviceClassExtension.dll.vir
2006-10-19 02:47:18 . 2006-10-19 02:47:18 166,912 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\PortableDeviceTypes.dll.vir
2006-10-19 02:47:18 . 2006-10-19 02:47:18 132,096 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\PortableDeviceWiaCompat.dll.vir
2006-10-19 02:47:18 . 2006-10-19 02:47:18 199,168 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\PortableDeviceWMDRM.dll.vir
2006-10-19 02:47:14 . 2006-10-19 02:47:14 259,072 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\MP43DECD.dll.vir
2006-10-19 02:47:14 . 2006-10-19 02:47:14 317,440 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\MP4SDECD.dll.vir
2006-10-19 02:47:14 . 2006-10-19 02:47:14 259,072 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\MPG4DECD.dll.vir
2006-10-19 01:05:26 . 2006-10-19 01:05:26 204,288 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Windows Media Player\wmpnscfg.exe.vir
2006-10-19 01:05:24 . 2006-10-19 01:05:24 913,408 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Windows Media Player\wmpnetwk.exe.vir
2006-10-19 01:04:40 . 2006-10-19 01:04:40 493,568 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Windows Media Player\wmdbexport.exe.vir
2006-10-19 01:04:30 . 2006-10-19 01:04:30 36,864 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Windows Media Player\wmpshare.exe.vir
2006-10-19 01:00:14 . 2006-10-19 01:00:14 17,408 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\wpdshextautoplay.exe.vir
2006-10-08 03:35:47 . 2006-10-08 03:36:05 1,893,264 ----a-w- C:\Qoobox\Quarantine\C\Documents and Settings\HP_Administrator\Desktop\SP26468.exe.vir
2006-10-07 20:12:32 . 2005-01-31 13:45:20 49,152 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe.vir
2006-10-07 20:06:08 . 2005-12-30 22:58:32 421,888 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\wisproxy.ax.vir
2006-10-07 20:06:07 . 2006-02-21 19:40:18 265,600 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\drivers\wisgostrm.sys.vir
2006-10-02 20:28:42 . 2006-10-02 20:28:42 312,128 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\msdelta.dll.vir
2006-09-29 01:13:26 . 2006-09-29 01:13:26 95,344 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\WUDFCoinstaller.dll.vir
2006-09-29 00:00:34 . 2006-09-29 00:00:34 82,944 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\drivers\WudfRd.sys.vir
2006-09-28 23:56:38 . 2006-09-28 23:56:38 146,432 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\WudfHost.exe.vir
2006-09-28 23:56:38 . 2006-09-28 23:56:38 316,416 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\WUDFx.dll.vir
2006-09-28 23:56:16 . 2006-09-28 23:56:16 165,376 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\WudfPlatform.dll.vir
2006-09-28 23:56:14 . 2006-09-28 23:56:14 55,808 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\WudfSvc.dll.vir
2006-09-28 23:55:50 . 2006-09-28 23:55:50 77,568 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\drivers\WudfPf.sys.vir
2006-08-24 20:15:06 . 2006-08-24 20:15:06 150,808 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\rgb9rast_2.dll.vir
2006-06-28 00:00:26 . 2006-06-28 00:00:26 410,928 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Windows Media Player\LegitLibM.dll.vir
2006-03-17 00:38:01 . 2006-03-17 00:38:01 28,672 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\verclsid.exe.vir
2005-09-11 16:57:20 . 2004-07-27 18:20:46 36,864 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\ANIOApi.dll.vir
2005-08-05 18:27:08 . 2005-08-05 18:27:08 99,328 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\ehome\mcrdsvc.exe.vir
2005-08-03 23:29:52 . 2006-10-19 01:00:46 249,856 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\drmupgds.exe.vir
2005-08-03 23:29:52 . 2006-10-19 02:47:14 212,992 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\MFPLAT.dll.vir
2005-05-25 19:47:07 . 2005-03-18 04:05:00 73,728 ----a-w- C:\Qoobox\Quarantine\C\Program Files\ATI Technologies\ATI Control Panel\atipdxxx.dll.vir
2005-05-25 19:47:07 . 2005-03-18 04:05:00 339,968 ----a-w- C:\Qoobox\Quarantine\C\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe.vir
2005-05-25 19:23:15 . 2005-01-19 17:21:56 12,416 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\drivers\PcdrNdisuio.sys.vir
2005-05-25 19:18:21 . 2005-05-25 19:18:17 126,976 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Updates from HP\309731\Program\HPClientExt.dll.vir
2005-05-25 19:18:18 . 2005-05-25 19:18:18 61,496 ----a-w- C:\Qoobox\Quarantine\C\Program Files\BackWeb\BackWeb Client\6.3.2.62\Program\clntutil.dll.vir
2005-05-25 19:18:18 . 2005-05-25 19:18:18 94,243 ----a-w- C:\Qoobox\Quarantine\C\Program Files\BackWeb\BackWeb Client\6.3.2.62\Program\FrExt.dll.vir
2005-05-25 19:18:18 . 2005-05-25 19:18:18 147,493 ----a-w- C:\Qoobox\Quarantine\C\Program Files\BackWeb\BackWeb Client\6.3.2.62\Program\bwfiles.dll.vir
2005-05-25 19:18:18 . 2005-05-25 19:18:18 172,032 ----a-w- C:\Qoobox\Quarantine\C\PROGRA~1\BackWeb\BACKWE~1\632~1.62\Program\EN\ClientRc.dll.vir
2005-05-25 19:17:43 . 2003-02-04 13:24:22 36,864 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\fpalsu.dll.vir
2005-05-25 19:17:40 . 2004-01-22 09:51:28 40,960 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\omano.dll.vir
2005-05-25 19:17:37 . 2002-03-19 20:05:36 45,056 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\hpreg.dll.vir
2005-05-25 19:14:47 . 2005-05-25 19:14:47 98,304 ----a-w- C:\Qoobox\Quarantine\C\Program Files\QuickTime\qttask.exe.vir
2005-05-25 19:14:43 . 2006-10-07 20:13:34 106,496 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Internet Explorer\PLUGINS\npqtplugin2.dll.vir
2005-05-25 19:14:43 . 2006-10-07 20:13:34 106,496 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Internet Explorer\PLUGINS\npqtplugin.dll.vir
2005-05-25 19:13:59 . 2007-04-09 18:23:54 28,552 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\spool\prtprocs\w32x86\mdippr.dll.vir
2005-05-25 19:00:16 . 2004-10-25 14:17:56 90,112 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\ps2.bat.vir
2005-05-25 19:00:16 . 2001-06-04 06:00:00 14,112 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\drivers\PS2.sys.vir
2005-05-25 18:56:21 . 2004-09-29 16:08:08 61,440 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\HPZinw12.exe.vir
2005-05-25 18:56:21 . 2004-09-29 16:09:32 57,344 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\HPZisn12.dll.vir
2005-05-25 18:56:21 . 2004-09-29 16:09:26 94,208 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\HPZipt12.dll.vir
2005-05-25 18:47:58 . 2007-10-31 18:17:40 54,824 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\agrsmdel.exe.vir
2005-05-25 18:47:58 . 2004-06-29 10:06:38 88,363 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\AGRSMMSG.exe.vir
2005-05-25 18:47:58 . 2007-10-31 00:54:04 1,201,632 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\drivers\AGRSM.sys.vir
2005-05-25 18:47:25 . 2005-03-09 14:53:00 36,352 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\drivers\AmdK8.sys.vir
2005-05-25 18:43:49 . 2004-09-07 13:47:52 57,344 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\ALCXMNTR.EXE.vir
2005-05-25 18:43:49 . 2004-10-01 10:24:02 2,279,424 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\drivers\ALCXWDM.SYS.vir
2005-05-25 18:43:25 . 2005-03-14 23:18:34 221,184 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\ATIDEMGR.dll.vir
2005-05-25 18:43:25 . 2005-03-14 21:26:54 131,072 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\atikvmag.dll.vir
2005-05-25 18:43:25 . 2005-03-14 21:49:06 352,256 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\ati2evxx.exe.vir
2005-05-25 18:43:25 . 2005-03-14 21:50:10 25,088 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\Ati2mdxx.exe.vir
2005-05-25 18:38:37 . 2009-01-07 22:21:00 26,144 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\spupdsvc.exe.vir
2005-05-25 18:37:10 . 1998-05-07 09:04:38 52,736 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system\hpsysdrv.exe.vir
2005-03-15 19:17:28 . 2005-03-15 19:17:28 204,800 ----a-w- C:\Qoobox\Quarantine\C\Program Files\HP\Digital Imaging\bin\HpqUtil.dll.vir
2005-02-17 12:42:48 . 2005-02-17 12:42:48 204,800 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\HPTcpMUI.dll.vir
2005-02-17 12:41:24 . 2005-02-17 12:41:24 155,648 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\HPTcpMon.dll.vir
2005-02-17 12:40:28 . 2005-02-17 12:40:28 73,728 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\HPTcpMib.dll.vir
2005-02-14 18:49:06 . 2005-02-14 18:49:06 45,056 ----a-w- C:\Qoobox\Quarantine\C\Program Files\iTunes\iTunesHelper.Resources\iTunesHelper.dll.vir
2005-02-14 18:49:02 . 2011-04-07 20:41:10 327,680 ----a-w- C:\Qoobox\Quarantine\C\Program Files\iPod\bin\iPodService.exe.vir
2005-02-14 18:48:46 . 2005-02-14 18:48:46 45,056 ----a-w- C:\Qoobox\Quarantine\C\Program Files\iPod\bin\iPodService.Resources\iPodService.dll.vir
2005-01-26 09:03:00 . 2005-01-26 09:03:00 20,576 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\drivers\pxhelp20.sys.vir
2005-01-19 22:45:38 . 2005-01-19 22:45:38 27,368 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\drivers\pcdrsrvc.pkms.vir
2004-12-15 00:07:44 . 2004-12-15 00:07:44 393,216 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\hpzcon12.dll.vir
2004-12-15 00:07:44 . 2004-12-15 00:07:44 51,120 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\drivers\HPZid412.sys.vir
2004-12-15 00:07:44 . 2004-12-15 00:07:44 16,496 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\drivers\HPZipr12.sys.vir
2004-12-15 00:07:44 . 2004-12-15 00:07:44 21,744 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\drivers\HPZius12.sys.vir
2004-12-14 06:19:18 . 2004-12-14 06:19:18 57,344 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Internet Explorer\PLUGINS\nppdf32.dll.vir
2004-11-19 16:15:10 . 2004-11-19 16:15:10 1,216,512 ----a-w- C:\Qoobox\Quarantine\C\Program Files\D-Link\AirPlus G\AirGCFG.exe.vir
2004-10-08 16:42:04 . 2004-10-08 16:42:04 122,880 ----a-w- C:\Qoobox\Quarantine\C\Program Files\HP\Digital Imaging\Unload\hpiCamTA.dll.vir
2004-09-24 01:57:41 . 2004-09-24 01:57:41 70,144 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\QuickTimeCheck.ocx.vir
2004-09-24 01:57:39 . 2004-09-24 01:57:40 2,017,280 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\QuickTimeMusicalInstruments.qtx.vir
2004-09-24 01:57:38 . 2004-09-24 01:57:38 430,592 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\QuickTimeVR.qtx.vir
2004-09-24 01:57:38 . 2004-09-24 01:57:38 323,072 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\QuickTime.cpl.vir
2004-09-24 01:57:36 . 2004-09-24 01:57:37 6,676,480 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\QuickTime.qts.vir
2004-09-23 22:57:35 . 2004-09-23 19:56:03 67,072 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\QD3DCustomElements.q3x.vir
2004-09-23 22:57:35 . 2004-09-23 19:56:03 290,304 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\QD3D_IR2.q3x.vir
2004-09-23 22:57:35 . 2004-09-23 19:56:02 127,488 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\3DViewer.dll.vir
2004-09-23 22:57:35 . 2004-09-23 19:56:03 685,056 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\rave.dll.vir
2004-09-23 22:57:35 . 2004-09-23 19:56:02 959,488 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\qd3d.dll.vir
2004-09-14 21:38:26 . 2004-09-14 21:38:26 13,872 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\drivers\GEARAspiWDM.sys.vir
2004-08-10 11:11:50 . 2004-08-10 11:11:50 8,704 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\igdetect.dll.vir
2004-08-10 11:11:50 . 2004-08-10 11:11:50 85,504 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\mhn.dll.vir
2004-08-10 11:04:40 . 2006-10-09 21:16:56 237,568 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\ehome\ehrecvr.exe.vir
2004-08-10 11:00:00 . 2004-08-10 11:00:00 61,952 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\acelpdec.ax.vir
2004-08-10 11:00:00 . 2004-08-10 11:00:00 154,624 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\ivfsrc.ax.vir
2004-08-10 11:00:00 . 2004-08-04 05:56:58 294,912 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\msh263.drv.vir
2004-08-10 10:45:04 . 2004-08-10 10:45:04 11,008 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\drivers\mhndrv.sys.vir
2004-08-10 10:43:32 . 2004-08-10 10:43:32 4,396,544 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\wpgldfsh.scr.vir
2004-08-10 10:43:28 . 2004-08-10 10:43:28 1,742,336 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\mypixdx.scr.vir
2004-08-10 10:43:22 . 2004-08-10 10:43:22 3,343,360 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\nature.scr.vir
2004-08-10 10:43:22 . 2004-08-10 10:43:22 7,093,760 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\space.scr.vir
2004-08-10 10:43:20 . 2004-08-10 10:43:20 5,068,800 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\davinci.scr.vir
2004-08-10 04:00:00 . 2004-08-10 04:00:00 28,672 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Messenger\custsat.dll.vir
2004-08-10 04:00:00 . 2006-10-19 01:05:00 241,664 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Windows Media Player\wmlaunch.exe.vir
2004-08-10 04:00:00 . 2006-10-19 01:05:02 25,600 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Windows Media Player\wmpenc.exe.vir
2004-08-10 04:00:00 . 2004-08-10 04:00:00 28,160 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Windows NT\hypertrm.exe.vir
2004-08-10 04:00:00 . 2009-11-20 11:14:51 187,392 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Windows NT\Accessories\mswrd6.wpc.vir
2004-08-10 04:00:00 . 2009-11-20 11:14:48 279,552 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Windows NT\Accessories\mswrd8.wpc.vir
2004-08-10 04:00:00 . 2009-11-20 11:14:50 89,600 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Windows NT\Accessories\write.wpc.vir
2004-08-10 04:00:00 . 2006-10-19 02:47:08 276,992 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\audiodev.dll.vir
2004-08-10 04:00:00 . 2004-08-10 04:00:00 7,680 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\chcp.com.vir
2004-08-10 04:00:00 . 2004-08-10 04:00:00 9,216 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\diskcomp.com.vir
2004-08-10 04:00:00 . 2004-08-10 04:00:00 7,168 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\diskcopy.com.vir
2004-08-10 04:00:00 . 2004-08-10 04:00:00 25,600 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\format.com.vir
2004-08-10 04:00:00 . 2004-08-10 04:00:00 26,112 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\graftabl.com.vir
2004-08-10 04:00:00 . 2009-03-08 08:35:10 385,024 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\html.iec.vir
2004-08-10 04:00:00 . 2004-08-10 04:00:00 16,384 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\imaadp32.acm.vir
2004-08-10 04:00:00 . 2004-08-10 04:00:00 51,712 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\migpwd.exe.vir
2004-08-10 04:00:00 . 2004-08-10 04:00:00 19,456 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\mode.com.vir
2004-08-10 04:00:00 . 2004-08-10 04:00:00 15,872 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\more.com.vir
2004-08-10 04:00:00 . 2004-08-10 04:00:00 20,480 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\msacm32.drv.vir
2004-08-10 04:00:00 . 2004-08-10 04:00:00 14,848 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\msadp32.acm.vir
2004-08-10 04:00:00 . 2009-09-01 14:32:11 282,654 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\msaud32.acm.vir
2004-08-10 04:00:00 . 2004-08-10 04:00:00 9,216 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\msg711.acm.vir
2004-08-10 04:00:00 . 2004-08-10 04:00:00 118,784 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\msg723.acm.vir
2004-08-10 04:00:00 . 2004-08-10 04:00:00 19,968 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\msgsm32.acm.vir
2004-08-10 04:00:00 . 2004-08-10 04:00:00 188,416 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\msh261.drv.vir
2004-08-10 04:00:00 . 2004-08-10 04:00:00 15,360 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\taskman.exe.vir
2004-08-10 04:00:00 . 2004-08-10 04:00:00 11,264 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\tree.com.vir
2004-08-10 04:00:00 . 2004-08-10 04:00:00 8,192 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\tssoft32.acm.vir
2004-08-10 04:00:00 . 2006-10-19 02:58:00 8,704 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\uwdf.exe.vir
2004-08-10 04:00:00 . 2006-10-19 02:47:18 4,096 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\wdfapi.dll.vir
2004-08-10 04:00:00 . 2006-10-19 02:58:00 8,704 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\wdfmgr.exe.vir
2004-08-10 04:00:00 . 2004-08-10 04:00:00 18,432 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\win.com.vir
2004-08-10 04:00:00 . 2006-10-19 02:47:18 429,056 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\wmdrmdev.dll.vir
2004-08-10 04:00:00 . 2006-10-19 02:47:20 348,672 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\wmdrmnet.dll.vir
2004-08-10 04:00:00 . 2006-10-19 02:47:20 1,661,440 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\wmpencen.dll.vir
2004-08-10 04:00:00 . 2006-10-19 02:47:20 204,288 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\wmpsrcwp.dll.vir
2004-08-10 04:00:00 . 2006-10-19 02:47:22 4,096 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\WMVADVD.dll.vir
2004-08-10 04:00:00 . 2006-10-19 02:47:22 4,096 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\WMVADVE.DLL.vir
2004-08-10 04:00:00 . 2006-10-19 02:47:22 35,840 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\wpdconns.dll.vir
2004-08-10 04:00:00 . 2006-10-19 02:47:22 154,624 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\wpdmtp.dll.vir
2004-08-10 04:00:00 . 2006-03-03 12:33:06 331,776 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\wpdmtpdr.dll.vir
2004-08-10 04:00:00 . 2006-10-19 02:47:22 63,488 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\wpdmtpus.dll.vir
2004-08-10 04:00:00 . 2006-10-19 02:47:22 356,352 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\wpdsp.dll.vir
2004-08-10 04:00:00 . 2006-03-03 12:32:53 10,752 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\wpdtrace.dll.vir
2004-08-10 04:00:00 . 2006-10-19 02:47:22 629,760 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\wpd_ci.dll.vir
2004-08-10 04:00:00 . 2007-11-13 10:25:53 20,480 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\drivers\secdrv.sys.vir
2004-08-10 04:00:00 . 2006-10-19 01:00:00 38,528 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\drivers\wpdusb.sys.vir
2004-08-05 20:25:38 . 2004-08-05 20:25:38 381,312 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\drivers\PRISMA02.sys.vir
2004-03-04 21:05:56 . 2004-03-04 21:05:56 344,064 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\hpzcon10.dll.vir
2003-12-02 18:23:20 . 2003-12-02 18:23:20 142,336 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\drivers\Fasttx2k.sys.vir
2003-11-21 15:45:18 . 2003-11-21 15:45:18 37,888 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\ochlp30e.dll.vir
2003-11-21 15:12:08 . 2003-11-21 15:12:08 76,288 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\PUBOLE32.DLL.vir
2003-11-21 15:09:40 . 2003-11-21 15:09:40 5,632 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\mfcuia32.dll.vir
2003-07-28 19:28:22 . 2003-07-28 19:28:22 89,136 ----a-w- C:\Qoobox\Quarantine\C\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE.vir
2003-04-10 22:04:00 . 2003-04-10 22:04:00 77,824 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\WindowsAccessBridge.dll.vir
2003-03-05 17:32:00 . 2003-03-05 17:32:00 80,896 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\spool\prtprocs\w32x86\LXBCPP5C.DLL.vir
2003-02-25 06:10:00 . 2003-02-25 06:10:00 192,512 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\lexlmpm.dll.vir
2003-02-25 05:54:00 . 2003-02-25 05:54:00 196,096 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\LEX2KUSB.DLL.vir
2003-02-25 05:52:00 . 2003-02-25 05:52:00 303,104 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\LEXBCES.EXE.vir
2003-02-25 05:51:00 . 2003-02-25 05:51:00 147,456 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\LEXBCE.DLL.vir
2003-02-25 05:50:00 . 2003-02-25 05:50:00 174,592 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\LEXPPS.EXE.vir
2003-02-25 05:49:00 . 2003-02-25 05:49:00 201,216 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\LEXP2P32.DLL.vir
2002-11-06 06:10:14 . 2002-11-06 06:10:14 167,936 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\wmserror.dll.vir
2002-08-21 12:13:12 . 2002-08-21 12:13:12 189,952 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\WISPTIS.EXE.vir
2002-08-21 12:10:16 . 2002-08-21 12:10:16 204,800 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\INKED.DLL.vir
2001-09-06 05:00:58 . 2001-09-06 05:00:58 1,700,352 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\gdiplus.dll.vir
2000-12-06 17:01:52 . 2000-12-06 17:01:52 415,176 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\comct332.ocx.vir
2000-05-24 05:45:58 . 2000-07-15 04:00:00 118,784 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\MSSTDFMT.DLL.vir
2000-05-22 20:58:12 . 2000-05-22 20:58:12 115,920 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\msinet.ocx.vir
2000-05-22 20:58:00 . 2000-09-22 18:10:06 647,872 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\mscomct2.ocx.vir
2000-05-11 20:06:20 . 2000-05-11 20:06:20 397,312 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\MSRDO20.DLL.vir
2000-04-04 00:52:54 . 2000-04-04 00:52:54 151,552 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\RDOCURS.DLL.vir
1999-11-25 01:40:50 . 1999-11-25 01:40:50 40,960 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\VBAME.DLL.vir
1998-03-25 04:54:08 . 1998-03-25 04:54:08 15,872 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\SCP32.DLL.vir
1998-03-24 20:44:06 . 1998-03-24 20:44:06 24,848 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\VBAEN32.OLB.vir
1998-03-24 20:44:06 . 1998-03-24 20:44:06 24,848 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\VBAEND32.OLB.vir
1996-12-03 21:50:14 . 1996-12-03 21:50:14 37,376 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\VEN2232.OLB.vir

#18 User is offline   CatByte 

  • Bleepin' curls!
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Malware Response Team
  • Posts: 7,856
  • Joined: 09-November 08
  • Gender:Not Telling
  • Location:Canada

Posted 08 April 2011 - 08:26 AM

Please run this tool

then run combofix normally, it will force an update to the fixed version, so make sure you have an active internet connection.

attach the resulting log

This post has been edited by CatByte: 08 April 2011 - 08:44 AM
Reason for edit: removed attachment

The help you receive here is free. If you wish to show your appreciation, then you may Posted Image
Microsoft MVP - 2010, 2011

#19 User is offline   daddysgirl574 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 18
  • Joined: 04-April 11

Posted 08 April 2011 - 08:39 AM

Here is CF DeQuarantine log
_______________________
C:\QooBox\Quarantine\C\Documents and Settings\HP_Administrator\oisrijtfzf.tmp -> C:\Documents and Settings\HP_Administrator\oisrijtfzf.tmp
C:\QooBox\Quarantine\C\Documents and Settings\HP_Administrator\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10005.dll -> C:\Documents and Settings\HP_Administrator\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10005.dll
C:\QooBox\Quarantine\C\Documents and Settings\HP_Administrator\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10006.dll -> C:\Documents and Settings\HP_Administrator\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10006.dll
C:\QooBox\Quarantine\C\Documents and Settings\HP_Administrator\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10007.dll -> C:\Documents and Settings\HP_Administrator\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10007.dll
C:\QooBox\Quarantine\C\Documents and Settings\HP_Administrator\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL -> C:\Documents and Settings\HP_Administrator\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL
C:\QooBox\Quarantine\C\Documents and Settings\HP_Administrator\Desktop\ComboFix.exe -> C:\Documents and Settings\HP_Administrator\Desktop\ComboFix.exe
C:\QooBox\Quarantine\C\Documents and Settings\HP_Administrator\Desktop\dds.scr -> C:\Documents and Settings\HP_Administrator\Desktop\dds.scr
C:\QooBox\Quarantine\C\Documents and Settings\HP_Administrator\Desktop\dotnetfx35setup.exe -> C:\Documents and Settings\HP_Administrator\Desktop\dotnetfx35setup.exe
C:\QooBox\Quarantine\C\Documents and Settings\HP_Administrator\Desktop\Norton_Removal_Tool.exe -> C:\Documents and Settings\HP_Administrator\Desktop\Norton_Removal_Tool.exe
C:\QooBox\Quarantine\C\Documents and Settings\HP_Administrator\Desktop\rkill.scr -> C:\Documents and Settings\HP_Administrator\Desktop\rkill.scr
C:\QooBox\Quarantine\C\Documents and Settings\HP_Administrator\Desktop\SP26468.exe -> C:\Documents and Settings\HP_Administrator\Desktop\SP26468.exe
C:\QooBox\Quarantine\C\Documents and Settings\HP_Administrator\Desktop\SUPERAntiSpyware.exe -> C:\Documents and Settings\HP_Administrator\Desktop\SUPERAntiSpyware.exe
C:\QooBox\Quarantine\C\Documents and Settings\HP_Administrator\Desktop\tdsskiller.exe -> C:\Documents and Settings\HP_Administrator\Desktop\tdsskiller.exe
C:\QooBox\Quarantine\C\Documents and Settings\HP_Administrator\Desktop\SUPERAntispyware\sasdifsv.sys -> C:\Documents and Settings\HP_Administrator\Desktop\SUPERAntispyware\sasdifsv.sys
C:\QooBox\Quarantine\C\Documents and Settings\HP_Administrator\Desktop\SUPERAntispyware\SASKUTIL.SYS -> C:\Documents and Settings\HP_Administrator\Desktop\SUPERAntispyware\SASKUTIL.SYS
C:\QooBox\Quarantine\C\Documents and Settings\HP_Administrator\Desktop\SUPERAntispyware\SASSEH.DLL -> C:\Documents and Settings\HP_Administrator\Desktop\SUPERAntispyware\SASSEH.DLL
C:\QooBox\Quarantine\C\Documents and Settings\HP_Administrator\Desktop\SUPERAntispyware\SUPERAntiSpyware.exe -> C:\Documents and Settings\HP_Administrator\Desktop\SUPERAntispyware\SUPERAntiSpyware.exe
C:\QooBox\Quarantine\C\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\IadHide5.dll -> C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\IadHide5.dll
C:\QooBox\Quarantine\C\Program Files\ATI Technologies\ATI Control Panel\atipdxxx.dll -> C:\Program Files\ATI Technologies\ATI Control Panel\atipdxxx.dll
C:\QooBox\Quarantine\C\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe -> C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\QooBox\Quarantine\C\Program Files\BackWeb\BackWeb Client\6.3.2.62\Program\bwfiles.dll -> C:\Program Files\BackWeb\BackWeb Client\6.3.2.62\Program\bwfiles.dll
C:\QooBox\Quarantine\C\Program Files\BackWeb\BackWeb Client\6.3.2.62\Program\clntutil.dll -> C:\Program Files\BackWeb\BackWeb Client\6.3.2.62\Program\clntutil.dll
C:\QooBox\Quarantine\C\Program Files\BackWeb\BackWeb Client\6.3.2.62\Program\FrExt.dll -> C:\Program Files\BackWeb\BackWeb Client\6.3.2.62\Program\FrExt.dll
C:\QooBox\Quarantine\C\Program Files\Common Files\ffdshowEx\erdmpg-5.3a.dll -> C:\Program Files\Common Files\ffdshowEx\erdmpg-5.3a.dll
C:\QooBox\Quarantine\C\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE -> C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
C:\QooBox\Quarantine\C\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe -> C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\QooBox\Quarantine\C\Program Files\D-Link\AirPlus G\AirGCFG.exe -> C:\Program Files\D-Link\AirPlus G\AirGCFG.exe
C:\QooBox\Quarantine\C\Program Files\ESET\ESET Online Scanner\esets_apiA.dll -> C:\Program Files\ESET\ESET Online Scanner\esets_apiA.dll
C:\QooBox\Quarantine\C\Program Files\ESET\ESET Online Scanner\esets_apiW.dll -> C:\Program Files\ESET\ESET Online Scanner\esets_apiW.dll
C:\QooBox\Quarantine\C\Program Files\ESET\ESET Online Scanner\esets_apiW_a.dll -> C:\Program Files\ESET\ESET Online Scanner\esets_apiW_a.dll
C:\QooBox\Quarantine\C\Program Files\HP\Digital Imaging\bin\HpqUtil.dll -> C:\Program Files\HP\Digital Imaging\bin\HpqUtil.dll
C:\QooBox\Quarantine\C\Program Files\HP\Digital Imaging\Unload\hpiCamTA.dll -> C:\Program Files\HP\Digital Imaging\Unload\hpiCamTA.dll
C:\QooBox\Quarantine\C\Program Files\Internet Explorer\custsat.dll -> C:\Program Files\Internet Explorer\custsat.dll
C:\QooBox\Quarantine\C\Program Files\Internet Explorer\ExtExport.exe -> C:\Program Files\Internet Explorer\ExtExport.exe
C:\QooBox\Quarantine\C\Program Files\Internet Explorer\iecompat.dll -> C:\Program Files\Internet Explorer\iecompat.dll
C:\QooBox\Quarantine\C\Program Files\Internet Explorer\iedvtool.dll -> C:\Program Files\Internet Explorer\iedvtool.dll
C:\QooBox\Quarantine\C\Program Files\Internet Explorer\ieproxy.dll -> C:\Program Files\Internet Explorer\ieproxy.dll
C:\QooBox\Quarantine\C\Program Files\Internet Explorer\iexplore.exe.mui -> C:\Program Files\Internet Explorer\iexplore.exe.mui
C:\QooBox\Quarantine\C\Program Files\Internet Explorer\jsdbgui.dll -> C:\Program Files\Internet Explorer\jsdbgui.dll
C:\QooBox\Quarantine\C\Program Files\Internet Explorer\jsdebuggeride.dll -> C:\Program Files\Internet Explorer\jsdebuggeride.dll
C:\QooBox\Quarantine\C\Program Files\Internet Explorer\JSProfilerCore.dll -> C:\Program Files\Internet Explorer\JSProfilerCore.dll
C:\QooBox\Quarantine\C\Program Files\Internet Explorer\jsprofilerui.dll -> C:\Program Files\Internet Explorer\jsprofilerui.dll
C:\QooBox\Quarantine\C\Program Files\Internet Explorer\sqmapi.dll -> C:\Program Files\Internet Explorer\sqmapi.dll
C:\QooBox\Quarantine\C\Program Files\Internet Explorer\xpshims.dll -> C:\Program Files\Internet Explorer\xpshims.dll
C:\QooBox\Quarantine\C\Program Files\Internet Explorer\PLUGINS\NPEvery.dll -> C:\Program Files\Internet Explorer\PLUGINS\NPEvery.dll
C:\QooBox\Quarantine\C\Program Files\Internet Explorer\PLUGINS\nppdf32.dll -> C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
C:\QooBox\Quarantine\C\Program Files\Internet Explorer\PLUGINS\npqtplugin.dll -> C:\Program Files\Internet Explorer\PLUGINS\npqtplugin.dll
C:\QooBox\Quarantine\C\Program Files\Internet Explorer\PLUGINS\npqtplugin2.dll -> C:\Program Files\Internet Explorer\PLUGINS\npqtplugin2.dll
C:\QooBox\Quarantine\C\Program Files\iPod\bin\iPodService.exe -> C:\Program Files\iPod\bin\iPodService.exe
C:\QooBox\Quarantine\C\Program Files\iPod\bin\_iPodService_.exe.zip -> C:\Program Files\iPod\bin\_iPodService_.exe.zip
C:\QooBox\Quarantine\C\Program Files\iPod\bin\iPodService.Resources\iPodService.dll -> C:\Program Files\iPod\bin\iPodService.Resources\iPodService.dll
C:\QooBox\Quarantine\C\Program Files\iTunes\iTunesHelper.Resources\iTunesHelper.dll -> C:\Program Files\iTunes\iTunesHelper.Resources\iTunesHelper.dll
C:\QooBox\Quarantine\C\Program Files\Java\jre6\bin\unicows.dll -> C:\Program Files\Java\jre6\bin\unicows.dll
C:\QooBox\Quarantine\C\Program Files\MediaMall\PlayOn.exe -> C:\Program Files\MediaMall\PlayOn.exe
C:\QooBox\Quarantine\C\Program Files\Messenger\custsat.dll -> C:\Program Files\Messenger\custsat.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\coregen.exe -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\coregen.exe
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\Microsoft.VisualBasic.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\Microsoft.VisualBasic.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\mscorrc.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\mscorrc.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\System.Core.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\System.Core.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\system.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\system.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\System.Net.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\System.Net.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\System.Net.ni.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\System.Net.ni.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\System.ni.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\System.ni.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\System.Runtime.Serialization.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\System.Runtime.Serialization.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\System.ServiceModel.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\System.ServiceModel.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\System.ServiceModel.Web.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\System.ServiceModel.Web.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\System.ServiceModel.Web.ni.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\System.ServiceModel.Web.ni.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\System.Windows.Browser.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\System.Windows.Browser.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\System.Windows.Browser.ni.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\System.Windows.Browser.ni.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\System.Xml.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\System.Xml.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\System.Xml.ni.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\System.Xml.ni.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\ar\Microsoft.VisualBasic.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\ar\Microsoft.VisualBasic.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\ar\mscorlib.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\ar\mscorlib.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\ar\mscorrc.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\ar\mscorrc.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\ar\system.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\ar\system.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\bg\Microsoft.VisualBasic.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\bg\Microsoft.VisualBasic.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\bg\mscorlib.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\bg\mscorlib.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\bg\mscorrc.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\bg\mscorrc.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\bg\system.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\bg\system.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\ca\Microsoft.VisualBasic.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\ca\Microsoft.VisualBasic.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\ca\mscorlib.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\ca\mscorlib.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\ca\mscorrc.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\ca\mscorrc.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\ca\system.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\ca\system.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\cs\Microsoft.VisualBasic.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\cs\Microsoft.VisualBasic.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\cs\mscorlib.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\cs\mscorlib.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\cs\mscorrc.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\cs\mscorrc.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\cs\system.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\cs\system.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\da\Microsoft.VisualBasic.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\da\Microsoft.VisualBasic.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\da\mscorlib.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\da\mscorlib.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\da\mscorrc.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\da\mscorrc.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\da\system.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\da\system.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\de\Microsoft.VisualBasic.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\de\Microsoft.VisualBasic.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\de\mscorlib.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\de\mscorlib.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\de\mscorrc.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\de\mscorrc.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\de\system.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\de\system.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\el\Microsoft.VisualBasic.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\el\Microsoft.VisualBasic.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\el\mscorlib.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\el\mscorlib.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\el\mscorrc.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\el\mscorrc.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\el\system.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\el\system.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\es\Microsoft.VisualBasic.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\es\Microsoft.VisualBasic.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\es\mscorlib.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\es\mscorlib.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\es\mscorrc.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\es\mscorrc.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\es\system.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\es\system.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\et\Microsoft.VisualBasic.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\et\Microsoft.VisualBasic.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\et\mscorlib.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\et\mscorlib.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\et\mscorrc.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\et\mscorrc.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\et\system.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\et\system.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\eu\Microsoft.VisualBasic.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\eu\Microsoft.VisualBasic.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\eu\mscorlib.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\eu\mscorlib.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\eu\mscorrc.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\eu\mscorrc.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\eu\system.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\eu\system.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\fi\Microsoft.VisualBasic.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\fi\Microsoft.VisualBasic.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\fi\mscorlib.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\fi\mscorlib.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\fi\mscorrc.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\fi\mscorrc.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\fi\system.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\fi\system.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\fr\Microsoft.VisualBasic.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\fr\Microsoft.VisualBasic.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\fr\mscorlib.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\fr\mscorlib.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\fr\mscorrc.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\fr\mscorrc.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\fr\system.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\fr\system.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\he\Microsoft.VisualBasic.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\he\Microsoft.VisualBasic.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\he\mscorlib.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\he\mscorlib.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\he\mscorrc.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\he\mscorrc.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\he\system.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\he\system.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\hr\Microsoft.VisualBasic.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\hr\Microsoft.VisualBasic.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\hr\mscorlib.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\hr\mscorlib.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\hr\mscorrc.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\hr\mscorrc.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\hr\system.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\hr\system.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\hu\Microsoft.VisualBasic.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\hu\Microsoft.VisualBasic.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\hu\mscorlib.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\hu\mscorlib.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\hu\mscorrc.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\hu\mscorrc.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\hu\system.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\hu\system.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\id\Microsoft.VisualBasic.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\id\Microsoft.VisualBasic.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\id\mscorlib.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\id\mscorlib.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\id\mscorrc.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\id\mscorrc.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\id\system.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\id\system.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\it\Microsoft.VisualBasic.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\it\Microsoft.VisualBasic.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\it\mscorlib.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\it\mscorlib.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\it\mscorrc.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\it\mscorrc.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\it\system.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\it\system.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\ja\Microsoft.VisualBasic.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\ja\Microsoft.VisualBasic.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\ja\mscorlib.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\ja\mscorlib.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\ja\mscorrc.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\ja\mscorrc.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\ja\system.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\ja\system.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\ko\Microsoft.VisualBasic.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\ko\Microsoft.VisualBasic.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\ko\mscorlib.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\ko\mscorlib.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\ko\mscorrc.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\ko\mscorrc.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\ko\system.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\ko\system.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\lt\Microsoft.VisualBasic.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\lt\Microsoft.VisualBasic.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\lt\mscorlib.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\lt\mscorlib.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\lt\mscorrc.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\lt\mscorrc.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\lt\system.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\lt\system.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\lv\Microsoft.VisualBasic.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\lv\Microsoft.VisualBasic.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\lv\mscorlib.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\lv\mscorlib.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\lv\mscorrc.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\lv\mscorrc.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\lv\system.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\lv\system.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\ms\Microsoft.VisualBasic.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\ms\Microsoft.VisualBasic.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\ms\mscorlib.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\ms\mscorlib.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\ms\mscorrc.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\ms\mscorrc.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\ms\system.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\ms\system.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\nl\Microsoft.VisualBasic.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\nl\Microsoft.VisualBasic.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\nl\mscorlib.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\nl\mscorlib.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\nl\mscorrc.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\nl\mscorrc.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\nl\system.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\nl\system.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\no\Microsoft.VisualBasic.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\no\Microsoft.VisualBasic.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\no\mscorlib.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\no\mscorlib.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\no\mscorrc.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\no\mscorrc.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\no\system.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\no\system.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\pl\Microsoft.VisualBasic.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\pl\Microsoft.VisualBasic.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\pl\mscorlib.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\pl\mscorlib.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\pl\mscorrc.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\pl\mscorrc.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\pl\system.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\pl\system.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\pt\Microsoft.VisualBasic.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\pt\Microsoft.VisualBasic.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\pt\mscorlib.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\pt\mscorlib.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\pt\mscorrc.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\pt\mscorrc.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\pt\system.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\pt\system.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\pt-BR\Microsoft.VisualBasic.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\pt-BR\Microsoft.VisualBasic.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\pt-BR\mscorlib.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\pt-BR\mscorlib.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\pt-BR\mscorrc.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\pt-BR\mscorrc.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\pt-BR\system.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\pt-BR\system.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\ro\Microsoft.VisualBasic.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\ro\Microsoft.VisualBasic.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\ro\mscorlib.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\ro\mscorlib.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\ro\mscorrc.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\ro\mscorrc.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\ro\system.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\ro\system.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\ru\Microsoft.VisualBasic.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\ru\Microsoft.VisualBasic.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\ru\mscorlib.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\ru\mscorlib.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\ru\mscorrc.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\ru\mscorrc.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\ru\system.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\ru\system.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\sk\Microsoft.VisualBasic.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\sk\Microsoft.VisualBasic.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\sk\mscorlib.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\sk\mscorlib.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\sk\mscorrc.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\sk\mscorrc.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\sk\system.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\sk\system.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\sl\Microsoft.VisualBasic.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\sl\Microsoft.VisualBasic.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\sl\mscorlib.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\sl\mscorlib.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\sl\mscorrc.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\sl\mscorrc.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\sl\system.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\sl\system.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\sr-Cyrl-CS\Microsoft.VisualBasic.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\sr-Cyrl-CS\Microsoft.VisualBasic.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\sr-Cyrl-CS\mscorlib.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\sr-Cyrl-CS\mscorlib.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\sr-Cyrl-CS\mscorrc.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\sr-Cyrl-CS\mscorrc.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\sr-Cyrl-CS\system.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\sr-Cyrl-CS\system.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\sr-Latn-CS\Microsoft.VisualBasic.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\sr-Latn-CS\Microsoft.VisualBasic.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\sr-Latn-CS\mscorlib.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\sr-Latn-CS\mscorlib.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\sr-Latn-CS\mscorrc.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\sr-Latn-CS\mscorrc.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\sr-Latn-CS\system.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\sr-Latn-CS\system.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\sv\Microsoft.VisualBasic.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\sv\Microsoft.VisualBasic.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\sv\mscorlib.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\sv\mscorlib.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\sv\mscorrc.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\sv\mscorrc.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\sv\system.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\sv\system.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\th\Microsoft.VisualBasic.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\th\Microsoft.VisualBasic.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\th\mscorlib.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\th\mscorlib.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\th\mscorrc.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\th\mscorrc.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\th\system.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\th\system.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\tr\Microsoft.VisualBasic.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\tr\Microsoft.VisualBasic.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\tr\mscorlib.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\tr\mscorlib.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\tr\mscorrc.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\tr\mscorrc.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\tr\system.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\tr\system.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\uk\Microsoft.VisualBasic.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\uk\Microsoft.VisualBasic.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\uk\mscorlib.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\uk\mscorlib.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\uk\mscorrc.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\uk\mscorrc.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\uk\system.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\uk\system.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\vi\Microsoft.VisualBasic.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\vi\Microsoft.VisualBasic.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\vi\mscorlib.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\vi\mscorlib.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\vi\mscorrc.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\vi\mscorrc.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\vi\system.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\vi\system.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\zh-Hans\Microsoft.VisualBasic.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\zh-Hans\Microsoft.VisualBasic.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\zh-Hans\mscorlib.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\zh-Hans\mscorlib.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\zh-Hans\mscorrc.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\zh-Hans\mscorrc.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\zh-Hans\system.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\zh-Hans\system.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\zh-Hant\Microsoft.VisualBasic.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\zh-Hant\Microsoft.VisualBasic.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\zh-Hant\mscorlib.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\zh-Hant\mscorlib.resources.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\zh-Hant\mscorrc.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\zh-Hant\mscorrc.dll
C:\QooBox\Quarantine\C\Program Files\Microsoft Silverlight\4.0.60129.0\zh-Hant\system.resources.dll -> C:\Program Files\Microsoft Silverlight\4.0.60129.0\zh-Hant\system.resources.dll
C:\QooBox\Quarantine\C\Program Files\QuickTime\qttask.exe -> C:\Program Files\QuickTime\qttask.exe
C:\QooBox\Quarantine\C\Program Files\Updates from HP\309731\Program\HPClientExt.dll -> C:\Program Files\Updates from HP\309731\Program\HPClientExt.dll
C:\QooBox\Quarantine\C\Program Files\Windows Media Player\LegitLibM.dll -> C:\Program Files\Windows Media Player\LegitLibM.dll
C:\QooBox\Quarantine\C\Program Files\Windows Media Player\msoobci.dll -> C:\Program Files\Windows Media Player\msoobci.dll
C:\QooBox\Quarantine\C\Program Files\Windows Media Player\wmdbexport.exe -> C:\Program Files\Windows Media Player\wmdbexport.exe
C:\QooBox\Quarantine\C\Program Files\Windows Media Player\wmlaunch.exe -> C:\Program Files\Windows Media Player\wmlaunch.exe
C:\QooBox\Quarantine\C\Program Files\Windows Media Player\wmpenc.exe -> C:\Program Files\Windows Media Player\wmpenc.exe
C:\QooBox\Quarantine\C\Program Files\Windows Media Player\wmpnetwk.exe -> C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\QooBox\Quarantine\C\Program Files\Windows Media Player\wmpnscfg.exe -> C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\QooBox\Quarantine\C\Program Files\Windows Media Player\wmpnssci.dll -> C:\Program Files\Windows Media Player\wmpnssci.dll
C:\QooBox\Quarantine\C\Program Files\Windows Media Player\wmpshare.exe -> C:\Program Files\Windows Media Player\wmpshare.exe
C:\QooBox\Quarantine\C\Program Files\Windows Media Player\wmsetsdk.exe -> C:\Program Files\Windows Media Player\wmsetsdk.exe
C:\QooBox\Quarantine\C\Program Files\Windows NT\hypertrm.exe -> C:\Program Files\Windows NT\hypertrm.exe
C:\QooBox\Quarantine\C\Program Files\Windows NT\Accessories\mswrd6.wpc -> C:\Program Files\Windows NT\Accessories\mswrd6.wpc
C:\QooBox\Quarantine\C\Program Files\Windows NT\Accessories\mswrd8.wpc -> C:\Program Files\Windows NT\Accessories\mswrd8.wpc
C:\QooBox\Quarantine\C\Program Files\Windows NT\Accessories\write.wpc -> C:\Program Files\Windows NT\Accessories\write.wpc
C:\QooBox\Quarantine\C\PROGRA~1\BackWeb\BACKWE~1\632~1.62\Program\EN\ClientRc.dll -> C:\PROGRA~1\BackWeb\BACKWE~1\632~1.62\Program\EN\ClientRc.dll
C:\QooBox\Quarantine\C\WINDOWS\agrsmdel.exe -> C:\WINDOWS\agrsmdel.exe
C:\QooBox\Quarantine\C\WINDOWS\AGRSMMSG.exe -> C:\WINDOWS\AGRSMMSG.exe
C:\QooBox\Quarantine\C\WINDOWS\ALCXMNTR.EXE -> C:\WINDOWS\ALCXMNTR.EXE
C:\QooBox\Quarantine\C\WINDOWS\kb913800.exe -> C:\WINDOWS\kb913800.exe
C:\QooBox\Quarantine\C\WINDOWS\AppPatch\acadproc.dll -> C:\WINDOWS\AppPatch\acadproc.dll
C:\QooBox\Quarantine\C\WINDOWS\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll -> C:\WINDOWS\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
C:\QooBox\Quarantine\C\WINDOWS\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll -> C:\WINDOWS\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
C:\QooBox\Quarantine\C\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll -> C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
C:\QooBox\Quarantine\C\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web\d987cf1de4ba688da92e212a374232c2\System.Web.ni.dll -> C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web\d987cf1de4ba688da92e212a374232c2\System.Web.ni.dll
C:\QooBox\Quarantine\C\WINDOWS\Downloaded Program Files\JuniperSetup.ocx -> C:\WINDOWS\Downloaded Program Files\JuniperSetup.ocx
C:\QooBox\Quarantine\C\WINDOWS\ehome\ehrecvr.exe -> C:\WINDOWS\ehome\ehrecvr.exe
C:\QooBox\Quarantine\C\WINDOWS\ehome\mcrdsvc.exe -> C:\WINDOWS\ehome\mcrdsvc.exe
C:\QooBox\Quarantine\C\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe -> C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
C:\QooBox\Quarantine\C\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe -> C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
C:\QooBox\Quarantine\C\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe -> C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
C:\QooBox\Quarantine\C\WINDOWS\Philips\SPC230NC\Monitor.exe -> C:\WINDOWS\Philips\SPC230NC\Monitor.exe
C:\QooBox\Quarantine\C\WINDOWS\system\hpsysdrv.exe -> C:\WINDOWS\system\hpsysdrv.exe
C:\QooBox\Quarantine\C\WINDOWS\system32\18467.exe -> C:\WINDOWS\system32\18467.exe
C:\QooBox\Quarantine\C\WINDOWS\system32\3DViewer.dll -> C:\WINDOWS\system32\3DViewer.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\6334.exe -> C:\WINDOWS\system32\6334.exe
C:\QooBox\Quarantine\C\WINDOWS\system32\A16_Tmrs.ocx -> C:\WINDOWS\system32\A16_Tmrs.ocx
C:\QooBox\Quarantine\C\WINDOWS\system32\acelpdec.ax -> C:\WINDOWS\system32\acelpdec.ax
C:\QooBox\Quarantine\C\WINDOWS\system32\advpack.dll.mui -> C:\WINDOWS\system32\advpack.dll.mui
C:\QooBox\Quarantine\C\WINDOWS\system32\afiost.ocx -> C:\WINDOWS\system32\afiost.ocx
C:\QooBox\Quarantine\C\WINDOWS\system32\agrscoin.dll -> C:\WINDOWS\system32\agrscoin.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\agrsmsvc.exe -> C:\WINDOWS\system32\agrsmsvc.exe
C:\QooBox\Quarantine\C\WINDOWS\system32\AniGIF.ocx -> C:\WINDOWS\system32\AniGIF.ocx
C:\QooBox\Quarantine\C\WINDOWS\system32\ANIOApi.dll -> C:\WINDOWS\system32\ANIOApi.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\ati2evxx.exe -> C:\WINDOWS\system32\ati2evxx.exe
C:\QooBox\Quarantine\C\WINDOWS\system32\Ati2mdxx.exe -> C:\WINDOWS\system32\Ati2mdxx.exe
C:\QooBox\Quarantine\C\WINDOWS\system32\ATIDEMGR.dll -> C:\WINDOWS\system32\ATIDEMGR.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\atiiiexx32.dll -> C:\WINDOWS\system32\atiiiexx32.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\atikvmag.dll -> C:\WINDOWS\system32\atikvmag.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\audiodev.dll -> C:\WINDOWS\system32\audiodev.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\bt848wst.dll -> C:\WINDOWS\system32\bt848wst.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\btgpio32.dll -> C:\WINDOWS\system32\btgpio32.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\ccrpTmr6.dll -> C:\WINDOWS\system32\ccrpTmr6.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\chcp.com -> C:\WINDOWS\system32\chcp.com
C:\QooBox\Quarantine\C\WINDOWS\system32\comct332.ocx -> C:\WINDOWS\system32\comct332.ocx
C:\QooBox\Quarantine\C\WINDOWS\system32\CRAnalyzer.dll -> C:\WINDOWS\system32\CRAnalyzer.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\cSystemInfoAX.ocx -> C:\WINDOWS\system32\cSystemInfoAX.ocx
C:\QooBox\Quarantine\C\WINDOWS\system32\CTNEDT32.OCX -> C:\WINDOWS\system32\CTNEDT32.OCX
C:\QooBox\Quarantine\C\WINDOWS\system32\davinci.scr -> C:\WINDOWS\system32\davinci.scr
C:\QooBox\Quarantine\C\WINDOWS\system32\dfshim.dll -> C:\WINDOWS\system32\dfshim.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\diskcomp.com -> C:\WINDOWS\system32\diskcomp.com
C:\QooBox\Quarantine\C\WINDOWS\system32\diskcopy.com -> C:\WINDOWS\system32\diskcopy.com
C:\QooBox\Quarantine\C\WINDOWS\system32\DivXdec.ax -> C:\WINDOWS\system32\DivXdec.ax
C:\QooBox\Quarantine\C\WINDOWS\system32\dltwav32.acm -> C:\WINDOWS\system32\dltwav32.acm
C:\QooBox\Quarantine\C\WINDOWS\system32\drmupgds.exe -> C:\WINDOWS\system32\drmupgds.exe
C:\QooBox\Quarantine\C\WINDOWS\system32\DWSPY36.dll -> C:\WINDOWS\system32\DWSPY36.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\dxva2.dll -> C:\WINDOWS\system32\dxva2.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\evr.dll -> C:\WINDOWS\system32\evr.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\exlate32.dll -> C:\WINDOWS\system32\exlate32.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\ExportModeller.dll -> C:\WINDOWS\system32\ExportModeller.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\filedialog.dll -> C:\WINDOWS\system32\filedialog.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\format.com -> C:\WINDOWS\system32\format.com
C:\QooBox\Quarantine\C\WINDOWS\system32\fpalsu.dll -> C:\WINDOWS\system32\fpalsu.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\GButton.ocx -> C:\WINDOWS\system32\GButton.ocx
C:\QooBox\Quarantine\C\WINDOWS\system32\gdiplus.dll -> C:\WINDOWS\system32\gdiplus.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\graftabl.com -> C:\WINDOWS\system32\graftabl.com
C:\QooBox\Quarantine\C\WINDOWS\system32\Hcwchan.dll -> C:\WINDOWS\system32\Hcwchan.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\hcwdlg.ocx -> C:\WINDOWS\system32\hcwdlg.ocx
C:\QooBox\Quarantine\C\WINDOWS\system32\hcwfread.ax -> C:\WINDOWS\system32\hcwfread.ax
C:\QooBox\Quarantine\C\WINDOWS\system32\hcwhook.dll -> C:\WINDOWS\system32\hcwhook.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\hcwi2c32.dll -> C:\WINDOWS\system32\hcwi2c32.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\hcwpnp32.dll -> C:\WINDOWS\system32\hcwpnp32.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\Hcwsnap.ax -> C:\WINDOWS\system32\Hcwsnap.ax
C:\QooBox\Quarantine\C\WINDOWS\system32\hcwsplit.ax -> C:\WINDOWS\system32\hcwsplit.ax
C:\QooBox\Quarantine\C\WINDOWS\system32\Hcwtvdlg.dll -> C:\WINDOWS\system32\Hcwtvdlg.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\HCWTVWND.dll -> C:\WINDOWS\system32\HCWTVWND.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\Hcwutl32.dll -> C:\WINDOWS\system32\Hcwutl32.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\hpreg.dll -> C:\WINDOWS\system32\hpreg.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\HPTcpMib.dll -> C:\WINDOWS\system32\HPTcpMib.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\HPTcpMon.dll -> C:\WINDOWS\system32\HPTcpMon.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\HPTcpMUI.dll -> C:\WINDOWS\system32\HPTcpMUI.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\hpzcon10.dll -> C:\WINDOWS\system32\hpzcon10.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\hpzcon12.dll -> C:\WINDOWS\system32\hpzcon12.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\HPZinw12.exe -> C:\WINDOWS\system32\HPZinw12.exe
C:\QooBox\Quarantine\C\WINDOWS\system32\HPZipt12.dll -> C:\WINDOWS\system32\HPZipt12.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\HPZisn12.dll -> C:\WINDOWS\system32\HPZisn12.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\html.iec -> C:\WINDOWS\system32\html.iec
C:\QooBox\Quarantine\C\WINDOWS\system32\icardagt.exe -> C:\WINDOWS\system32\icardagt.exe
C:\QooBox\Quarantine\C\WINDOWS\system32\icardres.dll -> C:\WINDOWS\system32\icardres.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\icardres.dll.mui -> C:\WINDOWS\system32\icardres.dll.mui
C:\QooBox\Quarantine\C\WINDOWS\system32\ie4uinit.exe.mui -> C:\WINDOWS\system32\ie4uinit.exe.mui
C:\QooBox\Quarantine\C\WINDOWS\system32\iedkcs32.dll.mui -> C:\WINDOWS\system32\iedkcs32.dll.mui
C:\QooBox\Quarantine\C\WINDOWS\system32\ieframe.dll.mui -> C:\WINDOWS\system32\ieframe.dll.mui
C:\QooBox\Quarantine\C\WINDOWS\system32\igdetect.dll -> C:\WINDOWS\system32\igdetect.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\imaadp32.acm -> C:\WINDOWS\system32\imaadp32.acm
C:\QooBox\Quarantine\C\WINDOWS\system32\Implode.dll -> C:\WINDOWS\system32\Implode.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\infocardapi.dll -> C:\WINDOWS\system32\infocardapi.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\infocardcpl.cpl -> C:\WINDOWS\system32\infocardcpl.cpl
C:\QooBox\Quarantine\C\WINDOWS\system32\INKED.DLL -> C:\WINDOWS\system32\INKED.DLL
C:\QooBox\Quarantine\C\WINDOWS\system32\ivfsrc.ax -> C:\WINDOWS\system32\ivfsrc.ax
C:\QooBox\Quarantine\C\WINDOWS\system32\keycode.dll -> C:\WINDOWS\system32\keycode.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\KeyHelp.ocx -> C:\WINDOWS\system32\KeyHelp.ocx
C:\QooBox\Quarantine\C\WINDOWS\system32\LEX2KUSB.DLL -> C:\WINDOWS\system32\LEX2KUSB.DLL
C:\QooBox\Quarantine\C\WINDOWS\system32\LEXBCE.DLL -> C:\WINDOWS\system32\LEXBCE.DLL
C:\QooBox\Quarantine\C\WINDOWS\system32\LEXBCES.EXE -> C:\WINDOWS\system32\LEXBCES.EXE
C:\QooBox\Quarantine\C\WINDOWS\system32\lexlmpm.dll -> C:\WINDOWS\system32\lexlmpm.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\LEXP2P32.DLL -> C:\WINDOWS\system32\LEXP2P32.DLL
C:\QooBox\Quarantine\C\WINDOWS\system32\LEXPPS.EXE -> C:\WINDOWS\system32\LEXPPS.EXE
C:\QooBox\Quarantine\C\WINDOWS\system32\MDCustomPanels.ocx -> C:\WINDOWS\system32\MDCustomPanels.ocx
C:\QooBox\Quarantine\C\WINDOWS\system32\mfcuia32.dll -> C:\WINDOWS\system32\mfcuia32.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\MFPLAT.dll -> C:\WINDOWS\system32\MFPLAT.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\mhn.dll -> C:\WINDOWS\system32\mhn.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\migpwd.exe -> C:\WINDOWS\system32\migpwd.exe
C:\QooBox\Quarantine\C\WINDOWS\system32\mode.com -> C:\WINDOWS\system32\mode.com
C:\QooBox\Quarantine\C\WINDOWS\system32\more.com -> C:\WINDOWS\system32\more.com
C:\QooBox\Quarantine\C\WINDOWS\system32\MP43DECD.dll -> C:\WINDOWS\system32\MP43DECD.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\MP4SDECD.dll -> C:\WINDOWS\system32\MP4SDECD.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\MPG4DECD.dll -> C:\WINDOWS\system32\MPG4DECD.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\msacm32.drv -> C:\WINDOWS\system32\msacm32.drv
C:\QooBox\Quarantine\C\WINDOWS\system32\MSADODC.OCX -> C:\WINDOWS\system32\MSADODC.OCX
C:\QooBox\Quarantine\C\WINDOWS\system32\msadp32.acm -> C:\WINDOWS\system32\msadp32.acm
C:\QooBox\Quarantine\C\WINDOWS\system32\msaud32.acm -> C:\WINDOWS\system32\msaud32.acm
C:\QooBox\Quarantine\C\WINDOWS\system32\MSBIND.DLL -> C:\WINDOWS\system32\MSBIND.DLL
C:\QooBox\Quarantine\C\WINDOWS\system32\MSCAL.OCX -> C:\WINDOWS\system32\MSCAL.OCX
C:\QooBox\Quarantine\C\WINDOWS\system32\mscomct2.ocx -> C:\WINDOWS\system32\mscomct2.ocx
C:\QooBox\Quarantine\C\WINDOWS\system32\mscoree.dll -> C:\WINDOWS\system32\mscoree.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\msdelta.dll -> C:\WINDOWS\system32\msdelta.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\MsFlxGrd.ocx -> C:\WINDOWS\system32\MsFlxGrd.ocx
C:\QooBox\Quarantine\C\WINDOWS\system32\msg711.acm -> C:\WINDOWS\system32\msg711.acm
C:\QooBox\Quarantine\C\WINDOWS\system32\msg723.acm -> C:\WINDOWS\system32\msg723.acm
C:\QooBox\Quarantine\C\WINDOWS\system32\msgsm32.acm -> C:\WINDOWS\system32\msgsm32.acm
C:\QooBox\Quarantine\C\WINDOWS\system32\msh261.drv -> C:\WINDOWS\system32\msh261.drv
C:\QooBox\Quarantine\C\WINDOWS\system32\msh263.drv -> C:\WINDOWS\system32\msh263.drv
C:\QooBox\Quarantine\C\WINDOWS\system32\mshta.exe.mui -> C:\WINDOWS\system32\mshta.exe.mui
C:\QooBox\Quarantine\C\WINDOWS\system32\msinet.ocx -> C:\WINDOWS\system32\msinet.ocx
C:\QooBox\Quarantine\C\WINDOWS\system32\msrating.dll.mui -> C:\WINDOWS\system32\msrating.dll.mui
C:\QooBox\Quarantine\C\WINDOWS\system32\MSRDO20.DLL -> C:\WINDOWS\system32\MSRDO20.DLL
C:\QooBox\Quarantine\C\WINDOWS\system32\MSSTDFMT.DLL -> C:\WINDOWS\system32\MSSTDFMT.DLL
C:\QooBox\Quarantine\C\WINDOWS\system32\mucltui.dll -> C:\WINDOWS\system32\mucltui.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\mucltui.dll.mui -> C:\WINDOWS\system32\mucltui.dll.mui
C:\QooBox\Quarantine\C\WINDOWS\system32\muweb.dll -> C:\WINDOWS\system32\muweb.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\MyCommandButton.ocx -> C:\WINDOWS\system32\MyCommandButton.ocx
C:\QooBox\Quarantine\C\WINDOWS\system32\mypixdx.scr -> C:\WINDOWS\system32\mypixdx.scr
C:\QooBox\Quarantine\C\WINDOWS\system32\nature.scr -> C:\WINDOWS\system32\nature.scr
C:\QooBox\Quarantine\C\WINDOWS\system32\netfxperf.dll -> C:\WINDOWS\system32\netfxperf.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\ochlp30e.dll -> C:\WINDOWS\system32\ochlp30e.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\omano.dll -> C:\WINDOWS\system32\omano.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\Popup.ocx -> C:\WINDOWS\system32\Popup.ocx
C:\QooBox\Quarantine\C\WINDOWS\system32\PortableDeviceApi.dll -> C:\WINDOWS\system32\PortableDeviceApi.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\PortableDeviceClassExtension.dll -> C:\WINDOWS\system32\PortableDeviceClassExtension.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\PortableDeviceTypes.dll -> C:\WINDOWS\system32\PortableDeviceTypes.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\PortableDeviceWiaCompat.dll -> C:\WINDOWS\system32\PortableDeviceWiaCompat.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\PortableDeviceWMDRM.dll -> C:\WINDOWS\system32\PortableDeviceWMDRM.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\prntvpt.dll -> C:\WINDOWS\system32\prntvpt.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\ps2.bat -> C:\WINDOWS\system32\ps2.bat
C:\QooBox\Quarantine\C\WINDOWS\system32\ptpusb.dll -> C:\WINDOWS\system32\ptpusb.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\ptpusd.dll -> C:\WINDOWS\system32\ptpusd.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\PUBOLE32.DLL -> C:\WINDOWS\system32\PUBOLE32.DLL
C:\QooBox\Quarantine\C\WINDOWS\system32\qd3d.dll -> C:\WINDOWS\system32\qd3d.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\QD3DCustomElements.q3x -> C:\WINDOWS\system32\QD3DCustomElements.q3x
C:\QooBox\Quarantine\C\WINDOWS\system32\QD3D_IR2.q3x -> C:\WINDOWS\system32\QD3D_IR2.q3x
C:\QooBox\Quarantine\C\WINDOWS\system32\QuickTime.cpl -> C:\WINDOWS\system32\QuickTime.cpl
C:\QooBox\Quarantine\C\WINDOWS\system32\QuickTime.qts -> C:\WINDOWS\system32\QuickTime.qts
C:\QooBox\Quarantine\C\WINDOWS\system32\QuickTimeCheck.ocx -> C:\WINDOWS\system32\QuickTimeCheck.ocx
C:\QooBox\Quarantine\C\WINDOWS\system32\QuickTimeMusicalInstruments.qtx -> C:\WINDOWS\system32\QuickTimeMusicalInstruments.qtx
C:\QooBox\Quarantine\C\WINDOWS\system32\QuickTimeVR.qtx -> C:\WINDOWS\system32\QuickTimeVR.qtx
C:\QooBox\Quarantine\C\WINDOWS\system32\rave.dll -> C:\WINDOWS\system32\rave.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\RDOCURS.DLL -> C:\WINDOWS\system32\RDOCURS.DLL
C:\QooBox\Quarantine\C\WINDOWS\system32\rgb9rast_2.dll -> C:\WINDOWS\system32\rgb9rast_2.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\sacommoncontrols.dll -> C:\WINDOWS\system32\sacommoncontrols.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\SCP32.DLL -> C:\WINDOWS\system32\SCP32.DLL
C:\QooBox\Quarantine\C\WINDOWS\system32\Sdcvtx.ocx -> C:\WINDOWS\system32\Sdcvtx.ocx
C:\QooBox\Quarantine\C\WINDOWS\system32\SftMask_IX86_U_60.ocx -> C:\WINDOWS\system32\SftMask_IX86_U_60.ocx
C:\QooBox\Quarantine\C\WINDOWS\system32\shlObj70.ocx -> C:\WINDOWS\system32\shlObj70.ocx
C:\QooBox\Quarantine\C\WINDOWS\system32\space.scr -> C:\WINDOWS\system32\space.scr
C:\QooBox\Quarantine\C\WINDOWS\system32\SPC230NC.AX -> C:\WINDOWS\system32\SPC230NC.AX
C:\QooBox\Quarantine\C\WINDOWS\system32\spupdsvc.exe -> C:\WINDOWS\system32\spupdsvc.exe
C:\QooBox\Quarantine\C\WINDOWS\system32\sscdlg.dll -> C:\WINDOWS\system32\sscdlg.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\sscrc.dll -> C:\WINDOWS\system32\sscrc.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\sscsdk80.dll -> C:\WINDOWS\system32\sscsdk80.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\Ssdata32.ocx -> C:\WINDOWS\system32\Ssdata32.ocx
C:\QooBox\Quarantine\C\WINDOWS\system32\Ssdatb32.ocx -> C:\WINDOWS\system32\Ssdatb32.ocx
C:\QooBox\Quarantine\C\WINDOWS\system32\stream.sys -> C:\WINDOWS\system32\stream.sys
C:\QooBox\Quarantine\C\WINDOWS\system32\TABCTL32.OCX -> C:\WINDOWS\system32\TABCTL32.OCX
C:\QooBox\Quarantine\C\WINDOWS\system32\taskman.exe -> C:\WINDOWS\system32\taskman.exe
C:\QooBox\Quarantine\C\WINDOWS\system32\tegods.ocx -> C:\WINDOWS\system32\tegods.ocx
C:\QooBox\Quarantine\C\WINDOWS\system32\tree.com -> C:\WINDOWS\system32\tree.com
C:\QooBox\Quarantine\C\WINDOWS\system32\tssoft32.acm -> C:\WINDOWS\system32\tssoft32.acm
C:\QooBox\Quarantine\C\WINDOWS\system32\TsWpfWrp.exe -> C:\WINDOWS\system32\TsWpfWrp.exe
C:\QooBox\Quarantine\C\WINDOWS\system32\u2lfinra.dll -> C:\WINDOWS\system32\u2lfinra.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\ufmanager.dll -> C:\WINDOWS\system32\ufmanager.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\UIAutomationCore.dll -> C:\WINDOWS\system32\UIAutomationCore.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\uwdf.exe -> C:\WINDOWS\system32\uwdf.exe
C:\QooBox\Quarantine\C\WINDOWS\system32\VB5DB.DLL -> C:\WINDOWS\system32\VB5DB.DLL
C:\QooBox\Quarantine\C\WINDOWS\system32\VBAEN32.OLB -> C:\WINDOWS\system32\VBAEN32.OLB
C:\QooBox\Quarantine\C\WINDOWS\system32\VBAEND32.OLB -> C:\WINDOWS\system32\VBAEND32.OLB
C:\QooBox\Quarantine\C\WINDOWS\system32\VBAME.DLL -> C:\WINDOWS\system32\VBAME.DLL
C:\QooBox\Quarantine\C\WINDOWS\system32\vbar332.dll -> C:\WINDOWS\system32\vbar332.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\VEN2232.OLB -> C:\WINDOWS\system32\VEN2232.OLB
C:\QooBox\Quarantine\C\WINDOWS\system32\verclsid.exe -> C:\WINDOWS\system32\verclsid.exe
C:\QooBox\Quarantine\C\WINDOWS\system32\Vox2wav.ocx -> C:\WINDOWS\system32\Vox2wav.ocx
C:\QooBox\Quarantine\C\WINDOWS\system32\wdfapi.dll -> C:\WINDOWS\system32\wdfapi.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\wdfmgr.exe -> C:\WINDOWS\system32\wdfmgr.exe
C:\QooBox\Quarantine\C\WINDOWS\system32\win.com -> C:\WINDOWS\system32\win.com
C:\QooBox\Quarantine\C\WINDOWS\system32\WindowsAccessBridge.dll -> C:\WINDOWS\system32\WindowsAccessBridge.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\wisproxy.ax -> C:\WINDOWS\system32\wisproxy.ax
C:\QooBox\Quarantine\C\WINDOWS\system32\WISPTIS.EXE -> C:\WINDOWS\system32\WISPTIS.EXE
C:\QooBox\Quarantine\C\WINDOWS\system32\wmdrmdev.dll -> C:\WINDOWS\system32\wmdrmdev.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\wmdrmnet.dll -> C:\WINDOWS\system32\wmdrmnet.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\wmpeffects.dll -> C:\WINDOWS\system32\wmpeffects.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\wmpencen.dll -> C:\WINDOWS\system32\wmpencen.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\wmpmde.dll -> C:\WINDOWS\system32\wmpmde.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\wmpps.dll -> C:\WINDOWS\system32\wmpps.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\wmpsrcwp.dll -> C:\WINDOWS\system32\wmpsrcwp.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\wmserror.dll -> C:\WINDOWS\system32\wmserror.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\WMVADVD.dll -> C:\WINDOWS\system32\WMVADVD.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\WMVADVE.DLL -> C:\WINDOWS\system32\WMVADVE.DLL
C:\QooBox\Quarantine\C\WINDOWS\system32\WMVDECOD.dll -> C:\WINDOWS\system32\WMVDECOD.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\WMVENCOD.dll -> C:\WINDOWS\system32\WMVENCOD.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\WMVSDECD.dll -> C:\WINDOWS\system32\WMVSDECD.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\WMVSENCD.dll -> C:\WINDOWS\system32\WMVSENCD.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\WMVXENCD.dll -> C:\WINDOWS\system32\WMVXENCD.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\wpdconns.dll -> C:\WINDOWS\system32\wpdconns.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\wpdmtp.dll -> C:\WINDOWS\system32\wpdmtp.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\wpdmtpdr.dll -> C:\WINDOWS\system32\wpdmtpdr.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\wpdmtpus.dll -> C:\WINDOWS\system32\wpdmtpus.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\WpdShext.dll -> C:\WINDOWS\system32\WpdShext.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\wpdshextautoplay.exe -> C:\WINDOWS\system32\wpdshextautoplay.exe
C:\QooBox\Quarantine\C\WINDOWS\system32\wpdshextres.dll -> C:\WINDOWS\system32\wpdshextres.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\WPDShServiceObj.dll -> C:\WINDOWS\system32\WPDShServiceObj.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\wpdsp.dll -> C:\WINDOWS\system32\wpdsp.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\wpdtrace.dll -> C:\WINDOWS\system32\wpdtrace.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\wpd_ci.dll -> C:\WINDOWS\system32\wpd_ci.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\wpgldfsh.scr -> C:\WINDOWS\system32\wpgldfsh.scr
C:\QooBox\Quarantine\C\WINDOWS\system32\wuapi.dll.mui -> C:\WINDOWS\system32\wuapi.dll.mui
C:\QooBox\Quarantine\C\WINDOWS\system32\wuaucpl.cpl.mui -> C:\WINDOWS\system32\wuaucpl.cpl.mui
C:\QooBox\Quarantine\C\WINDOWS\system32\wuaueng.dll.mui -> C:\WINDOWS\system32\wuaueng.dll.mui
C:\QooBox\Quarantine\C\WINDOWS\system32\wucltui.dll.mui -> C:\WINDOWS\system32\wucltui.dll.mui
C:\QooBox\Quarantine\C\WINDOWS\system32\WUDFCoinstaller.dll -> C:\WINDOWS\system32\WUDFCoinstaller.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\WudfHost.exe -> C:\WINDOWS\system32\WudfHost.exe
C:\QooBox\Quarantine\C\WINDOWS\system32\WudfPlatform.dll -> C:\WINDOWS\system32\WudfPlatform.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\WudfSvc.dll -> C:\WINDOWS\system32\WudfSvc.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\WUDFx.dll -> C:\WINDOWS\system32\WUDFx.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\Wvfile.ocx -> C:\WINDOWS\system32\Wvfile.ocx
C:\QooBox\Quarantine\C\WINDOWS\system32\xpsshhdr.dll -> C:\WINDOWS\system32\xpsshhdr.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\xpssvcs.dll -> C:\WINDOWS\system32\xpssvcs.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\drivers\AGRSM.sys -> C:\WINDOWS\system32\drivers\AGRSM.sys
C:\QooBox\Quarantine\C\WINDOWS\system32\drivers\ALCXWDM.SYS -> C:\WINDOWS\system32\drivers\ALCXWDM.SYS
C:\QooBox\Quarantine\C\WINDOWS\system32\drivers\AmdK8.sys -> C:\WINDOWS\system32\drivers\AmdK8.sys
C:\QooBox\Quarantine\C\WINDOWS\system32\drivers\dsNcAdpt.sys -> C:\WINDOWS\system32\drivers\dsNcAdpt.sys
C:\QooBox\Quarantine\C\WINDOWS\system32\drivers\Fasttx2k.sys -> C:\WINDOWS\system32\drivers\Fasttx2k.sys
C:\QooBox\Quarantine\C\WINDOWS\system32\drivers\GEARAspiWDM.sys -> C:\WINDOWS\system32\drivers\GEARAspiWDM.sys
C:\QooBox\Quarantine\C\WINDOWS\system32\drivers\HCWBT8xx.sys -> C:\WINDOWS\system32\drivers\HCWBT8xx.sys
C:\QooBox\Quarantine\C\WINDOWS\system32\drivers\HPZid412.sys -> C:\WINDOWS\system32\drivers\HPZid412.sys
C:\QooBox\Quarantine\C\WINDOWS\system32\drivers\HPZipr12.sys -> C:\WINDOWS\system32\drivers\HPZipr12.sys
C:\QooBox\Quarantine\C\WINDOWS\system32\drivers\HPZius12.sys -> C:\WINDOWS\system32\drivers\HPZius12.sys
C:\QooBox\Quarantine\C\WINDOWS\system32\drivers\mbamswissarmy.sys -> C:\WINDOWS\system32\drivers\mbamswissarmy.sys
C:\QooBox\Quarantine\C\WINDOWS\system32\drivers\mhndrv.sys -> C:\WINDOWS\system32\drivers\mhndrv.sys
C:\QooBox\Quarantine\C\WINDOWS\system32\drivers\PAEAFLT.sys -> C:\WINDOWS\system32\drivers\PAEAFLT.sys
C:\QooBox\Quarantine\C\WINDOWS\system32\drivers\PcdrNdisuio.sys -> C:\WINDOWS\system32\drivers\PcdrNdisuio.sys
C:\QooBox\Quarantine\C\WINDOWS\system32\drivers\pcdrsrvc.pkms -> C:\WINDOWS\system32\drivers\pcdrsrvc.pkms
C:\QooBox\Quarantine\C\WINDOWS\system32\drivers\povrtdev.sys -> C:\WINDOWS\system32\drivers\povrtdev.sys
C:\QooBox\Quarantine\C\WINDOWS\system32\drivers\PRISMA02.sys -> C:\WINDOWS\system32\drivers\PRISMA02.sys
C:\QooBox\Quarantine\C\WINDOWS\system32\drivers\PS2.sys -> C:\WINDOWS\system32\drivers\PS2.sys
C:\QooBox\Quarantine\C\WINDOWS\system32\drivers\pxhelp20.sys -> C:\WINDOWS\system32\drivers\pxhelp20.sys
C:\QooBox\Quarantine\C\WINDOWS\system32\drivers\Rtnicxp.sys -> C:\WINDOWS\system32\drivers\Rtnicxp.sys
C:\QooBox\Quarantine\C\WINDOWS\system32\drivers\secdrv.sys -> C:\WINDOWS\system32\drivers\secdrv.sys
C:\QooBox\Quarantine\C\WINDOWS\system32\drivers\SPC230NC.SYS -> C:\WINDOWS\system32\drivers\SPC230NC.SYS
C:\QooBox\Quarantine\C\WINDOWS\system32\drivers\wisgostrm.sys -> C:\WINDOWS\system32\drivers\wisgostrm.sys
C:\QooBox\Quarantine\C\WINDOWS\system32\drivers\wpdusb.sys -> C:\WINDOWS\system32\drivers\wpdusb.sys
C:\QooBox\Quarantine\C\WINDOWS\system32\drivers\WudfPf.sys -> C:\WINDOWS\system32\drivers\WudfPf.sys
C:\QooBox\Quarantine\C\WINDOWS\system32\drivers\WudfRd.sys -> C:\WINDOWS\system32\drivers\WudfRd.sys
C:\QooBox\Quarantine\C\WINDOWS\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll -> C:\WINDOWS\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
C:\QooBox\Quarantine\C\WINDOWS\system32\spool\prtprocs\w32x86\LXBCPP5C.DLL -> C:\WINDOWS\system32\spool\prtprocs\w32x86\LXBCPP5C.DLL
C:\QooBox\Quarantine\C\WINDOWS\system32\spool\prtprocs\w32x86\mdippr.dll -> C:\WINDOWS\system32\spool\prtprocs\w32x86\mdippr.dll
C:\QooBox\Quarantine\D\Autorun.inf.vir -> D:\Autorun.inf

#20 User is offline   CatByte 

  • Bleepin' curls!
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Malware Response Team
  • Posts: 7,856
  • Joined: 09-November 08
  • Gender:Not Telling
  • Location:Canada

Posted 08 April 2011 - 08:43 AM

OK

Please delete the copy of combofix that you have on your desktop and download a fresh copy,

run combofix > post the resulting log

Link 1
The help you receive here is free. If you wish to show your appreciation, then you may Posted Image
Microsoft MVP - 2010, 2011

#21 User is offline   daddysgirl574 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 18
  • Joined: 04-April 11

Posted 08 April 2011 - 09:13 AM

I ran the "TOOL". I then ran ComboFix, and it first updated. After ComboFix ran, computer rebooted without problem, ComboFix finished, and here's the last log.
______________________
ComboFix 11-04-07.08 - HP_Administrator 04/08/2011 9:53.1.1 - x86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.2494.1999 [GMT -4:00]
Running from: c:\documents and settings\HP_Administrator\Desktop\ComboFix.exe
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\docume~1\HP_ADM~1\LOCALS~1\Temp\IadHide5.dll
c:\documents and settings\Administrator\WINDOWS
c:\documents and settings\Default User\WINDOWS
c:\documents and settings\HP_Administrator\Local Settings\Temp\IadHide5.dll
c:\documents and settings\HP_Administrator\WINDOWS
c:\windows\system32\18467.exe
c:\windows\system32\6334.exe
c:\windows\system32\atiiiexx32.dll
c:\windows\system32\ccrpTmr6.dll
c:\windows\system32\config\systemprofile\WINDOWS
c:\windows\system32\ps2.bat
.
.
((((((((((((((((((((((((( Files Created from 2011-03-08 to 2011-04-08 )))))))))))))))))))))))))))))))
.
.
2011-04-08 13:31 . 2011-04-05 16:07 0 ----a-w- c:\documents and settings\HP_Administrator\oisrijtfzf.tmp
2011-04-07 21:34 . 2009-08-06 23:23 16736 ----a-w- c:\windows\system32\mucltui.dll.mui
2011-04-07 21:34 . 2009-08-06 23:24 21728 ----a-w- c:\windows\system32\wucltui.dll.mui
2011-04-07 21:34 . 2009-08-06 23:24 15072 ----a-w- c:\windows\system32\wuaucpl.cpl.mui
2011-04-07 21:34 . 2009-08-06 23:24 17632 ----a-w- c:\windows\system32\wuaueng.dll.mui
2011-04-07 21:34 . 2009-08-06 23:24 15064 ----a-w- c:\windows\system32\wuapi.dll.mui
2011-04-07 21:31 . 2011-04-07 21:31 -------- d-----w- c:\windows\system32\wbem\Repository
2011-04-06 11:12 . 2011-04-07 20:41 -------- d-----w- c:\program files\ESET
2011-04-06 02:19 . 2011-04-07 20:41 -------- d-----w- c:\documents and settings\HP_Administrator\Application Data\SUPERAntiSpyware.com
2011-04-06 02:19 . 2011-04-06 02:19 -------- d-----w- c:\documents and settings\All Users\Application Data\SUPERAntiSpyware.com
2011-04-05 16:29 . 2011-04-05 16:29 -------- d-----w- c:\program files\Common Files\Java
2011-04-05 16:28 . 2011-04-05 16:28 73728 ----a-w- c:\windows\system32\javacpl.cpl
2011-04-05 16:28 . 2011-04-07 20:41 -------- d-----w- c:\program files\Java
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-04-05 16:28 . 2010-10-21 22:52 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-02-04 22:48 . 2004-08-10 04:00 456192 ----a-w- c:\windows\system32\encdec.dll
2011-02-04 22:48 . 2004-08-10 04:00 291840 ----a-w- c:\windows\system32\sbe.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-07-12 68856]
"SUPERAntiSpyware"="c:\documents and settings\HP_Administrator\Desktop\SUPERAntispyware\SUPERAntiSpyware.exe" [2011-03-16 2423752]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2004-08-10 15360]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray"="c:\windows\ehome\ehtray.exe" [2005-08-05 64512]
"HPBootOp"="c:\program files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" [2005-02-25 245760]
"ATIPTA"="c:\program files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-03-18 339968]
"LSBWatcher"="c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe" [2004-10-14 253952]
"D-Link AirPlus G"="c:\program files\D-Link\AirPlus G\AirGCFG.exe" [2004-11-19 1216512]
"ANIWZCS2Service"="c:\program files\ANI\ANIWZCS2 Service\WZCSLDR2.exe" [2004-10-22 45056]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2005-05-25 98304]
"HPDJ Taskbar Utility"="c:\windows\system32\spool\drivers\w32x86\3\hpztsb12.exe" [2004-12-15 176128]
"SPC230NC_Monitor"="c:\windows\Philips\SPC230NC\Monitor.exe" [2007-12-10 323584]
"SPC_Monitor"="c:\windows\Philips\SPC230NC\Monitor.exe" [2007-12-10 323584]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-10-29 249064]
.
c:\documents and settings\All Users\Start Menu\Programs\Startup\
Adobe Reader Speed Launch.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2004-12-14 29696]
AutoStart IR.lnk - c:\program files\WinTV\Ir.exe [2007-12-14 102455]
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2005-5-11 282624]
InterVideo WinCinema Manager.lnk - c:\program files\InterVideo\Common\Bin\WinCinemaMgr.exe [2007-12-15 114688]
Updates from HP.lnk - c:\program files\Updates from HP\309731\Program\Updates from HP.exe [2005-5-25 45056]
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\documents and settings\HP_Administrator\Desktop\SUPERAntispyware\SASSEH.DLL" [2008-05-13 77824]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2009-09-03 22:21 548352 ----a-w- c:\documents and settings\HP_Administrator\Desktop\SUPERAntispyware\SASWINLO.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\Updates from HP\\309731\\Program\\Updates from HP.exe"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\NetMeeting\\conf.exe"=
"c:\\WINDOWS\\pchealth\\helpctr\\binaries\\HelpCtr.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\MediaMall\\MediaMallServer.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"1484:UDP"= 1484:UDP:Windows Media Format SDK (iexplore.exe)
"1485:UDP"= 1485:UDP:Windows Media Format SDK (iexplore.exe)
.
R1 SASDIFSV;SASDIFSV;c:\documents and settings\HP_Administrator\Desktop\SUPERAntispyware\sasdifsv.sys [2/17/2010 2:25 PM 12872]
R1 SASKUTIL;SASKUTIL;c:\documents and settings\HP_Administrator\Desktop\SUPERAntispyware\SASKUTIL.SYS [5/10/2010 2:41 PM 67656]
R2 IOPort;IOPort;c:\windows\system32\drivers\Ioport.sys [1/25/2002 2:01 PM 6144]
R2 MediaMall Server;MediaMall Server;c:\program files\MediaMall\MediaMallServer.exe [2/26/2011 11:42 PM 4051824]
R3 HCWBT8XX;Hauppauge WinTV 848/9 WDM Video Driver;c:\windows\system32\drivers\HCWBT8xx.sys [12/14/2007 8:01 PM 472644]
S2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2/5/2010 12:05 PM 135664]
S3 PAEAFLT.sys;USB Composite Device;c:\windows\system32\drivers\PAEAFLT.sys [8/7/2009 6:23 PM 8576]
S3 PPCtlPriv;PPCtlPriv;"c:\program files\CA\CA Internet Security Suite\CA Anti-Spyware\PPCtlPriv.exe" --> c:\program files\CA\CA Internet Security Suite\CA Anti-Spyware\PPCtlPriv.exe [?]
S3 SPC230NC;Philips SPC230NC Webcam;c:\windows\system32\drivers\SPC230NC.SYS [8/7/2009 6:23 PM 461056]
.
Contents of the 'Scheduled Tasks' folder
.
2011-04-01 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2007-06-03 17:42]
.
2011-04-08 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-02-05 16:05]
.
2011-04-08 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-02-05 16:05]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.rr.com/
uDefault_Search_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q305&bd=pavilion&pf=desktop
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
mSearch Bar = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q305&bd=pavilion&pf=desktop
uInternet Connection Wizard,ShellNext = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q305&bd=pavilion&pf=desktop
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: E&xport to Microsoft Excel - c:\progra~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html
.
- - - - ORPHANS REMOVED - - - -
.
HKLM-Run-QOELOADER - c:\program files\CA\CA Internet Security Suite\CA Anti-Spam\QSP-5.1.18.0\QOELoader.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-04-08 10:01
Windows 5.1.2600 Service Pack 2 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
scanning hidden files ...
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10o_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10o_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
--------------------- DLLs Loaded Under Running Processes ---------------------
.
- - - - - - - > 'winlogon.exe'(784)
c:\documents and settings\HP_Administrator\Desktop\SUPERAntispyware\SASWINLO.DLL
c:\windows\system32\WININET.dll
c:\windows\system32\Ati2evxx.dll
.
- - - - - - - > 'explorer.exe'(3560)
c:\windows\system32\WININET.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Other Running Processes ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\windows\system32\Ati2evxx.exe
c:\windows\system32\LEXBCES.EXE
c:\windows\system32\LEXPPS.EXE
c:\program files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe
c:\program files\Juniper Networks\Common Files\dsNcService.exe
c:\windows\eHome\ehRecvr.exe
c:\windows\eHome\ehSched.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Common Files\LightScribe\LSSrvc.exe
c:\program files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\program files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
c:\windows\ehome\mcrdsvc.exe
c:\program files\HP\Digital Imaging\bin\hpqSTE08.exe
c:\program files\HP\Digital Imaging\Product Assistant\bin\hprblog.exe
c:\windows\system32\dllhost.exe
c:\windows\system32\wscntfy.exe
c:\windows\eHome\ehmsas.exe
.
**************************************************************************
.
Completion time: 2011-04-08 10:06:41 - machine was rebooted
ComboFix-quarantined-files.txt 2011-04-08 14:06
ComboFix2.txt 2011-04-07 20:48
ComboFix3.txt 2011-04-07 15:33
ComboFix4.txt 2011-04-06 21:38
.
Pre-Run: 152,885,465,088 bytes free
Post-Run: 152,833,490,944 bytes free
.
- - End Of File - - C6815B0454EDDEA4679B41F6B32C7052

#22 User is offline   daddysgirl574 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 18
  • Joined: 04-April 11

Posted 08 April 2011 - 09:18 AM

I think I just ran the current version of ComboFix when it updated itself per your instruction and the private conversation instruction. Let me know if I still need to Delete it and re-download ComboFix. Thanks.

#23 User is offline   CatByte 

  • Bleepin' curls!
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Malware Response Team
  • Posts: 7,856
  • Joined: 09-November 08
  • Gender:Not Telling
  • Location:Canada

Posted 08 April 2011 - 09:36 AM

OK, that looks much better.

How is the computer running now?

Are there any outstanding issues?

Please post a fresh DDS Log and Attach.txt

Please do the following:



Press the WinKey + R to open a run box, then copy/paste the following single-line command into the Run box and click OK:

Quote

cmd /c del /f/a/q "c:\documents and settings\HP_Administrator\oisrijtfzf.tmp"

The help you receive here is free. If you wish to show your appreciation, then you may Posted Image
Microsoft MVP - 2010, 2011

#24 User is offline   daddysgirl574 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 18
  • Joined: 04-April 11

Posted 08 April 2011 - 09:51 AM

Computer seems to be running normally. Search engines seem to work normally. Getting ready to perform the Winkey+R. Can you tell me how to stop the Updates from HP from running in the background by any chance?
__________________________
.
DDS (Ver_11-03-05.01) - NTFSx86
Run by HP_Administrator at 10:42:17.53 on Fri 04/08/2011
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.2494.1851 [GMT -4:00]
.
.
============== Running Processes ===============
.
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
C:\Program Files\D-Link\AirPlus G\AirGCFG.exe
C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb12.exe
C:\WINDOWS\Philips\SPC230NC\Monitor.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Documents and Settings\HP_Administrator\Desktop\SUPERAntispyware\SUPERAntiSpyware.exe
C:\Program Files\WinTV\Ir.exe
svchost.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe
C:\Program Files\Juniper Networks\Common Files\dsNcService.exe
C:\Program Files\Updates from HP\309731\Program\Updates from HP.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Java\jre6\bin\jqs.exe
c:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\MediaMall\MediaMallServer.exe
svchost.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprblog.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\explorer.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\ALCXMNTR.EXE
C:\WINDOWS\AGRSMMSG.exe
c:\windows\system\hpsysdrv.exe
C:\WINDOWS\system32\hphmon06.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\HP_Administrator\Desktop\dds.scr
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.rr.com/
uDefault_Search_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q305&bd=pavilion&pf=desktop
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
mSearch Bar = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=Q305&bd=pavilion&pf=desktop
uInternet Connection Wizard,ShellNext = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q305&bd=pavilion&pf=desktop
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
BHO: AcroIEHlprObj Class: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\adobe\acrobat 7.0\activex\AcroIEHelper.dll
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
BHO: Skype Plug-In: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.6.6209.1142\swg.dll
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: HP view: {b2847e28-5d7d-4deb-8b67-05d28bcf79f5} - c:\program files\hp\digital imaging\bin\HPDTLK02.dll
TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
TB: {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No File
uRun: [swg] "c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe"
uRun: [SUPERAntiSpyware] c:\documents and settings\hp_administrator\desktop\superantispyware\SUPERAntiSpyware.exe
mRun: [ehTray] c:\windows\ehome\ehtray.exe
mRun: [HPBootOp] "c:\program files\hewlett-packard\hp boot optimizer\HPBootOp.exe" /run
mRun: [ATIPTA] c:\program files\ati technologies\ati control panel\atiptaxx.exe
mRun: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
mRun: [D-Link AirPlus G] c:\program files\d-link\airplus g\AirGCFG.exe
mRun: [ANIWZCS2Service] c:\program files\ani\aniwzcs2 service\WZCSLDR2.exe
mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime
mRun: [HPDJ Taskbar Utility] c:\windows\system32\spool\drivers\w32x86\3\hpztsb12.exe
mRun: [SPC230NC_Monitor] c:\windows\philips\spc230nc\Monitor.exe
mRun: [SPC_Monitor] c:\windows\philips\spc230nc\Monitor.exe
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\adober~1.lnk - c:\program files\adobe\acrobat 7.0\reader\reader_sl.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\autost~1.lnk - c:\program files\wintv\Ir.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\hpdigi~1.lnk - c:\program files\hp\digital imaging\bin\hpqtra08.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\interv~1.lnk - c:\program files\intervideo\common\bin\WinCinemaMgr.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\update~1.lnk - c:\program files\updates from hp\309731\program\Updates from HP.exe
IE: E&xport to Microsoft Excel - c:\progra~1\mi1933~1\office11\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\google\google toolbar\component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html
IE: {E2D4D26B-0180-43a4-B05F-462D6D54C789} - c:\windows\pchealth\helpctr\vendors\cn=hewlett-packard,l=cupertino,s=ca,c=us\iebutton\support.htm
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\mi1933~1\office11\REFIEBAR.DLL
DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1197770476921
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos/OnlineScanner.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/swflash.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
DPF: {E5F5D008-DD2C-4D32-977D-1A0ADF03058B} - hxxps://westflorida.clio.medcity.net/dana-cached/setup/JuniperSetupSP1.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
Notify: !SASWinLogon - c:\documents and settings\hp_administrator\desktop\superantispyware\SASWINLO.DLL
Notify: AtiExtEvent - Ati2evxx.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
SEH: SABShellExecuteHook Class: {5ae067d3-9afb-48e0-853a-ebb7f4a000da} - c:\documents and settings\hp_administrator\desktop\superantispyware\SASSEH.DLL
.
============= SERVICES / DRIVERS ===============
.
R1 SASDIFSV;SASDIFSV;c:\documents and settings\hp_administrator\desktop\superantispyware\sasdifsv.sys [2010-2-17 12872]
R1 SASKUTIL;SASKUTIL;c:\documents and settings\hp_administrator\desktop\superantispyware\SASKUTIL.SYS [2010-5-10 67656]
R2 IOPort;IOPort;c:\windows\system32\drivers\Ioport.sys [2002-1-25 6144]
R2 McrdSvc;Media Center Extender Service;c:\windows\ehome\mcrdsvc.exe [2005-8-5 99328]
R2 MediaMall Server;MediaMall Server;c:\program files\mediamall\MediaMallServer.exe [2011-2-26 4051824]
R3 HCWBT8XX;Hauppauge WinTV 848/9 WDM Video Driver;c:\windows\system32\drivers\HCWBT8xx.sys [2007-12-14 472644]
S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2010-2-5 135664]
S3 PAEAFLT.sys;USB Composite Device;c:\windows\system32\drivers\PAEAFLT.sys [2009-8-7 8576]
S3 PPCtlPriv;PPCtlPriv;"c:\program files\ca\ca internet security suite\ca anti-spyware\ppctlpriv.exe" --> c:\program files\ca\ca internet security suite\ca anti-spyware\PPCtlPriv.exe [?]
S3 SPC230NC;Philips SPC230NC Webcam;c:\windows\system32\drivers\SPC230NC.SYS [2009-8-7 461056]
.
=============== Created Last 30 ================
.
2011-04-08 13:51:50 98816 ----a-w- c:\windows\sed.exe
2011-04-08 13:51:50 89088 ----a-w- c:\windows\MBR.exe
2011-04-08 13:51:50 256512 ----a-w- c:\windows\PEV.exe
2011-04-08 13:51:50 161792 ----a-w- c:\windows\SWREG.exe
2011-04-08 13:31:46 0 ----a-w- c:\documents and settings\hp_administrator\oisrijtfzf.tmp
2011-04-07 21:34:50 16736 ----a-w- c:\windows\system32\mucltui.dll.mui
2011-04-07 21:34:47 21728 ----a-w- c:\windows\system32\wucltui.dll.mui
2011-04-07 21:34:47 17632 ----a-w- c:\windows\system32\wuaueng.dll.mui
2011-04-07 21:34:47 15072 ----a-w- c:\windows\system32\wuaucpl.cpl.mui
2011-04-07 21:34:46 15064 ----a-w- c:\windows\system32\wuapi.dll.mui
2011-04-07 21:31:32 -------- d-----w- c:\windows\system32\wbem\repository\FS
2011-04-07 21:31:32 -------- d-----w- c:\windows\system32\wbem\Repository
2011-04-06 11:12:47 -------- d-----w- c:\program files\ESET
2011-04-06 02:19:14 -------- d-----w- c:\docume~1\hp_adm~1\applic~1\SUPERAntiSpyware.com
2011-04-06 02:19:14 -------- d-----w- c:\docume~1\alluse~1\applic~1\SUPERAntiSpyware.com
2011-04-05 16:28:54 73728 ----a-w- c:\windows\system32\javacpl.cpl
.
==================== Find3M ====================
.
2011-04-05 16:28:28 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-02-04 22:48:32 456192 ----a-w- c:\windows\system32\encdec.dll
2011-02-04 22:48:30 291840 ----a-w- c:\windows\system32\sbe.dll
.
============= FINISH: 10:42:27.35 ===============
_______________________________________________________________________________________________

.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_11-03-05.01)
.
Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume2
Install Date: 9/11/2005 12:47:32 PM
System Uptime: 4/8/2011 9:59:39 AM (1 hours ago)
.
Motherboard: MSI | | ALBACORE
Processor: AMD Athlon™ 64 Processor 3400+ | Socket 939 | 984/200mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 178 GiB total, 142.373 GiB free.
D: is FIXED (FAT32) - 8 GiB total, 1.382 GiB free.
E: is CDROM ()
F: is CDROM ()
G: is Removable
H: is Removable
I: is Removable
J: is Removable
.
==== Disabled Device Manager Items =============
.
==== System Restore Points ===================
.
RP870: 1/10/2011 8:23:55 AM - System Checkpoint
RP871: 1/11/2011 9:37:55 AM - System Checkpoint
RP872: 1/12/2011 1:29:51 PM - System Checkpoint
RP873: 1/12/2011 6:22:28 PM - Software Distribution Service 3.0
RP874: 1/13/2011 7:25:59 PM - System Checkpoint
RP875: 1/14/2011 8:24:55 PM - System Checkpoint
RP876: 1/17/2011 8:25:10 AM - System Checkpoint
RP877: 1/18/2011 4:37:41 PM - System Checkpoint
RP878: 1/19/2011 4:42:44 PM - System Checkpoint
RP879: 1/20/2011 4:54:14 PM - System Checkpoint
RP880: 1/21/2011 7:32:14 PM - System Checkpoint
RP881: 1/22/2011 7:50:39 PM - System Checkpoint
RP882: 1/23/2011 7:51:07 PM - System Checkpoint
RP883: 1/25/2011 10:41:40 AM - System Checkpoint
RP884: 1/26/2011 11:43:31 AM - System Checkpoint
RP885: 1/27/2011 2:50:07 PM - System Checkpoint
RP886: 1/28/2011 4:19:33 PM - System Checkpoint
RP887: 1/31/2011 7:06:40 AM - System Checkpoint
RP888: 2/1/2011 9:32:20 AM - System Checkpoint
RP889: 2/2/2011 10:36:13 AM - System Checkpoint
RP890: 2/3/2011 11:29:07 AM - System Checkpoint
RP891: 2/4/2011 12:55:18 PM - System Checkpoint
RP892: 2/5/2011 8:55:36 PM - System Checkpoint
RP893: 2/6/2011 9:02:01 PM - System Checkpoint
RP894: 2/7/2011 9:44:50 PM - System Checkpoint
RP895: 2/9/2011 6:27:13 AM - Software Distribution Service 3.0
RP896: 2/10/2011 7:34:32 AM - System Checkpoint
RP897: 2/11/2011 8:21:29 AM - System Checkpoint
RP898: 2/13/2011 9:25:08 PM - System Checkpoint
RP899: 2/14/2011 9:55:43 PM - System Checkpoint
RP900: 2/15/2011 11:54:29 PM - System Checkpoint
RP901: 2/17/2011 10:24:08 AM - System Checkpoint
RP902: 2/18/2011 4:19:42 PM - System Checkpoint
RP903: 2/19/2011 5:08:09 PM - System Checkpoint
RP904: 2/22/2011 6:30:03 AM - System Checkpoint
RP905: 2/23/2011 7:53:12 PM - System Checkpoint
RP906: 2/24/2011 8:22:01 PM - System Checkpoint
RP907: 2/27/2011 3:07:46 PM - System Checkpoint
RP908: 2/28/2011 7:38:02 PM - System Checkpoint
RP909: 2/28/2011 8:39:51 PM - Software Distribution Service 3.0
RP910: 3/2/2011 8:40:26 AM - System Checkpoint
RP911: 3/3/2011 11:55:14 AM - System Checkpoint
RP912: 3/4/2011 3:53:47 PM - System Checkpoint
RP913: 3/7/2011 1:01:56 PM - System Checkpoint
RP914: 3/7/2011 8:41:10 PM - Removed PlayOn
RP915: 3/7/2011 8:41:46 PM - Installed PlayOn
RP916: 3/8/2011 8:46:04 PM - System Checkpoint
RP917: 3/9/2011 2:33:31 PM - Software Distribution Service 3.0
RP918: 3/10/2011 4:11:34 PM - System Checkpoint
RP919: 3/11/2011 7:00:05 AM - Installed Java™ 6 Update 24
RP920: 3/14/2011 8:48:43 AM - System Checkpoint
RP921: 3/15/2011 7:48:51 PM - System Checkpoint
RP922: 3/16/2011 7:49:54 PM - System Checkpoint
RP923: 3/17/2011 9:12:02 PM - System Checkpoint
RP924: 3/21/2011 8:13:36 AM - System Checkpoint
RP925: 3/22/2011 11:32:25 AM - System Checkpoint
RP926: 3/23/2011 2:40:54 PM - System Checkpoint
RP927: 3/24/2011 5:05:44 PM - System Checkpoint
RP928: 3/25/2011 6:19:10 PM - System Checkpoint
RP929: 3/28/2011 9:24:21 AM - System Checkpoint
RP930: 3/29/2011 10:02:23 AM - System Checkpoint
RP931: 3/30/2011 2:37:59 PM - System Checkpoint
RP932: 3/31/2011 3:29:42 PM - System Checkpoint
RP933: 4/1/2011 4:22:37 PM - System Checkpoint
RP934: 4/3/2011 12:14:40 PM - System Checkpoint
RP935: 4/5/2011 12:15:02 PM - Removed Java™ 6 Update 22
RP936: 4/5/2011 12:28:13 PM - Installed Java™ 6 Update 24
RP937: 4/6/2011 1:00:04 PM - System Checkpoint
RP938: 4/7/2011 5:29:51 PM - Restore Operation
.
==== Installed Programs ======================
.
1400
1400_Help
1400Trb
Adobe Acrobat 5.0
Adobe Flash Player 10 ActiveX
Adobe Reader 7.0
Adobe Shockwave Player 11
ADS Tech Master Installer V3.8
ADS Tech V3.8 DVD Xpress DX2 CapWiz
Agere Systems PCI Soft Modem
AiO_Scan
AiOSoftware
AirPlus G
ANIO Service
ANIWZCS2 Service
Apple Software Update
ATI Control Panel
ATI Display Driver
Blackhawk Striker 2 from HP Media Center (remove only)
Blasterball 2 from HP Media Center (remove only)
Blasterball 2 Holidays from HP Media Center (remove only)
Blasterball 2 Remix from HP Media Center (remove only)
Bounce Symphony from HP Media Center (remove only)
BufferChm
Calendar Creator
CameraDrivers
Copy
CP_AtenaShokunin1Config
cp_dwSharkTaleAlbums1
cp_dwSharkTaleCards1
cp_dwShrek2Albums1
cp_dwShrek2Cards1
CP_Package_Variety1
CP_Package_Variety2
CP_Package_Variety3
CP_PLSBusinessFlyers
CreativeProjects
CreativeProjectsTemplates
Critical Update for Windows Media Player 11 (KB959772)
Crystal Maze from HP Media Center (remove only)
CueTour
DELTAWAVE Codec
Destinations
DeviceManagementQFolder
Dictaphone EXV TransNeT
DivX ;-) Audio Compressor 4.02
DocProc
DocumentViewer
Easy Internet Sign-up
ESET Online Scanner v3
eSupportQFolder
Fax
Final Drive Nitro from HP Media Center (remove only)
Fusion Player
GemMaster Mystic
Google Toolbar for Internet Explorer
Google Update Helper
Hauppauge WinTV Infrared Remote
Hauppauge WinTV2000
Help and Support Additions
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Hotfix for Windows Internet Explorer 7 (KB947864)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows Media Player 10 (KB903157)
Hotfix for Windows Media Player 11 (KB939683)
Hotfix for Windows XP (KB888795)
Hotfix for Windows XP (KB891593)
Hotfix for Windows XP (KB895961)
Hotfix for Windows XP (KB896344)
Hotfix for Windows XP (KB899337)
Hotfix for Windows XP (KB899510)
Hotfix for Windows XP (KB902841)
Hotfix for Windows XP (KB912024)
Hotfix for Windows XP (KB914440)
Hotfix for Windows XP (KB915865)
Hotfix for Windows XP (KB926239)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB954550-v5)
Hotfix for Windows XP (KB961118)
Hotfix for Windows XP (KB970653-v3)
Hotfix for Windows XP (KB976098-v2)
Hotfix for Windows XP (KB979306)
Hotfix for Windows XP (KB981793)
HP Boot Optimizer
HP Deskjet 3840
HP Deskjet Printer Preload
HP Help and Support 4.0
HP Image Zone 4.8.6
HP Image Zone Express
HP Image Zone for Media Center PC
HP Image Zone Plus 4.8.6
HP Imaging Device Functions 5.3
HP Photosmart Cameras 4.5
HP PSC & OfficeJet 5.3.B
HP Software Update
HP Solution Center & Imaging Support Tools 5.3
HP Tunes
HPIZplus450
HPProductAssistant
HpSdpAppCoreApp
HPSystemDiagnostics
InstantShare
IntelliMover Data Transfer Demo
InterVideo XPack (Combo)
iTunes
Java Auto Updater
Java™ 6 Update 24
Juniper Networks Host Checker
Juniper Networks Network Connect 5.5.0
Juniper Networks Network Connect 6.0.0
Juniper Networks Network Connect 6.3.0
KBD
Lexibox Deluxe from HP Media Center (remove only)
Lexmark Z600 Series
LightScribe 1.4.42.1
Malwarebytes' Anti-Malware
MASC Codec
MEDITECH Workstation4.x
Microsoft .NET Framework 1.0 Hotfix (KB887998)
Microsoft .NET Framework 1.0 Hotfix (KB930494)
Microsoft .NET Framework 1.0 Hotfix (KB953295)
Microsoft .NET Framework 1.0 Hotfix (KB979904)
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Security Update (KB979906)
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Office Standard Edition 2003
Microsoft Plus! Dancer LE
Microsoft Plus! Digital Media Edition Installer
Microsoft Plus! Photo Story 2 LE
Microsoft Silverlight
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Web Publishing Wizard 1.52
Microsoft Windows XP Video Decoder Checkup Utility
Microsoft Works
MSXML 4.0 SP2 (KB927978)
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
MSXML 6 Service Pack 2 (KB973686)
muvee autoProducer 4.0
muvee autoProducer unPlugged - HPD
NewCopy
OKI ADPCM 32K Codec
Otto
Overball from HP Media Center (remove only)
PanoStandAlone
PC-Doctor for Windows
Philips Intelligent Agent
Philips SPC230NC Webcam
Phoenix Assault from HP Media Center (remove only)
PhotoGallery
Photosmart 320,370,7400,8100,8400 Series
PhotoStudio 2000 Trial
PlayOn
Polar Bowler from HP Media Center (remove only)
Polar Golfer from HP Media Center (remove only)
PrintScreen
ProductContext
PS2
PSPrinters06
Python 2.2 pywin32 extensions (build 203)
Python 2.2.3
QFolder
QuickProjects
QuickTime
Readme
RealPlayer
Remove Microsoft Money 2005 installer
Remove Quicken New User Edition installer
Scan
ScannerCopy
Security Update for CAPICOM (KB931906)
Security Update for Step By Step Interactive Training (KB898458)
Security Update for Step By Step Interactive Training (KB923723)
Security Update for Windows Internet Explorer 7 (KB938127)
Security Update for Windows Internet Explorer 7 (KB939653)
Security Update for Windows Internet Explorer 7 (KB942615)
Security Update for Windows Internet Explorer 7 (KB944533)
Security Update for Windows Internet Explorer 7 (KB950759)
Security Update for Windows Internet Explorer 7 (KB953838)
Security Update for Windows Internet Explorer 7 (KB956390)
Security Update for Windows Internet Explorer 7 (KB958215)
Security Update for Windows Internet Explorer 7 (KB960714)
Security Update for Windows Internet Explorer 7 (KB961260)
Security Update for Windows Internet Explorer 7 (KB963027)
Security Update for Windows Internet Explorer 7 (KB969897)
Security Update for Windows Internet Explorer 7 (KB972260)
Security Update for Windows Internet Explorer 8 (KB971961)
Security Update for Windows Internet Explorer 8 (KB972260)
Security Update for Windows Internet Explorer 8 (KB974455)
Security Update for Windows Internet Explorer 8 (KB976325)
Security Update for Windows Internet Explorer 8 (KB978207)
Security Update for Windows Internet Explorer 8 (KB981332)
Security Update for Windows Internet Explorer 8 (KB982381)
Security Update for Windows Media Encoder (KB954156)
Security Update for Windows Media Encoder (KB979332)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB954155)
Security Update for Windows Media Player (KB968816)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player (KB978695)
Security Update for Windows Media Player 10 (KB917734)
Security Update for Windows Media Player 10 (KB936782)
Security Update for Windows Media Player 11 (KB936782)
Security Update for Windows Media Player 11 (KB954154)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows XP (KB2229593)
Security Update for Windows XP (KB890046)
Security Update for Windows XP (KB893756)
Security Update for Windows XP (KB896358)
Security Update for Windows XP (KB896423)
Security Update for Windows XP (KB896424)
Security Update for Windows XP (KB896428)
Security Update for Windows XP (KB899587)
Security Update for Windows XP (KB899589)
Security Update for Windows XP (KB899591)
Security Update for Windows XP (KB900725)
Security Update for Windows XP (KB901017)
Security Update for Windows XP (KB901214)
Security Update for Windows XP (KB902400)
Security Update for Windows XP (KB904706)
Security Update for Windows XP (KB905414)
Security Update for Windows XP (KB905749)
Security Update for Windows XP (KB908519)
Security Update for Windows XP (KB911562)
Security Update for Windows XP (KB911567)
Security Update for Windows XP (KB911927)
Security Update for Windows XP (KB912919)
Security Update for Windows XP (KB913580)
Security Update for Windows XP (KB914388)
Security Update for Windows XP (KB914389)
Security Update for Windows XP (KB917159)
Security Update for Windows XP (KB917344)
Security Update for Windows XP (KB917422)
Security Update for Windows XP (KB917953)
Security Update for Windows XP (KB918118)
Security Update for Windows XP (KB918439)
Security Update for Windows XP (KB918899)
Security Update for Windows XP (KB919007)
Security Update for Windows XP (KB920213)
Security Update for Windows XP (KB920214)
Security Update for Windows XP (KB920670)
Security Update for Windows XP (KB920683)
Security Update for Windows XP (KB920685)
Security Update for Windows XP (KB921398)
Security Update for Windows XP (KB921503)
Security Update for Windows XP (KB921883)
Security Update for Windows XP (KB922616)
Security Update for Windows XP (KB922760)
Security Update for Windows XP (KB922819)
Security Update for Windows XP (KB923191)
Security Update for Windows XP (KB923414)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB923689)
Security Update for Windows XP (KB923980)
Security Update for Windows XP (KB924191)
Security Update for Windows XP (KB924270)
Security Update for Windows XP (KB924496)
Security Update for Windows XP (KB924667)
Security Update for Windows XP (KB925486)
Security Update for Windows XP (KB925902)
Security Update for Windows XP (KB926255)
Security Update for Windows XP (KB926436)
Security Update for Windows XP (KB927779)
Security Update for Windows XP (KB927802)
Security Update for Windows XP (KB928255)
Security Update for Windows XP (KB928843)
Security Update for Windows XP (KB929123)
Security Update for Windows XP (KB930178)
Security Update for Windows XP (KB931261)
Security Update for Windows XP (KB931784)
Security Update for Windows XP (KB932168)
Security Update for Windows XP (KB933729)
Security Update for Windows XP (KB935839)
Security Update for Windows XP (KB935840)
Security Update for Windows XP (KB936021)
Security Update for Windows XP (KB937894)
Security Update for Windows XP (KB938127)
Security Update for Windows XP (KB938464)
Security Update for Windows XP (KB938829)
Security Update for Windows XP (KB939653)
Security Update for Windows XP (KB941202)
Security Update for Windows XP (KB941568)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB941644)
Security Update for Windows XP (KB941693)
Security Update for Windows XP (KB943055)
Security Update for Windows XP (KB943460)
Security Update for Windows XP (KB943485)
Security Update for Windows XP (KB944653)
Security Update for Windows XP (KB945553)
Security Update for Windows XP (KB946026)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB948590)
Security Update for Windows XP (KB948881)
Security Update for Windows XP (KB950749)
Security Update for Windows XP (KB950760)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951376)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB953839)
Security Update for Windows XP (KB954211)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956391)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB957095)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958470)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB958690)
Security Update for Windows XP (KB958869)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960715)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB961371)
Security Update for Windows XP (KB961373)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB968537)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB969898)
Security Update for Windows XP (KB969947)
Security Update for Windows XP (KB970238)
Security Update for Windows XP (KB970430)
Security Update for Windows XP (KB971032)
Security Update for Windows XP (KB971468)
Security Update for Windows XP (KB971486)
Security Update for Windows XP (KB971557)
Security Update for Windows XP (KB971633)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB972270)
Security Update for Windows XP (KB973346)
Security Update for Windows XP (KB973354)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973525)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB973904)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974318)
Security Update for Windows XP (KB974392)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB975467)
Security Update for Windows XP (KB975560)
Security Update for Windows XP (KB975561)
Security Update for Windows XP (KB975562)
Security Update for Windows XP (KB975713)
Security Update for Windows XP (KB977165)
Security Update for Windows XP (KB977816)
Security Update for Windows XP (KB977914)
Security Update for Windows XP (KB978037)
Security Update for Windows XP (KB978251)
Security Update for Windows XP (KB978262)
Security Update for Windows XP (KB978338)
Security Update for Windows XP (KB978542)
Security Update for Windows XP (KB978601)
Security Update for Windows XP (KB978706)
Security Update for Windows XP (KB979309)
Security Update for Windows XP (KB979482)
Security Update for Windows XP (KB979559)
Security Update for Windows XP (KB979683)
Security Update for Windows XP (KB980195)
Security Update for Windows XP (KB980218)
Security Update for Windows XP (KB980232)
Shooting Stars Pool from HP Media Center (remove only)
Shorthand 8
SkinsHP1
Skype Toolbars
Skype™ 5.1
Slyder from HP Media Center (remove only)
SmartSound Quicktracks Plugin
SolutionCenter
Sonic Encoders
Sonic Express Labeler
Sonic MyDVD Plus
Sonic RecordNow Audio
Sonic RecordNow Copy
Sonic RecordNow Data
Sonic Update Manager
Start Stop Universal Transcription System
Status
Super Granny from HP Media Center (remove only)
SUPERAntiSpyware
The SUM Program Advanced Units - Cardiology Version 2.1
The SUM Program Advanced Units - Gastrointestinal Version 2.1
The SUM Program Advanced Units - Orthopedic Version 2.1
The SUM Program Advanced Units - Pathology Version 2.1
The SUM Program Advanced Units - Radiology Version 2.1
Tradewinds from HP Media Center (remove only)
TrayApp
Ulead DVD DiskRecorder 2.1.1
Ulead Straight-to-Disc SDK
Ulead VideoStudio 9.0 SE DVD
Unload
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Windows Internet Explorer 8 (KB973874)
Update for Windows Internet Explorer 8 (KB976662)
Update for Windows Internet Explorer 8 (KB976749)
Update for Windows Internet Explorer 8 (KB980182)
Update for Windows Media Player 10 (KB913800)
Update for Windows Media Player 10 (KB926251)
Update for Windows XP (KB894391)
Update for Windows XP (KB898461)
Update for Windows XP (KB900485)
Update for Windows XP (KB904942)
Update for Windows XP (KB908531)
Update for Windows XP (KB910437)
Update for Windows XP (KB911280)
Update for Windows XP (KB916595)
Update for Windows XP (KB920342)
Update for Windows XP (KB920872)
Update for Windows XP (KB922582)
Update for Windows XP (KB925720)
Update for Windows XP (KB927891)
Update for Windows XP (KB930916)
Update for Windows XP (KB932823-v3)
Update for Windows XP (KB933360)
Update for Windows XP (KB938828)
Update for Windows XP (KB942763)
Update for Windows XP (KB951072-v2)
Update for Windows XP (KB955759)
Update for Windows XP (KB955839)
Update for Windows XP (KB967715)
Update for Windows XP (KB968389)
Update for Windows XP (KB971737)
Update for Windows XP (KB973687)
Update for Windows XP (KB973815)
Update Rollup 2 for Windows XP Media Center Edition 2005
Updates from HP
Webcam Video Viewer
WebFldrs XP
WebReg
Windows Genuine Advantage Validation Tool (KB892130)
Windows Imaging Component
Windows Installer 3.1 (KB893803)
Windows Internet Explorer 7
Windows Internet Explorer 8
Windows Media Encoder 9 Series
Windows Media Format 11 runtime
Windows Media Player 10 Hotfix [See KB889858 for more information]
Windows Media Player 11
Windows XP Hotfix - KB867282
Windows XP Hotfix - KB873339
Windows XP Hotfix - KB883667
Windows XP Hotfix - KB885250
Windows XP Hotfix - KB885354
Windows XP Hotfix - KB885835
Windows XP Hotfix - KB885836
Windows XP Hotfix - KB886185
Windows XP Hotfix - KB887472
Windows XP Hotfix - KB887742
Windows XP Hotfix - KB888113
Windows XP Hotfix - KB888302
Windows XP Hotfix - KB890175
Windows XP Hotfix - KB890859
Windows XP Hotfix - KB891220
Windows XP Hotfix - KB891781
Windows XP Media Center Edition 2005 KB2502898
Windows XP Media Center Edition 2005 KB888316
Windows XP Media Center Edition 2005 KB890629
Windows XP Media Center Edition 2005 KB895678
Windows XP Media Center Edition 2005 KB925766
Windows XP Media Center Edition 2005 KB973768
.
==== Event Viewer Messages From Past Week ========
.
4/7/2011 5:38:07 PM, error: DCOM [10005] - DCOM got error "%5" attempting to start the service iPodService with arguments "-Service" in order to run the server: {7A7FB085-6068-4898-8CCA-480A9187277C}
4/7/2011 4:44:39 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AmdK8 Imapi PxHelp20 WudfPf
4/7/2011 4:44:39 PM, error: Service Control Manager [7023] - The Windows Driver Foundation - User-mode Driver Framework service terminated with the following error: The specified module could not be found.
4/7/2011 4:44:39 PM, error: Service Control Manager [7000] - The Media Center Extender Service service failed to start due to the following error: The system cannot find the file specified.
4/7/2011 4:44:39 PM, error: Service Control Manager [7000] - The LexBce Server service failed to start due to the following error: The system cannot find the file specified.
4/7/2011 4:44:39 PM, error: Service Control Manager [7000] - The Ati HotKey Poller service failed to start due to the following error: The system cannot find the file specified.
4/7/2011 4:42:30 PM, error: PlugPlayManager [11] - The device Root\LEGACY_FASTTX2K\0000 disappeared from the system without first being prepared for removal.
4/7/2011 4:41:01 PM, error: Service Control Manager [7034] - The iPod Service service terminated unexpectedly. It has done this 1 time(s).
4/7/2011 4:40:58 PM, error: Service Control Manager [7031] - The Media Center Extender Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 5000 milliseconds: Restart the service.
4/7/2011 4:40:57 PM, error: Service Control Manager [7034] - The Ulead Burning Helper service terminated unexpectedly. It has done this 1 time(s).
4/7/2011 4:40:52 PM, error: Service Control Manager [7034] - The Media Center Receiver Service service terminated unexpectedly. It has done this 1 time(s).
4/7/2011 4:40:50 PM, error: Service Control Manager [7034] - The LexBce Server service terminated unexpectedly. It has done this 1 time(s).
4/7/2011 4:40:48 PM, error: Service Control Manager [7034] - The Ati HotKey Poller service terminated unexpectedly. It has done this 1 time(s).
4/6/2011 5:32:55 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the MediaMall Server service to connect.
4/6/2011 5:19:12 PM, error: Service Control Manager [7034] - The ANIWZCSd Service service terminated unexpectedly. It has done this 1 time(s).
4/6/2011 5:14:42 PM, error: PlugPlayManager [11] - The device Root\LEGACY_SASKUTIL\0000 disappeared from the system without first being prepared for removal.
4/6/2011 5:14:42 PM, error: PlugPlayManager [11] - The device Root\LEGACY_SASDIFSV\0000 disappeared from the system without first being prepared for removal.
4/5/2011 9:23:05 PM, error: atapi [9] - The device, \Device\Ide\IdePort2, did not respond within the timeout period.
4/2/2011 9:15:30 PM, error: Service Control Manager [7011] - Timeout (30000 milliseconds) waiting for a transaction response from the ehRecvr service.
4/1/2011 4:43:53 AM, error: Service Control Manager [7011] - Timeout (30000 milliseconds) waiting for a transaction response from the ShellHWDetection service.
4/1/2011 10:51:06 PM, error: W32Time [17] - Time Provider NtpClient: An error occurred during DNS lookup of the manually configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup again in 15 minutes. The error was: A socket operation was attempted to an unreachable host. (0x80072751)
.
==== End Of File ===========================

#25 User is offline   CatByte 

  • Bleepin' curls!
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Malware Response Team
  • Posts: 7,856
  • Joined: 09-November 08
  • Gender:Not Telling
  • Location:Canada

Posted 08 April 2011 - 10:19 AM

Hi

There are instructions here to disable HP automatic updates

let me know if that fixes the issue

http://www.ehow.com/how_4962937_disable-hp-updates.html

next

Visit ADOBE and download the latest version of Acrobat Reader (version X)
Having the latest updates ensures there are no security vulnerabilities in your system.


NEXT


the logs appear to be clean, so we just need to do some housekeeping now:


You can delete the DDS and GMER logs and programs from your desktop.


NEXT


Follow these steps to uninstall Combofix

  • Make sure your security programs are totally disabled.
  • Click START then RUN
  • Now copy/paste Combofix /uninstall into the runbox and click OK. Note the space between the ..X and the /U, it needs to be there.


Posted Image


If there are any logs/tools remaining on your desktop > right click and delete them.


NEXT


Below I have included a number of recommendations for how to protect your computer against malware infections.

  • It is good security practice to change your passwords to all your online accounts on a fairly regular basis, this is especially true after an infection. Refer to this Microsoft article
    Strong passwords: How to create and use them
    Then consider a password keeper, to keep all your passwords safe.


  • Keep Windows updated by regularly checking their website at :
    http://windowsupdate.microsoft.com/
    This will ensure your computer has always the latest security updates available installed on your computer.


  • Make Internet Explorer more secure
    • Click Start > Run
    • Type Inetcpl.cpl & click OK
    • Click on the Security tab
    • Click Reset all zones to default level
    • Make sure the Internet Zone is selected & Click Custom level
    • In the ActiveX section, set the first two options ("Download signed and unsigned ActiveX controls) to "Prompt", and ("Initialize and Script ActiveX controls not marked as safe") to "Disable".
    • Next Click OK, then Apply button and then OK to exit the Internet Properties page.



  • Download TFC to your desktop
    • Close any open windows.
    • Double click the TFC icon to run the program
    • TFC will close all open programs itself in order to run,
    • Click the Start button to begin the process.
    • Allow TFC to run uninterrupted.
    • The program should not take long to finish it's job
    • Once its finished it should automatically reboot your machine,
    • if it doesn't, manually reboot to ensure a complete clean

    It's normal after running TFC cleaner that the PC will be slower to boot the first time.


  • WOT, Web of Trust, warns you about risky websites that try to scam visitors, deliver malware or send spam. Protect your computer against online threats by using WOT as your front-line layer of protection when browsing or searching in unfamiliar territory. WOT's color-coded icons show you ratings for 21 million websites, helping you avoid the dangerous sites:
    • Green to go
    • Yellow for caution
    • Red to stop
    WOT has an addon available for both Firefox and IE


  • Keep a backup of your important files - Now, more than ever, it's especially important to protect your digital files and memories. This article is full of good information on alternatives for home backup solutions.


  • ERUNT (Emergency Recovery Utility NT) allows you to keep a complete backup of your registry and restore it when needed. The standard registry backup options that come with Windows back up most of the registry but not all of it. ERUNT however creates a complete backup set, including the Security hive and user related sections. ERUNT is easy to use and since it creates a full backup, there are no options or choices other than to select the location of the backup files. The backup set includes a small executable that will launch the registry restore if needed.


  • In light of your recent issue, I'm sure you'd like to avoid any future infections. Please take a look at this well written article:
    PC Safety and Security--What Do I Need?.

The help you receive here is free. If you wish to show your appreciation, then you may Posted Image
Microsoft MVP - 2010, 2011

#26 User is offline   daddysgirl574 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 18
  • Joined: 04-April 11

Posted 08 April 2011 - 12:07 PM

Everything deleted or uninstalled from the desktop except SuperAntispyware. It is in the task bar. If I attempt to delete it, it says cannot remove deupx.dll. I do see it in the add/delete area under Control Panel, so I suppose that would be the route to take if I want to delete it?

#27 User is offline   CatByte 

  • Bleepin' curls!
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Malware Response Team
  • Posts: 7,856
  • Joined: 09-November 08
  • Gender:Not Telling
  • Location:Canada

Posted 08 April 2011 - 01:25 PM

you can keep SuperAntiSpyware if you wish, if you want to uninstall it then yes, you would uninstall it from the Add/Remove programs
The help you receive here is free. If you wish to show your appreciation, then you may Posted Image
Microsoft MVP - 2010, 2011

#28 User is offline   CatByte 

  • Bleepin' curls!
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Malware Response Team
  • Posts: 7,856
  • Joined: 09-November 08
  • Gender:Not Telling
  • Location:Canada

Posted 13 April 2011 - 01:34 PM

It appears that this issue is resolved, therefore I am closing the topic. If that is not the case and you need or wish to continue with this topic, please send me or any Moderator a Personal Message (PM) that you would like this topic re-opened.
The help you receive here is free. If you wish to show your appreciation, then you may Posted Image
Microsoft MVP - 2010, 2011

Share this topic:


  • 2 Pages +
  • 1
  • 2
  • You cannot start a new topic
  • This topic is locked

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users