Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Infected - *whataboutadog.com


  • This topic is locked This topic is locked
15 replies to this topic

#1 qusjone

qusjone

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:09:29 AM

Posted 18 October 2007 - 08:39 AM

Hi - first time post, but have used many tips/solutions from threads here over the years. You all are GREAT and I am sure can help me now. I've somehow acquired the annoying "downloader.agent.awf" trojan (aka *whataboutadog.com or *doginhispen.com). Please advise as to solution. Here's my HJT log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:34:23 AM, on 10/18/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\WINDOWS\system32\DVDRAMSV.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
c:\TOSHIBA\IVP\swupdate\swupdtmr.exe
C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe
C:\WINDOWS\system32\TODDSrv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\TOSHIBA\TOSHIBA Controls\TFncKy.exe
C:\Program Files\Synaptics\SynTP\Toshiba.exe
C:\WINDOWS\system32\TPSBattM.exe
C:\Program Files\Print Server\PTP\PSDiagnostic.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\RAMASST.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Toshiba\Toshiba Applet\bak\thotkey.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Adobe\Reader 8.0\Reader\AcroRd32Info.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O4 - HKLM\..\Run: [THotkey] C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
O4 - HKLM\..\Run: [DDWMon] C:\Program Files\TOSHIBA\TOSHIBA Direct Disc Writer\\ddwmon.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
O4 - HKLM\..\Run: [TFncKy] TFncKy.exe
O4 - HKLM\..\Run: [Pinger] c:\toshiba\ivp\ism\pinger.exe /run
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [Lexmark X6100 Series] "C:\Program Files\Lexmark X6100 Series\lxbfbmgr.exe"
O4 - HKLM\..\Run: [PrintServer Diagnostic] C:\Program Files\Print Server\PTP\PSDiagnostic.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [SmoothView] C:\Program Files\TOSHIBA\TOSHIBA Zooming Utility\SmoothView.exe
O4 - HKLM\..\Run: [PadTouch] C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe
O4 - HKLM\..\Run: [Tvs] C:\Program Files\Toshiba\Tvs\TvsTray.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SynTPStart] C:\Program Files\Synaptics\SynTP\SynTPStart.exe
O4 - Startup: Microsoft Office OneNote 2003 Quick Launch.lnk = C:\Program Files\Microsoft Office\OFFICE11\ONENOTEM.EXE
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: RAMASST.lnk = C:\WINDOWS\system32\RAMASST.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.toshibadirect.com/dpdstart
O15 - Trusted Zone: *.doginhispen.com
O15 - Trusted Zone: *.whataboutadog.com
O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} (Office Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=58813
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/microsoftu...b?1190471703500
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftu...b?1190468833875
O16 - DPF: {C52439A0-2693-4E40-B141-9F9AD5257241} (Lexmark eDiagnostics Class) - https://ediagnostics.lexmark.com/serval.cab
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: DVD-RAM_Service - Matsubleepa Electric Industrial Co., Ltd. - C:\WINDOWS\system32\DVDRAMSV.exe
O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel® PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: Swupdtmr - Unknown owner - c:\TOSHIBA\IVP\swupdate\swupdtmr.exe
O23 - Service: TOSHIBA Application Service (TAPPSRV) - TOSHIBA Corp. - C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe
O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - TOSHIBA Corporation - C:\WINDOWS\system32\TODDSrv.exe

--
End of file - 8887 bytes


THANKS IN ADVANCE!!

BC AdBot (Login to Remove)

 


#2 rookie147

rookie147

  • Members
  • 5,321 posts
  • OFFLINE
  •  
  • Local time:02:29 PM

Posted 18 October 2007 - 11:41 AM

Hello there and welcome to BleepingComputer. My name is Charles and I will be dealing with your log today.
From your log it appears that you are missing one important program: an antivirus. This is somewhat suicidal in today's digital world. Without one you are at a high-risk of reinfection; while I can try to sort your problem out, if you have no protection, the infections will keep resurfacing.
Here are some great free antivirus programs:
Antivir, Avast!, AVG, Bitdefender Free
Install one of these, then run a full scan, letting it quarantine/delete anything it finds. Let me know if there is anything that it reports but can not remove.

Click here to download FindAWF.exe and save it to your Desktop.
Double click FindAWF.exe to run the program.
It will prompt you to press any key to continue, please do so.
Then select option 1 - scan for bak folders.
Wait while the scan runs; it shouldn't take too long.
When it is complete, it will open a text filecalled AWF.txt.
Copy and paste the contents of the AWF.txt file in your next reply.
Thanks,
Charles

If you are pleased with the service I have offered, you may like to consider making a donation. Posted Image
Posted Image


#3 qusjone

qusjone
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:09:29 AM

Posted 19 October 2007 - 08:37 AM

Thanks Charles! I do have an anti-virus program - Kaspersky Internet Security v6.0 - but just uninstalled it due to some network connectivity problems its firewall was apparently causing my system. I'll re-install it and run a scan and post any unresolved issues shortly in another reply, as you requested.

Meantime, here's the results of my FindAWF scan:


Find AWF report by noahdfear 2006
Version 1.40

The current date is: Fri 10/19/2007
The current time is: 9:32:06.09


bak folders found
~~~~~~~~~~~


Directory of C:\PROGRA~1\ITUNES\BAK

07/31/2007 06:44 PM 271,672 iTunesHelper.exe
1 File(s) 271,672 bytes

Directory of C:\PROGRA~1\LEXMAR~1\BAK

09/23/2003 02:01 AM 57,344 lxbfbmgr.exe
1 File(s) 57,344 bytes

Directory of C:\PROGRA~1\QUICKT~1\BAK

06/29/2007 06:24 AM 286,720 QTTask.exe
1 File(s) 286,720 bytes

Directory of C:\PROGRA~1\WIFD1F~1\BAK

11/03/2006 07:20 PM 866,584 MSASCui.exe
1 File(s) 866,584 bytes

Directory of C:\WINDOWS\EHOME\BAK

08/05/2005 04:56 PM 64,512 ehtray.exe
1 File(s) 64,512 bytes

Directory of C:\WINDOWS\SYSTEM32\BAK

03/23/2006 12:13 AM 77,824 hkcmd.exe
03/23/2006 12:17 AM 118,784 igfxpers.exe
03/23/2006 12:17 AM 94,208 igfxtray.exe
3 File(s) 290,816 bytes

Directory of C:\PROGRA~1\EXAMSOFT\SOFTEST\BAK

12/08/2006 03:55 PM 272,384 01_9058-Sales&SecuredTransactions-061208_32.bak
12/08/2006 04:27 PM 274,432 02_9058-Sales&SecuredTransactions-061208_64.bak
12/08/2006 04:59 PM 276,480 03_9058-Sales&SecuredTransactions-061208_96.bak
12/08/2006 05:31 PM 278,528 04_9058-Sales&SecuredTransactions-061208_128.bak
12/08/2006 06:03 PM 282,624 05_9058-Sales&SecuredTransactions-061208_160.bak
12/08/2006 06:35 PM 288,768 06_9058-Sales&SecuredTransactions-061208_192.bak
12/08/2006 06:55 PM 299,008 07_9058-Sales&SecuredTransactions-061208_FinalClose.bak
12/08/2006 06:55 PM 299,008 08_Sales&SecuredTransactions9058_FinalRestart.bak
12/11/2006 10:37 AM 274,432 09_9058-AdvancedTax-061211_32.bak
12/11/2006 11:09 AM 274,432 10_9058-AdvancedTax-061211_64.bak
12/11/2006 11:41 AM 280,576 11_9058-AdvancedTax-061211_96.bak
12/11/2006 12:13 PM 282,624 12_9058-AdvancedTax-061211_128.bak
12/11/2006 12:45 PM 286,720 13_9058-AdvancedTax-061211_160.bak
12/11/2006 01:17 PM 299,008 14_9058-AdvancedTax-061211_192.bak
12/11/2006 01:33 PM 305,152 15_9058-AdvancedTax-061211_FinalClose.bak
12/11/2006 01:33 PM 305,152 16_9058-AdvancedTax-061211_FinalRestart.bak
12/13/2006 03:33 PM 274,432 17_9058-AdvancedTorts-061213_32.bak
12/13/2006 04:05 PM 278,528 18_9058-AdvancedTorts-061213_64.bak
12/13/2006 04:37 PM 294,912 19_9058-AdvancedTorts-061213_96.bak
12/13/2006 05:10 PM 313,344 20_9058-AdvancedTorts-061213_128.bak
12/13/2006 05:42 PM 337,920 21_9058-AdvancedTorts-061213_160.bak
12/13/2006 06:02 PM 354,304 22_9058-AdvancedTorts-061213_FinalClose.bak
12/13/2006 06:02 PM 354,304 23_9058-AdvancedTorts-061213_FinalRestart.bak
01/30/2007 01:28 PM 278,528 24_909-NCDistinctions-070130_FinalClose.bak
01/30/2007 01:28 PM 278,528 25_909-NCDistinctions-070130_FinalRestart.bak
02/22/2007 01:31 PM 278,528 26_909-NCDistinctions-RealEstateFinance-070222_FinalClose.bak
02/22/2007 01:31 PM 278,528 27_NCDistinctions-RealEstateFinance909_FinalRestart.bak
03/22/2007 12:30 PM 278,528 28_909-NCDistinctions-070322_FinalClose.bak
03/22/2007 12:30 PM 278,528 29_909-NCDistinctions-070322_FinalRestart.bak
04/12/2007 12:30 PM 278,528 30_909-NCDistinctions-FamilyLaw-070412_FinalClose.bak
04/12/2007 12:30 PM 278,528 31_NCDistinctions-FamilyLaw909_FinalRestart.bak
04/17/2007 12:35 PM 282,624 32_909-NCDistinctions-FamilyLaw-070417_FinalClose.bak
04/17/2007 12:35 PM 282,624 33_NCDistinctions-FamilyLaw909_FinalRestart.bak
07/24/2007 10:51 AM 299,008 34_77777-NCBar_7-24-07_AM-070724_32.bak
07/24/2007 11:23 AM 319,488 35_77777-NCBar_7-24-07_AM-070724_64.bak
07/24/2007 11:55 AM 342,016 36_77777-NCBar_7-24-07_AM-070724_96.bak
07/24/2007 12:27 PM 360,448 37_77777-NCBar_7-24-07_AM-070724_128.bak
07/24/2007 12:59 PM 382,976 38_77777-NCBar_7-24-07_AM-070724_160.bak
07/24/2007 01:19 PM 387,072 39_77777-NCBar_7-24-07_AM-070724_FinalClose.bak
07/24/2007 01:19 PM 387,072 40_NCBar_7-24-07_AM77777_FinalRestart.bak
07/24/2007 03:57 PM 303,104 41_77777-NCBar_7-24-07_PM-070724_32.bak
07/24/2007 04:29 PM 319,488 42_77777-NCBar_7-24-07_PM-070724_64.bak
07/24/2007 05:01 PM 333,824 43_77777-NCBar_7-24-07_PM-070724_96.bak
07/24/2007 05:33 PM 352,256 44_77777-NCBar_7-24-07_PM-070724_128.bak
07/24/2007 06:05 PM 376,832 45_77777-NCBar_7-24-07_PM-070724_160.bak
07/24/2007 06:21 PM 391,168 46_77777-NCBar_7-24-07_PM-070724_FinalClose.bak
07/24/2007 06:21 PM 391,168 47_NCBar_7-24-07_PM77777_FinalRestart.bak
47 File(s) 14,526,464 bytes

Directory of C:\PROGRA~1\GRISOFT\AVGANT~1.5\BAK

06/11/2007 05:25 AM 6,731,312 avgas.exe
1 File(s) 6,731,312 bytes

Directory of C:\PROGRA~1\PRINTS~1\PTP\BAK

11/24/2004 05:09 PM 266,240 PSDiagnostic.exe
1 File(s) 266,240 bytes

Directory of C:\PROGRA~1\SYNAPT~1\SYNTP\BAK

03/02/2006 07:02 PM 761,948 SynTPEnh.exe
1 File(s) 761,948 bytes

Directory of C:\PROGRA~1\TOSHIBA\TO8D15~1\BAK

04/26/2005 07:13 PM 122,880 SmoothView.exe
1 File(s) 122,880 bytes

Directory of C:\PROGRA~1\TOSHIBA\TOSHIB~1\BAK

08/02/2006 07:52 PM 364,544 thotkey.exe
1 File(s) 364,544 bytes

Directory of C:\PROGRA~1\TOSHIBA\TOSHIB~3\BAK

04/25/2006 08:57 PM 299,008 ddwmon.exe
1 File(s) 299,008 bytes

Directory of C:\PROGRA~1\TOSHIBA\TOUCHA~1\BAK

12/06/2005 01:06 AM 1,077,322 PadExe.exe
1 File(s) 1,077,322 bytes

Directory of C:\PROGRA~1\TOSHIBA\TVS\BAK

02/02/2006 03:11 PM 73,728 TvsTray.exe
1 File(s) 73,728 bytes

Directory of C:\TOSHIBA\IVP\ISM\BAK

03/17/2005 08:37 PM 151,552 pinger.exe
1 File(s) 151,552 bytes

Directory of C:\PROGRA~1\ADOBE\READER~1.0\READER\BAK

05/11/2007 03:06 AM 40,048 Reader_sl.exe
1 File(s) 40,048 bytes

Directory of C:\PROGRA~1\INTEL\WIRELESS\BIN\BAK

07/03/2006 12:50 AM 700,416 ifrmewrk.exe
07/03/2006 04:07 AM 802,816 ZCfgSvc.exe
2 File(s) 1,503,232 bytes

Directory of C:\PROGRA~1\JAVA\JRE16~1.0_0\BIN\BAK

03/14/2007 03:43 AM 83,608 jusched.exe
1 File(s) 83,608 bytes

Directory of C:\PROGRA~1\JAVA\JRE16~2.0_0\BIN\BAK

07/12/2007 04:00 AM 132,496 jusched.exe
1 File(s) 132,496 bytes

Directory of C:\PROGRA~1\ADOBE\PHOTOS~1\3.2\APPS\BAK

03/09/2007 11:09 AM 63,712 apdproxy.exe
1 File(s) 63,712 bytes


Duplicate files of bak directory contents
~~~~~~~~~~~~~~~~~~~~~~~

267064 Sep 14 2007 "C:\Program Files\iTunes\iTunesHelper.exe1191413568"
271672 Jul 31 2007 "C:\Program Files\iTunes\bak\iTunesHelper.exe"
102400 Oct 3 2007 "C:\WINDOWS\Installer\{B045B608-4A47-4C77-9EAD-06C394503306}\iTunesIco.exe"
116024 Oct 3 2007 "C:\Documents and Settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 7.4.3.1\iTunesSetupAdmin.exe"
116024 Sep 14 2007 "C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\QRSTCDEX\iTunesSetupAdmin[1].exe"
27664 Oct 3 2007 "C:\Program Files\Lexmark X6100 Series\lxbfbmgr.exe"
57344 Sep 23 2003 "C:\Program Files\Lexmark X6100 Series\bak\lxbfbmgr.exe"
27664 Oct 3 2007 "C:\Program Files\QuickTime\QTTask.exe"
286720 Jun 29 2007 "C:\Program Files\QuickTime\bak\QTTask.exe"
866584 Nov 3 2006 "C:\Program Files\Windows Defender\MSASCui.exe"
866584 Nov 3 2006 "C:\Program Files\Windows Defender\bak\MSASCui.exe"
59392 Aug 10 2004 "C:\WINDOWS\$NtUninstallKB900325$\ehtray.exe"
64512 Aug 5 2005 "C:\WINDOWS\ehome\ehtray.exe"
64512 Aug 5 2005 "C:\WINDOWS\ehome\bak\ehtray.exe"
27664 Oct 3 2007 "C:\WINDOWS\system32\hkcmd.exe"
77824 Mar 23 2006 "C:\WINDOWS\system32\bak\hkcmd.exe"
27664 Oct 3 2007 "C:\WINDOWS\system32\igfxpers.exe"
118784 Mar 23 2006 "C:\WINDOWS\system32\bak\igfxpers.exe"
27664 Oct 3 2007 "C:\WINDOWS\system32\igfxtray.exe"
94208 Mar 23 2006 "C:\WINDOWS\system32\bak\igfxtray.exe"
272384 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\142561\01_9058-Sales&SecuredTransactions-061208_32.bak"
272384 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\Bak\01_9058-Sales&SecuredTransactions-061208_32.bak"
274432 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\142561\02_9058-Sales&SecuredTransactions-061208_64.bak"
274432 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\Bak\02_9058-Sales&SecuredTransactions-061208_64.bak"
276480 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\142561\03_9058-Sales&SecuredTransactions-061208_96.bak"
276480 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\Bak\03_9058-Sales&SecuredTransactions-061208_96.bak"
278528 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\142561\04_9058-Sales&SecuredTransactions-061208_128.bak"
278528 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\Bak\04_9058-Sales&SecuredTransactions-061208_128.bak"
282624 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\142561\05_9058-Sales&SecuredTransactions-061208_160.bak"
282624 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\Bak\05_9058-Sales&SecuredTransactions-061208_160.bak"
288768 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\142561\06_9058-Sales&SecuredTransactions-061208_192.bak"
288768 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\Bak\06_9058-Sales&SecuredTransactions-061208_192.bak"
299008 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\142561\07_9058-Sales&SecuredTransactions-061208_FinalClose.bak"
299008 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\Bak\07_9058-Sales&SecuredTransactions-061208_FinalClose.bak"
299008 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\142561\08_Sales&SecuredTransactions9058_FinalRestart.bak"
299008 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\Bak\08_Sales&SecuredTransactions9058_FinalRestart.bak"
274432 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\142561\09_9058-AdvancedTax-061211_32.bak"
274432 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\Bak\09_9058-AdvancedTax-061211_32.bak"
274432 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\142561\10_9058-AdvancedTax-061211_64.bak"
274432 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\Bak\10_9058-AdvancedTax-061211_64.bak"
280576 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\142561\11_9058-AdvancedTax-061211_96.bak"
280576 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\Bak\11_9058-AdvancedTax-061211_96.bak"
282624 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\142561\12_9058-AdvancedTax-061211_128.bak"
282624 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\Bak\12_9058-AdvancedTax-061211_128.bak"
286720 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\142561\13_9058-AdvancedTax-061211_160.bak"
286720 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\Bak\13_9058-AdvancedTax-061211_160.bak"
299008 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\142561\14_9058-AdvancedTax-061211_192.bak"
299008 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\Bak\14_9058-AdvancedTax-061211_192.bak"
305152 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\142561\15_9058-AdvancedTax-061211_FinalClose.bak"
305152 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\Bak\15_9058-AdvancedTax-061211_FinalClose.bak"
305152 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\142561\16_9058-AdvancedTax-061211_FinalRestart.bak"
305152 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\Bak\16_9058-AdvancedTax-061211_FinalRestart.bak"
274432 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\142561\17_9058-AdvancedTorts-061213_32.bak"
274432 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\Bak\17_9058-AdvancedTorts-061213_32.bak"
278528 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\142561\18_9058-AdvancedTorts-061213_64.bak"
278528 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\Bak\18_9058-AdvancedTorts-061213_64.bak"
294912 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\142561\19_9058-AdvancedTorts-061213_96.bak"
294912 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\Bak\19_9058-AdvancedTorts-061213_96.bak"
313344 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\142561\20_9058-AdvancedTorts-061213_128.bak"
313344 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\Bak\20_9058-AdvancedTorts-061213_128.bak"
337920 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\142561\21_9058-AdvancedTorts-061213_160.bak"
337920 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\Bak\21_9058-AdvancedTorts-061213_160.bak"
354304 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\142561\22_9058-AdvancedTorts-061213_FinalClose.bak"
354304 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\Bak\22_9058-AdvancedTorts-061213_FinalClose.bak"
354304 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\142561\23_9058-AdvancedTorts-061213_FinalRestart.bak"
354304 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\Bak\23_9058-AdvancedTorts-061213_FinalRestart.bak"
278528 Jan 30 2007 "C:\Program Files\ExamSoft\SofTest\142561\24_909-NCDistinctions-070130_FinalClose.bak"
278528 Jan 30 2007 "C:\Program Files\ExamSoft\SofTest\Bak\24_909-NCDistinctions-070130_FinalClose.bak"
278528 Jan 30 2007 "C:\Program Files\ExamSoft\SofTest\142561\25_909-NCDistinctions-070130_FinalRestart.bak"
278528 Jan 30 2007 "C:\Program Files\ExamSoft\SofTest\Bak\25_909-NCDistinctions-070130_FinalRestart.bak"
278528 Feb 22 2007 "C:\Program Files\ExamSoft\SofTest\142561\26_909-NCDistinctions-RealEstateFinance-070222_FinalClose.bak"
278528 Feb 22 2007 "C:\Program Files\ExamSoft\SofTest\Bak\26_909-NCDistinctions-RealEstateFinance-070222_FinalClose.bak"
278528 Feb 22 2007 "C:\Program Files\ExamSoft\SofTest\142561\27_NCDistinctions-RealEstateFinance909_FinalRestart.bak"
278528 Feb 22 2007 "C:\Program Files\ExamSoft\SofTest\Bak\27_NCDistinctions-RealEstateFinance909_FinalRestart.bak"
278528 Mar 22 2007 "C:\Program Files\ExamSoft\SofTest\142561\28_909-NCDistinctions-070322_FinalClose.bak"
278528 Mar 22 2007 "C:\Program Files\ExamSoft\SofTest\Bak\28_909-NCDistinctions-070322_FinalClose.bak"
278528 Mar 22 2007 "C:\Program Files\ExamSoft\SofTest\142561\29_909-NCDistinctions-070322_FinalRestart.bak"
278528 Mar 22 2007 "C:\Program Files\ExamSoft\SofTest\Bak\29_909-NCDistinctions-070322_FinalRestart.bak"
278528 Apr 12 2007 "C:\Program Files\ExamSoft\SofTest\142561\30_909-NCDistinctions-FamilyLaw-070412_FinalClose.bak"
278528 Apr 12 2007 "C:\Program Files\ExamSoft\SofTest\Bak\30_909-NCDistinctions-FamilyLaw-070412_FinalClose.bak"
278528 Apr 12 2007 "C:\Program Files\ExamSoft\SofTest\142561\31_NCDistinctions-FamilyLaw909_FinalRestart.bak"
278528 Apr 12 2007 "C:\Program Files\ExamSoft\SofTest\Bak\31_NCDistinctions-FamilyLaw909_FinalRestart.bak"
282624 Apr 17 2007 "C:\Program Files\ExamSoft\SofTest\142561\32_909-NCDistinctions-FamilyLaw-070417_FinalClose.bak"
282624 Apr 17 2007 "C:\Program Files\ExamSoft\SofTest\Bak\32_909-NCDistinctions-FamilyLaw-070417_FinalClose.bak"
282624 Apr 17 2007 "C:\Program Files\ExamSoft\SofTest\142561\33_NCDistinctions-FamilyLaw909_FinalRestart.bak"
282624 Apr 17 2007 "C:\Program Files\ExamSoft\SofTest\Bak\33_NCDistinctions-FamilyLaw909_FinalRestart.bak"
299008 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\142561\34_77777-NCBar_7-24-07_AM-070724_32.bak"
299008 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\Bak\34_77777-NCBar_7-24-07_AM-070724_32.bak"
319488 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\142561\35_77777-NCBar_7-24-07_AM-070724_64.bak"
319488 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\Bak\35_77777-NCBar_7-24-07_AM-070724_64.bak"
342016 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\142561\36_77777-NCBar_7-24-07_AM-070724_96.bak"
342016 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\Bak\36_77777-NCBar_7-24-07_AM-070724_96.bak"
360448 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\142561\37_77777-NCBar_7-24-07_AM-070724_128.bak"
360448 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\Bak\37_77777-NCBar_7-24-07_AM-070724_128.bak"
382976 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\142561\38_77777-NCBar_7-24-07_AM-070724_160.bak"
382976 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\Bak\38_77777-NCBar_7-24-07_AM-070724_160.bak"
387072 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\142561\39_77777-NCBar_7-24-07_AM-070724_FinalClose.bak"
387072 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\Bak\39_77777-NCBar_7-24-07_AM-070724_FinalClose.bak"
387072 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\142561\40_NCBar_7-24-07_AM77777_FinalRestart.bak"
387072 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\Bak\40_NCBar_7-24-07_AM77777_FinalRestart.bak"
303104 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\142561\41_77777-NCBar_7-24-07_PM-070724_32.bak"
303104 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\Bak\41_77777-NCBar_7-24-07_PM-070724_32.bak"
319488 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\142561\42_77777-NCBar_7-24-07_PM-070724_64.bak"
319488 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\Bak\42_77777-NCBar_7-24-07_PM-070724_64.bak"
333824 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\142561\43_77777-NCBar_7-24-07_PM-070724_96.bak"
333824 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\Bak\43_77777-NCBar_7-24-07_PM-070724_96.bak"
352256 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\142561\44_77777-NCBar_7-24-07_PM-070724_128.bak"
352256 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\Bak\44_77777-NCBar_7-24-07_PM-070724_128.bak"
376832 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\142561\45_77777-NCBar_7-24-07_PM-070724_160.bak"
376832 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\Bak\45_77777-NCBar_7-24-07_PM-070724_160.bak"
391168 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\142561\46_77777-NCBar_7-24-07_PM-070724_FinalClose.bak"
391168 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\Bak\46_77777-NCBar_7-24-07_PM-070724_FinalClose.bak"
391168 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\142561\47_NCBar_7-24-07_PM77777_FinalRestart.bak"
391168 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\Bak\47_NCBar_7-24-07_PM77777_FinalRestart.bak"
6731312 Jun 11 2007 "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\bak\avgas.exe"
266240 Nov 24 2004 "C:\Program Files\Print Server\PTP\PSDiagnostic.exe1191413565"
266240 Nov 24 2004 "C:\Program Files\Print Server\PTP\bak\PSDiagnostic.exe"
761948 Mar 2 2006 "C:\Synaptics Touchpad.temp\SynTPEnh.exe"
1015808 Aug 15 2007 "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
761948 Mar 2 2006 "C:\Program Files\Synaptics\SynTP\bak\SynTPEnh.exe"
761948 Mar 2 2006 "C:\Program Files\Synaptics\SynTP\Media\SynTPEnh.exe"
27664 Oct 3 2007 "C:\WINDOWS\system32\ReinstallBackups\0018\DriverFiles\SynTPEnh.exe"
122880 Apr 26 2005 "C:\Program Files\TOSHIBA\TOSHIBA Zooming Utility\SmoothView.exe1191413567"
122880 Apr 26 2005 "C:\Program Files\TOSHIBA\TOSHIBA Zooming Utility\bak\SmoothView.exe"
27664 Oct 3 2007 "C:\Program Files\TOSHIBA\TOSHIBA Applet\thotkey.exe"
364544 Aug 2 2006 "C:\Program Files\TOSHIBA\TOSHIBA Applet\bak\thotkey.exe"
27664 Oct 3 2007 "C:\Program Files\TOSHIBA\TOSHIBA Direct Disc Writer\ddwmon.exe"
299008 Apr 25 2006 "C:\Program Files\TOSHIBA\TOSHIBA Direct Disc Writer\bak\ddwmon.exe"
27664 Oct 3 2007 "C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe"
1077322 Dec 6 2005 "C:\Program Files\TOSHIBA\Touch and Launch\bak\PadExe.exe"
27664 Oct 3 2007 "C:\Program Files\TOSHIBA\Tvs\TvsTray.exe"
73728 Feb 2 2006 "C:\Program Files\TOSHIBA\Tvs\bak\TvsTray.exe"
27664 Oct 3 2007 "C:\TOSHIBA\IVP\ISM\pinger.exe"
151552 Mar 17 2005 "C:\TOSHIBA\IVP\ISM\bak\pinger.exe"
27664 Oct 3 2007 "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
40048 May 11 2007 "C:\Program Files\Adobe\Reader 8.0\Reader\bak\Reader_sl.exe"
27664 Oct 3 2007 "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe"
700416 Jul 3 2006 "C:\Program Files\Intel\Wireless\Bin\bak\ifrmewrk.exe"
27664 Oct 3 2007 "C:\Program Files\Intel\Wireless\Bin\ZCfgSvc.exe"
802816 Jul 3 2006 "C:\Program Files\Intel\Wireless\Bin\bak\ZCfgSvc.exe"
36975 Nov 10 2005 "C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe"
49263 Nov 9 2006 "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
49263 Oct 12 2006 "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
75520 Dec 15 2006 "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
24080 Aug 14 2007 "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
27664 Oct 3 2007 "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
83608 Mar 14 2007 "C:\Program Files\Java\jre1.6.0_01\bin\bak\jusched.exe"
132496 Jul 12 2007 "C:\Program Files\Java\jre1.6.0_02\bin\bak\jusched.exe"
36975 Nov 10 2005 "C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe"
49263 Nov 9 2006 "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
49263 Oct 12 2006 "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
75520 Dec 15 2006 "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
24080 Aug 14 2007 "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
27664 Oct 3 2007 "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
83608 Mar 14 2007 "C:\Program Files\Java\jre1.6.0_01\bin\bak\jusched.exe"
132496 Jul 12 2007 "C:\Program Files\Java\jre1.6.0_02\bin\bak\jusched.exe"
27664 Oct 3 2007 "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe"
63712 Mar 9 2007 "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\bak\apdproxy.exe"

end of report

THANKS!!

#4 rookie147

rookie147

  • Members
  • 5,321 posts
  • OFFLINE
  •  
  • Local time:02:29 PM

Posted 19 October 2007 - 11:47 AM

Please double-click the FindAWF icon once again
As instructed, press any key to continue.
Use the following option: Press 2 then Enter to restore files from bak folders
A text file opens called: files.txt
Click below the line and paste the following list of files to be restored: "C:\Program Files\iTunes\bak\iTunesHelper.exe"
"C:\Program Files\Lexmark X6100 Series\bak\lxbfbmgr.exe"
"C:\Program Files\QuickTime\bak\QTTask.exe"
"C:\Program Files\Windows Defender\bak\MSASCui.exe"
"C:\WINDOWS\ehome\bak\ehtray.exe"
"C:\WINDOWS\system32\bak\hkcmd.exe"
"C:\WINDOWS\system32\bak\igfxpers.exe"
"C:\WINDOWS\system32\bak\igfxtray.exe"
"C:\Program Files\ExamSoft\SofTest\Bak\01_9058-Sales&SecuredTransactions-061208_32.bak"
"C:\Program Files\ExamSoft\SofTest\Bak\02_9058-Sales&SecuredTransactions-061208_64.bak"
"C:\Program Files\ExamSoft\SofTest\Bak\03_9058-Sales&SecuredTransactions-061208_96.bak"
"C:\Program Files\ExamSoft\SofTest\Bak\04_9058-Sales&SecuredTransactions-061208_128.bak"
"C:\Program Files\ExamSoft\SofTest\Bak\05_9058-Sales&SecuredTransactions-061208_160.bak"
"C:\Program Files\ExamSoft\SofTest\Bak\06_9058-Sales&SecuredTransactions-061208_192.bak"
"C:\Program Files\ExamSoft\SofTest\Bak\07_9058-Sales&SecuredTransactions-061208_FinalClose.bak"
"C:\Program Files\ExamSoft\SofTest\Bak\08_Sales&SecuredTransactions9058_FinalRestart.bak"
"C:\Program Files\ExamSoft\SofTest\Bak\09_9058-AdvancedTax-061211_32.bak"
"C:\Program Files\ExamSoft\SofTest\Bak\10_9058-AdvancedTax-061211_64.bak"
"C:\Program Files\ExamSoft\SofTest\Bak\11_9058-AdvancedTax-061211_96.bak"
"C:\Program Files\ExamSoft\SofTest\Bak\12_9058-AdvancedTax-061211_128.bak"
"C:\Program Files\ExamSoft\SofTest\Bak\13_9058-AdvancedTax-061211_160.bak"
"C:\Program Files\ExamSoft\SofTest\Bak\14_9058-AdvancedTax-061211_192.bak"
"C:\Program Files\ExamSoft\SofTest\Bak\15_9058-AdvancedTax-061211_FinalClose.bak"
"C:\Program Files\ExamSoft\SofTest\Bak\16_9058-AdvancedTax-061211_FinalRestart.bak"
"C:\Program Files\ExamSoft\SofTest\Bak\17_9058-AdvancedTorts-061213_32.bak"
"C:\Program Files\ExamSoft\SofTest\Bak\18_9058-AdvancedTorts-061213_64.bak"
"C:\Program Files\ExamSoft\SofTest\Bak\19_9058-AdvancedTorts-061213_96.bak"
"C:\Program Files\ExamSoft\SofTest\Bak\20_9058-AdvancedTorts-061213_128.bak"
"C:\Program Files\ExamSoft\SofTest\Bak\21_9058-AdvancedTorts-061213_160.bak"
"C:\Program Files\ExamSoft\SofTest\Bak\22_9058-AdvancedTorts-061213_FinalClose.bak"
"C:\Program Files\ExamSoft\SofTest\Bak\23_9058-AdvancedTorts-061213_FinalRestart.bak"
"C:\Program Files\ExamSoft\SofTest\Bak\24_909-NCDistinctions-070130_FinalClose.bak"
"C:\Program Files\ExamSoft\SofTest\Bak\25_909-NCDistinctions-070130_FinalRestart.bak"
"C:\Program Files\ExamSoft\SofTest\Bak\26_909-NCDistinctions-RealEstateFinance-070222_FinalClose.bak"
"C:\Program Files\ExamSoft\SofTest\Bak\27_NCDistinctions-RealEstateFinance909_FinalRestart.bak"
"C:\Program Files\ExamSoft\SofTest\Bak\28_909-NCDistinctions-070322_FinalClose.bak"
"C:\Program Files\ExamSoft\SofTest\Bak\29_909-NCDistinctions-070322_FinalRestart.bak"
"C:\Program Files\ExamSoft\SofTest\Bak\30_909-NCDistinctions-FamilyLaw-070412_FinalClose.bak"
"C:\Program Files\ExamSoft\SofTest\Bak\31_NCDistinctions-FamilyLaw909_FinalRestart.bak"
"C:\Program Files\ExamSoft\SofTest\Bak\32_909-NCDistinctions-FamilyLaw-070417_FinalClose.bak"
"C:\Program Files\ExamSoft\SofTest\Bak\33_NCDistinctions-FamilyLaw909_FinalRestart.bak"
"C:\Program Files\ExamSoft\SofTest\Bak\34_77777-NCBar_7-24-07_AM-070724_32.bak"
"C:\Program Files\ExamSoft\SofTest\Bak\35_77777-NCBar_7-24-07_AM-070724_64.bak"
"C:\Program Files\ExamSoft\SofTest\Bak\36_77777-NCBar_7-24-07_AM-070724_96.bak"
"C:\Program Files\ExamSoft\SofTest\Bak\37_77777-NCBar_7-24-07_AM-070724_128.bak"
"C:\Program Files\ExamSoft\SofTest\Bak\38_77777-NCBar_7-24-07_AM-070724_160.bak"
"C:\Program Files\ExamSoft\SofTest\Bak\39_77777-NCBar_7-24-07_AM-070724_FinalClose.bak"
"C:\Program Files\ExamSoft\SofTest\Bak\40_NCBar_7-24-07_AM77777_FinalRestart.bak"
"C:\Program Files\ExamSoft\SofTest\Bak\41_77777-NCBar_7-24-07_PM-070724_32.bak"
"C:\Program Files\ExamSoft\SofTest\Bak\42_77777-NCBar_7-24-07_PM-070724_64.bak"
"C:\Program Files\ExamSoft\SofTest\Bak\43_77777-NCBar_7-24-07_PM-070724_96.bak"
"C:\Program Files\ExamSoft\SofTest\Bak\44_77777-NCBar_7-24-07_PM-070724_128.bak"
"C:\Program Files\ExamSoft\SofTest\Bak\45_77777-NCBar_7-24-07_PM-070724_160.bak"
"C:\Program Files\ExamSoft\SofTest\Bak\46_77777-NCBar_7-24-07_PM-070724_FinalClose.bak"
"C:\Program Files\ExamSoft\SofTest\Bak\47_NCBar_7-24-07_PM77777_FinalRestart.bak"
"C:\Program Files\Print Server\PTP\bak\PSDiagnostic.exe"
"C:\Program Files\Synaptics\SynTP\bak\SynTPEnh.exe"
"C:\Program Files\TOSHIBA\TOSHIBA Zooming Utility\bak\SmoothView.exe"
"C:\Program Files\TOSHIBA\TOSHIBA Applet\bak\thotkey.exe"
"C:\Program Files\TOSHIBA\TOSHIBA Direct Disc Writer\bak\ddwmon.exe"
"C:\Program Files\TOSHIBA\Touch and Launch\bak\PadExe.exe"
"C:\Program Files\TOSHIBA\Tvs\bak\TvsTray.exe"
"C:\TOSHIBA\IVP\ISM\bak\pinger.exe"
"C:\Program Files\Adobe\Reader 8.0\Reader\bak\Reader_sl.exe"
"C:\Program Files\Intel\Wireless\Bin\bak\ifrmewrk.exe"
"C:\Program Files\Intel\Wireless\Bin\bak\ZCfgSvc.exe"
"C:\Program Files\Java\jre1.6.0_01\bin\bak\jusched.exe"
"C:\Program Files\Java\jre1.6.0_02\bin\bak\jusched.exe"
"C:\Program Files\Java\jre1.6.0_01\bin\bak\jusched.exe"
"C:\Program Files\Java\jre1.6.0_02\bin\bak\jusched.exe"
"C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\bak\apdproxy.exe"

Next, close and click Yes to save the changes.
Once files.txt is saved, FindAWF does the following: It attempts to terminate the process represented by each filename on the list, if running
Deletes the rogue file from the parent folder, if present
Copies the original file to the parent folder
When done with the above, it automatically runs a new scan and opens a new log.
Please provide the new FindAWF log in your reply.

If you are pleased with the service I have offered, you may like to consider making a donation. Posted Image
Posted Image


#5 qusjone

qusjone
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:09:29 AM

Posted 19 October 2007 - 12:23 PM

#2 run successfully. As requested, here's my new FindAWF log:


Find AWF report by noahdfear 2006
Version 1.40
Option 2 run successfully

The current date is: Fri 10/19/2007
The current time is: 13:19:45.20


bak folders found
~~~~~~~~~~~


Directory of C:\PROGRA~1\ITUNES\BAK

07/31/2007 06:44 PM 271,672 iTunesHelper.exe
1 File(s) 271,672 bytes

Directory of C:\PROGRA~1\LEXMAR~1\BAK

09/23/2003 02:01 AM 57,344 lxbfbmgr.exe
1 File(s) 57,344 bytes

Directory of C:\PROGRA~1\QUICKT~1\BAK

06/29/2007 06:24 AM 286,720 QTTask.exe
1 File(s) 286,720 bytes

Directory of C:\PROGRA~1\WIFD1F~1\BAK

11/03/2006 07:20 PM 866,584 MSASCui.exe
1 File(s) 866,584 bytes

Directory of C:\WINDOWS\EHOME\BAK

08/05/2005 04:56 PM 64,512 ehtray.exe
1 File(s) 64,512 bytes

Directory of C:\WINDOWS\SYSTEM32\BAK

03/23/2006 12:13 AM 77,824 hkcmd.exe
03/23/2006 12:17 AM 118,784 igfxpers.exe
03/23/2006 12:17 AM 94,208 igfxtray.exe
3 File(s) 290,816 bytes

Directory of C:\PROGRA~1\EXAMSOFT\SOFTEST\BAK

12/08/2006 03:55 PM 272,384 01_9058-Sales&SecuredTransactions-061208_32.bak
12/08/2006 04:27 PM 274,432 02_9058-Sales&SecuredTransactions-061208_64.bak
12/08/2006 04:59 PM 276,480 03_9058-Sales&SecuredTransactions-061208_96.bak
12/08/2006 05:31 PM 278,528 04_9058-Sales&SecuredTransactions-061208_128.bak
12/08/2006 06:03 PM 282,624 05_9058-Sales&SecuredTransactions-061208_160.bak
12/08/2006 06:35 PM 288,768 06_9058-Sales&SecuredTransactions-061208_192.bak
12/08/2006 06:55 PM 299,008 07_9058-Sales&SecuredTransactions-061208_FinalClose.bak
12/08/2006 06:55 PM 299,008 08_Sales&SecuredTransactions9058_FinalRestart.bak
12/11/2006 10:37 AM 274,432 09_9058-AdvancedTax-061211_32.bak
12/11/2006 11:09 AM 274,432 10_9058-AdvancedTax-061211_64.bak
12/11/2006 11:41 AM 280,576 11_9058-AdvancedTax-061211_96.bak
12/11/2006 12:13 PM 282,624 12_9058-AdvancedTax-061211_128.bak
12/11/2006 12:45 PM 286,720 13_9058-AdvancedTax-061211_160.bak
12/11/2006 01:17 PM 299,008 14_9058-AdvancedTax-061211_192.bak
12/11/2006 01:33 PM 305,152 15_9058-AdvancedTax-061211_FinalClose.bak
12/11/2006 01:33 PM 305,152 16_9058-AdvancedTax-061211_FinalRestart.bak
12/13/2006 03:33 PM 274,432 17_9058-AdvancedTorts-061213_32.bak
12/13/2006 04:05 PM 278,528 18_9058-AdvancedTorts-061213_64.bak
12/13/2006 04:37 PM 294,912 19_9058-AdvancedTorts-061213_96.bak
12/13/2006 05:10 PM 313,344 20_9058-AdvancedTorts-061213_128.bak
12/13/2006 05:42 PM 337,920 21_9058-AdvancedTorts-061213_160.bak
12/13/2006 06:02 PM 354,304 22_9058-AdvancedTorts-061213_FinalClose.bak
12/13/2006 06:02 PM 354,304 23_9058-AdvancedTorts-061213_FinalRestart.bak
01/30/2007 01:28 PM 278,528 24_909-NCDistinctions-070130_FinalClose.bak
01/30/2007 01:28 PM 278,528 25_909-NCDistinctions-070130_FinalRestart.bak
02/22/2007 01:31 PM 278,528 26_909-NCDistinctions-RealEstateFinance-070222_FinalClose.bak
02/22/2007 01:31 PM 278,528 27_NCDistinctions-RealEstateFinance909_FinalRestart.bak
03/22/2007 12:30 PM 278,528 28_909-NCDistinctions-070322_FinalClose.bak
03/22/2007 12:30 PM 278,528 29_909-NCDistinctions-070322_FinalRestart.bak
04/12/2007 12:30 PM 278,528 30_909-NCDistinctions-FamilyLaw-070412_FinalClose.bak
04/12/2007 12:30 PM 278,528 31_NCDistinctions-FamilyLaw909_FinalRestart.bak
04/17/2007 12:35 PM 282,624 32_909-NCDistinctions-FamilyLaw-070417_FinalClose.bak
04/17/2007 12:35 PM 282,624 33_NCDistinctions-FamilyLaw909_FinalRestart.bak
07/24/2007 10:51 AM 299,008 34_77777-NCBar_7-24-07_AM-070724_32.bak
07/24/2007 11:23 AM 319,488 35_77777-NCBar_7-24-07_AM-070724_64.bak
07/24/2007 11:55 AM 342,016 36_77777-NCBar_7-24-07_AM-070724_96.bak
07/24/2007 12:27 PM 360,448 37_77777-NCBar_7-24-07_AM-070724_128.bak
07/24/2007 12:59 PM 382,976 38_77777-NCBar_7-24-07_AM-070724_160.bak
07/24/2007 01:19 PM 387,072 39_77777-NCBar_7-24-07_AM-070724_FinalClose.bak
07/24/2007 01:19 PM 387,072 40_NCBar_7-24-07_AM77777_FinalRestart.bak
07/24/2007 03:57 PM 303,104 41_77777-NCBar_7-24-07_PM-070724_32.bak
07/24/2007 04:29 PM 319,488 42_77777-NCBar_7-24-07_PM-070724_64.bak
07/24/2007 05:01 PM 333,824 43_77777-NCBar_7-24-07_PM-070724_96.bak
07/24/2007 05:33 PM 352,256 44_77777-NCBar_7-24-07_PM-070724_128.bak
07/24/2007 06:05 PM 376,832 45_77777-NCBar_7-24-07_PM-070724_160.bak
07/24/2007 06:21 PM 391,168 46_77777-NCBar_7-24-07_PM-070724_FinalClose.bak
07/24/2007 06:21 PM 391,168 47_NCBar_7-24-07_PM77777_FinalRestart.bak
47 File(s) 14,526,464 bytes

Directory of C:\PROGRA~1\GRISOFT\AVGANT~1.5\BAK

06/11/2007 05:25 AM 6,731,312 avgas.exe
1 File(s) 6,731,312 bytes

Directory of C:\PROGRA~1\PRINTS~1\PTP\BAK

11/24/2004 05:09 PM 266,240 PSDiagnostic.exe
1 File(s) 266,240 bytes

Directory of C:\PROGRA~1\SYNAPT~1\SYNTP\BAK

03/02/2006 07:02 PM 761,948 SynTPEnh.exe
1 File(s) 761,948 bytes

Directory of C:\PROGRA~1\TOSHIBA\TO8D15~1\BAK

04/26/2005 07:13 PM 122,880 SmoothView.exe
1 File(s) 122,880 bytes

Directory of C:\PROGRA~1\TOSHIBA\TOSHIB~1\BAK

08/02/2006 07:52 PM 364,544 thotkey.exe
1 File(s) 364,544 bytes

Directory of C:\PROGRA~1\TOSHIBA\TOSHIB~3\BAK

04/25/2006 08:57 PM 299,008 ddwmon.exe
1 File(s) 299,008 bytes

Directory of C:\PROGRA~1\TOSHIBA\TOUCHA~1\BAK

12/06/2005 01:06 AM 1,077,322 PadExe.exe
1 File(s) 1,077,322 bytes

Directory of C:\PROGRA~1\TOSHIBA\TVS\BAK

02/02/2006 03:11 PM 73,728 TvsTray.exe
1 File(s) 73,728 bytes

Directory of C:\TOSHIBA\IVP\ISM\BAK

03/17/2005 08:37 PM 151,552 pinger.exe
1 File(s) 151,552 bytes

Directory of C:\PROGRA~1\ADOBE\READER~1.0\READER\BAK

05/11/2007 03:06 AM 40,048 Reader_sl.exe
1 File(s) 40,048 bytes

Directory of C:\PROGRA~1\INTEL\WIRELESS\BIN\BAK

07/03/2006 12:50 AM 700,416 ifrmewrk.exe
07/03/2006 04:07 AM 802,816 ZCfgSvc.exe
2 File(s) 1,503,232 bytes

Directory of C:\PROGRA~1\JAVA\JRE16~1.0_0\BIN\BAK

03/14/2007 03:43 AM 83,608 jusched.exe
1 File(s) 83,608 bytes

Directory of C:\PROGRA~1\JAVA\JRE16~2.0_0\BIN\BAK

07/12/2007 04:00 AM 132,496 jusched.exe
1 File(s) 132,496 bytes

Directory of C:\PROGRA~1\ADOBE\PHOTOS~1\3.2\APPS\BAK

03/09/2007 11:09 AM 63,712 apdproxy.exe
1 File(s) 63,712 bytes


Duplicate files of bak directory contents
~~~~~~~~~~~~~~~~~~~~~~~

267064 Sep 14 2007 "C:\Program Files\iTunes\iTunesHelper.exe1191413568"
271672 Jul 31 2007 "C:\Program Files\iTunes\bak\iTunesHelper.exe"
102400 Oct 3 2007 "C:\WINDOWS\Installer\{B045B608-4A47-4C77-9EAD-06C394503306}\iTunesIco.exe"
116024 Oct 3 2007 "C:\Documents and Settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 7.4.3.1\iTunesSetupAdmin.exe"
116024 Sep 14 2007 "C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\QRSTCDEX\iTunesSetupAdmin[1].exe"
57344 Sep 23 2003 "C:\Program Files\Lexmark X6100 Series\lxbfbmgr.exe"
57344 Sep 23 2003 "C:\Program Files\Lexmark X6100 Series\bak\lxbfbmgr.exe"
286720 Jun 29 2007 "C:\Program Files\QuickTime\QTTask.exe"
286720 Jun 29 2007 "C:\Program Files\QuickTime\bak\QTTask.exe"
866584 Nov 3 2006 "C:\Program Files\Windows Defender\MSASCui.exe"
866584 Nov 3 2006 "C:\Program Files\Windows Defender\bak\MSASCui.exe"
59392 Aug 10 2004 "C:\WINDOWS\$NtUninstallKB900325$\ehtray.exe"
64512 Aug 5 2005 "C:\WINDOWS\ehome\ehtray.exe"
64512 Aug 5 2005 "C:\WINDOWS\ehome\bak\ehtray.exe"
77824 Mar 23 2006 "C:\WINDOWS\system32\hkcmd.exe"
77824 Mar 23 2006 "C:\WINDOWS\system32\bak\hkcmd.exe"
118784 Mar 23 2006 "C:\WINDOWS\system32\igfxpers.exe"
118784 Mar 23 2006 "C:\WINDOWS\system32\bak\igfxpers.exe"
94208 Mar 23 2006 "C:\WINDOWS\system32\igfxtray.exe"
94208 Mar 23 2006 "C:\WINDOWS\system32\bak\igfxtray.exe"
272384 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\01_9058-Sales&SecuredTransactions-061208_32.bak"
272384 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\142561\01_9058-Sales&SecuredTransactions-061208_32.bak"
272384 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\Bak\01_9058-Sales&SecuredTransactions-061208_32.bak"
274432 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\02_9058-Sales&SecuredTransactions-061208_64.bak"
274432 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\142561\02_9058-Sales&SecuredTransactions-061208_64.bak"
274432 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\Bak\02_9058-Sales&SecuredTransactions-061208_64.bak"
276480 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\03_9058-Sales&SecuredTransactions-061208_96.bak"
276480 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\142561\03_9058-Sales&SecuredTransactions-061208_96.bak"
276480 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\Bak\03_9058-Sales&SecuredTransactions-061208_96.bak"
278528 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\04_9058-Sales&SecuredTransactions-061208_128.bak"
278528 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\142561\04_9058-Sales&SecuredTransactions-061208_128.bak"
278528 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\Bak\04_9058-Sales&SecuredTransactions-061208_128.bak"
282624 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\05_9058-Sales&SecuredTransactions-061208_160.bak"
282624 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\142561\05_9058-Sales&SecuredTransactions-061208_160.bak"
282624 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\Bak\05_9058-Sales&SecuredTransactions-061208_160.bak"
288768 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\06_9058-Sales&SecuredTransactions-061208_192.bak"
288768 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\142561\06_9058-Sales&SecuredTransactions-061208_192.bak"
288768 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\Bak\06_9058-Sales&SecuredTransactions-061208_192.bak"
299008 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\07_9058-Sales&SecuredTransactions-061208_FinalClose.bak"
299008 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\142561\07_9058-Sales&SecuredTransactions-061208_FinalClose.bak"
299008 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\Bak\07_9058-Sales&SecuredTransactions-061208_FinalClose.bak"
299008 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\08_Sales&SecuredTransactions9058_FinalRestart.bak"
299008 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\142561\08_Sales&SecuredTransactions9058_FinalRestart.bak"
299008 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\Bak\08_Sales&SecuredTransactions9058_FinalRestart.bak"
274432 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\09_9058-AdvancedTax-061211_32.bak"
274432 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\142561\09_9058-AdvancedTax-061211_32.bak"
274432 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\Bak\09_9058-AdvancedTax-061211_32.bak"
274432 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\10_9058-AdvancedTax-061211_64.bak"
274432 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\142561\10_9058-AdvancedTax-061211_64.bak"
274432 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\Bak\10_9058-AdvancedTax-061211_64.bak"
280576 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\11_9058-AdvancedTax-061211_96.bak"
280576 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\142561\11_9058-AdvancedTax-061211_96.bak"
280576 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\Bak\11_9058-AdvancedTax-061211_96.bak"
282624 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\12_9058-AdvancedTax-061211_128.bak"
282624 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\142561\12_9058-AdvancedTax-061211_128.bak"
282624 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\Bak\12_9058-AdvancedTax-061211_128.bak"
286720 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\13_9058-AdvancedTax-061211_160.bak"
286720 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\142561\13_9058-AdvancedTax-061211_160.bak"
286720 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\Bak\13_9058-AdvancedTax-061211_160.bak"
299008 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\14_9058-AdvancedTax-061211_192.bak"
299008 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\142561\14_9058-AdvancedTax-061211_192.bak"
299008 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\Bak\14_9058-AdvancedTax-061211_192.bak"
305152 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\15_9058-AdvancedTax-061211_FinalClose.bak"
305152 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\142561\15_9058-AdvancedTax-061211_FinalClose.bak"
305152 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\Bak\15_9058-AdvancedTax-061211_FinalClose.bak"
305152 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\16_9058-AdvancedTax-061211_FinalRestart.bak"
305152 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\142561\16_9058-AdvancedTax-061211_FinalRestart.bak"
305152 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\Bak\16_9058-AdvancedTax-061211_FinalRestart.bak"
274432 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\17_9058-AdvancedTorts-061213_32.bak"
274432 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\142561\17_9058-AdvancedTorts-061213_32.bak"
274432 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\Bak\17_9058-AdvancedTorts-061213_32.bak"
278528 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\18_9058-AdvancedTorts-061213_64.bak"
278528 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\142561\18_9058-AdvancedTorts-061213_64.bak"
278528 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\Bak\18_9058-AdvancedTorts-061213_64.bak"
294912 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\19_9058-AdvancedTorts-061213_96.bak"
294912 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\142561\19_9058-AdvancedTorts-061213_96.bak"
294912 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\Bak\19_9058-AdvancedTorts-061213_96.bak"
313344 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\20_9058-AdvancedTorts-061213_128.bak"
313344 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\142561\20_9058-AdvancedTorts-061213_128.bak"
313344 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\Bak\20_9058-AdvancedTorts-061213_128.bak"
337920 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\21_9058-AdvancedTorts-061213_160.bak"
337920 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\142561\21_9058-AdvancedTorts-061213_160.bak"
337920 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\Bak\21_9058-AdvancedTorts-061213_160.bak"
354304 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\22_9058-AdvancedTorts-061213_FinalClose.bak"
354304 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\142561\22_9058-AdvancedTorts-061213_FinalClose.bak"
354304 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\Bak\22_9058-AdvancedTorts-061213_FinalClose.bak"
354304 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\23_9058-AdvancedTorts-061213_FinalRestart.bak"
354304 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\142561\23_9058-AdvancedTorts-061213_FinalRestart.bak"
354304 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\Bak\23_9058-AdvancedTorts-061213_FinalRestart.bak"
278528 Jan 30 2007 "C:\Program Files\ExamSoft\SofTest\24_909-NCDistinctions-070130_FinalClose.bak"
278528 Jan 30 2007 "C:\Program Files\ExamSoft\SofTest\142561\24_909-NCDistinctions-070130_FinalClose.bak"
278528 Jan 30 2007 "C:\Program Files\ExamSoft\SofTest\Bak\24_909-NCDistinctions-070130_FinalClose.bak"
278528 Jan 30 2007 "C:\Program Files\ExamSoft\SofTest\25_909-NCDistinctions-070130_FinalRestart.bak"
278528 Jan 30 2007 "C:\Program Files\ExamSoft\SofTest\142561\25_909-NCDistinctions-070130_FinalRestart.bak"
278528 Jan 30 2007 "C:\Program Files\ExamSoft\SofTest\Bak\25_909-NCDistinctions-070130_FinalRestart.bak"
278528 Feb 22 2007 "C:\Program Files\ExamSoft\SofTest\26_909-NCDistinctions-RealEstateFinance-070222_FinalClose.bak"
278528 Feb 22 2007 "C:\Program Files\ExamSoft\SofTest\142561\26_909-NCDistinctions-RealEstateFinance-070222_FinalClose.bak"
278528 Feb 22 2007 "C:\Program Files\ExamSoft\SofTest\Bak\26_909-NCDistinctions-RealEstateFinance-070222_FinalClose.bak"
278528 Feb 22 2007 "C:\Program Files\ExamSoft\SofTest\27_NCDistinctions-RealEstateFinance909_FinalRestart.bak"
278528 Feb 22 2007 "C:\Program Files\ExamSoft\SofTest\142561\27_NCDistinctions-RealEstateFinance909_FinalRestart.bak"
278528 Feb 22 2007 "C:\Program Files\ExamSoft\SofTest\Bak\27_NCDistinctions-RealEstateFinance909_FinalRestart.bak"
278528 Mar 22 2007 "C:\Program Files\ExamSoft\SofTest\28_909-NCDistinctions-070322_FinalClose.bak"
278528 Mar 22 2007 "C:\Program Files\ExamSoft\SofTest\142561\28_909-NCDistinctions-070322_FinalClose.bak"
278528 Mar 22 2007 "C:\Program Files\ExamSoft\SofTest\Bak\28_909-NCDistinctions-070322_FinalClose.bak"
278528 Mar 22 2007 "C:\Program Files\ExamSoft\SofTest\29_909-NCDistinctions-070322_FinalRestart.bak"
278528 Mar 22 2007 "C:\Program Files\ExamSoft\SofTest\142561\29_909-NCDistinctions-070322_FinalRestart.bak"
278528 Mar 22 2007 "C:\Program Files\ExamSoft\SofTest\Bak\29_909-NCDistinctions-070322_FinalRestart.bak"
278528 Apr 12 2007 "C:\Program Files\ExamSoft\SofTest\30_909-NCDistinctions-FamilyLaw-070412_FinalClose.bak"
278528 Apr 12 2007 "C:\Program Files\ExamSoft\SofTest\142561\30_909-NCDistinctions-FamilyLaw-070412_FinalClose.bak"
278528 Apr 12 2007 "C:\Program Files\ExamSoft\SofTest\Bak\30_909-NCDistinctions-FamilyLaw-070412_FinalClose.bak"
278528 Apr 12 2007 "C:\Program Files\ExamSoft\SofTest\31_NCDistinctions-FamilyLaw909_FinalRestart.bak"
278528 Apr 12 2007 "C:\Program Files\ExamSoft\SofTest\142561\31_NCDistinctions-FamilyLaw909_FinalRestart.bak"
278528 Apr 12 2007 "C:\Program Files\ExamSoft\SofTest\Bak\31_NCDistinctions-FamilyLaw909_FinalRestart.bak"
282624 Apr 17 2007 "C:\Program Files\ExamSoft\SofTest\32_909-NCDistinctions-FamilyLaw-070417_FinalClose.bak"
282624 Apr 17 2007 "C:\Program Files\ExamSoft\SofTest\142561\32_909-NCDistinctions-FamilyLaw-070417_FinalClose.bak"
282624 Apr 17 2007 "C:\Program Files\ExamSoft\SofTest\Bak\32_909-NCDistinctions-FamilyLaw-070417_FinalClose.bak"
282624 Apr 17 2007 "C:\Program Files\ExamSoft\SofTest\33_NCDistinctions-FamilyLaw909_FinalRestart.bak"
282624 Apr 17 2007 "C:\Program Files\ExamSoft\SofTest\142561\33_NCDistinctions-FamilyLaw909_FinalRestart.bak"
282624 Apr 17 2007 "C:\Program Files\ExamSoft\SofTest\Bak\33_NCDistinctions-FamilyLaw909_FinalRestart.bak"
299008 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\34_77777-NCBar_7-24-07_AM-070724_32.bak"
299008 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\142561\34_77777-NCBar_7-24-07_AM-070724_32.bak"
299008 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\Bak\34_77777-NCBar_7-24-07_AM-070724_32.bak"
319488 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\35_77777-NCBar_7-24-07_AM-070724_64.bak"
319488 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\142561\35_77777-NCBar_7-24-07_AM-070724_64.bak"
319488 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\Bak\35_77777-NCBar_7-24-07_AM-070724_64.bak"
342016 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\36_77777-NCBar_7-24-07_AM-070724_96.bak"
342016 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\142561\36_77777-NCBar_7-24-07_AM-070724_96.bak"
342016 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\Bak\36_77777-NCBar_7-24-07_AM-070724_96.bak"
360448 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\37_77777-NCBar_7-24-07_AM-070724_128.bak"
360448 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\142561\37_77777-NCBar_7-24-07_AM-070724_128.bak"
360448 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\Bak\37_77777-NCBar_7-24-07_AM-070724_128.bak"
382976 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\38_77777-NCBar_7-24-07_AM-070724_160.bak"
382976 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\142561\38_77777-NCBar_7-24-07_AM-070724_160.bak"
382976 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\Bak\38_77777-NCBar_7-24-07_AM-070724_160.bak"
387072 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\39_77777-NCBar_7-24-07_AM-070724_FinalClose.bak"
387072 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\142561\39_77777-NCBar_7-24-07_AM-070724_FinalClose.bak"
387072 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\Bak\39_77777-NCBar_7-24-07_AM-070724_FinalClose.bak"
387072 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\40_NCBar_7-24-07_AM77777_FinalRestart.bak"
387072 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\142561\40_NCBar_7-24-07_AM77777_FinalRestart.bak"
387072 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\Bak\40_NCBar_7-24-07_AM77777_FinalRestart.bak"
303104 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\41_77777-NCBar_7-24-07_PM-070724_32.bak"
303104 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\142561\41_77777-NCBar_7-24-07_PM-070724_32.bak"
303104 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\Bak\41_77777-NCBar_7-24-07_PM-070724_32.bak"
319488 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\42_77777-NCBar_7-24-07_PM-070724_64.bak"
319488 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\142561\42_77777-NCBar_7-24-07_PM-070724_64.bak"
319488 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\Bak\42_77777-NCBar_7-24-07_PM-070724_64.bak"
333824 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\43_77777-NCBar_7-24-07_PM-070724_96.bak"
333824 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\142561\43_77777-NCBar_7-24-07_PM-070724_96.bak"
333824 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\Bak\43_77777-NCBar_7-24-07_PM-070724_96.bak"
352256 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\44_77777-NCBar_7-24-07_PM-070724_128.bak"
352256 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\142561\44_77777-NCBar_7-24-07_PM-070724_128.bak"
352256 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\Bak\44_77777-NCBar_7-24-07_PM-070724_128.bak"
376832 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\45_77777-NCBar_7-24-07_PM-070724_160.bak"
376832 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\142561\45_77777-NCBar_7-24-07_PM-070724_160.bak"
376832 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\Bak\45_77777-NCBar_7-24-07_PM-070724_160.bak"
391168 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\46_77777-NCBar_7-24-07_PM-070724_FinalClose.bak"
391168 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\142561\46_77777-NCBar_7-24-07_PM-070724_FinalClose.bak"
391168 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\Bak\46_77777-NCBar_7-24-07_PM-070724_FinalClose.bak"
391168 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\47_NCBar_7-24-07_PM77777_FinalRestart.bak"
391168 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\142561\47_NCBar_7-24-07_PM77777_FinalRestart.bak"
391168 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\Bak\47_NCBar_7-24-07_PM77777_FinalRestart.bak"
6731312 Jun 11 2007 "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\bak\avgas.exe"
266240 Nov 24 2004 "C:\Program Files\Print Server\PTP\PSDiagnostic.exe1191413565"
266240 Nov 24 2004 "C:\Program Files\Print Server\PTP\bak\PSDiagnostic.exe"
761948 Mar 2 2006 "C:\Synaptics Touchpad.temp\SynTPEnh.exe"
761948 Mar 2 2006 "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
761948 Mar 2 2006 "C:\Program Files\Synaptics\SynTP\bak\SynTPEnh.exe"
761948 Mar 2 2006 "C:\Program Files\Synaptics\SynTP\Media\SynTPEnh.exe"
27664 Oct 3 2007 "C:\WINDOWS\system32\ReinstallBackups\0018\DriverFiles\SynTPEnh.exe"
122880 Apr 26 2005 "C:\Program Files\TOSHIBA\TOSHIBA Zooming Utility\SmoothView.exe1191413567"
122880 Apr 26 2005 "C:\Program Files\TOSHIBA\TOSHIBA Zooming Utility\bak\SmoothView.exe"
364544 Aug 2 2006 "C:\Program Files\TOSHIBA\TOSHIBA Applet\thotkey.exe"
364544 Aug 2 2006 "C:\Program Files\TOSHIBA\TOSHIBA Applet\bak\thotkey.exe"
299008 Apr 25 2006 "C:\Program Files\TOSHIBA\TOSHIBA Direct Disc Writer\ddwmon.exe"
299008 Apr 25 2006 "C:\Program Files\TOSHIBA\TOSHIBA Direct Disc Writer\bak\ddwmon.exe"
1077322 Dec 6 2005 "C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe"
1077322 Dec 6 2005 "C:\Program Files\TOSHIBA\Touch and Launch\bak\PadExe.exe"
73728 Feb 2 2006 "C:\Program Files\TOSHIBA\Tvs\TvsTray.exe"
73728 Feb 2 2006 "C:\Program Files\TOSHIBA\Tvs\bak\TvsTray.exe"
151552 Mar 17 2005 "C:\TOSHIBA\IVP\ISM\pinger.exe"
151552 Mar 17 2005 "C:\TOSHIBA\IVP\ISM\bak\pinger.exe"
40048 May 11 2007 "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
40048 May 11 2007 "C:\Program Files\Adobe\Reader 8.0\Reader\bak\Reader_sl.exe"
700416 Jul 3 2006 "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe"
700416 Jul 3 2006 "C:\Program Files\Intel\Wireless\Bin\bak\ifrmewrk.exe"
802816 Jul 3 2006 "C:\Program Files\Intel\Wireless\Bin\ZCfgSvc.exe"
802816 Jul 3 2006 "C:\Program Files\Intel\Wireless\Bin\bak\ZCfgSvc.exe"
36975 Nov 10 2005 "C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe"
49263 Nov 9 2006 "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
49263 Oct 12 2006 "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
75520 Dec 15 2006 "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
83608 Mar 14 2007 "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
132496 Jul 12 2007 "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
83608 Mar 14 2007 "C:\Program Files\Java\jre1.6.0_01\bin\bak\jusched.exe"
132496 Jul 12 2007 "C:\Program Files\Java\jre1.6.0_02\bin\bak\jusched.exe"
36975 Nov 10 2005 "C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe"
49263 Nov 9 2006 "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
49263 Oct 12 2006 "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
75520 Dec 15 2006 "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
83608 Mar 14 2007 "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
132496 Jul 12 2007 "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
83608 Mar 14 2007 "C:\Program Files\Java\jre1.6.0_01\bin\bak\jusched.exe"
132496 Jul 12 2007 "C:\Program Files\Java\jre1.6.0_02\bin\bak\jusched.exe"
63712 Mar 9 2007 "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe"
63712 Mar 9 2007 "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\bak\apdproxy.exe"


end of report

THANKS!

#6 qusjone

qusjone
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:09:29 AM

Posted 20 October 2007 - 08:00 AM

Any further follow-ups or instructions??

Thx...

#7 rookie147

rookie147

  • Members
  • 5,321 posts
  • OFFLINE
  •  
  • Local time:02:29 PM

Posted 20 October 2007 - 11:31 AM

Please be patient; I do this in my free time - something that is very limited at the weekends.
Run option 2 once more, this time pasting the following files:

"C:\Program Files\iTunes\bak\iTunesHelper.exe"
"C:\Program Files\Lexmark X6100 Series\bak\lxbfbmgr.exe"
"C:\Program Files\QuickTime\bak\QTTask.exe"
"C:\Program Files\Windows Defender\bak\MSASCui.exe"
"C:\WINDOWS\ehome\bak\ehtray.exe"
"C:\WINDOWS\system32\bak\hkcmd.exe"
"C:\WINDOWS\system32\bak\igfxpers.exe"
"C:\WINDOWS\system32\bak\igfxtray.exe"
"C:\Program Files\Print Server\PTP\bak\PSDiagnostic.exe"
"C:\Program Files\Synaptics\SynTP\bak\SynTPEnh.exe"
"C:\Program Files\TOSHIBA\TOSHIBA Zooming Utility\bak\SmoothView.exe"
"C:\Program Files\TOSHIBA\TOSHIBA Applet\bak\thotkey.exe"
"C:\Program Files\TOSHIBA\TOSHIBA Direct Disc Writer\bak\ddwmon.exe"
"C:\Program Files\TOSHIBA\Touch and Launch\bak\PadExe.exe"
"C:\Program Files\TOSHIBA\Tvs\bak\TvsTray.exe"
"C:\TOSHIBA\IVP\ISM\bak\pinger.exe"
"C:\Program Files\Adobe\Reader 8.0\Reader\bak\Reader_sl.exe"
"C:\Program Files\Intel\Wireless\Bin\bak\ifrmewrk.exe"
"C:\Program Files\Intel\Wireless\Bin\bak\ZCfgSvc.exe"
"C:\Program Files\Java\jre1.6.0_01\bin\bak\jusched.exe"
"C:\Program Files\Java\jre1.6.0_02\bin\bak\jusched.exe"
"C:\Program Files\Java\jre1.6.0_01\bin\bak\jusched.exe"
"C:\Program Files\Java\jre1.6.0_02\bin\bak\jusched.exe"
"C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\bak\apdproxy.exe"


Then post the log in your reply.

If you are pleased with the service I have offered, you may like to consider making a donation. Posted Image
Posted Image


#8 qusjone

qusjone
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:09:29 AM

Posted 20 October 2007 - 01:05 PM

Sorry Charles - not trying to be impatient. I understand your time issues and appreciate your help! Ran option #2 again as requested, here's the log:

Find AWF report by noahdfear 2006
Version 1.40
Option 2 run successfully

The current date is: Sat 10/20/2007
The current time is: 14:01:50.57


bak folders found
~~~~~~~~~~~


Directory of C:\PROGRA~1\ITUNES\BAK

07/31/2007 06:44 PM 271,672 iTunesHelper.exe
1 File(s) 271,672 bytes

Directory of C:\PROGRA~1\LEXMAR~1\BAK

09/23/2003 02:01 AM 57,344 lxbfbmgr.exe
1 File(s) 57,344 bytes

Directory of C:\PROGRA~1\QUICKT~1\BAK

06/29/2007 06:24 AM 286,720 QTTask.exe
1 File(s) 286,720 bytes

Directory of C:\PROGRA~1\WIFD1F~1\BAK

11/03/2006 07:20 PM 866,584 MSASCui.exe
1 File(s) 866,584 bytes

Directory of C:\WINDOWS\EHOME\BAK

08/05/2005 04:56 PM 64,512 ehtray.exe
1 File(s) 64,512 bytes

Directory of C:\WINDOWS\SYSTEM32\BAK

03/23/2006 12:13 AM 77,824 hkcmd.exe
03/23/2006 12:17 AM 118,784 igfxpers.exe
03/23/2006 12:17 AM 94,208 igfxtray.exe
3 File(s) 290,816 bytes

Directory of C:\PROGRA~1\EXAMSOFT\SOFTEST\BAK

12/08/2006 03:55 PM 272,384 01_9058-Sales&SecuredTransactions-061208_32.bak
12/08/2006 04:27 PM 274,432 02_9058-Sales&SecuredTransactions-061208_64.bak
12/08/2006 04:59 PM 276,480 03_9058-Sales&SecuredTransactions-061208_96.bak
12/08/2006 05:31 PM 278,528 04_9058-Sales&SecuredTransactions-061208_128.bak
12/08/2006 06:03 PM 282,624 05_9058-Sales&SecuredTransactions-061208_160.bak
12/08/2006 06:35 PM 288,768 06_9058-Sales&SecuredTransactions-061208_192.bak
12/08/2006 06:55 PM 299,008 07_9058-Sales&SecuredTransactions-061208_FinalClose.bak
12/08/2006 06:55 PM 299,008 08_Sales&SecuredTransactions9058_FinalRestart.bak
12/11/2006 10:37 AM 274,432 09_9058-AdvancedTax-061211_32.bak
12/11/2006 11:09 AM 274,432 10_9058-AdvancedTax-061211_64.bak
12/11/2006 11:41 AM 280,576 11_9058-AdvancedTax-061211_96.bak
12/11/2006 12:13 PM 282,624 12_9058-AdvancedTax-061211_128.bak
12/11/2006 12:45 PM 286,720 13_9058-AdvancedTax-061211_160.bak
12/11/2006 01:17 PM 299,008 14_9058-AdvancedTax-061211_192.bak
12/11/2006 01:33 PM 305,152 15_9058-AdvancedTax-061211_FinalClose.bak
12/11/2006 01:33 PM 305,152 16_9058-AdvancedTax-061211_FinalRestart.bak
12/13/2006 03:33 PM 274,432 17_9058-AdvancedTorts-061213_32.bak
12/13/2006 04:05 PM 278,528 18_9058-AdvancedTorts-061213_64.bak
12/13/2006 04:37 PM 294,912 19_9058-AdvancedTorts-061213_96.bak
12/13/2006 05:10 PM 313,344 20_9058-AdvancedTorts-061213_128.bak
12/13/2006 05:42 PM 337,920 21_9058-AdvancedTorts-061213_160.bak
12/13/2006 06:02 PM 354,304 22_9058-AdvancedTorts-061213_FinalClose.bak
12/13/2006 06:02 PM 354,304 23_9058-AdvancedTorts-061213_FinalRestart.bak
01/30/2007 01:28 PM 278,528 24_909-NCDistinctions-070130_FinalClose.bak
01/30/2007 01:28 PM 278,528 25_909-NCDistinctions-070130_FinalRestart.bak
02/22/2007 01:31 PM 278,528 26_909-NCDistinctions-RealEstateFinance-070222_FinalClose.bak
02/22/2007 01:31 PM 278,528 27_NCDistinctions-RealEstateFinance909_FinalRestart.bak
03/22/2007 12:30 PM 278,528 28_909-NCDistinctions-070322_FinalClose.bak
03/22/2007 12:30 PM 278,528 29_909-NCDistinctions-070322_FinalRestart.bak
04/12/2007 12:30 PM 278,528 30_909-NCDistinctions-FamilyLaw-070412_FinalClose.bak
04/12/2007 12:30 PM 278,528 31_NCDistinctions-FamilyLaw909_FinalRestart.bak
04/17/2007 12:35 PM 282,624 32_909-NCDistinctions-FamilyLaw-070417_FinalClose.bak
04/17/2007 12:35 PM 282,624 33_NCDistinctions-FamilyLaw909_FinalRestart.bak
07/24/2007 10:51 AM 299,008 34_77777-NCBar_7-24-07_AM-070724_32.bak
07/24/2007 11:23 AM 319,488 35_77777-NCBar_7-24-07_AM-070724_64.bak
07/24/2007 11:55 AM 342,016 36_77777-NCBar_7-24-07_AM-070724_96.bak
07/24/2007 12:27 PM 360,448 37_77777-NCBar_7-24-07_AM-070724_128.bak
07/24/2007 12:59 PM 382,976 38_77777-NCBar_7-24-07_AM-070724_160.bak
07/24/2007 01:19 PM 387,072 39_77777-NCBar_7-24-07_AM-070724_FinalClose.bak
07/24/2007 01:19 PM 387,072 40_NCBar_7-24-07_AM77777_FinalRestart.bak
07/24/2007 03:57 PM 303,104 41_77777-NCBar_7-24-07_PM-070724_32.bak
07/24/2007 04:29 PM 319,488 42_77777-NCBar_7-24-07_PM-070724_64.bak
07/24/2007 05:01 PM 333,824 43_77777-NCBar_7-24-07_PM-070724_96.bak
07/24/2007 05:33 PM 352,256 44_77777-NCBar_7-24-07_PM-070724_128.bak
07/24/2007 06:05 PM 376,832 45_77777-NCBar_7-24-07_PM-070724_160.bak
07/24/2007 06:21 PM 391,168 46_77777-NCBar_7-24-07_PM-070724_FinalClose.bak
07/24/2007 06:21 PM 391,168 47_NCBar_7-24-07_PM77777_FinalRestart.bak
47 File(s) 14,526,464 bytes

Directory of C:\PROGRA~1\GRISOFT\AVGANT~1.5\BAK

06/11/2007 05:25 AM 6,731,312 avgas.exe
1 File(s) 6,731,312 bytes

Directory of C:\PROGRA~1\PRINTS~1\PTP\BAK

11/24/2004 05:09 PM 266,240 PSDiagnostic.exe
1 File(s) 266,240 bytes

Directory of C:\PROGRA~1\SYNAPT~1\SYNTP\BAK

03/02/2006 07:02 PM 761,948 SynTPEnh.exe
1 File(s) 761,948 bytes

Directory of C:\PROGRA~1\TOSHIBA\TO8D15~1\BAK

04/26/2005 07:13 PM 122,880 SmoothView.exe
1 File(s) 122,880 bytes

Directory of C:\PROGRA~1\TOSHIBA\TOSHIB~1\BAK

08/02/2006 07:52 PM 364,544 thotkey.exe
1 File(s) 364,544 bytes

Directory of C:\PROGRA~1\TOSHIBA\TOSHIB~3\BAK

04/25/2006 08:57 PM 299,008 ddwmon.exe
1 File(s) 299,008 bytes

Directory of C:\PROGRA~1\TOSHIBA\TOUCHA~1\BAK

12/06/2005 01:06 AM 1,077,322 PadExe.exe
1 File(s) 1,077,322 bytes

Directory of C:\PROGRA~1\TOSHIBA\TVS\BAK

02/02/2006 03:11 PM 73,728 TvsTray.exe
1 File(s) 73,728 bytes

Directory of C:\TOSHIBA\IVP\ISM\BAK

03/17/2005 08:37 PM 151,552 pinger.exe
1 File(s) 151,552 bytes

Directory of C:\PROGRA~1\ADOBE\READER~1.0\READER\BAK

05/11/2007 03:06 AM 40,048 Reader_sl.exe
1 File(s) 40,048 bytes

Directory of C:\PROGRA~1\INTEL\WIRELESS\BIN\BAK

07/03/2006 12:50 AM 700,416 ifrmewrk.exe
07/03/2006 04:07 AM 802,816 ZCfgSvc.exe
2 File(s) 1,503,232 bytes

Directory of C:\PROGRA~1\JAVA\JRE16~1.0_0\BIN\BAK

03/14/2007 03:43 AM 83,608 jusched.exe
1 File(s) 83,608 bytes

Directory of C:\PROGRA~1\JAVA\JRE16~2.0_0\BIN\BAK

07/12/2007 04:00 AM 132,496 jusched.exe
1 File(s) 132,496 bytes

Directory of C:\PROGRA~1\ADOBE\PHOTOS~1\3.2\APPS\BAK

03/09/2007 11:09 AM 63,712 apdproxy.exe
1 File(s) 63,712 bytes


Duplicate files of bak directory contents
~~~~~~~~~~~~~~~~~~~~~~~

267064 Sep 14 2007 "C:\Program Files\iTunes\iTunesHelper.exe1191413568"
271672 Jul 31 2007 "C:\Program Files\iTunes\bak\iTunesHelper.exe"
102400 Oct 3 2007 "C:\WINDOWS\Installer\{B045B608-4A47-4C77-9EAD-06C394503306}\iTunesIco.exe"
116024 Oct 3 2007 "C:\Documents and Settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 7.4.3.1\iTunesSetupAdmin.exe"
116024 Sep 14 2007 "C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\QRSTCDEX\iTunesSetupAdmin[1].exe"
57344 Sep 23 2003 "C:\Program Files\Lexmark X6100 Series\lxbfbmgr.exe"
57344 Sep 23 2003 "C:\Program Files\Lexmark X6100 Series\bak\lxbfbmgr.exe"
286720 Jun 29 2007 "C:\Program Files\QuickTime\QTTask.exe"
286720 Jun 29 2007 "C:\Program Files\QuickTime\bak\QTTask.exe"
866584 Nov 3 2006 "C:\Program Files\Windows Defender\MSASCui.exe"
866584 Nov 3 2006 "C:\Program Files\Windows Defender\bak\MSASCui.exe"
59392 Aug 10 2004 "C:\WINDOWS\$NtUninstallKB900325$\ehtray.exe"
64512 Aug 5 2005 "C:\WINDOWS\ehome\ehtray.exe"
64512 Aug 5 2005 "C:\WINDOWS\ehome\bak\ehtray.exe"
77824 Mar 23 2006 "C:\WINDOWS\system32\hkcmd.exe"
77824 Mar 23 2006 "C:\WINDOWS\system32\bak\hkcmd.exe"
118784 Mar 23 2006 "C:\WINDOWS\system32\igfxpers.exe"
118784 Mar 23 2006 "C:\WINDOWS\system32\bak\igfxpers.exe"
94208 Mar 23 2006 "C:\WINDOWS\system32\igfxtray.exe"
94208 Mar 23 2006 "C:\WINDOWS\system32\bak\igfxtray.exe"
272384 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\01_9058-Sales&SecuredTransactions-061208_32.bak"
272384 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\142561\01_9058-Sales&SecuredTransactions-061208_32.bak"
272384 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\Bak\01_9058-Sales&SecuredTransactions-061208_32.bak"
274432 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\02_9058-Sales&SecuredTransactions-061208_64.bak"
274432 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\142561\02_9058-Sales&SecuredTransactions-061208_64.bak"
274432 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\Bak\02_9058-Sales&SecuredTransactions-061208_64.bak"
276480 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\03_9058-Sales&SecuredTransactions-061208_96.bak"
276480 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\142561\03_9058-Sales&SecuredTransactions-061208_96.bak"
276480 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\Bak\03_9058-Sales&SecuredTransactions-061208_96.bak"
278528 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\04_9058-Sales&SecuredTransactions-061208_128.bak"
278528 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\142561\04_9058-Sales&SecuredTransactions-061208_128.bak"
278528 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\Bak\04_9058-Sales&SecuredTransactions-061208_128.bak"
282624 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\05_9058-Sales&SecuredTransactions-061208_160.bak"
282624 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\142561\05_9058-Sales&SecuredTransactions-061208_160.bak"
282624 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\Bak\05_9058-Sales&SecuredTransactions-061208_160.bak"
288768 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\06_9058-Sales&SecuredTransactions-061208_192.bak"
288768 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\142561\06_9058-Sales&SecuredTransactions-061208_192.bak"
288768 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\Bak\06_9058-Sales&SecuredTransactions-061208_192.bak"
299008 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\07_9058-Sales&SecuredTransactions-061208_FinalClose.bak"
299008 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\142561\07_9058-Sales&SecuredTransactions-061208_FinalClose.bak"
299008 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\Bak\07_9058-Sales&SecuredTransactions-061208_FinalClose.bak"
299008 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\08_Sales&SecuredTransactions9058_FinalRestart.bak"
299008 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\142561\08_Sales&SecuredTransactions9058_FinalRestart.bak"
299008 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\Bak\08_Sales&SecuredTransactions9058_FinalRestart.bak"
274432 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\09_9058-AdvancedTax-061211_32.bak"
274432 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\142561\09_9058-AdvancedTax-061211_32.bak"
274432 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\Bak\09_9058-AdvancedTax-061211_32.bak"
274432 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\10_9058-AdvancedTax-061211_64.bak"
274432 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\142561\10_9058-AdvancedTax-061211_64.bak"
274432 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\Bak\10_9058-AdvancedTax-061211_64.bak"
280576 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\11_9058-AdvancedTax-061211_96.bak"
280576 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\142561\11_9058-AdvancedTax-061211_96.bak"
280576 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\Bak\11_9058-AdvancedTax-061211_96.bak"
282624 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\12_9058-AdvancedTax-061211_128.bak"
282624 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\142561\12_9058-AdvancedTax-061211_128.bak"
282624 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\Bak\12_9058-AdvancedTax-061211_128.bak"
286720 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\13_9058-AdvancedTax-061211_160.bak"
286720 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\142561\13_9058-AdvancedTax-061211_160.bak"
286720 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\Bak\13_9058-AdvancedTax-061211_160.bak"
299008 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\14_9058-AdvancedTax-061211_192.bak"
299008 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\142561\14_9058-AdvancedTax-061211_192.bak"
299008 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\Bak\14_9058-AdvancedTax-061211_192.bak"
305152 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\15_9058-AdvancedTax-061211_FinalClose.bak"
305152 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\142561\15_9058-AdvancedTax-061211_FinalClose.bak"
305152 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\Bak\15_9058-AdvancedTax-061211_FinalClose.bak"
305152 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\16_9058-AdvancedTax-061211_FinalRestart.bak"
305152 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\142561\16_9058-AdvancedTax-061211_FinalRestart.bak"
305152 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\Bak\16_9058-AdvancedTax-061211_FinalRestart.bak"
274432 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\17_9058-AdvancedTorts-061213_32.bak"
274432 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\142561\17_9058-AdvancedTorts-061213_32.bak"
274432 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\Bak\17_9058-AdvancedTorts-061213_32.bak"
278528 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\18_9058-AdvancedTorts-061213_64.bak"
278528 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\142561\18_9058-AdvancedTorts-061213_64.bak"
278528 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\Bak\18_9058-AdvancedTorts-061213_64.bak"
294912 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\19_9058-AdvancedTorts-061213_96.bak"
294912 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\142561\19_9058-AdvancedTorts-061213_96.bak"
294912 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\Bak\19_9058-AdvancedTorts-061213_96.bak"
313344 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\20_9058-AdvancedTorts-061213_128.bak"
313344 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\142561\20_9058-AdvancedTorts-061213_128.bak"
313344 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\Bak\20_9058-AdvancedTorts-061213_128.bak"
337920 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\21_9058-AdvancedTorts-061213_160.bak"
337920 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\142561\21_9058-AdvancedTorts-061213_160.bak"
337920 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\Bak\21_9058-AdvancedTorts-061213_160.bak"
354304 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\22_9058-AdvancedTorts-061213_FinalClose.bak"
354304 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\142561\22_9058-AdvancedTorts-061213_FinalClose.bak"
354304 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\Bak\22_9058-AdvancedTorts-061213_FinalClose.bak"
354304 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\23_9058-AdvancedTorts-061213_FinalRestart.bak"
354304 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\142561\23_9058-AdvancedTorts-061213_FinalRestart.bak"
354304 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\Bak\23_9058-AdvancedTorts-061213_FinalRestart.bak"
278528 Jan 30 2007 "C:\Program Files\ExamSoft\SofTest\24_909-NCDistinctions-070130_FinalClose.bak"
278528 Jan 30 2007 "C:\Program Files\ExamSoft\SofTest\142561\24_909-NCDistinctions-070130_FinalClose.bak"
278528 Jan 30 2007 "C:\Program Files\ExamSoft\SofTest\Bak\24_909-NCDistinctions-070130_FinalClose.bak"
278528 Jan 30 2007 "C:\Program Files\ExamSoft\SofTest\25_909-NCDistinctions-070130_FinalRestart.bak"
278528 Jan 30 2007 "C:\Program Files\ExamSoft\SofTest\142561\25_909-NCDistinctions-070130_FinalRestart.bak"
278528 Jan 30 2007 "C:\Program Files\ExamSoft\SofTest\Bak\25_909-NCDistinctions-070130_FinalRestart.bak"
278528 Feb 22 2007 "C:\Program Files\ExamSoft\SofTest\26_909-NCDistinctions-RealEstateFinance-070222_FinalClose.bak"
278528 Feb 22 2007 "C:\Program Files\ExamSoft\SofTest\142561\26_909-NCDistinctions-RealEstateFinance-070222_FinalClose.bak"
278528 Feb 22 2007 "C:\Program Files\ExamSoft\SofTest\Bak\26_909-NCDistinctions-RealEstateFinance-070222_FinalClose.bak"
278528 Feb 22 2007 "C:\Program Files\ExamSoft\SofTest\27_NCDistinctions-RealEstateFinance909_FinalRestart.bak"
278528 Feb 22 2007 "C:\Program Files\ExamSoft\SofTest\142561\27_NCDistinctions-RealEstateFinance909_FinalRestart.bak"
278528 Feb 22 2007 "C:\Program Files\ExamSoft\SofTest\Bak\27_NCDistinctions-RealEstateFinance909_FinalRestart.bak"
278528 Mar 22 2007 "C:\Program Files\ExamSoft\SofTest\28_909-NCDistinctions-070322_FinalClose.bak"
278528 Mar 22 2007 "C:\Program Files\ExamSoft\SofTest\142561\28_909-NCDistinctions-070322_FinalClose.bak"
278528 Mar 22 2007 "C:\Program Files\ExamSoft\SofTest\Bak\28_909-NCDistinctions-070322_FinalClose.bak"
278528 Mar 22 2007 "C:\Program Files\ExamSoft\SofTest\29_909-NCDistinctions-070322_FinalRestart.bak"
278528 Mar 22 2007 "C:\Program Files\ExamSoft\SofTest\142561\29_909-NCDistinctions-070322_FinalRestart.bak"
278528 Mar 22 2007 "C:\Program Files\ExamSoft\SofTest\Bak\29_909-NCDistinctions-070322_FinalRestart.bak"
278528 Apr 12 2007 "C:\Program Files\ExamSoft\SofTest\30_909-NCDistinctions-FamilyLaw-070412_FinalClose.bak"
278528 Apr 12 2007 "C:\Program Files\ExamSoft\SofTest\142561\30_909-NCDistinctions-FamilyLaw-070412_FinalClose.bak"
278528 Apr 12 2007 "C:\Program Files\ExamSoft\SofTest\Bak\30_909-NCDistinctions-FamilyLaw-070412_FinalClose.bak"
278528 Apr 12 2007 "C:\Program Files\ExamSoft\SofTest\31_NCDistinctions-FamilyLaw909_FinalRestart.bak"
278528 Apr 12 2007 "C:\Program Files\ExamSoft\SofTest\142561\31_NCDistinctions-FamilyLaw909_FinalRestart.bak"
278528 Apr 12 2007 "C:\Program Files\ExamSoft\SofTest\Bak\31_NCDistinctions-FamilyLaw909_FinalRestart.bak"
282624 Apr 17 2007 "C:\Program Files\ExamSoft\SofTest\32_909-NCDistinctions-FamilyLaw-070417_FinalClose.bak"
282624 Apr 17 2007 "C:\Program Files\ExamSoft\SofTest\142561\32_909-NCDistinctions-FamilyLaw-070417_FinalClose.bak"
282624 Apr 17 2007 "C:\Program Files\ExamSoft\SofTest\Bak\32_909-NCDistinctions-FamilyLaw-070417_FinalClose.bak"
282624 Apr 17 2007 "C:\Program Files\ExamSoft\SofTest\33_NCDistinctions-FamilyLaw909_FinalRestart.bak"
282624 Apr 17 2007 "C:\Program Files\ExamSoft\SofTest\142561\33_NCDistinctions-FamilyLaw909_FinalRestart.bak"
282624 Apr 17 2007 "C:\Program Files\ExamSoft\SofTest\Bak\33_NCDistinctions-FamilyLaw909_FinalRestart.bak"
299008 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\34_77777-NCBar_7-24-07_AM-070724_32.bak"
299008 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\142561\34_77777-NCBar_7-24-07_AM-070724_32.bak"
299008 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\Bak\34_77777-NCBar_7-24-07_AM-070724_32.bak"
319488 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\35_77777-NCBar_7-24-07_AM-070724_64.bak"
319488 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\142561\35_77777-NCBar_7-24-07_AM-070724_64.bak"
319488 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\Bak\35_77777-NCBar_7-24-07_AM-070724_64.bak"
342016 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\36_77777-NCBar_7-24-07_AM-070724_96.bak"
342016 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\142561\36_77777-NCBar_7-24-07_AM-070724_96.bak"
342016 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\Bak\36_77777-NCBar_7-24-07_AM-070724_96.bak"
360448 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\37_77777-NCBar_7-24-07_AM-070724_128.bak"
360448 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\142561\37_77777-NCBar_7-24-07_AM-070724_128.bak"
360448 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\Bak\37_77777-NCBar_7-24-07_AM-070724_128.bak"
382976 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\38_77777-NCBar_7-24-07_AM-070724_160.bak"
382976 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\142561\38_77777-NCBar_7-24-07_AM-070724_160.bak"
382976 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\Bak\38_77777-NCBar_7-24-07_AM-070724_160.bak"
387072 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\39_77777-NCBar_7-24-07_AM-070724_FinalClose.bak"
387072 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\142561\39_77777-NCBar_7-24-07_AM-070724_FinalClose.bak"
387072 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\Bak\39_77777-NCBar_7-24-07_AM-070724_FinalClose.bak"
387072 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\40_NCBar_7-24-07_AM77777_FinalRestart.bak"
387072 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\142561\40_NCBar_7-24-07_AM77777_FinalRestart.bak"
387072 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\Bak\40_NCBar_7-24-07_AM77777_FinalRestart.bak"
303104 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\41_77777-NCBar_7-24-07_PM-070724_32.bak"
303104 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\142561\41_77777-NCBar_7-24-07_PM-070724_32.bak"
303104 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\Bak\41_77777-NCBar_7-24-07_PM-070724_32.bak"
319488 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\42_77777-NCBar_7-24-07_PM-070724_64.bak"
319488 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\142561\42_77777-NCBar_7-24-07_PM-070724_64.bak"
319488 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\Bak\42_77777-NCBar_7-24-07_PM-070724_64.bak"
333824 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\43_77777-NCBar_7-24-07_PM-070724_96.bak"
333824 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\142561\43_77777-NCBar_7-24-07_PM-070724_96.bak"
333824 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\Bak\43_77777-NCBar_7-24-07_PM-070724_96.bak"
352256 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\44_77777-NCBar_7-24-07_PM-070724_128.bak"
352256 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\142561\44_77777-NCBar_7-24-07_PM-070724_128.bak"
352256 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\Bak\44_77777-NCBar_7-24-07_PM-070724_128.bak"
376832 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\45_77777-NCBar_7-24-07_PM-070724_160.bak"
376832 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\142561\45_77777-NCBar_7-24-07_PM-070724_160.bak"
376832 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\Bak\45_77777-NCBar_7-24-07_PM-070724_160.bak"
391168 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\46_77777-NCBar_7-24-07_PM-070724_FinalClose.bak"
391168 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\142561\46_77777-NCBar_7-24-07_PM-070724_FinalClose.bak"
391168 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\Bak\46_77777-NCBar_7-24-07_PM-070724_FinalClose.bak"
391168 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\47_NCBar_7-24-07_PM77777_FinalRestart.bak"
391168 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\142561\47_NCBar_7-24-07_PM77777_FinalRestart.bak"
391168 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\Bak\47_NCBar_7-24-07_PM77777_FinalRestart.bak"
6731312 Jun 11 2007 "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\bak\avgas.exe"
266240 Nov 24 2004 "C:\Program Files\Print Server\PTP\PSDiagnostic.exe1191413565"
266240 Nov 24 2004 "C:\Program Files\Print Server\PTP\bak\PSDiagnostic.exe"
761948 Mar 2 2006 "C:\Synaptics Touchpad.temp\SynTPEnh.exe"
761948 Mar 2 2006 "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
761948 Mar 2 2006 "C:\Program Files\Synaptics\SynTP\bak\SynTPEnh.exe"
761948 Mar 2 2006 "C:\Program Files\Synaptics\SynTP\Media\SynTPEnh.exe"
27664 Oct 3 2007 "C:\WINDOWS\system32\ReinstallBackups\0018\DriverFiles\SynTPEnh.exe"
122880 Apr 26 2005 "C:\Program Files\TOSHIBA\TOSHIBA Zooming Utility\SmoothView.exe1191413567"
122880 Apr 26 2005 "C:\Program Files\TOSHIBA\TOSHIBA Zooming Utility\bak\SmoothView.exe"
364544 Aug 2 2006 "C:\Program Files\TOSHIBA\TOSHIBA Applet\thotkey.exe"
364544 Aug 2 2006 "C:\Program Files\TOSHIBA\TOSHIBA Applet\bak\thotkey.exe"
299008 Apr 25 2006 "C:\Program Files\TOSHIBA\TOSHIBA Direct Disc Writer\ddwmon.exe"
299008 Apr 25 2006 "C:\Program Files\TOSHIBA\TOSHIBA Direct Disc Writer\bak\ddwmon.exe"
1077322 Dec 6 2005 "C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe"
1077322 Dec 6 2005 "C:\Program Files\TOSHIBA\Touch and Launch\bak\PadExe.exe"
73728 Feb 2 2006 "C:\Program Files\TOSHIBA\Tvs\TvsTray.exe"
73728 Feb 2 2006 "C:\Program Files\TOSHIBA\Tvs\bak\TvsTray.exe"
151552 Mar 17 2005 "C:\TOSHIBA\IVP\ISM\pinger.exe"
151552 Mar 17 2005 "C:\TOSHIBA\IVP\ISM\bak\pinger.exe"
40048 May 11 2007 "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
40048 May 11 2007 "C:\Program Files\Adobe\Reader 8.0\Reader\bak\Reader_sl.exe"
700416 Jul 3 2006 "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe"
700416 Jul 3 2006 "C:\Program Files\Intel\Wireless\Bin\bak\ifrmewrk.exe"
802816 Jul 3 2006 "C:\Program Files\Intel\Wireless\Bin\ZCfgSvc.exe"
802816 Jul 3 2006 "C:\Program Files\Intel\Wireless\Bin\bak\ZCfgSvc.exe"
36975 Nov 10 2005 "C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe"
49263 Nov 9 2006 "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
49263 Oct 12 2006 "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
75520 Dec 15 2006 "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
83608 Mar 14 2007 "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
132496 Jul 12 2007 "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
83608 Mar 14 2007 "C:\Program Files\Java\jre1.6.0_01\bin\bak\jusched.exe"
132496 Jul 12 2007 "C:\Program Files\Java\jre1.6.0_02\bin\bak\jusched.exe"
36975 Nov 10 2005 "C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe"
49263 Nov 9 2006 "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
49263 Oct 12 2006 "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
75520 Dec 15 2006 "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
83608 Mar 14 2007 "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
132496 Jul 12 2007 "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
83608 Mar 14 2007 "C:\Program Files\Java\jre1.6.0_01\bin\bak\jusched.exe"
132496 Jul 12 2007 "C:\Program Files\Java\jre1.6.0_02\bin\bak\jusched.exe"
63712 Mar 9 2007 "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe"
63712 Mar 9 2007 "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\bak\apdproxy.exe"


end of report

THANKS!

#9 rookie147

rookie147

  • Members
  • 5,321 posts
  • OFFLINE
  •  
  • Local time:02:29 PM

Posted 21 October 2007 - 03:49 PM

Now please run option 3, this time pasting the following folders into the textfile that opens:

C:\Program Files\iTunes\bak
C:\Program Files\Lexmark X6100 Series\bak
C:\Program Files\QuickTime\bak
C:\Program Files\Windows Defender\bak
C:\WINDOWS\ehome\bak
C:\WINDOWS\system32\bak
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\bak
C:\Program Files\Print Server\PTP\bak
C:\Program Files\Synaptics\SynTP\bak
C:\Program Files\TOSHIBA\TOSHIBA Zooming Utility\bak
C:\Program Files\TOSHIBA\TOSHIBA Applet\bak
C:\Program Files\TOSHIBA\TOSHIBA Direct Disc Writer\bak
C:\Program Files\TOSHIBA\Touch and Launch\bak
C:\Program Files\TOSHIBA\Tvs\bak
C:\TOSHIBA\IVP\ISM\bak
C:\Program Files\Adobe\Reader 8.0\Reader\bak
C:\Program Files\Intel\Wireless\Bin\bak
C:\Program Files\Intel\Wireless\Bin\bak
C:\Program Files\Java\jre1.6.0_01\bin\bak
C:\Program Files\Java\jre1.6.0_02\bin\bak
C:\Program Files\Java\jre1.6.0_01\bin\bak
C:\Program Files\Java\jre1.6.0_02\bin\bak
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\bak

If you are pleased with the service I have offered, you may like to consider making a donation. Posted Image
Posted Image


#10 qusjone

qusjone
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:09:29 AM

Posted 21 October 2007 - 11:21 PM

Option 3 run completed. Here's the resulting text file that opened:


Find AWF report by noahdfear 2006
Version 1.40
Option 3 run successfully

The current date is: Mon 10/22/2007
The current time is: 0:15:26.40


bak folders found
~~~~~~~~~~~


Directory of C:\PROGRA~1\EXAMSOFT\SOFTEST\BAK

12/08/2006 03:55 PM 272,384 01_9058-Sales&SecuredTransactions-061208_32.bak
12/08/2006 04:27 PM 274,432 02_9058-Sales&SecuredTransactions-061208_64.bak
12/08/2006 04:59 PM 276,480 03_9058-Sales&SecuredTransactions-061208_96.bak
12/08/2006 05:31 PM 278,528 04_9058-Sales&SecuredTransactions-061208_128.bak
12/08/2006 06:03 PM 282,624 05_9058-Sales&SecuredTransactions-061208_160.bak
12/08/2006 06:35 PM 288,768 06_9058-Sales&SecuredTransactions-061208_192.bak
12/08/2006 06:55 PM 299,008 07_9058-Sales&SecuredTransactions-061208_FinalClose.bak
12/08/2006 06:55 PM 299,008 08_Sales&SecuredTransactions9058_FinalRestart.bak
12/11/2006 10:37 AM 274,432 09_9058-AdvancedTax-061211_32.bak
12/11/2006 11:09 AM 274,432 10_9058-AdvancedTax-061211_64.bak
12/11/2006 11:41 AM 280,576 11_9058-AdvancedTax-061211_96.bak
12/11/2006 12:13 PM 282,624 12_9058-AdvancedTax-061211_128.bak
12/11/2006 12:45 PM 286,720 13_9058-AdvancedTax-061211_160.bak
12/11/2006 01:17 PM 299,008 14_9058-AdvancedTax-061211_192.bak
12/11/2006 01:33 PM 305,152 15_9058-AdvancedTax-061211_FinalClose.bak
12/11/2006 01:33 PM 305,152 16_9058-AdvancedTax-061211_FinalRestart.bak
12/13/2006 03:33 PM 274,432 17_9058-AdvancedTorts-061213_32.bak
12/13/2006 04:05 PM 278,528 18_9058-AdvancedTorts-061213_64.bak
12/13/2006 04:37 PM 294,912 19_9058-AdvancedTorts-061213_96.bak
12/13/2006 05:10 PM 313,344 20_9058-AdvancedTorts-061213_128.bak
12/13/2006 05:42 PM 337,920 21_9058-AdvancedTorts-061213_160.bak
12/13/2006 06:02 PM 354,304 22_9058-AdvancedTorts-061213_FinalClose.bak
12/13/2006 06:02 PM 354,304 23_9058-AdvancedTorts-061213_FinalRestart.bak
01/30/2007 01:28 PM 278,528 24_909-NCDistinctions-070130_FinalClose.bak
01/30/2007 01:28 PM 278,528 25_909-NCDistinctions-070130_FinalRestart.bak
02/22/2007 01:31 PM 278,528 26_909-NCDistinctions-RealEstateFinance-070222_FinalClose.bak
02/22/2007 01:31 PM 278,528 27_NCDistinctions-RealEstateFinance909_FinalRestart.bak
03/22/2007 12:30 PM 278,528 28_909-NCDistinctions-070322_FinalClose.bak
03/22/2007 12:30 PM 278,528 29_909-NCDistinctions-070322_FinalRestart.bak
04/12/2007 12:30 PM 278,528 30_909-NCDistinctions-FamilyLaw-070412_FinalClose.bak
04/12/2007 12:30 PM 278,528 31_NCDistinctions-FamilyLaw909_FinalRestart.bak
04/17/2007 12:35 PM 282,624 32_909-NCDistinctions-FamilyLaw-070417_FinalClose.bak
04/17/2007 12:35 PM 282,624 33_NCDistinctions-FamilyLaw909_FinalRestart.bak
07/24/2007 10:51 AM 299,008 34_77777-NCBar_7-24-07_AM-070724_32.bak
07/24/2007 11:23 AM 319,488 35_77777-NCBar_7-24-07_AM-070724_64.bak
07/24/2007 11:55 AM 342,016 36_77777-NCBar_7-24-07_AM-070724_96.bak
07/24/2007 12:27 PM 360,448 37_77777-NCBar_7-24-07_AM-070724_128.bak
07/24/2007 12:59 PM 382,976 38_77777-NCBar_7-24-07_AM-070724_160.bak
07/24/2007 01:19 PM 387,072 39_77777-NCBar_7-24-07_AM-070724_FinalClose.bak
07/24/2007 01:19 PM 387,072 40_NCBar_7-24-07_AM77777_FinalRestart.bak
07/24/2007 03:57 PM 303,104 41_77777-NCBar_7-24-07_PM-070724_32.bak
07/24/2007 04:29 PM 319,488 42_77777-NCBar_7-24-07_PM-070724_64.bak
07/24/2007 05:01 PM 333,824 43_77777-NCBar_7-24-07_PM-070724_96.bak
07/24/2007 05:33 PM 352,256 44_77777-NCBar_7-24-07_PM-070724_128.bak
07/24/2007 06:05 PM 376,832 45_77777-NCBar_7-24-07_PM-070724_160.bak
07/24/2007 06:21 PM 391,168 46_77777-NCBar_7-24-07_PM-070724_FinalClose.bak
07/24/2007 06:21 PM 391,168 47_NCBar_7-24-07_PM77777_FinalRestart.bak
47 File(s) 14,526,464 bytes


Duplicate files of bak directory contents
~~~~~~~~~~~~~~~~~~~~~~~

272384 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\01_9058-Sales&SecuredTransactions-061208_32.bak"
272384 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\142561\01_9058-Sales&SecuredTransactions-061208_32.bak"
272384 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\Bak\01_9058-Sales&SecuredTransactions-061208_32.bak"
274432 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\02_9058-Sales&SecuredTransactions-061208_64.bak"
274432 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\142561\02_9058-Sales&SecuredTransactions-061208_64.bak"
274432 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\Bak\02_9058-Sales&SecuredTransactions-061208_64.bak"
276480 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\03_9058-Sales&SecuredTransactions-061208_96.bak"
276480 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\142561\03_9058-Sales&SecuredTransactions-061208_96.bak"
276480 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\Bak\03_9058-Sales&SecuredTransactions-061208_96.bak"
278528 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\04_9058-Sales&SecuredTransactions-061208_128.bak"
278528 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\142561\04_9058-Sales&SecuredTransactions-061208_128.bak"
278528 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\Bak\04_9058-Sales&SecuredTransactions-061208_128.bak"
282624 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\05_9058-Sales&SecuredTransactions-061208_160.bak"
282624 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\142561\05_9058-Sales&SecuredTransactions-061208_160.bak"
282624 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\Bak\05_9058-Sales&SecuredTransactions-061208_160.bak"
288768 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\06_9058-Sales&SecuredTransactions-061208_192.bak"
288768 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\142561\06_9058-Sales&SecuredTransactions-061208_192.bak"
288768 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\Bak\06_9058-Sales&SecuredTransactions-061208_192.bak"
299008 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\07_9058-Sales&SecuredTransactions-061208_FinalClose.bak"
299008 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\142561\07_9058-Sales&SecuredTransactions-061208_FinalClose.bak"
299008 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\Bak\07_9058-Sales&SecuredTransactions-061208_FinalClose.bak"
299008 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\08_Sales&SecuredTransactions9058_FinalRestart.bak"
299008 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\142561\08_Sales&SecuredTransactions9058_FinalRestart.bak"
299008 Dec 8 2006 "C:\Program Files\ExamSoft\SofTest\Bak\08_Sales&SecuredTransactions9058_FinalRestart.bak"
274432 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\09_9058-AdvancedTax-061211_32.bak"
274432 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\142561\09_9058-AdvancedTax-061211_32.bak"
274432 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\Bak\09_9058-AdvancedTax-061211_32.bak"
274432 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\10_9058-AdvancedTax-061211_64.bak"
274432 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\142561\10_9058-AdvancedTax-061211_64.bak"
274432 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\Bak\10_9058-AdvancedTax-061211_64.bak"
280576 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\11_9058-AdvancedTax-061211_96.bak"
280576 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\142561\11_9058-AdvancedTax-061211_96.bak"
280576 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\Bak\11_9058-AdvancedTax-061211_96.bak"
282624 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\12_9058-AdvancedTax-061211_128.bak"
282624 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\142561\12_9058-AdvancedTax-061211_128.bak"
282624 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\Bak\12_9058-AdvancedTax-061211_128.bak"
286720 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\13_9058-AdvancedTax-061211_160.bak"
286720 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\142561\13_9058-AdvancedTax-061211_160.bak"
286720 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\Bak\13_9058-AdvancedTax-061211_160.bak"
299008 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\14_9058-AdvancedTax-061211_192.bak"
299008 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\142561\14_9058-AdvancedTax-061211_192.bak"
299008 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\Bak\14_9058-AdvancedTax-061211_192.bak"
305152 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\15_9058-AdvancedTax-061211_FinalClose.bak"
305152 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\142561\15_9058-AdvancedTax-061211_FinalClose.bak"
305152 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\Bak\15_9058-AdvancedTax-061211_FinalClose.bak"
305152 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\16_9058-AdvancedTax-061211_FinalRestart.bak"
305152 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\142561\16_9058-AdvancedTax-061211_FinalRestart.bak"
305152 Dec 11 2006 "C:\Program Files\ExamSoft\SofTest\Bak\16_9058-AdvancedTax-061211_FinalRestart.bak"
274432 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\17_9058-AdvancedTorts-061213_32.bak"
274432 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\142561\17_9058-AdvancedTorts-061213_32.bak"
274432 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\Bak\17_9058-AdvancedTorts-061213_32.bak"
278528 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\18_9058-AdvancedTorts-061213_64.bak"
278528 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\142561\18_9058-AdvancedTorts-061213_64.bak"
278528 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\Bak\18_9058-AdvancedTorts-061213_64.bak"
294912 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\19_9058-AdvancedTorts-061213_96.bak"
294912 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\142561\19_9058-AdvancedTorts-061213_96.bak"
294912 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\Bak\19_9058-AdvancedTorts-061213_96.bak"
313344 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\20_9058-AdvancedTorts-061213_128.bak"
313344 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\142561\20_9058-AdvancedTorts-061213_128.bak"
313344 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\Bak\20_9058-AdvancedTorts-061213_128.bak"
337920 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\21_9058-AdvancedTorts-061213_160.bak"
337920 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\142561\21_9058-AdvancedTorts-061213_160.bak"
337920 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\Bak\21_9058-AdvancedTorts-061213_160.bak"
354304 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\22_9058-AdvancedTorts-061213_FinalClose.bak"
354304 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\142561\22_9058-AdvancedTorts-061213_FinalClose.bak"
354304 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\Bak\22_9058-AdvancedTorts-061213_FinalClose.bak"
354304 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\23_9058-AdvancedTorts-061213_FinalRestart.bak"
354304 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\142561\23_9058-AdvancedTorts-061213_FinalRestart.bak"
354304 Dec 13 2006 "C:\Program Files\ExamSoft\SofTest\Bak\23_9058-AdvancedTorts-061213_FinalRestart.bak"
278528 Jan 30 2007 "C:\Program Files\ExamSoft\SofTest\24_909-NCDistinctions-070130_FinalClose.bak"
278528 Jan 30 2007 "C:\Program Files\ExamSoft\SofTest\142561\24_909-NCDistinctions-070130_FinalClose.bak"
278528 Jan 30 2007 "C:\Program Files\ExamSoft\SofTest\Bak\24_909-NCDistinctions-070130_FinalClose.bak"
278528 Jan 30 2007 "C:\Program Files\ExamSoft\SofTest\25_909-NCDistinctions-070130_FinalRestart.bak"
278528 Jan 30 2007 "C:\Program Files\ExamSoft\SofTest\142561\25_909-NCDistinctions-070130_FinalRestart.bak"
278528 Jan 30 2007 "C:\Program Files\ExamSoft\SofTest\Bak\25_909-NCDistinctions-070130_FinalRestart.bak"
278528 Feb 22 2007 "C:\Program Files\ExamSoft\SofTest\26_909-NCDistinctions-RealEstateFinance-070222_FinalClose.bak"
278528 Feb 22 2007 "C:\Program Files\ExamSoft\SofTest\142561\26_909-NCDistinctions-RealEstateFinance-070222_FinalClose.bak"
278528 Feb 22 2007 "C:\Program Files\ExamSoft\SofTest\Bak\26_909-NCDistinctions-RealEstateFinance-070222_FinalClose.bak"
278528 Feb 22 2007 "C:\Program Files\ExamSoft\SofTest\27_NCDistinctions-RealEstateFinance909_FinalRestart.bak"
278528 Feb 22 2007 "C:\Program Files\ExamSoft\SofTest\142561\27_NCDistinctions-RealEstateFinance909_FinalRestart.bak"
278528 Feb 22 2007 "C:\Program Files\ExamSoft\SofTest\Bak\27_NCDistinctions-RealEstateFinance909_FinalRestart.bak"
278528 Mar 22 2007 "C:\Program Files\ExamSoft\SofTest\28_909-NCDistinctions-070322_FinalClose.bak"
278528 Mar 22 2007 "C:\Program Files\ExamSoft\SofTest\142561\28_909-NCDistinctions-070322_FinalClose.bak"
278528 Mar 22 2007 "C:\Program Files\ExamSoft\SofTest\Bak\28_909-NCDistinctions-070322_FinalClose.bak"
278528 Mar 22 2007 "C:\Program Files\ExamSoft\SofTest\29_909-NCDistinctions-070322_FinalRestart.bak"
278528 Mar 22 2007 "C:\Program Files\ExamSoft\SofTest\142561\29_909-NCDistinctions-070322_FinalRestart.bak"
278528 Mar 22 2007 "C:\Program Files\ExamSoft\SofTest\Bak\29_909-NCDistinctions-070322_FinalRestart.bak"
278528 Apr 12 2007 "C:\Program Files\ExamSoft\SofTest\30_909-NCDistinctions-FamilyLaw-070412_FinalClose.bak"
278528 Apr 12 2007 "C:\Program Files\ExamSoft\SofTest\142561\30_909-NCDistinctions-FamilyLaw-070412_FinalClose.bak"
278528 Apr 12 2007 "C:\Program Files\ExamSoft\SofTest\Bak\30_909-NCDistinctions-FamilyLaw-070412_FinalClose.bak"
278528 Apr 12 2007 "C:\Program Files\ExamSoft\SofTest\31_NCDistinctions-FamilyLaw909_FinalRestart.bak"
278528 Apr 12 2007 "C:\Program Files\ExamSoft\SofTest\142561\31_NCDistinctions-FamilyLaw909_FinalRestart.bak"
278528 Apr 12 2007 "C:\Program Files\ExamSoft\SofTest\Bak\31_NCDistinctions-FamilyLaw909_FinalRestart.bak"
282624 Apr 17 2007 "C:\Program Files\ExamSoft\SofTest\32_909-NCDistinctions-FamilyLaw-070417_FinalClose.bak"
282624 Apr 17 2007 "C:\Program Files\ExamSoft\SofTest\142561\32_909-NCDistinctions-FamilyLaw-070417_FinalClose.bak"
282624 Apr 17 2007 "C:\Program Files\ExamSoft\SofTest\Bak\32_909-NCDistinctions-FamilyLaw-070417_FinalClose.bak"
282624 Apr 17 2007 "C:\Program Files\ExamSoft\SofTest\33_NCDistinctions-FamilyLaw909_FinalRestart.bak"
282624 Apr 17 2007 "C:\Program Files\ExamSoft\SofTest\142561\33_NCDistinctions-FamilyLaw909_FinalRestart.bak"
282624 Apr 17 2007 "C:\Program Files\ExamSoft\SofTest\Bak\33_NCDistinctions-FamilyLaw909_FinalRestart.bak"
299008 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\34_77777-NCBar_7-24-07_AM-070724_32.bak"
299008 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\142561\34_77777-NCBar_7-24-07_AM-070724_32.bak"
299008 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\Bak\34_77777-NCBar_7-24-07_AM-070724_32.bak"
319488 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\35_77777-NCBar_7-24-07_AM-070724_64.bak"
319488 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\142561\35_77777-NCBar_7-24-07_AM-070724_64.bak"
319488 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\Bak\35_77777-NCBar_7-24-07_AM-070724_64.bak"
342016 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\36_77777-NCBar_7-24-07_AM-070724_96.bak"
342016 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\142561\36_77777-NCBar_7-24-07_AM-070724_96.bak"
342016 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\Bak\36_77777-NCBar_7-24-07_AM-070724_96.bak"
360448 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\37_77777-NCBar_7-24-07_AM-070724_128.bak"
360448 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\142561\37_77777-NCBar_7-24-07_AM-070724_128.bak"
360448 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\Bak\37_77777-NCBar_7-24-07_AM-070724_128.bak"
382976 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\38_77777-NCBar_7-24-07_AM-070724_160.bak"
382976 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\142561\38_77777-NCBar_7-24-07_AM-070724_160.bak"
382976 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\Bak\38_77777-NCBar_7-24-07_AM-070724_160.bak"
387072 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\39_77777-NCBar_7-24-07_AM-070724_FinalClose.bak"
387072 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\142561\39_77777-NCBar_7-24-07_AM-070724_FinalClose.bak"
387072 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\Bak\39_77777-NCBar_7-24-07_AM-070724_FinalClose.bak"
387072 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\40_NCBar_7-24-07_AM77777_FinalRestart.bak"
387072 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\142561\40_NCBar_7-24-07_AM77777_FinalRestart.bak"
387072 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\Bak\40_NCBar_7-24-07_AM77777_FinalRestart.bak"
303104 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\41_77777-NCBar_7-24-07_PM-070724_32.bak"
303104 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\142561\41_77777-NCBar_7-24-07_PM-070724_32.bak"
303104 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\Bak\41_77777-NCBar_7-24-07_PM-070724_32.bak"
319488 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\42_77777-NCBar_7-24-07_PM-070724_64.bak"
319488 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\142561\42_77777-NCBar_7-24-07_PM-070724_64.bak"
319488 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\Bak\42_77777-NCBar_7-24-07_PM-070724_64.bak"
333824 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\43_77777-NCBar_7-24-07_PM-070724_96.bak"
333824 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\142561\43_77777-NCBar_7-24-07_PM-070724_96.bak"
333824 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\Bak\43_77777-NCBar_7-24-07_PM-070724_96.bak"
352256 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\44_77777-NCBar_7-24-07_PM-070724_128.bak"
352256 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\142561\44_77777-NCBar_7-24-07_PM-070724_128.bak"
352256 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\Bak\44_77777-NCBar_7-24-07_PM-070724_128.bak"
376832 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\45_77777-NCBar_7-24-07_PM-070724_160.bak"
376832 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\142561\45_77777-NCBar_7-24-07_PM-070724_160.bak"
376832 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\Bak\45_77777-NCBar_7-24-07_PM-070724_160.bak"
391168 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\46_77777-NCBar_7-24-07_PM-070724_FinalClose.bak"
391168 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\142561\46_77777-NCBar_7-24-07_PM-070724_FinalClose.bak"
391168 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\Bak\46_77777-NCBar_7-24-07_PM-070724_FinalClose.bak"
391168 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\47_NCBar_7-24-07_PM77777_FinalRestart.bak"
391168 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\142561\47_NCBar_7-24-07_PM77777_FinalRestart.bak"
391168 Jul 24 2007 "C:\Program Files\ExamSoft\SofTest\Bak\47_NCBar_7-24-07_PM77777_FinalRestart.bak"


end of report

THANKS!

#11 rookie147

rookie147

  • Members
  • 5,321 posts
  • OFFLINE
  •  
  • Local time:02:29 PM

Posted 22 October 2007 - 04:05 AM

Oops, I missed one off:

C:\PROGRAM FILES\EXAMSOFT\SOFTEST\BAK

Then let me know how things seem to be running now.

If you are pleased with the service I have offered, you may like to consider making a donation. Posted Image
Posted Image


#12 qusjone

qusjone
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:09:29 AM

Posted 22 October 2007 - 06:26 AM

Hi Charles - so should I re-run option # 3 as above again, but also include the " C:\PROGRAM FILES\EXAMSOFT\SOFTEST\BAK" line you posted above as having been missed? Please advise.

ALSO - Here is a new HJT log...Looks like the *whataboutadog.com item is still there:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:27:22 AM, on 10/22/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\DVDRAMSV.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
c:\TOSHIBA\IVP\swupdate\swupdtmr.exe
C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe
C:\WINDOWS\system32\TODDSrv.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
C:\Program Files\TOSHIBA\TOSHIBA Direct Disc Writer\ddwmon.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\TOSHIBA\TOSHIBA Controls\TFncKy.exe
C:\toshiba\ivp\ism\pinger.exe
C:\Program Files\Synaptics\SynTP\Toshiba.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Lexmark X6100 Series\lxbfbmgr.exe
C:\Program Files\Print Server\PTP\PSDiagnostic.exe
C:\Program Files\Lexmark X6100 Series\lxbfbmon.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\TOSHIBA\TOSHIBA Zooming Utility\SmoothView.exe
C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe
C:\Program Files\Toshiba\Tvs\TvsTray.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\WINDOWS\system32\TPSBattM.exe
C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
C:\WINDOWS\system32\RAMASST.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Intel\Wireless\Bin\Dot1XCfg.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O4 - HKLM\..\Run: [THotkey] C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [DDWMon] C:\Program Files\TOSHIBA\TOSHIBA Direct Disc Writer\\ddwmon.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
O4 - HKLM\..\Run: [TFncKy] TFncKy.exe
O4 - HKLM\..\Run: [Pinger] c:\toshiba\ivp\ism\pinger.exe /run
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [Lexmark X6100 Series] "C:\Program Files\Lexmark X6100 Series\lxbfbmgr.exe"
O4 - HKLM\..\Run: [PrintServer Diagnostic] C:\Program Files\Print Server\PTP\PSDiagnostic.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [SmoothView] C:\Program Files\TOSHIBA\TOSHIBA Zooming Utility\SmoothView.exe
O4 - HKLM\..\Run: [PadTouch] C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe
O4 - HKLM\..\Run: [Tvs] C:\Program Files\Toshiba\Tvs\TvsTray.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SynTPStart] C:\Program Files\Synaptics\SynTP\SynTPStart.exe
O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
O4 - Startup: Microsoft Office OneNote 2003 Quick Launch.lnk = C:\Program Files\Microsoft Office\OFFICE11\ONENOTEM.EXE
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: RAMASST.lnk = C:\WINDOWS\system32\RAMASST.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.toshibadirect.com/dpdstart
O15 - Trusted Zone: *.doginhispen.com
O15 - Trusted Zone: *.whataboutadog.com
O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} (Office Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=58813
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/microsoftu...b?1190471703500
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftu...b?1190468833875
O16 - DPF: {C52439A0-2693-4E40-B141-9F9AD5257241} (Lexmark eDiagnostics Class) - https://ediagnostics.lexmark.com/serval.cab
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: DVD-RAM_Service - Matsubleepa Electric Industrial Co., Ltd. - C:\WINDOWS\system32\DVDRAMSV.exe
O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel® PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: Swupdtmr - Unknown owner - c:\TOSHIBA\IVP\swupdate\swupdtmr.exe
O23 - Service: TOSHIBA Application Service (TAPPSRV) - TOSHIBA Corp. - C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe
O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - TOSHIBA Corporation - C:\WINDOWS\system32\TODDSrv.exe

--
End of file - 9582 bytes

THANKS

Edited by qusjone, 22 October 2007 - 06:29 AM.


#13 rookie147

rookie147

  • Members
  • 5,321 posts
  • OFFLINE
  •  
  • Local time:02:29 PM

Posted 23 October 2007 - 03:08 PM

Hi Charles - so should I re-run option # 3 as above again, but also include the " C:\PROGRAM FILES\EXAMSOFT\SOFTEST\BAK" line you posted above as having been missed? Please advise.

Sorry, I wasn't very clear; simply run option 3 and just paste in that one directory.

Scan again with HijackThis and put a checkmark next to each of the following entries (if present):

O15 - Trusted Zone: *.doginhispen.com
O15 - Trusted Zone: *.whataboutadog.com


Then close all other windows--you should only see HijackThis on your Desktop--and click the Fix checked button.

In your next post I would like some information about how things seem to be running now.
Thanks,
Charles

If you are pleased with the service I have offered, you may like to consider making a donation. Posted Image
Posted Image


#14 qusjone

qusjone
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:09:29 AM

Posted 23 October 2007 - 07:03 PM

Hi Charles - I completed all of the above as requested. I also rebooted and re-ran HJT (log is below) - looks like you got it! HJT log shows clean. Things seem to be running fine. Haven't had any more connectivity issues. Let me know if this is it or there's anything else I should do. Bravo and thank you!

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:56:20 PM, on 10/23/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\WINDOWS\system32\DVDRAMSV.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
c:\TOSHIBA\IVP\swupdate\swupdtmr.exe
C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe
C:\WINDOWS\system32\TODDSrv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
C:\Program Files\TOSHIBA\TOSHIBA Direct Disc Writer\ddwmon.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\TOSHIBA\TOSHIBA Controls\TFncKy.exe
C:\toshiba\ivp\ism\pinger.exe
C:\WINDOWS\system32\TPSBattM.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Lexmark X6100 Series\lxbfbmgr.exe
C:\Program Files\Synaptics\SynTP\Toshiba.exe
C:\Program Files\Print Server\PTP\PSDiagnostic.exe
C:\Program Files\Lexmark X6100 Series\lxbfbmon.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\TOSHIBA\TOSHIBA Zooming Utility\SmoothView.exe
C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe
C:\Program Files\Toshiba\Tvs\TvsTray.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
C:\WINDOWS\system32\RAMASST.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Intel\Wireless\Bin\Dot1XCfg.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O4 - HKLM\..\Run: [THotkey] C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [DDWMon] C:\Program Files\TOSHIBA\TOSHIBA Direct Disc Writer\\ddwmon.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
O4 - HKLM\..\Run: [TFncKy] TFncKy.exe
O4 - HKLM\..\Run: [Pinger] c:\toshiba\ivp\ism\pinger.exe /run
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [Lexmark X6100 Series] "C:\Program Files\Lexmark X6100 Series\lxbfbmgr.exe"
O4 - HKLM\..\Run: [PrintServer Diagnostic] C:\Program Files\Print Server\PTP\PSDiagnostic.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [SmoothView] C:\Program Files\TOSHIBA\TOSHIBA Zooming Utility\SmoothView.exe
O4 - HKLM\..\Run: [PadTouch] C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe
O4 - HKLM\..\Run: [Tvs] C:\Program Files\Toshiba\Tvs\TvsTray.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SynTPStart] C:\Program Files\Synaptics\SynTP\SynTPStart.exe
O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
O4 - Startup: Microsoft Office OneNote 2003 Quick Launch.lnk = C:\Program Files\Microsoft Office\OFFICE11\ONENOTEM.EXE
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: RAMASST.lnk = C:\WINDOWS\system32\RAMASST.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.toshibadirect.com/dpdstart
O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} (Office Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=58813
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/microsoftu...b?1190471703500
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftu...b?1190468833875
O16 - DPF: {C52439A0-2693-4E40-B141-9F9AD5257241} (Lexmark eDiagnostics Class) - https://ediagnostics.lexmark.com/serval.cab
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: DVD-RAM_Service - Matsubleepa Electric Industrial Co., Ltd. - C:\WINDOWS\system32\DVDRAMSV.exe
O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel® PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: Swupdtmr - Unknown owner - c:\TOSHIBA\IVP\swupdate\swupdtmr.exe
O23 - Service: TOSHIBA Application Service (TAPPSRV) - TOSHIBA Corp. - C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe
O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - TOSHIBA Corporation - C:\WINDOWS\system32\TODDSrv.exe

--
End of file - 9403 bytes

THANKS!

#15 rookie147

rookie147

  • Members
  • 5,321 posts
  • OFFLINE
  •  
  • Local time:02:29 PM

Posted 24 October 2007 - 03:33 PM

Great job! Now that you're free from malware, please follow these simple steps to decrease the likelihood of getting re-infected again:

Set your system to not show all files.
Navigate to Start | My Computer | Tools | Folder Options.
Select the View tab. Under the "Hidden Files and Folders" heading, select "Do not show hidden files and folders".
Check: Hide file extensions for known file types
Check the Hide protected operating system files (recommended) option.
Click Yes to confirm.

Please navigate to http://windowsupdate.microsoft.com and download all the "critical updates" for Windows. This can patch many of the security holes through which attackers can gain access to your computer.
Either enable 'Automatic Updates' under Start | Control Panel | Automatic Updates, or get into the habit of checking for Windows updates regularly. I cannot stress enough how important this is.

In order to protect yourself against spyware, you should consider installing and running the following free programs:
Ad-Aware SE
A tutorial on using Ad-Aware to remove spyware from your computer may be found here.
Spybot-Search & Destroy
A tutorial on using Spybot to remove spyware from your computer may be found here. Please also remember to enable Spybot's "Immunize" and "TeaTimer" features.
SpywareBlaster
A tutorial on using SpywareBlaster to prevent spyware from ever installing on your computer may be found here.
Make sure to keep these programs up-to-date and to run them regularly, as this can prevent a great deal of spyware hassle.

Please also read Tony Klein's excellent article: How I got Infected in the First Place.
Thanks and happy computing,
Charles

If you are pleased with the service I have offered, you may like to consider making a donation. Posted Image
Posted Image





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users