Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

One More Time Please: 88.80.7.66, A.doginhispen, B.skitodayplease


  • Please log in to reply
3 replies to this topic

#1 msrc2

msrc2

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:07:06 AM

Posted 16 February 2008 - 04:55 PM

Hello everyone. I'm infected with this mal/virus as well. If it matters, It appeared right after I dl Adobe reader 8.0, Adobe Elements, and Adobe PS Album PE 3.2 from the Adobe website. Anyway, I've read all the responses to this topic, and it appears there is no standard file repair. I was reluctant to start another thread, but I can't remove this monster... ANY help would be most appreciated!

Running XPS2

Results from first AWF scan:

88.80.7.66, A.doginhispen, B.skitodayplease
Find AWF report by noahdfear 2006
Version 1.40

The current date is: Sat 02/16/2008
The current time is: 16:02:08.31


bak folders found
~~~~~~~~~~~


Directory of C:\PROGRA~1\DELLPH~1\BAK

10/21/2005 02:40 AM 430,080 dlccmon.exe
1 File(s) 430,080 bytes

Directory of C:\PROGRA~1\DELLSU~1\BAK

03/15/2007 10:09 AM 460,784 DSAgnt.exe
1 File(s) 460,784 bytes

Directory of C:\PROGRA~1\ITUNES\BAK

01/15/2008 03:22 AM 267,048 iTunesHelper.exe
1 File(s) 267,048 bytes

Directory of C:\PROGRA~1\MESSEN~1\BAK

0 File(s) 0 bytes

Directory of C:\PROGRA~1\PASSWO~1\BAK

03/04/2002 08:44 PM 1,434,112 Passkeychain.exe
1 File(s) 1,434,112 bytes

Directory of C:\PROGRA~1\QUICKT~1\BAK

01/10/2008 03:27 PM 385,024 qttask.exe
1 File(s) 385,024 bytes

Directory of C:\PROGRA~1\WIFD1F~1\BAK

11/03/2006 05:20 PM 866,584 MSASCui.exe
1 File(s) 866,584 bytes

Directory of C:\WINDOWS\EHOME\BAK

09/29/2005 02:01 PM 67,584 ehtray.exe
1 File(s) 67,584 bytes

Directory of C:\WINDOWS\SYSTEM32\BAK

08/10/2004 05:00 AM 15,360 ctfmon.exe
1 File(s) 15,360 bytes

Directory of C:\PROGRA~1\ATITEC~1\ATICON~1\BAK

08/05/2005 09:05 PM 344,064 atiptaxx.exe
1 File(s) 344,064 bytes

Directory of C:\PROGRA~1\DELL\MEDIAE~1\BAK

10/05/2005 03:12 AM 94,208 DMXLauncher.exe
1 File(s) 94,208 bytes

Directory of C:\PROGRA~1\DELLSU~2\BIN\BAK

11/15/2007 09:23 AM 202,544 sprtcmd.exe
1 File(s) 202,544 bytes

Directory of C:\PROGRA~1\GOOGLE\GOOGLE~4\BAK

07/25/2007 11:43 PM 68,856 GoogleToolbarNotifier.exe
1 File(s) 68,856 bytes

Directory of C:\PROGRA~1\INTEL\INTELM~1\BAK

06/17/2005 07:56 AM 139,264 iaanotif.exe
1 File(s) 139,264 bytes

Directory of C:\PROGRA~1\MUSICM~1\MUSICM~3\BAK

09/08/2005 07:20 PM 110,592 mm_tray.exe
1 File(s) 110,592 bytes

Directory of C:\PROGRA~1\TRENDM~1\INTERN~2\BAK

11/21/2006 01:02 PM 1,807,960 pccguide.exe
1 File(s) 1,807,960 bytes

Directory of C:\PROGRA~1\YAHOO!\MESSEN~1\BAK

03/27/2007 02:22 PM 4,670,968 YAHOOM~1.EXE
1 File(s) 4,670,968 bytes

Directory of C:\WINDOWS\SYSTEM32\DLA\BAK

09/08/2005 05:20 AM 122,940 DLACTRLW.EXE
1 File(s) 122,940 bytes

Directory of C:\PROGRA~1\ADOBE\READER~1.0\READER\BAK

10/10/2007 06:51 PM 39,792 Reader_sl.exe
1 File(s) 39,792 bytes

Directory of C:\PROGRA~1\BELLSO~1\HELPCE~1\BIN\BAK

10/30/2006 11:00 AM 192,512 sprtcmd.exe
1 File(s) 192,512 bytes

Directory of C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\BAK

06/10/2005 10:44 AM 81,920 issch.exe
06/10/2005 10:44 AM 249,856 isuspm.exe
2 File(s) 331,776 bytes

Directory of C:\PROGRA~1\COMMON~1\REAL\UPDATE~1\BAK

05/26/2006 11:12 AM 180,269 realsched.exe
1 File(s) 180,269 bytes

Directory of C:\PROGRA~1\DELLSU~2\GS_AGENT\CUSTOM\BAK

11/15/2007 09:24 AM 16,384 dsca.exe
1 File(s) 16,384 bytes

Directory of C:\PROGRA~1\JAVA\JRE16~3.0_0\BIN\BAK

09/25/2007 12:11 AM 132,496 jusched.exe
1 File(s) 132,496 bytes

Directory of C:\PROGRA~1\TRENDM~1\INTERN~2\TMAS_OE\BAK

08/04/2006 03:15 PM 321,040 TMAS_OEMon.exe
1 File(s) 321,040 bytes

Directory of C:\PROGRA~1\ADOBE\PHOTOS~1\3.0\APPS\BAK

06/06/2005 10:46 PM 57,344 apdproxy.exe
1 File(s) 57,344 bytes


Duplicate files of bak directory contents
~~~~~~~~~~~~~~~~~~~~~~~

14348 Jan 30 2008 "C:\Program Files\Dell Photo AIO Printer 924\dlccmon.exe"
430080 Oct 21 2005 "C:\Program Files\Dell Photo AIO Printer 924\bak\dlccmon.exe"
14348 Jan 30 2008 "C:\Program Files\DellSupport\DSAgnt.exe"
460784 Mar 15 2007 "C:\Program Files\DellSupport\bak\DSAgnt.exe"
14348 Jan 30 2008 "C:\Program Files\iTunes\iTunesHelper.exe"
267048 Jan 15 2008 "C:\Program Files\iTunes\bak\iTunesHelper.exe"
102400 Jan 15 2008 "C:\WINDOWS\Installer\{B85C4D19-6CEB-48CF-BD98-C887AC8C6F94}\iTunesIco.exe"
36808256 Dec 26 2006 "C:\Documents and Settings\Michael S. Rich\My Documents\Software Downloads\iTunesSetup 7.0.exe"
79144 Jan 15 2008 "C:\Documents and Settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 7.6.0.29\iTunesSetupAdmin.exe"
116024 Aug 4 2007 "C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\S1AZ85EZ\iTunesSetupAdmin[1].exe"
14348 Jan 30 2008 "C:\Program Files\Password Keychain\Passkeychain.exe"
1434112 Mar 4 2002 "C:\Program Files\Password Keychain\bak\Passkeychain.exe"
14348 Jan 30 2008 "C:\Program Files\QuickTime\qttask.exe"
385024 Jan 10 2008 "C:\Program Files\QuickTime\bak\qttask.exe"
14348 Jan 30 2008 "C:\Program Files\Windows Defender\MSASCui.exe"
866584 Nov 3 2006 "C:\Program Files\Windows Defender\bak\MSASCui.exe"
59392 Aug 10 2004 "C:\WINDOWS\$NtUninstallKB900325$\ehtray.exe"
64512 Aug 5 2005 "C:\WINDOWS\$NtUninstallKB908246$\ehtray.exe"
14348 Jan 30 2008 "C:\WINDOWS\ehome\ehtray.exe"
67584 Sep 29 2005 "C:\WINDOWS\ehome\bak\ehtray.exe"
15360 Aug 10 2004 "C:\WINDOWS\system32\ctfmon.exe"
15360 Aug 10 2004 "C:\WINDOWS\system32\bak\ctfmon.exe"
14348 Jan 30 2008 "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
344064 Aug 5 2005 "C:\Program Files\ATI Technologies\ATI Control Panel\bak\atiptaxx.exe"
14348 Jan 30 2008 "C:\Program Files\Dell\Media Experience\DMXLauncher.exe"
94208 Oct 5 2005 "C:\Program Files\Dell\Media Experience\bak\DMXLauncher.exe"
14348 Jan 30 2008 "C:\Program Files\Dell Support Center\bin\sprtcmd.exe"
14348 Jan 30 2008 "C:\Program Files\Bellsouth\HelpCenter\bin\sprtcmd.exe"
202544 Nov 15 2007 "C:\Program Files\Dell Support Center\bin\bak\sprtcmd.exe"
192512 Oct 30 2006 "C:\Program Files\Bellsouth\HelpCenter\bin\bak\sprtcmd.exe"
159755 May 22 2006 "C:\WINDOWS\Google Pack Screensaver Uninstaller.exe"
52272 Jan 31 2007 "C:\Program Files\Google\googletoolbar5user.exe"
113080 Aug 13 2006 "C:\Program Files\Google\Google Updater\GoogleUpdater.exe"
458820 Nov 17 2005 "C:\Program Files\Google\Google Earth\GoogleEarth.exe"
14348 Jan 30 2008 "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
331264 May 21 2006 "C:\Documents and Settings\Michael S. Rich\My Documents\Software Downloads\Google Pack Installer.exe"
138168 Jan 31 2007 "C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe"
68856 Jul 25 2007 "C:\Program Files\Google\GoogleToolbarNotifier\bak\GoogleToolbarNotifier.exe"
421888 Dec 8 2005 "G:\wd_windows_tools\Google\GoogleInstaller.exe"
755816 Nov 12 2005 "G:\wd_windows_tools\Google\Desktop\GoogleDesktopSearchSetup_de.exe"
562160 Nov 7 2005 "G:\wd_windows_tools\Google\Toolbar\W2KXP\GoogleToolbarInstaller_da.exe"
708080 Nov 7 2005 "G:\wd_windows_tools\Google\Toolbar\Win9XMe\GoogleToolbarInstaller_da.exe"
14348 Jan 30 2008 "C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe"
139264 Jun 17 2005 "C:\Program Files\Intel\Intel Matrix Storage Manager\bak\iaanotif.exe"
14348 Jan 30 2008 "C:\Program Files\MUSICMATCH\Musicmatch Jukebox\mm_tray.exe"
110592 Sep 8 2005 "C:\Program Files\MUSICMATCH\MUSICMATCH Update\MMJB\mm_tray.exe"
110592 Sep 8 2005 "C:\Program Files\MUSICMATCH\Musicmatch Jukebox\bak\mm_tray.exe"
1807960 Sep 18 2006 "C:\Setup\Module\pccguide.exe"
14348 Jan 30 2008 "C:\Program Files\Trend Micro\Internet Security 14\pccguide.exe"
1807960 Nov 21 2006 "C:\Program Files\Trend Micro\Internet Security 14\bak\pccguide.exe"
14348 Jan 30 2008 "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe"
4670968 Mar 27 2007 "C:\Program Files\Yahoo!\Messenger\bak\YAHOOM~1.EXE"
14348 Jan 30 2008 "C:\WINDOWS\system32\DLA\DLACTRLW.EXE"
122940 Sep 8 2005 "C:\Program Files\Roxio\DLA\install\dlactrlw.exe"
122940 Sep 8 2005 "C:\WINDOWS\system32\DLA\bak\DLACTRLW.EXE"
14348 Jan 30 2008 "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
39792 Oct 10 2007 "C:\Program Files\Adobe\Reader 8.0\Reader\bak\Reader_sl.exe"
14348 Jan 30 2008 "C:\Program Files\Dell Support Center\bin\sprtcmd.exe"
14348 Jan 30 2008 "C:\Program Files\Bellsouth\HelpCenter\bin\sprtcmd.exe"
202544 Nov 15 2007 "C:\Program Files\Dell Support Center\bin\bak\sprtcmd.exe"
192512 Oct 30 2006 "C:\Program Files\Bellsouth\HelpCenter\bin\bak\sprtcmd.exe"
14348 Jan 30 2008 "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe"
81920 Jun 10 2005 "C:\Program Files\Common Files\InstallShield\UpdateService\bak\issch.exe"
14348 Jan 30 2008 "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe"
249856 Jun 10 2005 "C:\Program Files\Common Files\InstallShield\UpdateService\bak\isuspm.exe"
180269 May 26 2006 "C:\Program Files\Common Files\Real\Update_OB\bak\realsched.exe"
14348 Jan 30 2008 "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe"
16384 Nov 15 2007 "C:\Program Files\Dell Support Center\gs_agent\custom\bak\dsca.exe"
32881 Nov 19 2003 "C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe"
36975 Nov 10 2005 "C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe"
49263 Nov 9 2006 "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
49263 Oct 12 2006 "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
75520 Dec 15 2006 "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
83608 Mar 14 2007 "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
132496 Jul 12 2007 "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
14348 Jan 30 2008 "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
132496 Sep 25 2007 "C:\Program Files\Java\jre1.6.0_03\bin\bak\jusched.exe"
480784 Aug 4 2006 "C:\Program Files\Trend Micro\Internet Security 14\TMAS_OE\TMAS_OEImp.exe"
493072 Aug 4 2006 "C:\Program Files\Trend Micro\Internet Security 14\TMAS_OL\TMAS_OLImp.exe"
321040 Aug 4 2006 "C:\Program Files\Trend Micro\Internet Security 14\TMAS_OE\bak\TMAS_OEMon.exe"
63712 Mar 9 2007 "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe"
57344 Jun 6 2005 "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\bak\apdproxy.exe"


end of report

BC AdBot (Login to Remove)

 


#2 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,734 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:08:06 AM

Posted 16 February 2008 - 05:17 PM

Double-click the FindAWF icon once again.
  • If a "Security Alert" shows, allow the program to run.
  • A command prompt will open and ask you to "Press any key to continue...".
  • You will be presented with a Menu.
  • Press 2 then 'Enter' to restore files from bak folders
  • A text file named files.txt will then open.
  • Click below the line and copy/paste the following list of files in the quote box into the text file:

"C:\Program Files\Dell Photo AIO Printer 924\bak\dlccmon.exe"
"C:\Program Files\DellSupport\bak\DSAgnt.exe"
"C:\Program Files\iTunes\bak\iTunesHelper.exe"
"C:\Program Files\Password Keychain\bak\Passkeychain.exe"
"C:\Program Files\QuickTime\bak\qttask.exe"
"C:\Program Files\Windows Defender\bak\MSASCui.exe"
"C:\WINDOWS\ehome\bak\ehtray.exe"
"C:\WINDOWS\system32\bak\ctfmon.exe"
"C:\Program Files\ATI Technologies\ATI Control Panel\bak\atiptaxx.exe"
"C:\Program Files\Dell\Media Experience\bak\DMXLauncher.exe"
"C:\Program Files\Dell Support Center\bin\bak\sprtcmd.exe"
"C:\Program Files\Bellsouth\HelpCenter\bin\bak\sprtcmd.exe"
"C:\Program Files\Google\GoogleToolbarNotifier\bak\GoogleToolbarNotifier.exe"
"C:\Program Files\Intel\Intel Matrix Storage Manager\bak\iaanotif.exe"
"C:\Program Files\MUSICMATCH\Musicmatch Jukebox\bak\mm_tray.exe"
"C:\Program Files\Trend Micro\Internet Security 14\bak\pccguide.exe"
"C:\Program Files\Yahoo!\Messenger\bak\YAHOOM~1.EXE"
"C:\WINDOWS\system32\DLA\bak\DLACTRLW.EXE"
"C:\Program Files\Adobe\Reader 8.0\Reader\bak\Reader_sl.exe"
"C:\Program Files\Dell Support Center\bin\bak\sprtcmd.exe"
"C:\Program Files\Bellsouth\HelpCenter\bin\bak\sprtcmd.exe"
"C:\Program Files\Common Files\InstallShield\UpdateService\bak\issch.exe"
"C:\Program Files\Common Files\InstallShield\UpdateService\bak\isuspm.exe"
"C:\Program Files\Common Files\Real\Update_OB\bak\realsched.exe"
"C:\Program Files\Dell Support Center\gs_agent\custom\bak\dsca.exe"
"C:\Program Files\Java\jre1.6.0_03\bin\bak\jusched.exe"
"C:\Program Files\Trend Micro\Internet Security 14\TMAS_OE\bak\TMAS_OEMon.exe"
"C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\bak\apdproxy.exe"

  • Close the text file and click Yes to save the changes. Once files.txt is saved, FindAWF does the following:
    • It attempts to terminate the process represented by each filename on the list (if running).
    • Deletes the rogue file from the parent folder (if present).
    • Copies the original file to the parent folder.
  • When done, it automatically runs a new scan and opens a new log.
  • Please copy/paste the contents of the new awf.txt log in your reply.

.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#3 msrc2

msrc2
  • Topic Starter

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:07:06 AM

Posted 16 February 2008 - 06:32 PM

Thank you so much for your help!

After step 1:


Find AWF report by noahdfear 2006
Version 1.40
Option 2 run successfully

The current date is: Sat 02/16/2008
The current time is: 17:32:27.79


bak folders found
~~~~~~~~~~~


Directory of C:\PROGRA~1\DELLPH~1\BAK

10/21/2005 02:40 AM 430,080 dlccmon.exe
1 File(s) 430,080 bytes

Directory of C:\PROGRA~1\DELLSU~1\BAK

03/15/2007 10:09 AM 460,784 DSAgnt.exe
1 File(s) 460,784 bytes

Directory of C:\PROGRA~1\ITUNES\BAK

01/15/2008 03:22 AM 267,048 iTunesHelper.exe
1 File(s) 267,048 bytes

Directory of C:\PROGRA~1\MESSEN~1\BAK

0 File(s) 0 bytes

Directory of C:\PROGRA~1\PASSWO~1\BAK

03/04/2002 08:44 PM 1,434,112 Passkeychain.exe
1 File(s) 1,434,112 bytes

Directory of C:\PROGRA~1\QUICKT~1\BAK

01/10/2008 03:27 PM 385,024 qttask.exe
1 File(s) 385,024 bytes

Directory of C:\PROGRA~1\WIFD1F~1\BAK

11/03/2006 05:20 PM 866,584 MSASCui.exe
1 File(s) 866,584 bytes

Directory of C:\WINDOWS\EHOME\BAK

09/29/2005 02:01 PM 67,584 ehtray.exe
1 File(s) 67,584 bytes

Directory of C:\WINDOWS\SYSTEM32\BAK

08/10/2004 05:00 AM 15,360 ctfmon.exe
1 File(s) 15,360 bytes

Directory of C:\PROGRA~1\ATITEC~1\ATICON~1\BAK

08/05/2005 09:05 PM 344,064 atiptaxx.exe
1 File(s) 344,064 bytes

Directory of C:\PROGRA~1\DELL\MEDIAE~1\BAK

10/05/2005 03:12 AM 94,208 DMXLauncher.exe
1 File(s) 94,208 bytes

Directory of C:\PROGRA~1\DELLSU~2\BIN\BAK

11/15/2007 09:23 AM 202,544 sprtcmd.exe
1 File(s) 202,544 bytes

Directory of C:\PROGRA~1\GOOGLE\GOOGLE~4\BAK

07/25/2007 11:43 PM 68,856 GoogleToolbarNotifier.exe
1 File(s) 68,856 bytes

Directory of C:\PROGRA~1\INTEL\INTELM~1\BAK

06/17/2005 07:56 AM 139,264 iaanotif.exe
1 File(s) 139,264 bytes

Directory of C:\PROGRA~1\MUSICM~1\MUSICM~3\BAK

09/08/2005 07:20 PM 110,592 mm_tray.exe
1 File(s) 110,592 bytes

Directory of C:\PROGRA~1\TRENDM~1\INTERN~2\BAK

11/21/2006 01:02 PM 1,807,960 pccguide.exe
1 File(s) 1,807,960 bytes

Directory of C:\PROGRA~1\YAHOO!\MESSEN~1\BAK

03/27/2007 02:22 PM 4,670,968 YAHOOM~1.EXE
1 File(s) 4,670,968 bytes

Directory of C:\WINDOWS\SYSTEM32\DLA\BAK

09/08/2005 05:20 AM 122,940 DLACTRLW.EXE
1 File(s) 122,940 bytes

Directory of C:\PROGRA~1\ADOBE\READER~1.0\READER\BAK

10/10/2007 06:51 PM 39,792 Reader_sl.exe
1 File(s) 39,792 bytes

Directory of C:\PROGRA~1\BELLSO~1\HELPCE~1\BIN\BAK

10/30/2006 11:00 AM 192,512 sprtcmd.exe
1 File(s) 192,512 bytes

Directory of C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\BAK

06/10/2005 10:44 AM 81,920 issch.exe
06/10/2005 10:44 AM 249,856 isuspm.exe
2 File(s) 331,776 bytes

Directory of C:\PROGRA~1\COMMON~1\REAL\UPDATE~1\BAK

05/26/2006 11:12 AM 180,269 realsched.exe
1 File(s) 180,269 bytes

Directory of C:\PROGRA~1\DELLSU~2\GS_AGENT\CUSTOM\BAK

11/15/2007 09:24 AM 16,384 dsca.exe
1 File(s) 16,384 bytes

Directory of C:\PROGRA~1\JAVA\JRE16~3.0_0\BIN\BAK

09/25/2007 12:11 AM 132,496 jusched.exe
1 File(s) 132,496 bytes

Directory of C:\PROGRA~1\TRENDM~1\INTERN~2\TMAS_OE\BAK

08/04/2006 03:15 PM 321,040 TMAS_OEMon.exe
1 File(s) 321,040 bytes

Directory of C:\PROGRA~1\ADOBE\PHOTOS~1\3.0\APPS\BAK

06/06/2005 10:46 PM 57,344 apdproxy.exe
1 File(s) 57,344 bytes


Duplicate files of bak directory contents
~~~~~~~~~~~~~~~~~~~~~~~

430080 Oct 21 2005 "C:\Program Files\Dell Photo AIO Printer 924\dlccmon.exe"
430080 Oct 21 2005 "C:\Program Files\Dell Photo AIO Printer 924\bak\dlccmon.exe"
460784 Mar 15 2007 "C:\Program Files\DellSupport\DSAgnt.exe"
460784 Mar 15 2007 "C:\Program Files\DellSupport\bak\DSAgnt.exe"
267048 Jan 15 2008 "C:\Program Files\iTunes\iTunesHelper.exe"
267048 Jan 15 2008 "C:\Program Files\iTunes\bak\iTunesHelper.exe"
102400 Jan 15 2008 "C:\WINDOWS\Installer\{B85C4D19-6CEB-48CF-BD98-C887AC8C6F94}\iTunesIco.exe"
36808256 Dec 26 2006 "C:\Documents and Settings\Michael S. Rich\My Documents\Software Downloads\iTunesSetup 7.0.exe"
79144 Jan 15 2008 "C:\Documents and Settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 7.6.0.29\iTunesSetupAdmin.exe"
116024 Aug 4 2007 "C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\S1AZ85EZ\iTunesSetupAdmin[1].exe"
1434112 Mar 4 2002 "C:\Program Files\Password Keychain\Passkeychain.exe"
1434112 Mar 4 2002 "C:\Program Files\Password Keychain\bak\Passkeychain.exe"
385024 Jan 10 2008 "C:\Program Files\QuickTime\qttask.exe"
385024 Jan 10 2008 "C:\Program Files\QuickTime\bak\qttask.exe"
866584 Nov 3 2006 "C:\Program Files\Windows Defender\MSASCui.exe"
866584 Nov 3 2006 "C:\Program Files\Windows Defender\bak\MSASCui.exe"
59392 Aug 10 2004 "C:\WINDOWS\$NtUninstallKB900325$\ehtray.exe"
64512 Aug 5 2005 "C:\WINDOWS\$NtUninstallKB908246$\ehtray.exe"
67584 Sep 29 2005 "C:\WINDOWS\ehome\ehtray.exe"
67584 Sep 29 2005 "C:\WINDOWS\ehome\bak\ehtray.exe"
15360 Aug 10 2004 "C:\WINDOWS\system32\ctfmon.exe"
15360 Aug 10 2004 "C:\WINDOWS\system32\bak\ctfmon.exe"
344064 Aug 5 2005 "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
344064 Aug 5 2005 "C:\Program Files\ATI Technologies\ATI Control Panel\bak\atiptaxx.exe"
94208 Oct 5 2005 "C:\Program Files\Dell\Media Experience\DMXLauncher.exe"
94208 Oct 5 2005 "C:\Program Files\Dell\Media Experience\bak\DMXLauncher.exe"
202544 Nov 15 2007 "C:\Program Files\Dell Support Center\bin\sprtcmd.exe"
192512 Oct 30 2006 "C:\Program Files\Bellsouth\HelpCenter\bin\sprtcmd.exe"
202544 Nov 15 2007 "C:\Program Files\Dell Support Center\bin\bak\sprtcmd.exe"
192512 Oct 30 2006 "C:\Program Files\Bellsouth\HelpCenter\bin\bak\sprtcmd.exe"
159755 May 22 2006 "C:\WINDOWS\Google Pack Screensaver Uninstaller.exe"
52272 Jan 31 2007 "C:\Program Files\Google\googletoolbar5user.exe"
113080 Aug 13 2006 "C:\Program Files\Google\Google Updater\GoogleUpdater.exe"
458820 Nov 17 2005 "C:\Program Files\Google\Google Earth\GoogleEarth.exe"
68856 Jul 25 2007 "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
331264 May 21 2006 "C:\Documents and Settings\Michael S. Rich\My Documents\Software Downloads\Google Pack Installer.exe"
138168 Jan 31 2007 "C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe"
68856 Jul 25 2007 "C:\Program Files\Google\GoogleToolbarNotifier\bak\GoogleToolbarNotifier.exe"
421888 Dec 8 2005 "G:\wd_windows_tools\Google\GoogleInstaller.exe"
755816 Nov 12 2005 "G:\wd_windows_tools\Google\Desktop\GoogleDesktopSearchSetup_de.exe"
562160 Nov 7 2005 "G:\wd_windows_tools\Google\Toolbar\W2KXP\GoogleToolbarInstaller_da.exe"
708080 Nov 7 2005 "G:\wd_windows_tools\Google\Toolbar\Win9XMe\GoogleToolbarInstaller_da.exe"
139264 Jun 17 2005 "C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe"
139264 Jun 17 2005 "C:\Program Files\Intel\Intel Matrix Storage Manager\bak\iaanotif.exe"
110592 Sep 8 2005 "C:\Program Files\MUSICMATCH\Musicmatch Jukebox\mm_tray.exe"
110592 Sep 8 2005 "C:\Program Files\MUSICMATCH\MUSICMATCH Update\MMJB\mm_tray.exe"
110592 Sep 8 2005 "C:\Program Files\MUSICMATCH\Musicmatch Jukebox\bak\mm_tray.exe"
1807960 Sep 18 2006 "C:\Setup\Module\pccguide.exe"
1807960 Nov 21 2006 "C:\Program Files\Trend Micro\Internet Security 14\pccguide.exe"
1807960 Nov 21 2006 "C:\Program Files\Trend Micro\Internet Security 14\bak\pccguide.exe"
4670968 Mar 27 2007 "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe"
4670968 Mar 27 2007 "C:\Program Files\Yahoo!\Messenger\bak\YAHOOM~1.EXE"
122940 Sep 8 2005 "C:\WINDOWS\system32\DLA\DLACTRLW.EXE"
122940 Sep 8 2005 "C:\Program Files\Roxio\DLA\install\dlactrlw.exe"
122940 Sep 8 2005 "C:\WINDOWS\system32\DLA\bak\DLACTRLW.EXE"
39792 Oct 10 2007 "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
39792 Oct 10 2007 "C:\Program Files\Adobe\Reader 8.0\Reader\bak\Reader_sl.exe"
202544 Nov 15 2007 "C:\Program Files\Dell Support Center\bin\sprtcmd.exe"
192512 Oct 30 2006 "C:\Program Files\Bellsouth\HelpCenter\bin\sprtcmd.exe"
202544 Nov 15 2007 "C:\Program Files\Dell Support Center\bin\bak\sprtcmd.exe"
192512 Oct 30 2006 "C:\Program Files\Bellsouth\HelpCenter\bin\bak\sprtcmd.exe"
81920 Jun 10 2005 "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe"
81920 Jun 10 2005 "C:\Program Files\Common Files\InstallShield\UpdateService\bak\issch.exe"
249856 Jun 10 2005 "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe"
249856 Jun 10 2005 "C:\Program Files\Common Files\InstallShield\UpdateService\bak\isuspm.exe"
180269 May 26 2006 "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"
180269 May 26 2006 "C:\Program Files\Common Files\Real\Update_OB\bak\realsched.exe"
16384 Nov 15 2007 "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe"
16384 Nov 15 2007 "C:\Program Files\Dell Support Center\gs_agent\custom\bak\dsca.exe"
32881 Nov 19 2003 "C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe"
36975 Nov 10 2005 "C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe"
49263 Nov 9 2006 "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
49263 Oct 12 2006 "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
75520 Dec 15 2006 "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
83608 Mar 14 2007 "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
132496 Jul 12 2007 "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
132496 Sep 25 2007 "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
132496 Sep 25 2007 "C:\Program Files\Java\jre1.6.0_03\bin\bak\jusched.exe"
480784 Aug 4 2006 "C:\Program Files\Trend Micro\Internet Security 14\TMAS_OE\TMAS_OEImp.exe"
493072 Aug 4 2006 "C:\Program Files\Trend Micro\Internet Security 14\TMAS_OL\TMAS_OLImp.exe"
321040 Aug 4 2006 "C:\Program Files\Trend Micro\Internet Security 14\TMAS_OE\bak\TMAS_OEMon.exe"
57344 Jun 6 2005 "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
63712 Mar 9 2007 "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe"
57344 Jun 6 2005 "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\bak\apdproxy.exe"


end of report

#4 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,734 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:08:06 AM

Posted 17 February 2008 - 08:07 AM

Double-click the FindAWF icon once again.
  • A command prompt will open and ask you to "Press any key to continue...".
  • You will be presented with a Menu.
  • Press 3 then 'Enter' to remove bak folders.
  • A text file named files.txt will then open.
  • Click below the line and copy/paste the following list of folders in the quote box into the text file:

C:\Program Files\Dell Photo AIO Printer 924\bak
C:\Program Files\DellSupport\bak
C:\Program Files\iTunes\bak
C:\Program Files\Password Keychain\bak
C:\Program Files\QuickTime\bak
C:\Program Files\Windows Defender\bak
C:\WINDOWS\ehome\bak
C:\WINDOWS\system32\bak
C:\Program Files\ATI Technologies\ATI Control Panel\bak
C:\Program Files\Dell\Media Experience\bak
C:\Program Files\Dell Support Center\bin\bak
C:\Program Files\Bellsouth\HelpCenter\bin\bak
C:\Program Files\Google\GoogleToolbarNotifier\bak
C:\Program Files\Intel\Intel Matrix Storage Manager\bak
C:\Program Files\MUSICMATCH\Musicmatch Jukebox\bak
C:\Program Files\Trend Micro\Internet Security 14\bak
C:\Program Files\Yahoo!\Messenger\bak
C:\WINDOWS\system32\DLA\bak
C:\Program Files\Adobe\Reader 8.0\Reader\bak
C:\Program Files\Dell Support Center\bin\bak
C:\Program Files\Bellsouth\HelpCenter\bin\bak
C:\Program Files\Common Files\InstallShield\UpdateService\bak
C:\Program Files\Common Files\Real\Update_OB\bak
C:\Program Files\Dell Support Center\gs_agent\custom\bak
C:\Program Files\Java\jre1.6.0_03\bin\bak
C:\Program Files\Trend Micro\Internet Security 14\TMAS_OE\bak
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\bak

  • Close the text file and click Yes to save the changes.
  • When done, it automatically runs a new scan and opens a new log.
  • Please copy/paste the contents of the new awf.txt log in your reply.

.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users