Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Hijackthis Log. Please Help Diagnose


  • This topic is locked This topic is locked
22 replies to this topic

#1 arkle

arkle

  • Members
  • 46 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:10:00 AM

Posted 19 June 2007 - 05:04 AM

Hi, After all kinds of problems with my computer, mainly with hanging and unresponsiveness, And doing all sorts of scans, I have finally arrived at this site and would be very grateful for any advice on the following log.


Logfile of HijackThis v1.99.1
Scan saved at 00:20:36, on 17/06/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\system32\drivers\dcfssvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Spyware Doctor\svcntaux.exe
C:\WINDOWS\system32\sstray.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Spyware Doctor\swdsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\WINDOWS\system32\cidaemon.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\sstray.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\Spyware Doctor\SDTrayApp.exe
C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\Paul\Desktop\hijackthis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 213.105.224.4:8080
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - (no file)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - (no file)
O2 - BHO: (no name) - {BDF3E430-B101-42AD-A544-FADC6B084872} - (no file)
O3 - Toolbar: (no name) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - (no file)
O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [SDTray] "C:\Program Files\Spyware Doctor\SDTrayApp.exe"
O4 - HKCU\..\Run: [PopUpStopperFreeEdition] "C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: bet365 Poker - {B1BA4A3F-1C95-497b-9F82-F8DA4A5C89DD} - C:\Program Files\bet365MPP\MPPoker.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {1663ed61-23eb-11d2-b92f-008048fdd814} (MeadCo ScriptX Basic) - http://www.expertagent.co.uk/asp/ScriptX.cab
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - https://www-secure.symantec.com/techsupp/asa/LSSupCtl.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedC...bin/AvSniff.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by110fd.bay110.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/...lscbase8300.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedC...n/bin/cabsa.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1132571409031
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/Secur...loadManager.ocx
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmesse...pdownloader.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://www-secure.symantec.com/techsupp/asa/SymAData.cab
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/...482/mcfscan.cab
O16 - DPF: {FFFF0018-0001-101A-A3C9-08002B2F49FB} - http://www.topfreepornsex.com/sexsex/freepornsex.exe
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Dcfssvc - Eastman Kodak Company - C:\WINDOWS\system32\drivers\dcfssvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Spyware Doctor Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: Spyware Doctor Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\PROGRA~1\COMMON~1\SONYSH~1\AVLib\Sptisrv.exe

Thank you very much, paul

BC AdBot (Login to Remove)

 


#2 DaveM59

DaveM59

    Bleepin' Grandpa


  • Members
  • 1,355 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:TN USA
  • Local time:03:00 AM

Posted 27 June 2007 - 03:00 PM

Hi arkle,

Sorry for the delay, this forum is very busy right now.

If you still need help, please do the following:

I can see no evidence that you have any antivirus software installed. If this is the case, you need to install an antivirus program immediately. Please download one of these free programs:


AVG Free is available at this site.

Avast Home Edition is available here.

Avira AntiVir can be downloaded here.


I personally use AVG Free, but all these programs have good reputations. If you don't like one, you can try another. Please consult the help files or online support for information on installing, updating, and using the program.

Once you have installed and updated an Antivirus, run a full system scan. Save the report and post it to your next reply.

Next item: you are running HijackThis from your desktop. This is bad because backups can be accidentally deleted. Please install a copy in its own folder, as follows:
First, delete the HijackThis file currently on your computer.

Then, download the self-extracting installation file here. Save it to your desktop.

Next, double-click the HijackThis_SFX.exe file icon. A window will open. Accept the default installation folder by clicking Unzip on the right side of the window.

Navigate to the program by double clicking My Computer, C:, Program Files. Find the HijackThis folder and double-click it to open.

If you would like to make a shortcut for your Desktop so it's more easily accessible, right click the HijackThis icon (it looks like a detonator with some dynamite sticks) and choose Send To > Desktop (create shortcut) .
Open HijackThis and run a scan. Place a check next to the following line:

O16 - DPF: {FFFF0018-0001-101A-A3C9-08002B2F49FB} - http://www.topfreepornsex.com/sexsex/freepornsex.exe


Make sure all other windows are closed, and there are no programs -- especially your browser -- running minimized in your system tray. Then click Fix checked.

I see another line in the log:

O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present

Unless these restrictions were placed there by Spyware Doctor, you should fix this line as well.

After fixing the line(s) in HijackThis, reboot your computer. Run a HijackThis scan, and save the log. Leave HijackThis open.

Then click Config, click Misc Tools
Click "Open Uninstall Manager"
Click "Save List" (generates uninstall_list.txt)
Click Save, copy and paste the results in your next post.
More information with a screenshot, can be found here.

Post the uninstall list, the HJT log, and the antivirus program log to your next reply.

Dave

#3 arkle

arkle
  • Topic Starter

  • Members
  • 46 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:10:00 AM

Posted 29 June 2007 - 06:22 PM

Hi, Thank you for your reply.
I have followed the instructions and please find below the uninstall list, and the HJT log.
You say there is no evidence of any antivirus software, but I do have Spyware Doctor installed and running, its just possible that my son disabled it temporarily just before I posted my last HJT log.
I installed AVG Free and ran a full scan which showed nothing wrong whatsoever, and then uninstalled it and ran Spyware Doctor which showed 13 tracking cookies, low risk and 3 trojans, high risk, which it dealt with.
I have also run spybot which said all clear.
I am not clear what you mean by 'antivirus program log' as I could not find any reference to it on either of the above mentioned scanners .

Adobe Acrobat 5.0
Adobe Flash Player 9 ActiveX
Adobe Photoshop 7.0
AngelPotion Video Codec V1
ASF-AVI-RM-WMV Repair 1.82
bet365poker
Betfair Poker
CCleaner (remove only)
Demo Virtual EVE
Get into French
GomezPEER
HijackThis 1.99.1
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows XP (KB896344)
Hotfix for Windows XP (KB914440)
Hotfix for Windows XP (KB915865)
Hotfix for Windows XP (KB926239)
HP Digital Photo Advisor
HP Image Zone 5.0
HP Imaging Device Functions 5.0
hp instant support
HP Photo and Imaging 1.0 - PSC 2000 Series
HP Photo and Imaging 1.0 - PSC 2000 Series
HP Photo and Imaging 1.0 - PSC 2000 Series Drivers
HP Photosmart Cameras 5.0
HP Software Update
HP Solution Center & Imaging Support Tools 5.0
ImageMixer VCD/DVD2 for OLYMPUS
Interactive User’s Guide
InterActual Player
J2SE Runtime Environment 5.0 Update 10
J2SE Runtime Environment 5.0 Update 11
J2SE Runtime Environment 5.0 Update 2
J2SE Runtime Environment 5.0 Update 5
J2SE Runtime Environment 5.0 Update 6
J2SE Runtime Environment 5.0 Update 9
Java 2 Runtime Environment, SE v1.4.2_05
Java™ SE Runtime Environment 6 Update 1
Kodak EasyShare software
Macromedia Shockwave Player
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Hotfix (KB886903)
Microsoft .NET Framework 2.0
Microsoft Base Smart Card Cryptographic Service Provider Package
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Data Access Components KB870669
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Office XP Professional with FrontPage
Microsoft User-Mode Driver Framework Feature Pack 1.0
MSXML 4.0 SP2 (KB925672)
MSXML 4.0 SP2 (KB927978)
Music Visualizer Library 1.4.00
NTI CD-Maker 2000 Plus
NVIDIA Drivers
OLYMPUS Master
OpenMG Limited Patch 3.1-02-10-22-01
OpenMG Limited Patch 3.1-02-10-22-02
OpenMG Limited Patch 3.1-02-12-04-01
OpenMG Secure Module 3.1
Pacific Poker
Pop-Up Stopper Free Edition
PowerDVD
QuickTime
Readiris 7.5
Security Update for CAPICOM (KB931906)
Security Update for CAPICOM (KB931906)
Security Update for Microsoft .NET Framework 2.0 (KB917283)
Security Update for Microsoft .NET Framework 2.0 (KB922770)
Security Update for Windows Internet Explorer 7 (KB928090)
Security Update for Windows Internet Explorer 7 (KB929969)
Security Update for Windows Internet Explorer 7 (KB931768)
Security Update for Windows Internet Explorer 7 (KB933566)
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player 10 (KB911565)
Security Update for Windows Media Player 10 (KB917734)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows XP (KB883939)
Security Update for Windows XP (KB890046)
Security Update for Windows XP (KB893756)
Security Update for Windows XP (KB896358)
Security Update for Windows XP (KB896422)
Security Update for Windows XP (KB896423)
Security Update for Windows XP (KB896424)
Security Update for Windows XP (KB896428)
Security Update for Windows XP (KB896688)
Security Update for Windows XP (KB899587)
Security Update for Windows XP (KB899588)
Security Update for Windows XP (KB899591)
Security Update for Windows XP (KB900725)
Security Update for Windows XP (KB901017)
Security Update for Windows XP (KB901214)
Security Update for Windows XP (KB902400)
Security Update for Windows XP (KB903235)
Security Update for Windows XP (KB904706)
Security Update for Windows XP (KB905414)
Security Update for Windows XP (KB905749)
Security Update for Windows XP (KB905915)
Security Update for Windows XP (KB908519)
Security Update for Windows XP (KB908531)
Security Update for Windows XP (KB911280)
Security Update for Windows XP (KB911562)
Security Update for Windows XP (KB911567)
Security Update for Windows XP (KB911927)
Security Update for Windows XP (KB912812)
Security Update for Windows XP (KB912919)
Security Update for Windows XP (KB913446)
Security Update for Windows XP (KB913580)
Security Update for Windows XP (KB914388)
Security Update for Windows XP (KB914389)
Security Update for Windows XP (KB916281)
Security Update for Windows XP (KB917159)
Security Update for Windows XP (KB917344)
Security Update for Windows XP (KB917422)
Security Update for Windows XP (KB917953)
Security Update for Windows XP (KB918118)
Security Update for Windows XP (KB918439)
Security Update for Windows XP (KB918899)
Security Update for Windows XP (KB919007)
Security Update for Windows XP (KB920213)
Security Update for Windows XP (KB920214)
Security Update for Windows XP (KB920670)
Security Update for Windows XP (KB920683)
Security Update for Windows XP (KB920685)
Security Update for Windows XP (KB921398)
Security Update for Windows XP (KB921883)
Security Update for Windows XP (KB922616)
Security Update for Windows XP (KB922760)
Security Update for Windows XP (KB922819)
Security Update for Windows XP (KB923191)
Security Update for Windows XP (KB923414)
Security Update for Windows XP (KB923689)
Security Update for Windows XP (KB923694)
Security Update for Windows XP (KB923980)
Security Update for Windows XP (KB924191)
Security Update for Windows XP (KB924270)
Security Update for Windows XP (KB924496)
Security Update for Windows XP (KB924667)
Security Update for Windows XP (KB925486)
Security Update for Windows XP (KB925902)
Security Update for Windows XP (KB926255)
Security Update for Windows XP (KB926436)
Security Update for Windows XP (KB927779)
Security Update for Windows XP (KB927802)
Security Update for Windows XP (KB928255)
Security Update for Windows XP (KB928843)
Security Update for Windows XP (KB929123)
Security Update for Windows XP (KB930178)
Security Update for Windows XP (KB931261)
Security Update for Windows XP (KB931784)
Security Update for Windows XP (KB932168)
Security Update for Windows XP (KB935839)
Security Update for Windows XP (KB935840)
SonicStage 1.5.03
Spybot - Search & Destroy 1.4
Spyware Doctor 5.0
Star Wars™: Knights of the Old Republic ™
Toca2
Ulead COOL 3D 3.0
Update for Windows XP (KB894391)
Update for Windows XP (KB896727)
Update for Windows XP (KB898461)
Update for Windows XP (KB900485)
Update for Windows XP (KB904942)
Update for Windows XP (KB910437)
Update for Windows XP (KB916595)
Update for Windows XP (KB920342)
Update for Windows XP (KB920872)
Update for Windows XP (KB922582)
Update for Windows XP (KB927891)
Update for Windows XP (KB929338)
Update for Windows XP (KB930916)
Update for Windows XP (KB931836)
Windows Genuine Advantage v1.3.0254.0
Windows Installer 3.1 (KB893803)
Windows Installer 3.1 (KB893803)
Windows Internet Explorer 7
Windows Live Messenger
Windows Live OneCare safety scanner
Windows Live Sign-in Assistant
Windows Media Format 11 runtime
Windows Media Format 11 runtime
Windows Media Format SDK Hotfix - KB891122
Windows Media Player 11
Windows Media Player 11
Windows XP Hotfix - KB834707
Windows XP Hotfix - KB867282
Windows XP Hotfix - KB873333
Windows XP Hotfix - KB873339
Windows XP Hotfix - KB885250
Windows XP Hotfix - KB885835
Windows XP Hotfix - KB885836
Windows XP Hotfix - KB885884
Windows XP Hotfix - KB886185
Windows XP Hotfix - KB887472
Windows XP Hotfix - KB887742Adobe Acrobat 5.0
Adobe Flash Player 9 ActiveX
Adobe Photoshop 7.0
AngelPotion Video Codec V1
ASF-AVI-RM-WMV Repair 1.82
bet365poker
Betfair Poker
CCleaner (remove only)
Demo Virtual EVE
Get into French
GomezPEER
HijackThis 1.99.1
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows XP (KB896344)
Hotfix for Windows XP (KB914440)
Hotfix for Windows XP (KB915865)
Hotfix for Windows XP (KB926239)
HP Digital Photo Advisor
HP Image Zone 5.0
HP Imaging Device Functions 5.0
hp instant support
HP Photo and Imaging 1.0 - PSC 2000 Series
HP Photo and Imaging 1.0 - PSC 2000 Series
HP Photo and Imaging 1.0 - PSC 2000 Series Drivers
HP Photosmart Cameras 5.0
HP Software Update
HP Solution Center & Imaging Support Tools 5.0
ImageMixer VCD/DVD2 for OLYMPUS
Interactive User’s Guide
InterActual Player
J2SE Runtime Environment 5.0 Update 10
J2SE Runtime Environment 5.0 Update 11
J2SE Runtime Environment 5.0 Update 2
J2SE Runtime Environment 5.0 Update 5
J2SE Runtime Environment 5.0 Update 6
J2SE Runtime Environment 5.0 Update 9
Java 2 Runtime Environment, SE v1.4.2_05
Java™ SE Runtime Environment 6 Update 1
Kodak EasyShare software
Macromedia Shockwave Player
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Hotfix (KB886903)
Microsoft .NET Framework 2.0
Microsoft Base Smart Card Cryptographic Service Provider Package
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Data Access Components KB870669
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Office XP Professional with FrontPage
Microsoft User-Mode Driver Framework Feature Pack 1.0
MSXML 4.0 SP2 (KB925672)
MSXML 4.0 SP2 (KB927978)
Music Visualizer Library 1.4.00
NTI CD-Maker 2000 Plus
NVIDIA Drivers
OLYMPUS Master
OpenMG Limited Patch 3.1-02-10-22-01
OpenMG Limited Patch 3.1-02-10-22-02
OpenMG Limited Patch 3.1-02-12-04-01
OpenMG Secure Module 3.1
Pacific Poker
Pop-Up Stopper Free Edition
PowerDVD
QuickTime
Readiris 7.5
Security Update for CAPICOM (KB931906)
Security Update for CAPICOM (KB931906)
Security Update for Microsoft .NET Framework 2.0 (KB917283)
Security Update for Microsoft .NET Framework 2.0 (KB922770)
Security Update for Windows Internet Explorer 7 (KB928090)
Security Update for Windows Internet Explorer 7 (KB929969)
Security Update for Windows Internet Explorer 7 (KB931768)
Security Update for Windows Internet Explorer 7 (KB933566)
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player 10 (KB911565)
Security Update for Windows Media Player 10 (KB917734)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows XP (KB883939)
Security Update for Windows XP (KB890046)
Security Update for Windows XP (KB893756)
Security Update for Windows XP (KB896358)
Security Update for Windows XP (KB896422)
Security Update for Windows XP (KB896423)
Security Update for Windows XP (KB896424)
Security Update for Windows XP (KB896428)
Security Update for Windows XP (KB896688)
Security Update for Windows XP (KB899587)
Security Update for Windows XP (KB899588)
Security Update for Windows XP (KB899591)
Security Update for Windows XP (KB900725)
Security Update for Windows XP (KB901017)
Security Update for Windows XP (KB901214)
Security Update for Windows XP (KB902400)
Security Update for Windows XP (KB903235)
Security Update for Windows XP (KB904706)
Security Update for Windows XP (KB905414)
Security Update for Windows XP (KB905749)
Security Update for Windows XP (KB905915)
Security Update for Windows XP (KB908519)
Security Update for Windows XP (KB908531)
Security Update for Windows XP (KB911280)
Security Update for Windows XP (KB911562)
Security Update for Windows XP (KB911567)
Security Update for Windows XP (KB911927)
Security Update for Windows XP (KB912812)
Security Update for Windows XP (KB912919)
Security Update for Windows XP (KB913446)
Security Update for Windows XP (KB913580)
Security Update for Windows XP (KB914388)
Security Update for Windows XP (KB914389)
Security Update for Windows XP (KB916281)
Security Update for Windows XP (KB917159)
Security Update for Windows XP (KB917344)
Security Update for Windows XP (KB917422)
Security Update for Windows XP (KB917953)
Security Update for Windows XP (KB918118)
Security Update for Windows XP (KB918439)
Security Update for Windows XP (KB918899)
Security Update for Windows XP (KB919007)
Security Update for Windows XP (KB920213)
Security Update for Windows XP (KB920214)
Security Update for Windows XP (KB920670)
Security Update for Windows XP (KB920683)
Security Update for Windows XP (KB920685)
Security Update for Windows XP (KB921398)
Security Update for Windows XP (KB921883)
Security Update for Windows XP (KB922616)
Security Update for Windows XP (KB922760)
Security Update for Windows XP (KB922819)
Security Update for Windows XP (KB923191)
Security Update for Windows XP (KB923414)
Security Update for Windows XP (KB923689)
Security Update for Windows XP (KB923694)
Security Update for Windows XP (KB923980)
Security Update for Windows XP (KB924191)
Security Update for Windows XP (KB924270)
Security Update for Windows XP (KB924496)
Security Update for Windows XP (KB924667)
Security Update for Windows XP (KB925486)
Security Update for Windows XP (KB925902)
Security Update for Windows XP (KB926255)
Security Update for Windows XP (KB926436)
Security Update for Windows XP (KB927779)
Security Update for Windows XP (KB927802)
Security Update for Windows XP (KB928255)
Security Update for Windows XP (KB928843)
Security Update for Windows XP (KB929123)
Security Update for Windows XP (KB930178)
Security Update for Windows XP (KB931261)
Security Update for Windows XP (KB931784)
Security Update for Windows XP (KB932168)
Security Update for Windows XP (KB935839)
Security Update for Windows XP (KB935840)
SonicStage 1.5.03
Spybot - Search & Destroy 1.4
Spyware Doctor 5.0
Star Wars™: Knights of the Old Republic ™
Toca2
Ulead COOL 3D 3.0
Update for Windows XP (KB894391)
Update for Windows XP (KB896727)
Update for Windows XP (KB898461)
Update for Windows XP (KB900485)
Update for Windows XP (KB904942)
Update for Windows XP (KB910437)
Update for Windows XP (KB916595)
Update for Windows XP (KB920342)
Update for Windows XP (KB920872)
Update for Windows XP (KB922582)
Update for Windows XP (KB927891)
Update for Windows XP (KB929338)
Update for Windows XP (KB930916)
Update for Windows XP (KB931836)
Windows Genuine Advantage v1.3.0254.0
Windows Installer 3.1 (KB893803)
Windows Installer 3.1 (KB893803)
Windows Internet Explorer 7
Windows Live Messenger
Windows Live OneCare safety scanner
Windows Live Sign-in Assistant
Windows Media Format 11 runtime
Windows Media Format 11 runtime
Windows Media Format SDK Hotfix - KB891122
Windows Media Player 11
Windows Media Player 11
Windows XP Hotfix - KB834707
Windows XP Hotfix - KB867282
Windows XP Hotfix - KB873333
Windows XP Hotfix - KB873339
Windows XP Hotfix - KB885250
Windows XP Hotfix - KB885835
Windows XP Hotfix - KB885836
Windows XP Hotfix - KB885884
Windows XP Hotfix - KB886185
Windows XP Hotfix - KB887472
Windows XP Hotfix - KB887742
Windows XP Hotfix - KB888113
Windows XP Hotfix - KB888302
Windows XP Hotfix - KB890047
Windows XP Hotfix - KB890175
Windows XP Hotfix - KB890859
Windows XP Hotfix - KB890923
Windows XP Hotfix - KB891781
Windows XP Hotfix - KB893066

Logfile of HijackThis v1.99.1
Scan saved at 23:09:55, on 27/06/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\system32\drivers\dcfssvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Spyware Doctor\svcntaux.exe
C:\Program Files\Spyware Doctor\swdsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\sstray.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\Spyware Doctor\SDTrayApp.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =

http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =

http://www.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =

http://www.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} -

C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -

C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper -

{9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common

Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE

C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program

Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [SDTray] "C:\Program Files\Spyware Doctor\SDTrayApp.exe"
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE

C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [PopUpStopperFreeEdition]

"C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: E&xport to Microsoft Excel -

res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -

C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console -

{08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program

Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84}

- C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: bet365 Poker - {B1BA4A3F-1C95-497b-9F82-F8DA4A5C89DD} -

C:\Program Files\bet365MPP\MPPoker.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} -

%windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 -

{e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network

Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} -

C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger -

{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program

Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O12 - Plugin for .spop: C:\Program Files\Internet

Explorer\Plugins\NPDocBox.dll
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) -

http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {1663ed61-23eb-11d2-b92f-008048fdd814} (MeadCo ScriptX Basic) -

http://www.expertagent.co.uk/asp/ScriptX.cab
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) -

https://www-secure.symantec.com/techsupp/asa/LSSupCtl.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus

scanner) -

http://security.symantec.com/sscv6/SharedC...bin/AvSniff.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) -

http://by110fd.bay110.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety

Center Base Module) -

http://cdn.scan.onecare.live.com/resource/...lscbase8300.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility

Class) -

http://security.symantec.com/sscv6/SharedC...n/bin/cabsa.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) -

http://www.update.microsoft.com/microsoftu...s/en/x86/client

/muweb_site.cab?1182460317031
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) -

https://h17000.www1.hp.com/ewfrf-JAVA/Secur...loadManager.ocx
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF}

(MsnMessengerSetupDownloadControl Class) -

http://messenger.msn.com/download/msnmesse...pdownloader.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) -

https://www-secure.symantec.com/techsupp/asa/SymAData.cab
O16 - DPF: {E8F628B5-259A-4734-97EE-BA914D7BE941} (Driver Agent ActiveX

Control) - http://driveragent.com/files/driveragent.cab
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) -

http://download.mcafee.com/molbin/iss-loc/...fscan/2,0,0,448

2/mcfscan.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} -

C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} -

C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} -

C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Dcfssvc - Eastman Kodak Company -

C:\WINDOWS\system32\drivers\dcfssvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation -

C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Spyware Doctor Auxiliary Service (sdAuxService) - PC Tools -

C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: Spyware Doctor Service (sdCoreService) - PC Tools -

C:\Program Files\Spyware Doctor\swdsvc.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation -

C:\PROGRA~1\COMMON~1\SONYSH~1\AVLib\Sptisrv.exe


Windows XP Hotfix - KB893086
Windows XP Service Pack 2
WordBiz version 1.7

Thank you very much, paul.

#4 DaveM59

DaveM59

    Bleepin' Grandpa


  • Members
  • 1,355 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:TN USA
  • Local time:03:00 AM

Posted 29 June 2007 - 09:10 PM

Hi Paul,

It looks like that O16 is gone. Good job! :thumbsup:

Spyware Doctor is an excellent antispyware program, but it is not an antivirus. You need both. Please reinstall AVG, update it, and start using it. Read the information on the AVG web pages to set up the program for automatic updates.

Another issue is that I see no evidence of a firewall on your computer. You may have the built-in Windows firewall enabled, however that only blocks unauthorized traffic into your computer. It is better to use a third-party software firewall, which can block unauthorised traffic both out of and into your computer. I recommend you download and install one of these excellent (and free) products:

Zone Alarm

Sygate

Outpost Firewall Free

Kerio personal firewall

For more information about firewalls, please read this tutorial.


You still have several earlier versions of Java installed on the computer. Earlier versions have serious security vulnerabilities. Click Start, Control Panel, then double click Add/Remove Programs. When the list is populated scroll down to these entries:
  • J2SE Runtime Environment 5.0 Update 10
  • J2SE Runtime Environment 5.0 Update 11
  • J2SE Runtime Environment 5.0 Update 2
  • J2SE Runtime Environment 5.0 Update 5
  • J2SE Runtime Environment 5.0 Update 6
  • J2SE Runtime Environment 5.0 Update 9
  • Java 2 Runtime Environment, SE v1.4.2_05
Highlight one of these entries and select Remove, then follow the prompts to complete the removal. Repeat for each item on the list.

Your Uninstall list also shows several gambling and/or porn programs. The use of these programs is your prerogative, but I should warn you that these types of programs often come bundled with spyware or adware. Websites that feature such content are dangerous no matter how good your security software is.

That's all I'm seeing in your new logs. There are no signs of malware. However, the Spyware Doctor Trojan report needs a little followup.

Please download Combofix to your desktop.
Doubleclick combo.exe to launch the application.
Follow the prompts that will be displayed on the screen.
Don't click on the window while the fix is running, because that will cause your system to hang.
When finished, it should produce a log, combofix.txt.
Post this log in your next reply together with a new hijackthislog.

Note: before copying and pasting the log files, please click on Format in the Notepad menu bar, and make sure that Word Wrap is Unchecked. This will make the files much easier to read.

Dave

#5 arkle

arkle
  • Topic Starter

  • Members
  • 46 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:10:00 AM

Posted 02 July 2007 - 06:22 AM

Many thanks for all your help so far, here is the Combofix log as requested.
"Paul" - 2007-07-02 11:55:49 - ComboFix 07-06-27.7 - Service Pack 2 NTFS


((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))


C:\WINDOWS\System33
C:\WINDOWS\System33\authz.dll
C:\WINDOWS\System33\autodisc.dll
C:\WINDOWS\System33\AUTOEXEC.NT
C:\WINDOWS\System33\autolfn.exe
C:\WINDOWS\System33\AUTPRX32.DLL
C:\WINDOWS\System33\avicap.dll
C:\WINDOWS\System33\avicap32.dll
C:\WINDOWS\System33\avifil32.dll
C:\WINDOWS\System33\avifile.dll
C:\WINDOWS\System33\avmeter.dll
C:\WINDOWS\System33\avtapi.dll
C:\WINDOWS\System33\avwav.dll
C:\WINDOWS\System33\basesrv.dll
C:\WINDOWS\System33\batmeter.dll
C:\WINDOWS\System33\bidispl.dll
C:\WINDOWS\System33\c_437.nls
C:\WINDOWS\System33\c_500.nls
C:\WINDOWS\System33\error.exe
C:\WINDOWS\System33\Settings.xml
C:\WINDOWS\System33\svchost.exe
C:\WINDOWS\System33\www.cnn.com.exe


((((((((((((((((((((((((( Files Created from 2007-06-02 to 2007-07-02 )))))))))))))))))))))))))))))))


2007-07-02 11:07 49,152 --a------ C:\WINDOWS\nircmd.exe
2007-06-26 22:47 <DIR> d-------- C:\Program Files\Windows Media Connect 2
2007-06-26 22:44 <DIR> d-------- C:\WINDOWS\system32\LogFiles
2007-06-26 22:44 <DIR> d-------- C:\WINDOWS\system32\drivers\UMDF
2007-06-26 21:11 23,600 --a------ C:\WINDOWS\system32\drivers\TVICHW32.SYS
2007-06-26 21:02 81,768 --a------ C:\WINDOWS\system32\xinput1_3.dll
2007-06-26 21:02 62,744 --a------ C:\WINDOWS\system32\xinput1_2.dll
2007-06-26 21:02 443,752 --a------ C:\WINDOWS\system32\d3dx10_34.dll
2007-06-26 21:02 443,752 --a------ C:\WINDOWS\system32\d3dx10_33.dll
2007-06-26 21:02 3,497,832 --a------ C:\WINDOWS\system32\d3dx9_34.dll
2007-06-26 21:02 3,495,784 --a------ C:\WINDOWS\system32\d3dx9_33.dll
2007-06-26 21:02 266,088 --a------ C:\WINDOWS\system32\xactengine2_8.dll
2007-06-26 21:02 261,480 --a------ C:\WINDOWS\system32\xactengine2_7.dll
2007-06-26 21:02 255,848 --a------ C:\WINDOWS\system32\xactengine2_6.dll
2007-06-26 21:02 251,672 --a------ C:\WINDOWS\system32\xactengine2_5.dll
2007-06-26 21:02 237,848 --a------ C:\WINDOWS\system32\xactengine2_4.dll
2007-06-26 21:02 236,824 --a------ C:\WINDOWS\system32\xactengine2_3.dll
2007-06-26 21:02 2,414,360 --a------ C:\WINDOWS\system32\d3dx9_31.dll
2007-06-26 21:02 2,297,552 --a------ C:\WINDOWS\system32\d3dx9_26.dll
2007-06-26 21:02 18,280 --a------ C:\WINDOWS\system32\x3daudio1_2.dll
2007-06-26 21:02 15,128 --a------ C:\WINDOWS\system32\x3daudio1_1.dll
2007-06-26 21:02 1,124,720 --a------ C:\WINDOWS\system32\D3DCompiler_34.dll
2007-06-26 21:02 1,123,696 --a------ C:\WINDOWS\system32\D3DCompiler_33.dll
2007-06-26 20:59 <DIR> d--h----- C:\WINDOWS\msdownld.tmp
2007-06-26 19:26 664 --a------ C:\WINDOWS\system32\d3d9caps.dat
2007-06-25 01:28 <DIR> d-------- C:\DOCUME~1\THEKIN~1\APPLIC~1\Uniblue
2007-06-23 22:50 <DIR> d-------- C:\{90000052-0001-0000-617E-A89E3DE2C9FE}
2007-06-23 22:50 <DIR> d-------- C:\{80006AA6-0000-0000-D07E-FBDD478CDEB0}
2007-06-23 22:21 <DIR> d-------- C:\{80010297-0000-0000-D80E-5DCC4D912F39}
2007-06-23 22:21 <DIR> d-------- C:\{8000D315-0000-0000-71CE-66DB47966D8A}
2007-06-23 22:21 <DIR> d-------- C:\{8000D2BA-0000-0000-25F4-1C118F207382}
2007-06-23 22:21 <DIR> d-------- C:\{80006AA6-0000-0000-9F0C-60CF8B5AD045}
2007-06-23 22:21 <DIR> d-------- C:\{800011F8-0000-0000-FE9E-39A7A1F58418}
2007-06-22 13:29 <DIR> d-------- C:\DOCUME~1\Paul\APPLIC~1\gtopala
2007-06-21 22:00 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\PC Drivers Headquarters
2007-06-19 13:39 <DIR> d-------- C:\DOCUME~1\Paul\APPLIC~1\SpywareBot
2007-06-12 23:57 <DIR> d-------- C:\DOCUME~1\THEKIN~1\Contacts
2007-06-12 10:47 <DIR> d-------- C:\DOCUME~1\Paul\Contacts
2007-06-12 10:45 <DIR> d----c--- C:\WINDOWS\system32\DRVSTORE
2007-06-05 00:43 9,600 --a------ C:\WINDOWS\system32\drivers\hidusb.sys
2007-06-05 00:43 12,160 --a------ C:\WINDOWS\system32\drivers\mouhid.sys
2007-06-03 00:04 1,894 --a------ C:\WINDOWS\system32\tmp.reg
2007-06-03 00:01 53,248 --a------ C:\WINDOWS\system32\Process.exe
2007-06-03 00:01 51,200 --a------ C:\WINDOWS\system32\dumphive.exe
2007-06-03 00:01 288,417 --a------ C:\WINDOWS\system32\SrchSTS.exe
2007-06-02 17:05 83,536 --a------ C:\WINDOWS\system32\drivers\iksyssec.sys
2007-06-02 17:05 59,984 --a------ C:\WINDOWS\system32\drivers\iksysflt.sys
2007-06-02 17:05 52,304 --a------ C:\WINDOWS\system32\drivers\ikfilesec.sys
2007-06-02 17:05 39,248 --a------ C:\WINDOWS\system32\drivers\ikfileflt.sys
2007-06-02 17:05 26,064 --a------ C:\WINDOWS\system32\drivers\kcom.sys
2007-06-02 17:04 <DIR> d-------- C:\Program Files\Spyware Doctor
2007-06-02 17:02 626,688 --a------ C:\WINDOWS\system32\msvcr80.dll
2007-06-02 09:46 <DIR> d-a------ C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP


(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

2007-06-23 21:57:42 -------- d-----w C:\Program Files\Windows Live Safety Center
2007-06-23 21:50:02 -------- d-----w C:\Program Files\Kazaa
2007-06-21 21:10:32 -------- d--h--w C:\Program Files\InstallShield Installation Information
2007-06-12 09:46:54 -------- d-----w C:\Program Files\MSN Messenger
2007-06-08 23:55:41 23,408 ----a-w C:\WINDOWS\system32\GDIPFONTCACHEV1.DAT
2007-06-07 19:07:02 -------- d-----w C:\Program Files\PCPitstop
2007-06-06 12:57:33 -------- d-----w C:\Program Files\Editor
2007-06-06 12:56:55 -------- d-----w C:\Program Files\Bet-IE v2
2007-06-03 09:35:40 -------- d-----w C:\Program Files\test
2007-06-02 21:32:11 -------- d-----w C:\Program Files\Common Files\Symantec Shared
2007-05-30 21:44:21 4 ----a-w C:\WINDOWS\bytespersecond.dat
2007-05-16 15:12:02 683,520 ----a-w C:\WINDOWS\system32\inetcomm.dll
2007-05-11 00:27:36 -------- d-----w C:\Program Files\Microsoft CAPICOM 2.1.0.2
2007-04-25 14:21:15 144,896 ----a-w C:\WINDOWS\system32\schannel.dll
2007-04-18 16:12:23 2,854,400 ----a-w C:\WINDOWS\system32\msi.dll
2007-04-16 21:47:36 33,624 ----a-w C:\WINDOWS\system32\wups.dll
2007-04-16 21:45:54 1,710,936 ----a-w C:\WINDOWS\system32\wuaueng.dll
2007-04-16 21:45:48 549,720 ----a-w C:\WINDOWS\system32\wuapi.dll
2007-04-16 21:45:42 325,976 ----a-w C:\WINDOWS\system32\wucltui.dll
2007-04-16 21:45:36 203,096 ----a-w C:\WINDOWS\system32\wuweb.dll
2007-04-16 21:45:28 92,504 ----a-w C:\WINDOWS\system32\cdm.dll
2007-04-16 21:45:20 53,080 ----a-w C:\WINDOWS\system32\wuauclt.exe
2007-04-16 21:45:20 43,352 ----a-w C:\WINDOWS\system32\wups2.dll
2007-04-16 21:44:20 271,224 ----a-w C:\WINDOWS\system32\mucltui.dll
2007-04-16 21:43:40 208,248 ----a-w C:\WINDOWS\system32\muweb.dll


((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))


*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects]
{53707962-6F74-2D53-2644-206D7942484F}=C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2005-05-31 01:04]
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}=C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll [2007-03-14 03:43]
{9030D464-4C02-4ABF-8ECC-5164760863C6}=C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2006-08-31 20:33]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"nForce Tray Options"="sstray.exe" [2003-06-02 05:30 C:\WINDOWS\system32\sstray.exe]
"SDTray"="C:\Program Files\Spyware Doctor\SDTrayApp.exe" [2007-05-17 12:02]
"nwiz"="nwiz.exe" [2006-10-22 12:22 C:\WINDOWS\system32\nwiz.exe]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe" [2007-03-14 03:43]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PopUpStopperFreeEdition"="C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe" [2003-10-29 12:01]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 08:56]

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"ALUAlert"=C:\Program Files\Symantec\LiveUpdate\ALUNotify.exe

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\sdauxservice]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\sdcoreservice]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
"C:\Program Files\Messenger\msmsgs.exe" /background

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
"C:\Program Files\QuickTime\qttask.exe" -atboottime


Contents of the 'Scheduled Tasks' folder
2005-02-12 23:26:18 C:\WINDOWS\tasks\FRU Task #Hewlett-Packard#hp psc 2100 series#1099523951.job
2007-07-01 02:00:00 C:\WINDOWS\tasks\SpywareBot Scheduled Scan.job

**************************************************************************

catchme 0.3.721 W2K/XP/Vista - userland rootkit detector by Gmer, http://www.gmer.net
Rootkit scan 2007-07-02 12:02:05
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************

Completion time: 2007-07-02 12:03:25
C:\ComboFix-quarantined-files.txt ... 2007-07-02 12:03

--- E O F ---

#6 DaveM59

DaveM59

    Bleepin' Grandpa


  • Members
  • 1,355 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:TN USA
  • Local time:03:00 AM

Posted 02 July 2007 - 02:02 PM

Hi again Paul,

Could you please post fresh HijackThis log.

Combofix shows you had a backdoor on your system. It appears to be a newer variant of the one described in this writeup.

A backdoor gives a hacker access to your computer, including any and all personal information, such as passwords, logon IDs, and account numbers. Since we are not sure about this computer, please go to a clean computer and change all your passwords. Notify your bank, credit card companies, and other institutions that you may be a victim of identity theft.
Here are some links:

How Do I Handle Possible Identify Theft, Internet Fraud and CC Fraud?

Security Management - May 2004
Help: I Got Hacked. Now What Do I Do?
http://www.microsoft.com/technet/community...gmt/sm0504.mspx

Security Management - July 2004
Help: I Got Hacked. Now What Do I Do? Part II
http://www.microsoft.com/technet/community...gmt/sm0704.mspx

I noticed these lines in your Combofix log:

2007-06-23 22:50 <DIR> d-------- C:\{90000052-0001-0000-617E-A89E3DE2C9FE}
2007-06-23 22:50 <DIR> d-------- C:\{80006AA6-0000-0000-D07E-FBDD478CDEB0}
2007-06-23 22:21 <DIR> d-------- C:\{80010297-0000-0000-D80E-5DCC4D912F39}
2007-06-23 22:21 <DIR> d-------- C:\{8000D315-0000-0000-71CE-66DB47966D8A}
2007-06-23 22:21 <DIR> d-------- C:\{8000D2BA-0000-0000-25F4-1C118F207382}
2007-06-23 22:21 <DIR> d-------- C:\{80006AA6-0000-0000-9F0C-60CF8B5AD045}
2007-06-23 22:21 <DIR> d-------- C:\{800011F8-0000-0000-FE9E-39A7A1F58418}


Folders with names like these are common, but I don't usually see them in the root directory (C:\).

Do you know what these folders are about? They appear to have been created at about the same time, probably as part of installing or updating a piece of software. If you don't know what they are, could you please navigate to these folders and see if they are empty? If not, please open one or two of them and see if they contain many files. If only a few, please write down the file names. If many, let me know, I'll write a batch file to create a list.

Dave

#7 arkle

arkle
  • Topic Starter

  • Members
  • 46 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:10:00 AM

Posted 03 July 2007 - 07:57 AM

Hi Dave,
Looks like you are saving me from disaster, and I am extremely grateful to you for all your help.
please see below the hjt log as requested.

I have only just read your last reply and have not been to a clean computer as yet, but will be on my way later this afternoon.

With regard to the folders you highlighted, they each contain the following 3 files, DATA.CAB which windows cannot open

Manifest. qrm ditto

Manifest.ini which contains the following




[QUARANTINE]
ID={80010297-0000-0000-D80E-5DCC4D912F39}
VERSION=1.2701
RESOURCES=8
[TIMESTAMP]
VALUE=0x1C7B5DC86EBB3D8
[INFECTION_INFO]
NAME=Trojan:Java/Classloader.D
THREATID=2147549847
[RESOURCE1]
SCHEMA=file
NAME=\\?\C:\Documents and Settings\Paul\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\Counters.zip-705ab05a-7a31f1e5.zip
NAMESIZE=129
ATTRIBUTES=32
PHYSPATH=C:\Documents and Settings\Paul\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\Counters.zip-705ab05a-7a31f1e5.zip
PHYSSIZE=125
[RESOURCE2]
SCHEMA=file
NAME=\\?\C:\Documents and Settings\Paul\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\Counters.zip-296f36d-5902fc79.zip
NAMESIZE=128
ATTRIBUTES=32
PHYSPATH=C:\Documents and Settings\Paul\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\Counters.zip-296f36d-5902fc79.zip
PHYSSIZE=124
[RESOURCE3]
SCHEMA=file
NAME=\\?\C:\Documents and Settings\Paul\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\ar3.jar-71c172b1-51d4cd69.zip
NAMESIZE=124
ATTRIBUTES=32
PHYSPATH=C:\Documents and Settings\Paul\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\ar3.jar-71c172b1-51d4cd69.zip
PHYSSIZE=120
[RESOURCE4]
SCHEMA=file
NAME=\\?\C:\Documents and Settings\Paul\Application Data\Sun\Java\Deployment\cache\6.0\63\3441143f-756dc417
NAMESIZE=103
ATTRIBUTES=32
PHYSPATH=C:\Documents and Settings\Paul\Application Data\Sun\Java\Deployment\cache\6.0\63\3441143f-756dc417
PHYSSIZE=99
[RESOURCE5]
SCHEMA=file
NAME=\\?\C:\Documents and Settings\Paul\Application Data\Sun\Java\Deployment\cache\6.0\44\64a3ff6c-1ca9394d
NAMESIZE=103
ATTRIBUTES=32
PHYSPATH=C:\Documents and Settings\Paul\Application Data\Sun\Java\Deployment\cache\6.0\44\64a3ff6c-1ca9394d
PHYSSIZE=99
[RESOURCE6]
SCHEMA=file
NAME=\\?\C:\Documents and Settings\Paul\Application Data\Sun\Java\Deployment\cache\6.0\35\7cd527a3-29cddbf7
NAMESIZE=103
ATTRIBUTES=32
PHYSPATH=C:\Documents and Settings\Paul\Application Data\Sun\Java\Deployment\cache\6.0\35\7cd527a3-29cddbf7
PHYSSIZE=99
[RESOURCE7]
SCHEMA=file
NAME=\\?\C:\Documents and Settings\David\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\ar3.jar-703dbc67-6dcac985.zip
NAMESIZE=125
ATTRIBUTES=32
PHYSPATH=C:\Documents and Settings\David\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\ar3.jar-703dbc67-6dcac985.zip
PHYSSIZE=121
[RESOURCE8]
SCHEMA=file
NAME=\\?\C:\Documents and Settings\David\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\ar3.jar-3ec2b186-5a6fdab4.zip
NAMESIZE=125
ATTRIBUTES=32
PHYSPATH=C:\Documents and Settings\David\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\ar3.jar-3ec2b186-5a6fdab4.zip
PHYSSIZE=121







Logfile of HijackThis v1.99.1




Scan saved at 13:45:34, on 03/07/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\drivers\dcfssvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Spyware Doctor\svcntaux.exe
C:\Program Files\Spyware Doctor\swdsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\sstray.exe
C:\Program Files\Spyware Doctor\SDTrayApp.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\Program Files\Grisoft\AVG7\avgcc.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
O4 - HKLM\..\Run: [SDTray] "C:\Program Files\Spyware Doctor\SDTrayApp.exe"
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKCU\..\Run: [PopUpStopperFreeEdition] "C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: bet365 Poker - {B1BA4A3F-1C95-497b-9F82-F8DA4A5C89DD} - C:\Program Files\bet365MPP\MPPoker.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {1663ed61-23eb-11d2-b92f-008048fdd814} (MeadCo ScriptX Basic) - http://www.expertagent.co.uk/asp/ScriptX.cab
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - https://www-secure.symantec.com/techsupp/asa/LSSupCtl.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedC...bin/AvSniff.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by110fd.bay110.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/...lscbase8300.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedC...n/bin/cabsa.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftu...b?1182460317031
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/Secur...loadManager.ocx
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmesse...pdownloader.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://www-secure.symantec.com/techsupp/asa/SymAData.cab
O16 - DPF: {E8F628B5-259A-4734-97EE-BA914D7BE941} (Driver Agent ActiveX Control) - http://driveragent.com/files/driveragent.cab
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/...482/mcfscan.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: Dcfssvc - Eastman Kodak Company - C:\WINDOWS\system32\drivers\dcfssvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Spyware Doctor Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: Spyware Doctor Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\PROGRA~1\COMMON~1\SONYSH~1\AVLib\Sptisrv.exe

Edited by arkle, 03 July 2007 - 08:58 AM.


#8 DaveM59

DaveM59

    Bleepin' Grandpa


  • Members
  • 1,355 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:TN USA
  • Local time:03:00 AM

Posted 03 July 2007 - 10:13 PM

Hi again Paul,

Sorry for the delay in answering, it's been a busy day.

The most important order of business for you is to take those precautionary steps I mentioned in my last post. Not only changing all passwords, but also notifying your bank and credit card companies. That backdoor may not have stolen your finanancial data, but it could have. You cannot afford to take a chance.

Okay, back to your current situation.

Thanks for posting the contents of the .ini file Those folders appear to have been created by some malware removal program. They are harmless.

It looks like you removed all the versions of Java including the latest one. Your log now shows MSJava running. This is even older than the Sun java versions I had you remove earlier.

Please download the MSJavaVM removal tool from this web page. Use the link for the Softpedia Secure Download. Download the file to your desktop and double click to run it. Click Yes, then type in a folder to install the files (I suggest C:\Temp). Then navigate to that folder, find the file unmsjvm.exe, and double click the icon to run it. Click yes, then click the I accept radio button, and click Next. When the removal is done click Finish.

After removing that old java version please reinstall the latest version of Sun Java. Open your browser and go to this web page to get the latest version. Scroll dow to the middle of the page where you will find Java Runtime Environment (JRE) 6u2. Click Download which will take you to the secure download page. At the top, select the Accept License Agreement button. Then look to the first block for the J2SE downloads for the Windows Platform. You can choose either the Online or Offline installation version; unless you have several computers you need to upgrade, I suggest the Online version.

Download the file to your desktop, close your browser, and double click the file icon to begin installation.

If you have trouble with the Online installation, you can download the big Offline file and install it with your browser closed.

Finally, please run an online scan. You will have to use Internet Explorer for this.

First go to the Kaspersky online scanner. Accept the terms, let it install an ActiveX program (since you have XP SP2 this is blocked by default, you must allow it), then accept the terms again, let it download the files (about 8 MB total). Click Next, and select "My Computer" as the scan area. Kaspersky takes a long time but it is very thorough. When it is finished, save the report as a text file (easier to work with than an HTML file) to your desktop.

Please post the Kaspersky log and a fresh HJT log in your next reply. Also, let me know how the machine is running.

Dave

Edited by DaveM59, 03 July 2007 - 10:16 PM.


#9 arkle

arkle
  • Topic Starter

  • Members
  • 46 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:10:00 AM

Posted 04 July 2007 - 09:11 AM

Logfile of HijackThis v1.99.1
Scan saved at 14:50:20, on 04/07/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\WINDOWS\system32\drivers\dcfssvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Spyware Doctor\svcntaux.exe
C:\WINDOWS\system32\sstray.exe
C:\Program Files\Spyware Doctor\SDTrayApp.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spyware Doctor\swdsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
O4 - HKLM\..\Run: [SDTray] "C:\Program Files\Spyware Doctor\SDTrayApp.exe"
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKCU\..\Run: [PopUpStopperFreeEdition] "C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\npjpi160_02.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\npjpi160_02.dll
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: bet365 Poker - {B1BA4A3F-1C95-497b-9F82-F8DA4A5C89DD} - C:\Program Files\bet365MPP\MPPoker.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
O16 - DPF: {1663ed61-23eb-11d2-b92f-008048fdd814} (MeadCo ScriptX Basic) - http://www.expertagent.co.uk/asp/ScriptX.cab
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - https://www-secure.symantec.com/techsupp/asa/LSSupCtl.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedC...bin/AvSniff.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by110fd.bay110.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/...lscbase8300.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedC...n/bin/cabsa.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftu...b?1182460317031
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/Secur...loadManager.ocx
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmesse...pdownloader.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://www-secure.symantec.com/techsupp/asa/SymAData.cab
O16 - DPF: {E8F628B5-259A-4734-97EE-BA914D7BE941} (Driver Agent ActiveX Control) - http://driveragent.com/files/driveragent.cab
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/...482/mcfscan.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: Dcfssvc - Eastman Kodak Company - C:\WINDOWS\system32\drivers\dcfssvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Spyware Doctor Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: Spyware Doctor Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\PROGRA~1\COMMON~1\SONYSH~1\AVLib\Sptisrv.exe




Kaspersky Online ScannerWelcome to the Kaspersky Online Scanner! Use it to
scan your PC for viruses and other malware for free
Warning: if you have installed Kaspersky Online Scanner Pro, please
manually uninstall it using "Add/Remove Programs" before installing this
version! Otherwise this version will not function correctly.

Benefits:


Kaspersky Anti-Virus exceptional detection rates and thorough scanning
Hourly AV database updates available each time the Online Scanner is
launched
Heuristic analysis to detect unknown viruses
Simple installation (just click on a link)

Requirements and limitations:


When using this service for the first time, you have to run with
Administrator privileges in order to install the product. Also, you will
need to download and install files about 400 KB in size followed by 9 MB
of virus definitions.
However, if you use the Online Scanner again, you will only need to
download the files that have been updated since your last scan.
The Online Scanner service offered by Kaspersky Lab uses Microsoft ActiveX
technology. Microsoft ActiveX Technology and the Kaspersky Online Scanner
work only with MS Internet Explorer 6.0 or higher.
We cannot guarantee that the Online Scanner will function correctly if you
are using any other browser or any Internet Explorer extensions (such as
AvantBrowser). If you use a different browser, you can use the Kaspersky
File Scanner to scan individual files.
The free Kaspersky Online Scanner does not scan boot sectors and MBRs, so
it cannot detect malicious code located in these areas.
Please note: The free Kaspersky Online Scanner does not protect against
malicious code, and cannot prevent future infections. It only detects
malware that has already penetrated your computer. We strongly recommend
that you install a full antivirus solution to protect your system.

Privacy statement:

The Kaspersky Online Scanner will collect information about the malicious
programs found on your computer during the scanning process. The
information will be sent to the Kaspersky Virus Lab for statistical
purposes. No personal information about you or specific information about
your system will be collected or transmitted to Kaspersky Lab.











Select: All, None, Suspicious Selected objects: 0




Scan settings:
Here you can configure the scanning process.

Scan using the following antivirus database:
standard - detect viruses, worms, Trojans,
rootkits
extended - protect your computer from Spyware,
adware, dialers and potentially dangerous
software such as remote access utilities, prank
programs and jokes. We do not recommend this
option to beginners or inexperienced users.

Scan options:
Scan Archives - scan files inside archives
Note: affects all targets except 'A
File...' scan target.
Scan Mail Bases - scan e-mails/attachments
inside mail base files
Note: affects all targets except 'My
Email' and 'A File...' scan targets.







Initialize Kaspersky Online Scanner
(downloading and installing Kaspersky Online
Scanner ActiveX from the server into your
computer)





Update Kaspersky Anti-Virus Databases [100%]:
(downloading and installing the latest Kaspersky
Anti-Virus Databases)





Please wait to update the virus definitions...
Downloading from url:
ftp://downloads1.kaspersky-labs.com
Downloading remote file: master.xml
Downloading remote file: kavset.xml
Downloading remote file: soft.xml
Downloading remote file: updcfg.xml
Downloading remote file: kernel.avc
Downloading remote file: krnunp.avc
Downloading remote file: krnexe.avc
Downloading remote file: krnmacro.avc
Downloading remote file: krnjava.avc
Downloading remote file: krndos.avc
Downloading remote file: krn001.avc
Downloading remote file: krn002.avc
Downloading remote file: krn003.avc
Downloading remote file: krn004.avc
Downloading remote file: krnexe32.avc
Downloading remote file: krnengn.avc
Downloading remote file: smart.avc
Downloading remote file: ocr.avc
Downloading remote file: chuka.avc
Downloading remote file: fa001.avc
Downloading remote file: base001c.avc
Downloading remote file: base002c.avc
Downloading remote file: base003c.avc
Downloading remote file: base004c.avc
Downloading remote file: base005c.avc
Downloading remote file: base006c.avc
Downloading remote file: base007c.avc
Downloading remote file: base008c.avc
Downloading remote file: base009c.avc
Downloading remote file: base010c.avc
Downloading remote file: base011c.avc
Downloading remote file: base012c.avc
Downloading remote file: base013c.avc
Downloading remote file: base014c.avc
Downloading remote file: base015c.avc
Downloading remote file: base016c.avc
Downloading remote file: base017c.avc
Downloading remote file: base018c.avc
Downloading remote file: base019c.avc
Downloading remote file: base020c.avc
Downloading remote file: base021c.avc
Downloading remote file: base022c.avc
Downloading remote file: base023c.avc
Downloading remote file: base024c.avc
Downloading remote file: base025c.avc
Downloading remote file: base026c.avc
Downloading remote file: base027c.avc
Downloading remote file: base028c.avc
Downloading remote file: base029c.avc
Downloading remote file: dailyc.avc
Downloading remote file: ext001c.avc
Downloading remote file: ext002c.avc
Downloading remote file: ext003c.avc
Downloading remote file: daily-ec.avc
Downloading remote file: base001.avc
Downloading remote file: base002.avc
Downloading remote file: base003.avc
Downloading remote file: base004.avc
Downloading remote file: base005.avc
Downloading remote file: base006.avc
Downloading remote file: base007.avc
Downloading remote file: base008.avc
Downloading remote file: base009.avc
Downloading remote file: base010.avc
Downloading remote file: base011.avc
Downloading remote file: base012.avc
Downloading remote file: base013.avc
Downloading remote file: base014.avc
Downloading remote file: base015.avc
Downloading remote file: base016.avc
Downloading remote file: base017.avc
Downloading remote file: base018.avc
Downloading remote file: base019.avc
Downloading remote file: base020.avc
Downloading remote file: base021.avc
Downloading remote file: base022.avc
Downloading remote file: base023.avc
Downloading remote file: base024.avc
Downloading remote file: base025.avc
Downloading remote file: base026.avc
Downloading remote file: base027.avc
Downloading remote file: base028.avc
Downloading remote file: base029.avc
Downloading remote file: base030.avc
Downloading remote file: base031.avc
Downloading remote file: base032.avc
Downloading remote file: base033.avc
Downloading remote file: base034.avc
Downloading remote file: base035.avc
Downloading remote file: base036.avc
Downloading remote file: base037.avc
Downloading remote file: base038.avc
Downloading remote file: base039.avc
Downloading remote file: base040.avc
Downloading remote file: base041.avc
Downloading remote file: base042.avc
Downloading remote file: base043.avc
Downloading remote file: base044.avc
Downloading remote file: base045.avc
Downloading remote file: base046.avc
Downloading remote file: base047.avc
Downloading remote file: base048.avc
Downloading remote file: base049.avc
Downloading remote file: base050.avc
Downloading remote file: base051.avc
Downloading remote file: base052.avc
Downloading remote file: base053.avc
Downloading remote file: base054.avc
Downloading remote file: base055.avc
Downloading remote file: base056.avc
Downloading remote file: base057.avc
Downloading remote file: base058.avc
Downloading remote file: base059.avc
Downloading remote file: base060.avc
Downloading remote file: base061.avc
Downloading remote file: base062.avc
Downloading remote file: base063.avc
Downloading remote file: base064.avc
Downloading remote file: base065.avc
Downloading remote file: base066.avc
Downloading remote file: base067.avc
Downloading remote file: base068.avc
Downloading remote file: base069.avc
Downloading remote file: base070.avc
Downloading remote file: base071.avc
Downloading remote file: base072.avc
Downloading remote file: base073.avc
Downloading remote file: base074.avc
Downloading remote file: base075.avc
Downloading remote file: base076.avc
Downloading remote file: base077.avc
Downloading remote file: base078.avc
Downloading remote file: base079.avc
Downloading remote file: base080.avc
Downloading remote file: base081.avc
Downloading remote file: base082.avc
Downloading remote file: base083.avc
Downloading remote file: base084.avc
Downloading remote file: base085.avc
Downloading remote file: base086.avc
Downloading remote file: base087.avc
Downloading remote file: base088.avc
Downloading remote file: base089.avc
Downloading remote file: base090.avc
Downloading remote file: base091.avc
Downloading remote file: base092.avc
Downloading remote file: base093.avc
Downloading remote file: base094.avc
Downloading remote file: base095.avc
Downloading remote file: base096.avc
Downloading remote file: base097.avc
Downloading remote file: base098.avc
Downloading remote file: base099.avc
Downloading remote file: base100.avc
Downloading remote file: base101.avc
Downloading remote file: base102.avc
Downloading remote file: base103.avc
Downloading remote file: base104.avc
Downloading remote file: base105.avc
Downloading remote file: base106.avc
Downloading remote file: base107.avc
Downloading remote file: base108.avc
Downloading remote file: base109.avc
Downloading remote file: base110.avc
Downloading remote file: base111.avc
Downloading remote file: base112.avc
Downloading remote file: base113.avc
Downloading remote file: base114.avc
Downloading remote file: base115.avc
Downloading remote file: base116.avc
Downloading remote file: base117.avc
Downloading remote file: base118.avc
Downloading remote file: base119.avc
Downloading remote file: base120.avc
Downloading remote file: base121.avc
Downloading remote file: base122.avc
Downloading remote file: base123.avc
Downloading remote file: base124.avc
Downloading remote file: base125.avc
Downloading remote file: base126.avc
Downloading remote file: base127.avc
Downloading remote file: base128.avc
Downloading remote file: base129.avc
Downloading remote file: base130.avc
Downloading remote file: base131.avc
Downloading remote file: base132.avc
Downloading remote file: base133.avc
Downloading remote file: base134.avc
Downloading remote file: base135.avc
Downloading remote file: base136.avc
Downloading remote file: base137.avc
Downloading remote file: base138.avc
Downloading remote file: base139.avc
Downloading remote file: base140.avc
Downloading remote file: base141.avc
Downloading remote file: base142.avc
Downloading remote file: base143.avc
Downloading remote file: base999.avc
Downloading remote file: unp000.avc
Downloading remote file: unp001.avc
Downloading remote file: unp002.avc
Downloading remote file: unp003.avc
Downloading remote file: unp004.avc
Downloading remote file: unp005.avc
Downloading remote file: unp006.avc
Downloading remote file: unp007.avc
Downloading remote file: unp008.avc
Downloading remote file: unp009.avc
Downloading remote file: unp010.avc
Downloading remote file: unp011.avc
Downloading remote file: unp012.avc
Downloading remote file: unp013.avc
Downloading remote file: unp014.avc
Downloading remote file: unp015.avc
Downloading remote file: unp016.avc
Downloading remote file: unp017.avc
Downloading remote file: unp018.avc
Downloading remote file: unp019.avc
Downloading remote file: unp020.avc
Downloading remote file: unp021.avc
Downloading remote file: unp022.avc
Downloading remote file: unp023.avc
Downloading remote file: unp024.avc
Downloading remote file: unp025.avc
Downloading remote file: unp026.avc
Downloading remote file: unp027.avc
Downloading remote file: unp028.avc
Downloading remote file: unp029.avc
Downloading remote file: unp030.avc
Downloading remote file: unp031.avc
Downloading remote file: unp032.avc
Downloading remote file: unp033.avc
Downloading remote file: unp034.avc
Downloading remote file: unp035.avc
Downloading remote file: unp036.avc
Downloading remote file: unp037.avc
Downloading remote file: unp038.avc
Downloading remote file: daily.avc
Downloading remote file: daily-ex.avc
Downloading remote file: urgent.avc
Downloading remote file: mail.avc
Downloading remote file: ext001.avc
Downloading remote file: ext002.avc
Downloading remote file: ext003.avc
Downloading remote file: ext004.avc
Downloading remote file: ext005.avc
Downloading remote file: ext006.avc
Downloading remote file: ext007.avc
Downloading remote file: ext008.avc
Downloading remote file: ext009.avc
Downloading remote file: ext999.avc
Downloading remote file: gen001.avc
Downloading remote file: gen002.avc
Downloading remote file: gen003.avc
Downloading remote file: gen004.avc
Downloading remote file: gen005.avc
Downloading remote file: gen999.avc
Downloading remote file: ca.avc
Downloading remote file: fa.avc
Downloading remote file: eicar.avc
Downloading remote file: verdicts.ini
Downloading remote file: engine.dt
Downloading remote file: engine.cfg
Downloading remote file: avcmhk5.mhk
Downloading remote file: black.lst
Downloading remote file: avp.set
Downloading remote file: avp_ext.set
Downloading remote file: avp_x.set
Downloading remote file: avp.vnd
Downloading remote file: avp.klb
Downloading remote file: soft.ver
Update finished. Ready to scan.
Next
Please select a target to scan:
You can configure the scanning process by
pressing "Scan Settings" button.



Critical Areas
scan critical areas of your hard disks
specified in %windir% and %tmp% system variables
Memory
scan disk modules of running processes
My Computer
scan all your hard and mapped disks
My Email
scan all your hard and mapped disks only for the
following extensions: *.PST; *.MSG; *.OST;
*.MDB; *.DBX; *.EML; *.MBS
Folders...
scan selected folders
A File...
scan a one file





Warning: The Kaspersky Online Scanner may not
run successfully while any other Anti-Virus
software is running. If you have Anti-Virus
software installed, please disable your AV
protection before running the Kaspersky Online
Scanner.
Selected target: My Computer
Source: A:\; C:\; D:\; E:\; F:\; G:\; H:\;


Report is empty.
Please note: The free Kaspersky Online Scanner
does not provide comprehensive protection and
cannot prevent future infections. It only
detects malware that has already penetrated your
storage devices. We strongly recommend that you
use a fully-functional antivirus solution to
protect your computer at all times.

Please wait, this process may take a long time
depending on the selected target. If you want to
continue browsing, open a new window.

Scan Progress [99%]:







Total number of scanned objects:83504
Number of viruses found:12
Number of infected objects:61
Number of suspicious objects:0
Duration of the scan process:01:27:16
Stop Scan








Get a Free Trial


Buy Kaspersky Anti-Virus


Help


Virus Encyclopedia


Kaspersky Lab






Product Info
You have Kaspersky Online Scanner version 5.0.93.0
installed. The current anti-virus database was
released on Wednesday, July 04, 2007 and contains
357765 records.

System Info
Operating System: Microsoft Windows XP Home
Edition, Service Pack 2 (Build 2600)Please wait
while the Kaspersky Online Scanner is initializing
and updating...








Copyright © Kaspersky Lab 1997 - 2007
Portions Copyright © Lan Crypto


Hi Dave, All done as recommended and here is the latest hjt log.

The Kaspersky log may not be what you wanted, but I could not find anywhere to create a report as such on the Kaspersky scanning page.

In answer to your other question, 'how is the machine running' ?

from start button to desktop takes about 90seconds.
from clicking windows explorer to opening of home page about 30-90 seconds.
from clicking log off to shut down button 1-2 minutes.

I n general there has been a big improvement and it no longer hangs, freezes or fails to respond like it did, and is almost like its old self.



PS. After the kaspersky scan and hjt scan, the first thing I tried to go on was http://singingpig.co.uk and I got this warning,

critical erreor: unable to open connection to data provider. http://singingpig.co.uk.

Every other thing I have been on has been fine ,so do I assume this is a problem at their end ?.

PPS. my son has just informed me that cisvc.exe comes up everytime he logs on to the machine and its using 100% of processor. dont know if this makes any sense to you ?

Thank you for your help, paul

Edited by arkle, 04 July 2007 - 11:44 AM.


#10 DaveM59

DaveM59

    Bleepin' Grandpa


  • Members
  • 1,355 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:TN USA
  • Local time:03:00 AM

Posted 04 July 2007 - 12:19 PM

Hi Paul,

Glad to hear your computer is running better.

The cisvc.exe report makes a lot of sense, but there are two possibilities. There is a legitimate but optional Windows service by that name which sometimes causes the trouble you describe. However there is also malware that uses that filename as a way to disguise itself. I need more information to find out what the problem is in this case.

Looks like we did not get the information from Kaspersky. Was the scan stopped before it completed by any chance?

Let's try a different scan. Again this one requires Internet Explorer.

Please go HERE to run Panda's ActiveScan
  • Once you are on the Panda site click the Scan your PC button
  • A new window will open...click the Check Now button
  • Enter your Country
  • Enter your State/Province
  • Enter your e-mail address and click send
  • Select either Home User or Company
  • Click the big Scan Now button
  • If it wants to install an ActiveX component allow it
  • It will start downloading the files it requires for the scan (Note: It may take a couple of minutes)
  • When download is complete, click on My Computer to start the scan
  • When the scan completes, if anything malicious is detected, click the See Report button, then Save Report and save it to a convenient location. Post the contents of the ActiveScan report
It sounds like your son has a separate account on this computer. If this is the case, I would like you to log onto his account and run a HijackThis scan. Post the log to your next reply, along with the Panda log. His log will be a little different from the one done while logged onto your account, and it may reveal something about why he is having a problem that you apparently are not.

Dave

#11 arkle

arkle
  • Topic Starter

  • Members
  • 46 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:10:00 AM

Posted 06 July 2007 - 11:09 AM

Hi again Dave,

I did cock up the previous Kaspersky scan, so have done it properly this time, and also a hjt log from my son's account on this machine.


-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Thursday, July 05, 2007 6:12:59 PM
Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.93.0
Kaspersky Anti-Virus database last update: 5/07/2007
Kaspersky Anti-Virus database records: 358697
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
A:\
C:\
D:\
E:\
F:\
G:\
H:\

Scan Statistics:
Total number of scanned objects: 87171
Number of viruses found: 12
Number of infected objects: 47
Number of suspicious objects: 0
Duration of the scan process: 01:50:31

Infected Object Name / Virus Name / Last Action
C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\avg7log.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\avg7log.log.lck Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\003aad97067925131a5f1f8e1a31125c_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\00f1eebc46fabcdc19384aeb3e2d6e64_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\012488cd067ff25e28b3a1c35c634305_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0224ee22225d5c43f80ea4ea8cec338b_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\022d27aa4020088f2a888913cbd006d3_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\02922e16f8dc58088cb08ef9117b0759_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0380beec45daa8058eba7a27a512233a_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\03ea9d7d28b12a5e927970778b142d3d_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\045cbd9e32fb438a7c604ae2a1bc73be_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\04bbbea2a4925d72812e2ae164645626_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\04d011b434fa1c9a7b29d116f1485db0_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0508c76a239a2cfcc49d9d27e96f8939_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0510a898346ef9d0605ee8b38f72dab6_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\059650c0f773546181d39f9c6f1c4989_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0642ca6a8f32c9b191caef104964c9d9_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\06b6783f058b7b6c84a97b499f579158_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\07d6ea295f99b0736ec4f4119cdd458f_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\08a25fa6f419f4397e80997e43991b53_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0a3bf9de0b3b46dfb849147e1c8a2d77_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0a400bf99683eed3e42ad9deeec5d817_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0aaf2b6a5c46c4ac356bfd2f4b4282b5_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0ab8b65d2aa1d02f6e21ab71e26e3e37_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0ae2b809d46ea61b810726eaa63a1480_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0b18fee0572f75f3a79287a52331d9b7_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0b6106a50645382c4a98fb6bb1955190_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0b89eec55e194af35a06bd9d2c90101b_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0ba8a0a4fea67cadf2b8a68e56a5b57c_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0e43d0814eac78020d07430fbb977515_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0e6cbc1e868715581f52ac5c0b56b615_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0eae1c768f8002ada0429f8e280b570a_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0f03526829cb935be9e9e082c0bb0fca_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\0f9d5a5f5b7a847a43c88021a93a3874_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\101a8c624a773d2941c3916826abaa29_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\10e94e534bebcfcf4d94b70b52c467de_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\10f8ce9bcfd448969b5d937cbf3712fe_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\11c438bf2838730a6a2ea891c5289978_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1268f1aa3d915c09864edc24b028bc96_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\12784fa7fe980488dc64fbfcb4945fb1_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\13c020b613da72c01f73e8c64c6d920b_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\15823e8413964a18826ddb72106be19b_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1652c844555a6ddcedc72e4ecc1ef405_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1653877584307aef48134608581584cf_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1661f55d3d137de8a582fe52a8bcead3_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\18a3825027842ef5b0c723d2cc4d9c88_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\18c6b3dddc4c21a79dbb719576b95f42_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1a937737d81c51e2671090a3551bbffd_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1aea24c4b9b374d12f8743008b98cb5e_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1b500dc3d828807f86ca880cf584c166_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1b5bc6bceb6ba88ff38e93fd3f98b1bb_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1b7a283550e0fdeaf33e54ea4e863226_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1cb7b957ca1e70a5f568e254f01a3d16_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1d41f5edc0601720bd4fb78026f779a0_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1e30378b72a8b329907721cf6c95af16_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1e38fe54680e969d248a32c9fe247c87_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1eaa80723e5fb83fbbcd1065e5b6d6cc_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1f688cc002130026b71fd944be394718_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1f8e3cab9d1043e9e49dd41e8c4a0ff9_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1fd0110b4fb540ba43a2ebcec82f6cf4_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1fef91d51a3e4f257b5e535d6addff5b_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\21e9f3f9eb32985e78558936e6866484_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\24cfc453b85f89b225920e81ff72fe8a_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\26457ac57b477e03de3b76bad2f5c6b3_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2661d93c69e9805a9b67cc0ba2995906_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\26ab6e03de9a37cedcb86ecd6af7c8cd_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2700bc464c1a650b228fb6645b7f6ec7_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2706cd57474b6e92bacd25b8fe8d227a_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\272015e3c26766741440fa47f4c91043_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2826f7a4aaac3282983d79128dce3d7c_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\286c92659285b640bb6e9049bd552e99_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\28de55b9195c3eaec4b5857421225515_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\295066801dd35a93a3dc6c73b86a21d3_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2984e5d17dab865435dfc8ddbcb4c9a1_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\29de852f06cedd129a39a6910680194b_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2a096863117449db9488d55637dd0e4f_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2a38877c496ade028494cb733afe5222_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2a6972dd2f21c813d5cd4b25881a7a8c_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2ad272abd4034fd7e5cfe018f623bf1f_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2af11aa05e9cbbb1dea91f1cbc8efd68_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2b480bf5b61a07c4de2bbe3ebd176411_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2bf6012a8c07e12b2b77d1b2638ac3ef_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2cf8db1d1795cc0e80cfcaed2e3f6685_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2d1ecf980b73db7b9da086e4683093f1_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\2d9d73956c850122097b4e118ea08643_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\304c6b9386cb614c65e1974406b1b8d4_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\307a202c06641593448b2e57048f7e3d_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3083149d3886d734f64129af370257ac_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\30a1452f2f94376bfbe434537130f41c_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\31afc060d54653195ad8b12f0067e749_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\320dc4058d52d0c45234ce478fa4be9a_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\33340c28b381a8645d2dfc937f1b3a80_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\348b8144e450aef928d1c568791f2fb6_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\35f1b96227b1960e930c240910412dad_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\36365315f2db793c7105c63766664c4e_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\37ecba911f8184ca7b293644b0dd4f4a_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3829faab15fb446031948d205b99b183_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\398020643c70f999f7978a70455b300f_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3b6d83b3c60e418d0cfff8aaf7ffb71e_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3bb05179b0d907b375ff0d85c5b66adc_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3bc6fb80b3127621bf2d99c66b14bc88_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3beb80328d3439a0fff255deac8f97af_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3ca0172c1b976ef69f945c1be730c0ee_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3cd7f660b250327cd048f0edcf1a0150_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3d079f40dfa6828358e2ccdadc24db78_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3dcad3ad2551c83b9eb800574612ac85_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3e8a22e03a90ed3566d602338d679a8f_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3f8c946dec149374aa9fb58bc9d49c80_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3fb935d017bb2fa5eee9e0d97a0af957_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\405fbf7c761bf1bb42f3b838a63ffd09_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\40fff4553ae647152aae43bd821d9598_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4110722899174123d2389db82a1a8f6d_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\44af6817f409f29c8541bfc0cf97ddf7_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\452a7ee16d7cf5fcdc0ccb927e3431df_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\462cdd96250f308ece24cd23c30122be_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\470961b6a4495f1dbae96bd366b71ea6_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\47f8d22b33f542add1480862f6f9e0de_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4857851fa6602fda17b696576ecbfbe6_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\48c06b234bbf142fae10a28d458acba9_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\48fe909b8ec958f8feaa96cc1c093b9d_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4a134b1ff3c6d7fc2ba05543303137dd_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4aa53699275f08aad5e1badff12d0b0f_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4ac303a8cf8a023b0e6de0266343ceb7_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4bf856365ac3732019ae08ff632c3ae0_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4c1b51ac69809701ded80f7261197315_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4cbb577c75b827db0b13b0df803ea33d_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4cccef1b38696e5c395b21f88d40a146_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4d1b490c9cd858000a36b473bf988b3b_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4d1e3b6c49c4fb6ac036196604b5fe43_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4db4ec32df429b2d18e8e0f50437bff7_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4e23902533ddf8650e3d9f0ebc7afdd1_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4f51ea52c3f0168ce9f11acb439d119e_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\4f9ff6a6f76d3d89ec8411f9a17fe9f6_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\50208362300918f7c3c0229578231936_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5037e34ea079c46f44a131dee2dca561_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\51cfb4ca8b0ac19ee1c46ddd4d7448a4_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\51e2d741309d6c84ed7e3190fce76101_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\52f3e43a9470165a3b0ca9e7ce5e3bfe_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\53570756add804d0ed3ff7dd6b09d6cc_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\53eff272be02e0fa393874974d3844b3_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\54e2d55f09354ff6fee6fca13cdc8194_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5582e6463ae80cf79d52f13c234b1b43_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\55d88f1962e7b2fe361980feb94c3dfe_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\56702bd40d060e03e6f61141ea74b467_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\56ed93019ebdd808c2e5b3b1f1c08739_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\56ff2d48a55ea85de50426d461989a7c_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\57081e915ddcc517c9e04e0a9427651e_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\583fabca2e225844dc35cd169c6e5e9b_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\58cb05bcfe505c0662c6fae9719b50ab_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5998434f17abefde935fd04f3d482ca6_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5a41e50160a7c3a6926e13dbbab1324f_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5ac0dab61f6d12c0e3458073e5e5e374_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5b7c3a5490927e9b97b6db5b2e0d650a_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5ca1f3f0649586fcbfc049d9488d80f0_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5cbfa8723f0059a16c6f8f9e6e23b842_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5cd08526005041c713d9b00366691296_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5d5b675e21ed1086b1c2352b8f6036aa_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5d7365ffaf214a7a6180d2f5a935f87c_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5d8d52226254168fed3465afd0f079dc_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5d9cc18a40cf9ea60bab3771395c22c9_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5e063807aec7ecfa80821515319007ac_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5e7047f11fd8decd1412ba2df756e6eb_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5f866b6bc447ed6e16f66a8354ac61e9_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5fb7be28893122c24e218fe700dfeee1_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5feccb372eddeaeec4ae865f9b591bf4_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6085f31376db23e4fd1383c9fe9226f1_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\609ea27d71e8e8853c5bc4d28f9e81aa_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\60b9ac327d353fecb35449667b6a88b3_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\610cd22e7e20607efa6dfb105f25a0c0_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\612d1928cde5f26414f17741307d02b8_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\617c654870a45466c378010b6213618c_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\618eea74933319e7a8a330e81f59ef2b_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\61a13bf0aa4ddeba19f08fc28554cec1_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\61bfa6d075ef0e6dc0d287c508353be1_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\62a4b78f4bd5773d8105d5906ff1ce24_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\62d8c0ddf78e2fd15cf44da9e63093fd_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\634ea8e3e227671374ee154077ad7c6b_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\63d20ca87381a14f0048d6ecf467bde4_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\641f38e2f40923c71d892fa95cb5f7c0_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6424c8d38421080b9b94fb4f18af73a1_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6506f0b99a001103346bd972322db14b_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6592bfc05b76e40e52c70cc5e74cf90d_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6731cc088c05ff251274d90429652318_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\674517789c3fd02f979afa2687724a31_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\683fb79eb6e818730e19360f78ceade5_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\698ca10c40e243af7e84a09fd780341c_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6a6d2b1e3e58ce0228a38b10778ab27b_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6aa5eed52f6f110e7caad66d809c9040_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6b518f0b35ef4984c87ac4c4126797a2_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6b71f23a3c72df1feebb39c595cb156b_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6b7af6182a4e8ec55b2b7978f4d2f3e1_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6cbd709d0509f36614e71a159d3dcb52_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6ccec5f323646cb633c9847a3cd37a3d_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6cd274a2ad6834520bfd94272263cc41_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6dd6e624b474055154699b909d4499c8_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6e1716c05f85950fe751cd7559114595_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6e96239c3058e028351929148d77f937_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6ea3340f84f67daa91171be7acfca251_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6f392d012ddf4c6b235dfa733bdf50dc_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6face03648292ec9d3878ef0d2cd3564_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6ffe75557a965675d28bd982c53d9c29_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\713fd9decbb6dcfa7b4b64fd3292c44e_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\725b8fa4e33c82e3fad94a50a27a714e_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\72aca0db7502474534468ebe2196f3e2_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\73775e7ec9f099d9c54c5218c15646be_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\73c900aa79a905790c59cbbdf3272feb_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\74bbeb437b8cdbf82755b36dc84ef9b7_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\751c9bbcf42e888c4765d963394bd8e7_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\759d1579f9a8f541ebf2caaed3bb1e8f_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\75cf91f3b1b49467b57a2c257e175b89_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\766ed2867c15034568f6375d5f5ab596_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\76e46bd43adcb06f4d6977594fef49e6_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7706d5671fa891a0857838c1cc1a98ed_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\77c57cd047c57e1a67f323dd88987d7a_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\77f25a6976da6d3dab7f5e88cd648032_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\78b5afa2c600d1cd752a17fb6d648c55_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\78df4dfde8e3146cdd5730e1478767a8_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7a893c352a3a95753a7c9ba2682903ec_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7c66c16a46e9e01acd2aae61ce360b17_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7cd18d8c06027715a3304939a9b8ff40_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7d0201fd082fa84bfdba2dfaac9f03aa_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7df3a69c1a96cc8d2f42883094ecc3cc_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7df42923dd5dff6b73daf02597a83a4a_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7ec0f77e8275d15c792f42c93ca76434_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7fdc844dd7635ca38d0e86d9722400e6_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\80033a99360e0c0c8cd2f39ec98f3a99_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8050cde8d4ac179132a79df958634ea6_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\808e67298faa21b2ba7542afc003c30e_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\80929582213246fc071d2dd768d69017_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\80d03fb3314f77edcd549c48729a919e_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\813783e92fec866bec952c026635b83a_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\81a50ba2b55097503c5244d9ee13fdf2_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\822f694fe5f970a4dcaacf3a331ec3a2_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\82f4b8fb1c25aadab7366750dd317d11_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\83274e470f0b55a2d7c856199dd58c28_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8533ef3ded50bf5eac604147eced63ab_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\858d60a3ed93cc3017fedbc2ee53075b_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\86228e821d9b61f2dc9f5f04d4c1de5a_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8669c62018562e579c2daaf08f1b93f0_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\868770e3a4cecaa558ae24dff5b3f37e_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\869c5e3429874435e5ae717e2c47751b_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\86f431ee021acc3fe645efb8cda1ec53_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\88e3bc373c28bc5c9529d7371b89103f_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\89571ca205862935acbd496e8d1ef2f5_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\89f0e326180b333e301dbffa079297ec_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8aa7adba269c111372545fdf002155a7_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8aec56e66a0c7c558b4dab8d0842af85_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8b99d59c15ce1797c3a788e66f7dc38b_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8c2708bee916b1d43e9bb5af8342e04f_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8c28a63b6f4916efb4ae845a6454b565_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8cb434f151a7637013a1ba3e00855f1e_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8d8b1c7a3454c71168b421bdf92841ad_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8e0a381c72ea62cd2019ab040354008d_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8e8317663486a0144b12e8f349921619_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8e8c7f06272b827c1e1e6ac3c7e1d83a_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8f013a3c16f1f227efc940ca3fb6f3fa_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8f3ee4a780b38802a9cce58c9cc2919d_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\90d1ea9b23ce587ff2b628576b5b0095_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\90e6c37d198579b462218a983012fbcf_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\90ee71869520a0e3498c48953821e8b3_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\90ef998dc63fbafebf52c513c3d5604d_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\91eaf079245404d17583f9f7f384bcdb_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\92866a0060d6feca412c4c26a8ed1488_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9309a475f604228fb1089b405fb00f1b_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\934e80307b163ebcbf7eb612a0bf8fe8_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\94052c2c9a14afcd56984b65021a4b14_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\941de0eccd0ced20c75edfd771007e9d_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\944f7de559d0f7f692c5d14f7cfb79d6_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\946f7210d7b078994fd01884cd712b26_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9486c8a9f17316d5b68df18fbd4242bf_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9543b6a944fea6ffe35b9842b0774e9b_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\962a83f1f654d4011469c80d8cfffbe2_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9665f080be85ee0a42acab8964c0bbee_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\968ddab9c6c9bea8932ed2e7a1d1d0cc_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\96e03e07b81088a29427e964294af574_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9761819dc9116936162e08fdafd1811f_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\97b439170094899bcc4e27474b3fd0f0_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\982ddad7a77fc9ecf3df391024157753_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\984a6ed1ca015048cc20f25094a5ad01_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\993f2b277d588fc026e83c3d9219423e_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9960b594aa1f47c42e40744bc9c7b8b5_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9966abec55f0796a3d82025401eef39f_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\997638612f50601feb85af44e5b718ef_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\99e04dcfc503c2efdf2480ae015407bd_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9b2372cfefb33160ed8a27ba8b904e43_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9b830ea95bae02c171ae33923d4610de_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9d0fa5d62eb7458d84baa1d1501e871c_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9d8aa2c368839ff12963132432c19e6d_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9de45e45695c71e3bce2b9e2719464f6_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9e04175103d5b9edde2b8f2719a4a8be_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9e2acfed72b1e57ca55bcf5eccdaec1c_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9e5c4767c12946721d46bc56745e74be_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9ecf96c9de660acfe68e7c71d2277766_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9eeafc73d1235f0ded64282be97a907d_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9f911f3e3fce467d90d8d9303650c9f0_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\9fecec37020cd095e65bf172ae2ea5dc_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a02e26859741022156173904ba43282c_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a1c737f1d26aba30e5b207115f96cd82_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a2f4333799edef83571bdf5fcbeea78a_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a338d0a747a8fd671802f8ce1de24eca_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a361e47c45ea50174b3048a0e256ba60_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a3ad19641a7f0d89782fcf25418704da_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a3e63be7c752378a387813052b2a8203_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a5213345a561f60e32899a51ab5ff323_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a5af453a84d3b58a2a69469e0c621294_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a64abad68d05e0597ab540d3423cd72c_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a817ea56017b83028183119413b3914a_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a88e84d99e19543e755c5e4b3493bb99_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a88fa13ce4d0dbdb2a6e69c32e432d1c_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a8f6fe787e0f140f89d3ac89e4dc5a0b_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a976fd4358644c5a881df0fb8132e1b4_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a98ed04004e96eee8ccb9aa7ea99db25_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a9d4c77421a2a3f9cb4f0053e8ee6832_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\aa9cf8eda7be3910b96d9f009efa4c9c_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\aa9da5b11a75f6658071b7069ca135a8_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\aaa29de7afd4bf72dee7aee0db9331fa_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\abc9b5b5ac6678000c3d9e757eca8f26_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\abce4e9dbb71f29dd2ff998d8e0c7594_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ac7d45415c4745e9e0a7741f452531ec_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ac81a5072ee26ad375cac597b26e55ec_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ad21f31bed37eaf294c95a35c3a8c371_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ad322895c893540a376e0356a8e0c98f_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ad4e7d1cea5a80a50d3d76809e3ed47a_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ade4d180d9ac5e438e6456b8dfcaf8fd_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ae3d8d26b63ff8f1c8b9f1ff1b67643c_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ae548693232a9c0204a33ca35466bfe4_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\afde5c660f7c37ef87929c0ad32fbecb_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b037b5853ac0391042bc542314f26aa7_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b0fd7200d523ccac21664865d30bce06_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b1251f4a4c72ef5de775e09e405b0c4c_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b150ef818aa662be49ec49adf0da655a_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b16e9dda6ff58b8b3f10268c508baa4d_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b19849b130506150ae6f8ea3879cdb5a_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b1a3458c4acc1fe6f013fae9cf6462fd_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b1fdf4d1ff1af8c1dea09db9c276963e_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b2295bdc48ecda15f2fe1325c048f535_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b29feb516426954cb70c64b81a0c28bb_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b4ef1e7125df503c9c833f04200a6642_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b5441ebc6f759eb3a750ba0010629963_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b6c2719276c51a11e4de20c51d3fc607_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b71bdc4888dd2342379ce30108efd1a6_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b759448f4d68135304f3befeae702e18_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b7c7ba1808f3b4aba199fcc4bd8773f0_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b93278ac2dd96e70377a1e4f6507d0bd_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b98698ad73a3a91e01cc8b6eb1743c0f_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\baed01c36f9d812a4afca8a31896457d_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\be32bf51d14c49044c643738fae46d99_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\be97374b22853407af78dc9b4e5fac73_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\bf3b776fb39036ee428e91b19fe38eba_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\bfdda7f52acda6b975251d860f47e9b8_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c07815e82176a146b4e8631492d1ed21_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c07c267a7f52ceffec0db83197aad5a7_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c24eacfb703c3e86518787fcbcc6acb5_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c28d13a2130a8dffbca1c373325a6c53_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c3dbf3bc803c0041f3625311d85400eb_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c3dcbc60bcff397640a3ec5869f88361_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c72251ed516eb3bd9c45b239dc64ddf0_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c78932733521e6a740abc8501609f547_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c7aec910ebc55f8a18c9f37bf39ca213_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c7d46e0e5afc0284242ceca709978d1b_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c90f7754585bb8acda2cbc8dc901f941_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c96879c38fc6df84621d2edd3a735fee_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\cb4bb41ca51c538d49442cdaa4e4b5e5_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\cbf6a4399e006aeb8ea7eaef8b707089_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\cc1e3a92c5f88f205d7c066fb6098298_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ce186fd6476484bddf7824a7943e1568_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\cf2ae7365df4d41c6b249e924e11f932_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\cff132666b9cc3d20ec2993a4459023d_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d0426668a9c10f81c90e58be8f7ee085_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d068adecdca4a9f2c04dc4d38f37cd74_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d15ead793b8922c69d71184dc9b68d0f_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d176d812060fc5efb746ac01cbe7d588_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d1d7c2b017d7055b30790b14e6b6398d_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d2edf09970b77a3cfa9ba53f815466ef_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d394ec97a4edff3304c30fb05b3d7d70_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d3e1433a42806bd87294531a648eb4dc_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d4e242085fb6aafa9ba946d9bacc7502_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d580a9d10c8223c24520b3eb3c2f3b04_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d5b6f042284b6653a4b59729f7d2819c_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d5efabaaab42dcd794f0a88ee38c6589_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d664055aff21662a22f5665f6987e653_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d6fc2cc5b1ff9ae1d0bc9d63ee1904cd_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d72981fa3c70897b16f1a049552d1d25_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d7b2ab43d2106d8c36a934f175c3bb94_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d8e43d15d0a7903f086edbb57f009a18_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d9d66d7cba1ea860df686387d928ef62_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\da32f637f708d4b78641b59156ececf6_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\da35fc9e8aa1d5b3f91fba2d3a00a3e4_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\da98db4b506051eb3bc2ba981f542df9_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\daafb398ff2ae6391fec4f9300bb3842_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\dd034bfdc518d2afcd095b936c2ded97_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\de04e2cad9953d05c30ffbd7ace9c9ef_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\de6461bbb2d32fc5c48ed1c28c55dc00_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\de7eea281a6936bbc27f4fd12307b963_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ded6de9cff192108068481446567c431_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\df16d08ed724d1689de3982ba796c6f3_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\df4d7c40ee3eb64f5d398b2a0aebc409_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e039dc09c83564554a68b274077800e1_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e0793f13f7f7e9b2e9c0b7b6dd803e51_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e1de548e75fd9cd71c48c4d4060d6c31_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e1f8474a65a2cb3050bdaf1ee0414d6f_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e25cdd3d5b38bbe1a438c8715cbff1ca_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e2730cd3348bcb5f2e47df4d1a2db9db_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e2eebc555c67699ef3d5bd804a1629da_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e316deb1afbf3e20d2a60cfd689dc1f8_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e32a39f0fb5dbc16a5313c5ede1f9f0a_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e3caface1d40e9fb53dfbe85ad0cac64_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e458d92c2ac5be47812930a5ae68d1a7_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e556b8d91a074d80a9041640702d00a6_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e5adc4fcc7d604767f16ad15eae6955d_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e5bd275822c8d1d973c881585cecab74_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e618a3e7e812e42654d44ca54cad861c_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e716000d211c5c51cf16226f99fc9f51_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e754ec8f5ba496a0c1db4f92064b6439_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e79aa6fca35d7049eb31f13bbe14653b_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e9641cc549e254246816372cf2ecce81_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e97e13ecc17445aa568e038a5026a4ec_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e9c62262d17b3bbb86758f91b14d7fab_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ea2ff44e311826442bbeaa7e0a8b2fdb_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\eaa7c88a6f2dcee5ca0dc449520146aa_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\eb3d8ef3550900d97760276ba2535804_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\eb871a7dbe4194ba4b6ec233967b50b5_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ebb89aaa559d236132a564dd9ba3e893_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ebd078b8961aba03990aa0c3a58ccf65_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ed3a2f915ba898926d574bf505924c8e_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ed41eb6547ea326086879f43821213f7_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ed999a12f264fa9b794c499fc026936e_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\edf391c445cf61e341a1cabf473e9b9e_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\edf72444e605dd46aaef864313a908f2_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ee68a81d515982a03bce620a4558ad8a_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\eebc6fb3066262525336df142c584230_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ef36917fc416a2abba8340ccb356843c_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ef57094f481d1d50ddce07db550d61f0_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f0e90c2c6369427e71650495591b0c7f_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f2258e3ca242348c0c561afd051a3b4d_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f2cf1a7d043aed46abb44852318af579_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f3b0b8c870209cc421c2828d0129166d_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f3f82ce58a03b075453e6288ee01fa5e_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f497ede5e440115606f0c23298b4f929_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f552141a907327eadd04d50756bb55ff_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f60e192481304156dd533653d7ff770b_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f61fe164016508917dbc3b044a93fd2e_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f6969a4259db9a873454abe644ca5208_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f6a914a889e913fbc2e3d33a1badf874_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f6bc1236a4c8604ebff985f041387cab_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f6c12487443fef8df6aecbe8bef81037_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f6e1396e211ca220b7bba3bbe8d90aab_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f729d91f2df8443802edcd6c1a14767a_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f736bfc418366c8271d7a05d2563b0e4_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f792f7b651cebf098f8045e7b2ca1190_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f89e07c8464c89453aa129ebc305b693_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f995dc8a2cb51bd4b08f532f5e491be6_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f9981d65cd29b52fad8e2f4c94768c05_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f9ecd2aa72438e00d3ff5ab2b6b1f06c_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\fad029813cdf8e420d9a95060e56e202_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\fb4bf31edbbda0adfbcb6ce39ffaba40_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\fc44c58e8681261516f6cf73ea0434d7_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\fc76fd4212a665103f10efc928583cf5_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\fcb9d82f0387a6cabbcee754b6b293f4_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\fcfb988f34659d522abd53ed377126ad_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\fd7741c9a5d63f08b1205de3bdf3d28b_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\fd89ea26965700c0c5dabdb871879a3d_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ff87051b6a904a9601e3838c8dcb58d4_33aaf8c9-55c9-41c2-a082-ec734a958148 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp Object is locked skipped
C:\Documents and Settings\David\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\ar3.jar-703dbc67-6dcac985.zip/Beyond.class Infected: Trojan.Java.ClassLoader.k skipped
C:\Documents and Settings\David\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\ar3.jar-703dbc67-6dcac985.zip ZIP: infected - 1 skipped
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\Paul\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\Paul\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat Object is locked skipped
C:\Documents and Settings\Paul\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\Paul\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\Paul\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Paul\Local Settings\History\History.IE5\MSHist012007070520070706\index.dat Object is locked skipped
C:\Documents and Settings\Paul\Local Settings\Temp\Acr1AE.tmp Object is locked skipped
C:\Documents and Settings\Paul\Local Settings\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat Object is locked skipped
C:\Documents and Settings\Paul\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Paul\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\Paul\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Command and Conquer Generals Data\MapPreviews\maps_alpine assault_alpine assault.tga Object is locked skipped
C:\Documents and Settings\The king\My Documents\Command and Conquer Generals Data\MapPreviews\maps_tournament desert_tournament desert.tga Object is locked skipped
C:\Documents and Settings\The king\My Documents\Command and Conquer Generals Data\Options.ini Object is locked skipped
C:\Documents and Settings\The king\My Documents\Command and Conquer Generals Data\Replays\00000000.rep Object is locked skipped
C:\Documents and Settings\The king\My Documents\Command and Conquer Generals Data\Replays\erm....rep Object is locked skipped
C:\Documents and Settings\The king\My Documents\Command and Conquer Generals Data\Skirmish.ini Object is locked skipped
C:\Documents and Settings\The king\My Documents\Command and Conquer Generals Data\SkirmishStats.ini Object is locked skipped
C:\Documents and Settings\The king\My Documents\desktop.ini Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\2 hotties.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\Abbraxa-Anal Giant Black Dildo.avi Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\amateur teen tramp gets a creampie surprise (best clip).wmv Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\Anastasia Blue - Big Black Monster Dicks.avi Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\Blonde Porn start Milks black mans Dick (hardcore blowjob sene).wmv Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\bondage_bdsm_chloe.avi Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\Briana Banks Masturbation Scene(1).asf Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\Brunette Forced Deepthroat Anal.mpeg.wmv Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\bukkake_bleepes_15.wmv Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\CTBO - Jewel De Nyle (1).WMV Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\Deep Anal rough sex porn.wmv Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\download113408480010634656.dat Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\drunk sister - Anal bleep.asf Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\Felica Tang uses dildo.wmv Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\female_masturbation.avi Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\fine ass light skinned black bleep bleepin then cum (1).avi Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\gag factor.wmv Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\Home Rape xxx.avi Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\Hot Asian (1).asf Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\Insertion - Fist bleeping.avi Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\interacial whore_blonde with black_deep throat_pussy cum.asf Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\Interracial DP - blonde slut loves getting rammed by two black guys - they don't mind either!.asf Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\Jenna Jameson - Max Hardcore - Cumming-(rare).AVI Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\Jenna Jameson bleeps Briana Banks.avi Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\Jenna-Haze-bleeping-machine-bondage-www.climaxcorner.com.wmv Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\jhh.avi Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\05[1](14).mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\1.mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\18 year old pain.mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\2.mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\20.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\2_2_Sperm- orgy.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\2_Teenie.Slave.(6'35).XXX.BDSM.[engl].mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\3 Männre ficken Frau in den Arsch.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\3.mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\4-11-02.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\4.mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\56.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\69Hotel Rape Gang Bang.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\7_guys_bukkake.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\999.mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\amature bondage slave enema scat.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\amber michaels anal_0.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\american bukkake 17.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Anabolic Abuse RoughSX_1_3g.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Anal Dildo and Cock in the milf pussy.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Anal Dildo Female Ejaculation .mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Anal Sex - my sister bleeping some french prick.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Anal Sex - Perfect Ass.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Anastasia Blue - Blonde Butt bleep bleepes.MPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\anastasia blue - little anal whore(by fat stuff)_0 (1).mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Anastasia Blue-gazg (2 min).mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Anastasia gagging on Max Hardcore-3 an5.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Animal - Brutal Horse bleep.mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\asian porn - sodomised teencum dripping anal.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Ass bleep and Nut on Face.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Assbleep.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\bleep destruction - pierced girl.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Babysitter.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Bald pussy lesbian masterbate_0.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Bang Bus - 32 - Bangbus- Tammy.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Bang Bus - Alex.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\BBW - Forced anal.wmv Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\BDSM - anal dildo, tit torture, clit stretching (Traders Suck, take all you want)!.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\BDSM deepthroat slave torture.mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Best hardcore pussy-ass bleep best ass ever!(9mins).mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\bestblow.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Black Anal Of Blond -dogfart-.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\black First Time Ass bleep.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\black Thai - bleep on the chair.mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\blacks on blondes - white sex slave bleeped good by 18-inch black cock.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Blonde - DP and Double Anal.mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\blonde anal pain.mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Blonde bleep milf brutal-anal.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\blow job forced cum.mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\blow.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\blowfast.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\bob.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\bondage girl forced to swallow cum (1).mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\bondage ropes hogtied.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Briana Bank.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Brunette Anal_slut cornholed_deep throat.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\brutal cock sucker_deep throat_gagger.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\bRUtAL dEEP 4 ON 1 aNaL GANG bANG bleepING.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\brutal-anal momma.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\brutal_forced_blowjob_gag factor_1.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\bukake swallow gallon cum.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Busty Bikini Blonde Deep Throats.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\butt bleeping.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\cindi - 18 tight young firm and a nice ass mexican bleeped.MPEG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Clair gives a face of pain as I ram my hugh cock up her ass.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\COHF - tyra olsen 01.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\cohf snowball from ass.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\College Girl Bukkake I thinks shes going to puke.mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\College Girls - Sorority Initiation.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Cool Anal Rape Of Young French Whore.mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Copy of anal dildo play.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Creamy dreams.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\cs_shelby_06.mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\cum eating spanish slut.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\cum facial vicky.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Cum gag forced throating - xxx.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\cum_drink_-_dina.mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\cum_drink_-_stephanie.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\czech teen first_dp.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Dagny crazy bleep then swallow.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Deep 'n Ass 3 - Daniella Rush - BestPart.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\deep throat balls and cock.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\deepthroat gag cassandra-2.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\dildo - wet - squirting pussy_0.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\dildo-orgasm_03.MPEG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\dogfart black dick white chick.mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\double anal.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Drunk bleep forced to eat cum.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\drunk teen giving a blowjob.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\eastern european anal rape (stomach turner) (1).mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Exploited teens - Diabolic Black White Blonde Girl - Huge dicks in swallowing sluts pussy + ass!!.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\face bleep and vomit-april summers.mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\follar blowjob, anal, dildo double bleep.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\forced IR BJ_extreme_violence.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\free porn blow job.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\French Slut In Anal Gangbang .mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\bleeping_Machine-Tanya (1).mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\funny porn - gag factor 1.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Gag Factor - Messy Gag Choke Blowjob.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Gag on cum.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Gang Bang Rape 03.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Gang Bang Rape 06.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Gang Rape.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\GangBang girls 34 (1) - Hard anal - rimming.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\gauge.mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\German Gang facial - Cassandra appearance.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\German teen forced anal.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\GGG - Amazing Bukkake Cocktail(1).mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\GGG - Bukkake drinking cum of 15 men (1).mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\GGG - Young Anal Self Fistbleep(good).mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\GGG Betty pissed again.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\GGG Tbob's dirty cum eaters.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\ggg-bukkake.mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\GGG-Drunk slut gives head.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\ggg-French Maid (Full Scene) (1).mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\ggg-wire_sex_anal_spanking_cumshot (1) (1).mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Ghetto Gaggers Queeny - Gag 'n' Suck.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\girl drink horse cum.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Girl Licks Ho's bleep Filled With Cum (1).mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\girl sucking horse cum.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Girls bleepting.mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Good horse bleep cum inside.mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Goth - Big tits BJ.mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Gothic angry hoes fighting and bleeping.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Hanna Horse Lover 126.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\hogtied (1).mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\horny teen slut giving blowjob.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\horse facial cum mouth nasty.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Horse huge load cum (1).mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\HORSE PUMPS CUM INTO GIRL.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Horse_bleep lot of cum inside pussy.mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\hot blonde on bed.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Hottie BJ.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\House wife - gag (2).mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\I deep throat - #1.mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\I deep throat - 19 Facial On Bed (1).mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\I Deep Throat - Bent Over Couch.mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\I deep throat - brooke bleep.mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\i deep throat and anal.mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\indian porn tight anal teenager.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\innocent mom tied, forced to suck, and raped in the butt-hole (anal, oral, rape, bondage) xjg57.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\jail rape - oral and anal.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\jersey-jaxin.wmv Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\jeud.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\jeud2.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Jordan Capri Hard bleeping.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Kiki - forced anal.wmv Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\La experta en mamadas y pivita.mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Lesbian 3 teens with anal dildo.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Lesbians Eating Scat (1).mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\liza harper bleep.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\lola sucks a horse.mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Lolita Network - Marella.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Lolita.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Major Cumshots Loads & Laughing.mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\malay anal.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Masturbation - amateur blonde girl on bed.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Max Hardcore - queenylove throat abuse.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\max hardcore bleeping anastasia blue 02.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\megan dildo anal extreme.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\mfx-261 Rape Lesbian Forced 2.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\mid 20's pretty deep ass and a facefull of cum.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Miko Lee (Balls Deep 3) anal dp cumshot.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\milf_vicky_04.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\MMF_rough anal sex_dogfart_interacial.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Monica Sweetheart Swallow.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Morena chupando dos pollas negras.mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\nasty ass to mouth.mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\nikki dial covered in cum (swallow mmmf young dumb full og .mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\nj,mk.mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\pamela ass bleeping.wmv Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\porno sex extreme bleeping hard core slut cum (12).mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\pussy & anal.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Rape - cucumber pain (1).mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\real underground tape.wmv Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Rocco & Isabella_HotEuro3some.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\sophie_evans forced bj 9b.asf Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Teen virgin 14.WMV Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Thumbs.db Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\tight ass bleep_bleeding bleep.asf Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\keep\Violent Throat bleep...mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\ma femme est une salope.avi Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\orgasm.avi Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\part1.mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\part2.mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\pee drink with dildo in ass 0101.mpe Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\Peter North and first Time Swallower.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\porn - Beastiality-Horse Goes Anal.mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\porn - dumb bleep bleep_1.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\Porn - female orgasm.mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\Porn - bleep & Anal Fist.avi Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\Porn Bloopers - Chokes on cum.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\Porn Bloopers - Zoe's anal dildo_0.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\PORN MOVIE - - ANAL SEX ROUGH SEX - VERONICA - .MPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\Porn Movie Beautiful Face bleep.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\Porno - Anal and vaginal fisting (2).mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\Porno - Big Tit Ass bleep.mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\Porno - House wife - gag.mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\Porno 9.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\porno VIOL.avi Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\POV BUKKAKE BLOWJOB FACIAL.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\pretty blonde sodomised teenass bleeped.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\Public Blow Job(3) Group(sex).mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\Pussy squirting from dildo.mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\Queen - Friends Will Be Friends.mp3 Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\queenylove_venuscumbath.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\Rape_simulated_not_real.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\rocco anal rams bikini girls and facials them (1).mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\Rough - Painful Anal Sex Redhead.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\Rough Anal bleep.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\Rough Anal Sex (134) (1).mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\rough porno audition2.avi Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\rough russian anal sex.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\Sandra Bullock Tries Anal Sex For The First Time (1).jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\school girl tart pierced pussy eats my cum.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\screaming brutal-anal_drunk bleep moans.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\selfmade home video - bleeping the babysitter_0 (2).mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\Serie TeenSex-Blacks on Blondes Envy -Full-.avi Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\Sex - Hot mature ass bleep.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\Sexo Bizarro.mpe Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\SEXO ORGIA 4.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\sexy brunette anal.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\sex_movies_interracial_ebony_mpeg_avi_hoi3 (1) (1).mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\sex_very brutal oral.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\Skinny teen - tiny ass (1).mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\Slap Happy - Small Girl Forced to Swallow Cum.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\slap happy Bizarre - Redhead - Choke Blowjob.avi Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\slave_ass_licking.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\Small Cock and Sceaming Girl.avi Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\SNUFF!!! Big Insertion.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\sodomie pipe à 3.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\sodomised teenporn - my german girlfriend and I having cum dripping anal sex.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\Sohn,Tochter & Mutter am ficken.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\Spanking Bondage.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\splash8.mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\Spring Break Lesbians (1).mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\stockings sex - student bleeps a teacher 1.mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\SWALLOW - Cum Drinkers - Careena.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\Sweet Interracial face bleep.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\sybian-orgasm-04.mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\Sylvia Saint on bleeping machine.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\Tabatha - anal (Private).mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\Tania Russof 1 (1).avi Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\Tania Russof.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\Taylor Hayes - shower.avi Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\Teanna Kai with jenna jameson bondage 3 .mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\Techno.Trance.Electronica Ministry of Sound - Trance Nation 2 - 15 - BINARY FINARY 1999(Gouryella Mix).mp3 Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\Teen Facebleep [max Hardcore] .mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\teen first blowjob, forced anal bleeping she does not like.mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\teen getting dildo shaved crotch.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\teen oral face bleeping.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\teen slut blowjob.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\teen slut gives me a blowjob.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\teen.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\teen_sex_lolitas_bobbi anal swallow _1.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\tennis.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\Threesome - hot plump blonde - 2 cocks.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\threesome with anal penetration.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\Thumbs.db Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\tight ass brunette sodomised by fathers best friend.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\tiny asian doggy style_0.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\tramp brutal-anal.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\U96NX.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\Vicky does Cum.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\Video BONDAGE - Violent - rape - torture (HARD).mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\White Panties Upskirt Young Girls.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\White sex slave bleeped good by black COCK.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\white sex slave.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\Wife forced to pay off bar bill to German mob.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\wifey swallowing cum xxx_0.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\Wifey's World - Hogtied and Assbleeped.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\Wild Sado Maso Slave .mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\Women in Prison.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\www.jezebelslair.net_lara_b.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\www.jezebelslair.net_lara_c2.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\www.movieattack.com_prev_jasmine_lynn3_2.mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\www.movieattack.com_prev_jasmine_lynn3_3.mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\xx-Hard ass bleep.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\xxx Tracy Lords bum fun (1).mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\xxx XXXena sexe.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\Young Blond Bukakke.MPEG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\young couple sex.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\Young girl bleep´s anal deep.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\Young Lesbians bleeping (1).mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Documents\documents\Zoo Sex (25) ¤animal.mpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-18\000_0005.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-18\000_0006.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-18\000_0007.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-18\000_0009.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-18\000_0015 no.2.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-18\000_0015.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-18\000_0016.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-18\000_0017.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-18\000_0018.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-18\000_0019.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-18\000_0020.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-18\000_0022.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-18\000_0032.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-18\000_0033.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-18\000_0034.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-18\000_0035.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-18\000_0037.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-18\000_0038.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-18\000_0041.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-18\000_0043.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-18\000_0044.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-18\000_0047.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-18\000_0048.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-18\000_0049.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-18\000_0050.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-18\000_0052.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-18\000_0054.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-18\000_0055.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-18\000_0056.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-18\rob and mich edited.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-18\Thumbs.db Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-24\000_0057.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-24\000_0058.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-24\000_0059.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-24\000_0060.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-24\000_0061.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-24\000_0065.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-24\000_0068.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-24\000_0070.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-24\000_0071.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-24\000_0072.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-24\000_0073.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-24\000_0074.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-24\000_0075.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-24\000_0076.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-24\000_0077.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-24\000_0078.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-24\000_0079.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-24\dad edited.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-24\david edited.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-24\rob and dave edited.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-24\rob edited.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-24\Thumbs.db Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-25\000_0057.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-25\000_0058.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-25\000_0059.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-25\000_0060.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-25\000_0061.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-25\000_0065.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-25\000_0068.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-25\000_0070.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-25\000_0071.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-25\000_0072.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-25\000_0073.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-25\000_0074.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-25\000_0075.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-25\000_0076.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-25\000_0077.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-25\000_0078.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-25\000_0079.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-25\000_0080.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-25\000_0081.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-25\000_0082.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-25\000_0083.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-25\000_0084.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-25\000_0085.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-25\dave and alison edited.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-25\family edited.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2003-12-25\Thumbs.db Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2005-03-26\000_0098.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2005-03-26\000_0099.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2005-03-26\000_0101.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2005-03-26\000_0102.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2005-03-26\000_0104.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2005-03-26\000_0105.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2005-03-26\000_0109.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2005-03-26\000_0110.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2005-03-26\000_0111.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2005-03-26\000_0112.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2005-03-26\000_0116.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2005-03-26\000_0117.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2005-03-26\000_0118.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2005-03-26\000_0119.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2005-03-26\000_0120.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2005-03-26\000_0121.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2005-03-26\000_0122.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2005-03-26\000_0124.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2005-03-26\000_0125.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2005-03-26\000_0126.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2005-03-26\000_0128.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2005-03-26\000_0132.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2005-03-26\000_0135.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2005-03-26\000_0136.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2005-03-26\000_0137.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2005-03-26\000_0138.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2005-03-26\000_0140.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2005-03-26\000_0145.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2005-03-26\000_0146.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2005-03-26\000_0147.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2005-03-26\000_0149.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2005-03-26\Thumbs.db Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2006-05-22\000_0150.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2006-05-22\000_0151.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2006-05-22\000_0153.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2006-05-22\000_0154.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2006-05-22\000_0155.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2006-05-22\000_0156.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2006-05-22\000_0158.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2006-05-22\000_0159.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2006-05-22\000_0160.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Kodak\2006-05-22\Thumbs.db Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\Goodwood 05\P1010002.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\Goodwood 05\P1010003.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\Goodwood 05\P1010004.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\Goodwood 05\P1010005.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\Goodwood 05\P1010006.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\Goodwood 05\P1010007.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\Goodwood 05\P1010008.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\Goodwood 05\P1010009.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\Goodwood 05\P1010010.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\Goodwood 05\P1010012.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\Goodwood 05\P1010013.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\Goodwood 05\P1010014.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\Goodwood 05\P1010015.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\Goodwood 05\P1010016.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\Goodwood 05\P1010017.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\Goodwood 05\P1010018.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\Goodwood 05\Thumbs.db Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\hair\P1010035.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\hair\P1010036.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\hair\P1010037.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\hair\P1010038.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\hair\P1010039.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\hair\P1010040.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\hair\P1010041.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\hair\P1010042.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\hair\P1010043.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\hair\P1010044.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\hair\Thumbs.db Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\revival 05\Firework Display.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\revival 05\P1010001.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\revival 05\P1010002.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\revival 05\P1010003.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\revival 05\P1010004.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\revival 05\P1010005.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\revival 05\P1010006.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\revival 05\P1010007.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\revival 05\P1010008.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\revival 05\P1010009.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\revival 05\P1010010.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\revival 05\P1010011.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\revival 05\P1010012.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\revival 05\P1010013.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\revival 05\P1010014.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\revival 05\P1010015.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\revival 05\P1010016.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\revival 05\P1010017.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\revival 05\P1010018.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\revival 05\P1010019.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\revival 05\P1010020.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\revival 05\P1010021.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\revival 05\P1010022.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\revival 05\P1010023.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\revival 05\P1010024.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\revival 05\P1010025.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\revival 05\P1010026.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\revival 05\P1010027.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\revival 05\P1010028.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\revival 05\P1010029.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\revival 05\P1010030.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\revival 05\P1010031.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\revival 05\P1010032.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\revival 05\P1010033.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\revival 05\Thumbs.db Object is locked skipped
C:\Documents and Settings\The king\My Documents\Michelles photos\Thumbs.db Object is locked skipped
C:\Documents and Settings\The king\My Documents\misc\11.doc Object is locked skipped
C:\Documents and Settings\The king\My Documents\misc\72486669.doc Object is locked skipped
C:\Documents and Settings\The king\My Documents\misc\adobe photoshop 7.0 serial.txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\misc\Betfair Poker News & Views - All Articles.htm Object is locked skipped
C:\Documents and Settings\The king\My Documents\misc\Betfair Poker News & Views - All Articles_files\btn_download.gif Object is locked skipped
C:\Documents and Settings\The king\My Documents\misc\Betfair Poker News & Views - All Articles_files\footer_18.gif Object is locked skipped
C:\Documents and Settings\The king\My Documents\misc\Betfair Poker News & Views - All Articles_files\footer_gamcare.gif Object is locked skipped
C:\Documents and Settings\The king\My Documents\misc\Betfair Poker News & Views - All Articles_files\footer_ibas.gif Object is locked skipped
C:\Documents and Settings\The king\My Documents\misc\Betfair Poker News & Views - All Articles_files\mavis_with_pc.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\misc\Betfair Poker News & Views - All Articles_files\news.css Object is locked skipped
C:\Documents and Settings\The king\My Documents\misc\Betfair Poker News & Views - All Articles_files\referal.js Object is locked skipped
C:\Documents and Settings\The king\My Documents\misc\Betfair Poker News & Views - All Articles_files\styles.css Object is locked skipped
C:\Documents and Settings\The king\My Documents\misc\Betfair Poker News & Views - All Articles_files\Thumbs.db Object is locked skipped
C:\Documents and Settings\The king\My Documents\misc\Betfair Poker News & Views - All Articles_files\tn_mavis.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\misc\breasts.wav Object is locked skipped
C:\Documents and Settings\The king\My Documents\misc\CD_rom_presentation about NICE.ppt Object is locked skipped
C:\Documents and Settings\The king\My Documents\misc\chinesehoroscope____1_.doc Object is locked skipped
C:\Documents and Settings\The king\My Documents\misc\chuck norris.rtf Object is locked skipped
C:\Documents and Settings\The king\My Documents\misc\chuck norris.txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\misc\cover note to newbold.doc Object is locked skipped
C:\Documents and Settings\The king\My Documents\misc\Dear Technical Support.doc Object is locked skipped
C:\Documents and Settings\The king\My Documents\misc\FLUSH THE TOILET.ppt Object is locked skipped
C:\Documents and Settings\The king\My Documents\misc\flush2.ppt Object is locked skipped
C:\Documents and Settings\The king\My Documents\misc\forumite_mavis.htm Object is locked skipped
C:\Documents and Settings\The king\My Documents\misc\heads up cash article.doc Object is locked skipped
C:\Documents and Settings\The king\My Documents\misc\Hold ' em agreement.rtf Object is locked skipped
C:\Documents and Settings\The king\My Documents\misc\i need x.txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\misc\Inital Interview Email 06[1].10.exe.03_ Object is locked skipped
C:\Documents and Settings\The king\My Documents\misc\Jezzball.exe Object is locked skipped
C:\Documents and Settings\The king\My Documents\misc\letter to IF 23.9.doc Object is locked skipped
C:\Documents and Settings\The king\My Documents\misc\Lucky Mavo!! p_27_01_2006@0_57_45.wav Object is locked skipped
C:\Documents and Settings\The king\My Documents\misc\maisonette.rtf Object is locked skipped
C:\Documents and Settings\The king\My Documents\misc\ntl letter!.doc Object is locked skipped
C:\Documents and Settings\The king\My Documents\misc\OneTouch.exe Object is locked skipped
C:\Documents and Settings\The king\My Documents\misc\player notes.doc Object is locked skipped
C:\Documents and Settings\The king\My Documents\misc\Poker Results.xls Object is locked skipped
C:\Documents and Settings\The king\My Documents\misc\Poker_P_L_v2[1].6.xls Object is locked skipped
C:\Documents and Settings\The king\My Documents\misc\Poker_P_L_v2[1].6_EXAMPLE_DATA_VERSION.xls Object is locked skipped
C:\Documents and Settings\The king\My Documents\misc\put downs.txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\misc\References.doc Object is locked skipped
C:\Documents and Settings\The king\My Documents\misc\rob cv new estate agent.doc Object is locked skipped
C:\Documents and Settings\The king\My Documents\misc\rob cv new.doc Object is locked skipped
C:\Documents and Settings\The king\My Documents\misc\Rob's Poker_P_L_v2(1).6 not useD.xls Object is locked skipped
C:\Documents and Settings\The king\My Documents\misc\robs Poker_P_L_v2(1).6.xls Object is locked skipped
C:\Documents and Settings\The king\My Documents\misc\Rough Witness Statement.doc Object is locked skipped
C:\Documents and Settings\The king\My Documents\misc\Tenancy Agreement.doc Object is locked skipped
C:\Documents and Settings\The king\My Documents\misc\Tenancy_Agreement new 2007 downsway.doc Object is locked skipped
C:\Documents and Settings\The king\My Documents\misc\Terms___Conditions.doc Object is locked skipped
C:\Documents and Settings\The king\My Documents\misc\The Courage to Fold.doc Object is locked skipped
C:\Documents and Settings\The king\My Documents\misc\The key qualities I believe are essential to.ppt Object is locked skipped
C:\Documents and Settings\The king\My Documents\misc\tilt full.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\misc\tracert to housemouse.rtf Object is locked skipped
C:\Documents and Settings\The king\My Documents\misc\Van.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\misc\weird.doc Object is locked skipped
C:\Documents and Settings\The king\My Documents\misc\wordpad cv.rtf Object is locked skipped
C:\Documents and Settings\The king\My Documents\Mishkas\p1.doc Object is locked skipped
C:\Documents and Settings\The king\My Documents\Mishkas\P2.doc Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Music\dadsdrumandbass.mp3 Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Music\Desktop.ini Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Music\diffusion_ilovehorsesremix.mp3 Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Music\diffusion_ilovehorsesremixedit.mp3 Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Music\diffusion_peterkaymumwantsabungalowmix.mp3 Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Music\downloads\001EE53D\Protected_06_06_2004_13_40_44.asf Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Music\downloads\00354D72\_Nude Reflections.asf Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Music\downloads\00D0774F\STiCK_Her First Big Cock - Dawn.asf Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Music\My Playlists\Playlist1.wpl Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Music\My Playlists\rob new.wpl Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Music\My Playlists\rob2 test list.wpl Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Music\My Playlists\robs list.wpl Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Music\Sample Music.lnk Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Music\weakest.mp3 Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\011706.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\022606.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\070106.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\081606.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\082506.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\090105.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\1471.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\191724_jessica-jane.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\191726_jessica-jane.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\191727_jessica-jane.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\191728_jessica-jane.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\191734_jessica-jane.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\191736_jessica-jane.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\191738_jessica-jane.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\191740_jessica-jane.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\191742_jessica-jane.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\191745_jessica-jane.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\191763_jessica-jane.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\191765_jessica-jane.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\191769_jessica-jane.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\191771_jessica-jane.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\191783_jessica-jane.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\191784_jessica-jane.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\98_1_b paint.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\98_1_b.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\998_such-a-pretty-boy.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\anna_kournikova7.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\asleep in beach.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\background1.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\background2.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\botd.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\by pc.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\cameraImage.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\chavspotting_small.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\Desktop.ini Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\explosion.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\explosion2.JPG Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\front.gif Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\frontimage.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\Fruit Machine.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\GOLDENBALLS_007.gif Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\HPIM0043.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\HPIM0047.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\HPIM0049.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\HPIM0050.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\HPIM0051.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\HPIM0052.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\HPIM0053.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\HPIM0054.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\HPIM0055.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\images.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\item.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\kdodd.gif Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\large_imgs.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\moi at gutshot 2 lighter.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\moi at gutshot 2.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\Moi at gutshot.jpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\outatime plate.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\pic19977.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\Picture 001.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\pissedba9.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\small_imgs.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\small_imgs2.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\small_imgs3.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\strakmn5.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\Thumbs.db Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Pictures\th_IMG_4701.jpg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Received Files\Thumbs.db Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Sharing Folders.lnk Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Videos\clip1.wmv Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Videos\Desktop.ini Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Videos\hardcore-movie-02.mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Videos\KickBoxing.mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Videos\launch_media.asx Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Videos\MotorCar.mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Videos\onlygonzo.com-sample1.mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Videos\onlygonzo.com-sample3.mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Videos\Skater.mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Videos\tennis.mpeg Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Videos\Thumbs.db Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Videos\v-1752.wmv Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Webs\desktop.ini Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Webs\_vti_pvt\botinfs.cnf Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Webs\_vti_pvt\bots.cnf Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Webs\_vti_pvt\fpdbw.ico Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Webs\_vti_pvt\service.cnf Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Webs\_vti_pvt\service.lck Object is locked skipped
C:\Documents and Settings\The king\My Documents\My Webs\_vti_pvt\services.cnf Object is locked skipped
C:\Documents and Settings\The king\My Documents\Photoshop\Abcpy.ini Object is locked skipped
C:\Documents and Settings\The king\My Documents\Photoshop\DATA.TAG Object is locked skipped
C:\Documents and Settings\The king\My Documents\Photoshop\data1.cab Object is locked skipped
C:\Documents and Settings\The king\My Documents\Photoshop\data1.hdr Object is locked skipped
C:\Documents and Settings\The king\My Documents\Photoshop\lang.dat Object is locked skipped
C:\Documents and Settings\The king\My Documents\Photoshop\layout.bin Object is locked skipped
C:\Documents and Settings\The king\My Documents\Photoshop\os.dat Object is locked skipped
C:\Documents and Settings\The king\My Documents\Photoshop\Photoshop 7.0 ReadMe.wri Object is locked skipped
C:\Documents and Settings\The king\My Documents\Photoshop\Setup.bmp Object is locked skipped
C:\Documents and Settings\The king\My Documents\Photoshop\Setup.exe Object is locked skipped
C:\Documents and Settings\The king\My Documents\Photoshop\SETUP.INI Object is locked skipped
C:\Documents and Settings\The king\My Documents\Photoshop\setup.ins Object is locked skipped
C:\Documents and Settings\The king\My Documents\Photoshop\setup.lid Object is locked skipped
C:\Documents and Settings\The king\My Documents\Photoshop\Thumbs.db Object is locked skipped
C:\Documents and Settings\The king\My Documents\Photoshop\_INST32I.EX_ Object is locked skipped
C:\Documents and Settings\The king\My Documents\Photoshop\_ISDel.exe Object is locked skipped
C:\Documents and Settings\The king\My Documents\Photoshop\_Setup.dll Object is locked skipped
C:\Documents and Settings\The king\My Documents\Photoshop\_sys1.cab Object is locked skipped
C:\Documents and Settings\The king\My Documents\Photoshop\_sys1.hdr Object is locked skipped
C:\Documents and Settings\The king\My Documents\Photoshop\_user1.cab Object is locked skipped
C:\Documents and Settings\The king\My Documents\Photoshop\_user1.hdr Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\10 10 bet.txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\1010 fold.txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\688051614.log Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\A9 vs A6.txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\AA cracked.txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\aa vs kk headsup.txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\ak vs jj.txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\beat 25025 H U.txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\big pot not me#.txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\big pot not me.txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\big pot with 44.txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\call any...txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\call or fold with K10.txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\call or fold.txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\call......txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\cf.txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\cheers dude.txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\decisions qqq.txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\ergh1.txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\ergh2.txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\ergh3.txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\ffs u idiot.txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\fh vs straight.txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\fish.txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\fishies.txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\flop straight....log Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\FOOL WITH ACE 3.txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\hand5.txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\hawk annoyed.txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\he hit royal.txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\hmm.txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\irritating AA.txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\jao.txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\jaon.txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\k10 trap.txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\k10 vs huge draw.txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\k9spades etc.txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\KK vs AA.txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\ladbrokes.txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\mad 10-20 hand.txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\man head.txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\mavis best hand.txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\mentalist.log Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\minimised my loss.txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\never slow play.txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\ODD ONE.txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\oops.txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\ouch .txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\OUTS HIT.txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\pivotal hand.txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\quads beat me.txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\ridiculous straight.txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\rivered! numpty!.txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\royal flush.txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\set hammered.txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\straight bettered.txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\symbols.txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\trip 4s.txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\two outer to gmoney.txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\two outer.txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\up yours text.txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\what now.txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\Poker HHs\you tool.txt Object is locked skipped
C:\Documents and Settings\The king\My Documents\StartupCPL\StartupCPL.exe Object is locked skipped
C:\Program Files\Norton AntiVirus\Quarantine\24C9143E.htm Infected: Trojan-Downloader.JS.Small.d skipped
C:\Program Files\Norton AntiVirus\Quarantine\2CDF15D4.htm Infected: Exploit.HTML.Mht skipped
C:\Program Files\Norton AntiVirus\Quarantine\37762FB1.htm Infected: Trojan-Downloader.JS.Small.d skipped
C:\Program Files\Norton AntiVirus\Quarantine\37DE6F3E.htm Infected: Trojan-Downloader.JS.Small.d skipped
C:\Program Files\Norton AntiVirus\Quarantine\39CF5D1C.htm Infected: Trojan-Downloader.JS.Small.d skipped
C:\Program Files\Norton AntiVirus\Quarantine\526F784C.zip/GetAccess.class Infected: Trojan.Java.ClassLoader.c skipped
C:\Program Files\Norton AntiVirus\Quarantine\526F784C.zip/InsecureClassLoader.class Infected: Exploit.Java.ByteVerify skipped
C:\Program Files\Norton AntiVirus\Quarantine\526F784C.zip/Dummy.class Infected: Trojan.Java.ClassLoader.Dummy.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\526F784C.zip/Installer.class Infected: Trojan-Downloader.Java.OpenConnection.v skipped
C:\Program Files\Norton AntiVirus\Quarantine\526F784C.zip ZIP: infected - 4 skipped
C:\Program Files\Norton AntiVirus\Quarantine\526F784C.zip CryptFF: infected - 4 skipped
C:\Program Files\Norton AntiVirus\Quarantine\568E565C.htm Infected: Trojan-Downloader.JS.Small.d skipped
C:\Program Files\Norton AntiVirus\Quarantine\57C71503.htm Infected: Trojan-Downloader.JS.Small.d skipped
C:\Program Files\Norton AntiVirus\Quarantine\58FE48F1.htm Infected: Trojan-Downloader.JS.Small.d skipped
C:\Program Files\Norton AntiVirus\Quarantine\61537AEA Infected: Trojan-Spy.Win32.Small.bm skipped
C:\Program Files\Norton AntiVirus\Quarantine\67D37E2B.zip/GetAccess.class Infected: Trojan.Java.ClassLoader.c skipped
C:\Program Files\Norton AntiVirus\Quarantine\67D37E2B.zip/InsecureClassLoader.class Infected: Exploit.Java.ByteVerify skipped
C:\Program Files\Norton AntiVirus\Quarantine\67D37E2B.zip/Dummy.class Infected: Trojan.Java.ClassLoader.Dummy.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\67D37E2B.zip/Installer.class Infected: Trojan-Downloader.Java.OpenConnection.v skipped
C:\Program Files\Norton AntiVirus\Quarantine\67D37E2B.zip ZIP: infected - 4 skipped
C:\Program Files\Norton AntiVirus\Quarantine\67D37E2B.zip CryptFF: infected - 4 skipped
C:\Program Files\Norton AntiVirus\Quarantine\6B6E55D5 Infected: Trojan.Java.ClassLoader.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\71CC3E21.zip/GetAccess.class Infected: Trojan.Java.ClassLoader.c skipped
C:\Program Files\Norton AntiVirus\Quarantine\71CC3E21.zip/InsecureClassLoader.class Infected: Exploit.Java.ByteVerify skipped
C:\Program Files\Norton AntiVirus\Quarantine\71CC3E21.zip/Dummy.class Infected: Trojan.Java.ClassLoader.Dummy.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\71CC3E21.zip/Installer.class Infected: Trojan-Downloader.Java.OpenConnection.v skipped
C:\Program Files\Norton AntiVirus\Quarantine\71CC3E21.zip ZIP: infected - 4 skipped
C:\Program Files\Norton AntiVirus\Quarantine\71CC3E21.zip CryptFF: infected - 4 skipped
C:\Program Files\Norton AntiVirus\Quarantine\72471A18 Infected: Trojan-Spy.Win32.Small.bm skipped
C:\Program Files\Norton AntiVirus\Quarantine\7ADD7AA6 Infected: Trojan.Java.ClassLoader.h skipped
C:\Program Files\Norton AntiVirus\Quarantine\7B4172AE.zip/GetAccess.class Infected: Trojan.Java.ClassLoader.c skipped
C:\Program Files\Norton AntiVirus\Quarantine\7B4172AE.zip/InsecureClassLoader.class Infected: Exploit.Java.ByteVerify skipped
C:\Program Files\Norton AntiVirus\Quarantine\7B4172AE.zip/Dummy.class Infected: Trojan.Java.ClassLoader.Dummy.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\7B4172AE.zip/Installer.class Infected: Trojan-Downloader.Java.OpenConnection.v skipped
C:\Program Files\Norton AntiVirus\Quarantine\7B4172AE.zip ZIP: infected - 4 skipped
C:\Program Files\Norton AntiVirus\Quarantine\7B4172AE.zip CryptFF: infected - 4 skipped
C:\Program Files\Norton AntiVirus\Quarantine\7B4746A7.zip/GetAccess.class Infected: Trojan.Java.ClassLoader.c skipped
C:\Program Files\Norton AntiVirus\Quarantine\7B4746A7.zip/InsecureClassLoader.class Infected: Exploit.Java.ByteVerify skipped
C:\Program Files\Norton AntiVirus\Quarantine\7B4746A7.zip/Dummy.class Infected: Trojan.Java.ClassLoader.Dummy.a skipped
C:\Program Files\Norton AntiVirus\Quarantine\7B4746A7.zip/Installer.class Infected: Trojan-Downloader.Java.OpenConnection.v skipped
C:\Program Files\Norton AntiVirus\Quarantine\7B4746A7.zip ZIP: infected - 4 skipped
C:\Program Files\Norton AntiVirus\Quarantine\7B4746A7.zip CryptFF: infected - 4 skipped
C:\Program Files\PacificPoker\pacificpoker.exe Infected: not-a-virus:AdWare.Win32.Casino.o skipped
C:\Program Files\test\egIEEngine.dll Infected: not-a-virus:AdWare.Win32.Gator.5017 skipped
C:\Program Files\test\GMT.exe Infected: not-a-virus:AdWare.Win32.Gator.5112 skipped
C:\RECYCLER\NPROTECT\cm3ed.ini Object is locked skipped
C:\RECYCLER\S-1-5-21-448539723-1935655697-682003330-1005\Dc10.lnk Object is locked skipped
C:\RECYCLER\S-1-5-21-448539723-1935655697-682003330-1005\Dc11.lnk Object is locked skipped
C:\RECYCLER\S-1-5-21-448539723-1935655697-682003330-1005\Dc12.mpg Object is locked skipped
C:\RECYCLER\S-1-5-21-448539723-1935655697-682003330-1005\Dc13.mpeg Object is locked skipped
C:\RECYCLER\S-1-5-21-448539723-1935655697-682003330-1005\Dc8.mpg Object is locked skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
C:\System Volume Information\_restore{822A3F60-C43F-4DD7-AEED-1B05A0ADD04E}\RP386\change.log Object is locked skipped
C:\WINDOWS\$NtUninstallKB839645$\fldrclnr.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB839645$\shell32.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB839645$\shlwapi.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB839645$\sxs.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB839645$\xpsp2res.dll Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\Internet.evt Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped

Scan process completed.







Logfile of HijackThis v1.99.1
Scan saved at 15:14:57, on 06/07/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\WINDOWS\system32\drivers\dcfssvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Spyware Doctor\svcntaux.exe
C:\Program Files\Spyware Doctor\swdsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\sstray.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\sstray.exe
C:\Program Files\Spyware Doctor\SDTrayApp.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\DOCUME~1\THEKIN~1\LOCALS~1\Temp\Temporary Directory 2 for hijackthis_v1.99.1.zip\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.co.uk/0SEENGB/SAOS01
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.betfair.co.uk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://svcs.microsoft.com/svcs/mms/servers...&Country=00
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
R3 - URLSearchHook: (no name) - _{A045DC85-FC44-45be-8A50-E4F9C62C9A84} - (no file)
R3 - URLSearchHook: (no name) - {0428FFC7-1931-45b7-95CB-3CBB919777E1} - (no file)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
O4 - HKLM\..\Run: [SDTray] "C:\Program Files\Spyware Doctor\SDTrayApp.exe"
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKCU\..\Run: [PopUpStopperFreeEdition] "C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe"
O4 - HKCU\..\Run: [Spyware Doctor] "C:\Program Files\Spyware Doctor\swdoctor.exe" /Q
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Uniblue RegistryBooster 2] C:\Program Files\Uniblue\RegistryBooster 2\RegistryBooster.exe /S
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: bet365 Poker - {B1BA4A3F-1C95-497b-9F82-F8DA4A5C89DD} - C:\Program Files\bet365MPP\MPPoker.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
O16 - DPF: {1663ed61-23eb-11d2-b92f-008048fdd814} (MeadCo ScriptX Basic) - http://www.expertagent.co.uk/asp/ScriptX.cab
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - https://www-secure.symantec.com/techsupp/asa/LSSupCtl.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedC...bin/AvSniff.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by110fd.bay110.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/...lscbase8300.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedC...n/bin/cabsa.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftu...b?1182460317031
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/Secur...loadManager.ocx
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmesse...pdownloader.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://www-secure.symantec.com/techsupp/asa/SymAData.cab
O16 - DPF: {E8F628B5-259A-4734-97EE-BA914D7BE941} (Driver Agent ActiveX Control) - http://driveragent.com/files/driveragent.cab
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/...482/mcfscan.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: Dcfssvc - Eastman Kodak Company - C:\WINDOWS\system32\drivers\dcfssvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Spyware Doctor Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: Spyware Doctor Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\PROGRA~1\COMMON~1\SONYSH~1\AVLib\Sptisrv.exe

Hope you had a nice weekend, cheers again, paul

Edited by arkle, 06 July 2007 - 11:19 AM.


#12 DaveM59

DaveM59

    Bleepin' Grandpa


  • Members
  • 1,355 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:TN USA
  • Local time:03:00 AM

Posted 09 July 2007 - 08:43 PM

Hi again Paul,

Your son's account log does not show any malware.

There's some cleanup and a few other things to do.

Get ATF Cleaner here . It does not require installation, just download it to your desktop.
Double-click the ATFCleaner icon on your desktop to launch the program. For this first run, check the select all box on the main page, then click Empty selected. Then, if you use Firefox or Opera, click on the appropriate tab and repeat the same drill.

Clear your Norton Quarantine folder. If you don't know how to do this, here's a link to a tutorial:

http://www.sd391.k12.id.us/compserv/tutorials/symantec1.htm

I don't know whether you noticed this line in the Kaspersky log:

C:\Program Files\PacificPoker\pacificpoker.exe Infected: not-a-virus:AdWare.Win32.Casino.o skipped

As Kaspersky says, this is adware, as many gambling programs are. It's your choice, but I suggest you uninstall it. Click Start, Run, then double click Add or Remove Programs. When the list is populated, scropp down to Pacific Poker and click to select it, then click Remove.

Next, use Explorer to navigate to and delete the following files:

C:\Program Files\test\egIEEngine.dll
C:\Program Files\test\GMT.exe


Next we need to take care of those orphaned R3 lines in your HijackThis log.

Copy the entire contents inside of the QUOTE box into Notepad, press <Enter> to add a blank line. On the taskbar, click File, then in the Save In box navigate to and highlight your Desktop. In the File Name box type or paste in remove.reg and in the Save as type box select All files. Click Save, then close Notepad.

REGEDIT4

[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{CFBFAE00-17A6-11D0-99CB-00C04FD64497}"=""



Go to the Desktop and DoubleClick Remove.reg, hit yes at the prompt to add its contents to the Registry.

Finally, HijackThis has been updated to a new version. Please remove your old version, then go to this web page and read the instructions. Then download and install the new version, open it and run a scan. Post the log to a reply here. Let me know if you had any problems with any of the steps here.


Dave

#13 arkle

arkle
  • Topic Starter

  • Members
  • 46 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:10:00 AM

Posted 12 July 2007 - 09:16 AM

Hi Dave, I have done as advised above, EXCEPT for clearing Norton Quarantine folder.
Norton is no longer installed on this machine and I dont know how to find that folder if it still exists.

Also the Pacific Poker file is something my son needs apparently so have had to leave that.

Below you will find the latest hjt log.

Finally, yesterday I recieved a windows stop error, something to do with a device driver [someone else was using it at the time and did not get any details] and 'windows has encountered a problem it cannot recover from and it needs to be restarted.

It has been ok since.

Thank you.

paul


PS, this machine is 3 or 4 years old, do you think updating drivers is long overdue, if so where is best place to go for this and is there any test we can carry out to see what we have ?




Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:02:03, on 12/07/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\WINDOWS\system32\drivers\dcfssvc.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Spyware Doctor\svcntaux.exe
C:\Program Files\Spyware Doctor\swdsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\sstray.exe
C:\Program Files\Spyware Doctor\SDTrayApp.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\Adobe\Acrobat 5.0\Reader\AcroRd32.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.5672\swg.dll
O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
O4 - HKLM\..\Run: [SDTray] "C:\Program Files\Spyware Doctor\SDTrayApp.exe"
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKCU\..\Run: [PopUpStopperFreeEdition] "C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Google Updater.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\npjpi160_02.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\npjpi160_02.dll
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: bet365 Poker - {B1BA4A3F-1C95-497b-9F82-F8DA4A5C89DD} - C:\Program Files\bet365MPP\MPPoker.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {1663ed61-23eb-11d2-b92f-008048fdd814} (MeadCo ScriptX Basic) - http://www.expertagent.co.uk/asp/ScriptX.cab
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - https://www-secure.symantec.com/techsupp/asa/LSSupCtl.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedC...bin/AvSniff.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by110fd.bay110.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/...lscbase8300.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedC...n/bin/cabsa.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftu...b?1182460317031
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/Secur...loadManager.ocx
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmesse...pdownloader.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://www-secure.symantec.com/techsupp/asa/SymAData.cab
O16 - DPF: {E8F628B5-259A-4734-97EE-BA914D7BE941} (Driver Agent ActiveX Control) - http://driveragent.com/files/driveragent.cab
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/...482/mcfscan.cab
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: Dcfssvc - Eastman Kodak Company - C:\WINDOWS\system32\drivers\dcfssvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Spyware Doctor Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: Spyware Doctor Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\PROGRA~1\COMMON~1\SONYSH~1\AVLib\Sptisrv.exe

--
End of file - 7526 bytes

Edited by arkle, 12 July 2007 - 09:21 AM.


#14 DaveM59

DaveM59

    Bleepin' Grandpa


  • Members
  • 1,355 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:TN USA
  • Local time:03:00 AM

Posted 12 July 2007 - 01:59 PM

Hi Paul,

Well, Norton seems to have done a less-than-thorough job of uninstalling itself, as you can see from the Kaspersky log.

Here's a link to Norton's own removal tool, which they developed in response to complaints that the program did not uninstall completely. It contains instructions and a download link:

http://service1.symantec.com/SUPPORT/tsgen...005033108162039

Note that you only need to perform steps one and two, since you have no interest in reinstalling the program.

After you run the tool, please confirm that the quarantine files are gone by navigating to C:\Program Files\ and checking to see if the folder Norton AntiVirus exists there. If it does, delete it. Let me know what you find and whether you manage to get rid of it.

Regarding drivers: I don't recommend an update unless there's a problem. However, the only stop error I have had on my computer was driver related. What's more, give Microsoft credit, the driver was clearly identified in the stop error message. Updating to the latest driver cured the problem.

So, my advice would be: first, notify everyone who uses the computer that they are not to reboot it or take any other action if they see a BSOD (Blue Screen of Death). Then, make sure the computer is not configured to reboot automatically when this happens. Here's how you do that:

1. Click Start, then Right-click My Computer, and then click Properties.
2. Click the Advanced tab, and then under Startup and Recovery, click Settings.
3. In the System Failure section, look at the check boxes and make sure Automatically Restart is unchecked. If the box contains a check mark, click it to remove.

Then wait until it happens again. When it does, write down the exact error message. It will probably tell you which driver caused the problem, and you can then search the internet for a later driver.

If you need help locating the latest driver for a particular piece of hardware, I suggest posting a new topic on the Bleeping Computer hardware forum. The experts there can help you quicker and probably better than I can with this type of question. However, I will be glad to assist you if you prefer.

I have a question about your HJT log. There's a line that was not there before:

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

Is this a setting that was done deliberately, by you or another user? about:blank is a notorious symptom of the old CoolWeb infection, which however is about extinct now and easily dealt with by current antispyware programs.

Finally, run a fresh HJT scan and post the log to a reply here. Tell me how the computer is running, what you know about that about:blank, and if you had any trouble with removing Norton or any other steps.


Dave

Edited by DaveM59, 12 July 2007 - 02:14 PM.


#15 arkle

arkle
  • Topic Starter

  • Members
  • 46 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:10:00 AM

Posted 13 July 2007 - 07:50 PM

Hi Dave,
Thanks for your advice which I have noted.

The Norton Removal tool does not seem to work on my machine.
It says it may take a few minutes, and dont touch anything, but I ran it for 1 hour, then 1 1/2 hours, then finally 2 1/2 hours and on each occasion it got to about 60% done in 10 seconds and there it stayed.
I cant believe it would take that long to uninstall some bits and pieces, but if you think I should run it overnight I will.

The 'about:blank thing we know nothing about, and we certainly have not put it there ourselves.

A new HJT scan is here if you need it.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 01:48:27, on 14/07/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\WINDOWS\system32\drivers\dcfssvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Spyware Doctor\svcntaux.exe
C:\Program Files\Spyware Doctor\swdsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\sstray.exe
C:\Program Files\Spyware Doctor\SDTrayApp.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
O4 - HKLM\..\Run: [SDTray] "C:\Program Files\Spyware Doctor\SDTrayApp.exe"
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKCU\..\Run: [PopUpStopperFreeEdition] "C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\npjpi160_02.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\npjpi160_02.dll
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: bet365 Poker - {B1BA4A3F-1C95-497b-9F82-F8DA4A5C89DD} - C:\Program Files\bet365MPP\MPPoker.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {1663ed61-23eb-11d2-b92f-008048fdd814} (MeadCo ScriptX Basic) - http://www.expertagent.co.uk/asp/ScriptX.cab
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - https://www-secure.symantec.com/techsupp/asa/LSSupCtl.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedC...bin/AvSniff.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by110fd.bay110.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/...lscbase8300.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedC...n/bin/cabsa.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftu...b?1182460317031
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/Secur...loadManager.ocx
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmesse...pdownloader.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://www-secure.symantec.com/techsupp/asa/SymAData.cab
O16 - DPF: {E8F628B5-259A-4734-97EE-BA914D7BE941} (Driver Agent ActiveX Control) - http://driveragent.com/files/driveragent.cab
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/...482/mcfscan.cab
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: Dcfssvc - Eastman Kodak Company - C:\WINDOWS\system32\drivers\dcfssvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Spyware Doctor Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: Spyware Doctor Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\PROGRA~1\COMMON~1\SONYSH~1\AVLib\Sptisrv.exe

--
End of file - 6963 bytes


Thank you,
paul.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users