|
Re: Possible Trojan - PLS Help!
Hey Ried, here it all is.
SDFix: Version 1.107
Run by Zach on 08/10/2007 at 05:37 PM
Microsoft Windows XP [Version 5.1.2600]
Running From: C:\SDFix
Safe Mode:
Checking Services:
Restoring Windows Registry Values
Restoring Windows Default Hosts File
Rebooting...
Service asc3550v - Deleted after Reboot
Normal Mode:
Checking Files:
Trojan Files Found:
C:\138325~1 - Deleted
C:\WINDOWS\system32\drivers\etc\BackupHosts.bak - Deleted
C:\WINDOWS\system32\drivers\fee - Deleted
C:\WINDOWS\system32\n.ini - Deleted
Removing Temp Files...
ADS Check:
C:\WINDOWS
No streams found.
C:\WINDOWS\system32
No streams found.
C:\WINDOWS\system32\svchost.exe
No streams found.
C:\WINDOWS\system32\ntoskrnl.exe
No streams found.
Final Check:
Remaining Services:
------------------
Authorized Application Key Export:
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\\Program Files\\Warcraft III\\war3.exe"="C:\\Program Files\\Warcraft III\\war3.exe:*:Enabled:Warcraft III"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Messenger"
"C:\\Program Files\\Warcraft III\\Listchecker\\pickup.listchecker.exe"="C:\\Program Files\\Warcraft III\\Listchecker\\pickup.listchecker.exe:*:Enabled:pickup.listchecker"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
Remaining Files:
---------------
File Backups: - C:\SDFix\backups\backups.zip
Files with Hidden Attributes:
Fri 3 Feb 2006 211 A.SHR --- "C:\BOOT.BAK"
Fri 3 Feb 2006 22 A.SH. --- "C:\WINDOWS\SMINST\HPCD.sys"
Mon 21 Feb 2005 2,535,424 A..H. --- "C:\Program Files\CDBurnerXP\libs\NCTAudioCompress3.dll"
Tue 1 Feb 2005 90,112 A..H. --- "C:\Program Files\CDBurnerXP\libs\NCTAudioFormatSettings3.dll"
Sat 2 Jun 2007 0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv02.tmp"
Thu 23 Aug 2007 0 A.SH. --- "C:\Deckard\System Scanner\backup\WINDOWS\temp\$b17a2e8.tmp"
Mon 8 Oct 2007 5,946 A.SH. --- "C:\Documents and Settings\All Users\Documents\Recorded TV\TempRec\TempSBE\SBE1.tmp"
Mon 10 Sep 2007 215,040 A..H. --- "C:\Deckard\System Scanner\backup\DOCUME~1\Zach\LOCALS~1\Temp\~24.tmp"
Fri 31 Aug 2007 214,528 A..H. --- "C:\Deckard\System Scanner\backup\DOCUME~1\Zach\LOCALS~1\Temp\~3D.tmp"
Fri 14 Sep 2007 215,040 A..H. --- "C:\Deckard\System Scanner\backup\DOCUME~1\Zach\LOCALS~1\Temp\~F6.tmp"
Finished!
File::
C:\WINDOWS\system32\pgd.dll
C:\WINDOWS\system32\drivers\fee
Folder::
C:\Program Files\Tyzhnddw
C:\Program Files\Qoswziws
C:\Program Files\Pfpkguqy
C:\Program Files\Isebbczd
C:\Program Files\Gwzlwfym
C:\Program Files\Bhmoxunj
C:\Program Files\qnanojwt
Registry::
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{38D55A70-E975-996F-2411-01092EBA6C2B}]
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{5C2290D4-C3F1-4bb5-91E6-D0B806A8663A}]
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{ED12044A-04F8-44BF-A394-8D4D04B2F93D}]
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{F369DA09-FADE-44CB-987F-E2E0DEF51BCA}]
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"iss7328"=-
"ykmyegiy"=-
"btmnixix"=-
"dcadqtgp"=-
[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"Scbu"=-
[-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\winjcr32]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Ultimate Fixer]
-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Monday, October 08, 2007 8:13:21 PM
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 9/10/2007
Kaspersky Anti-Virus database records: 429449
-------------------------------------------------------------------------------
Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true
Scan Target - My Computer:
C:\
D:\
E:\
Scan Statistics:
Total number of scanned objects: 107432
Number of viruses found: 9
Number of infected objects: 50
Number of suspicious objects: 0
Duration of the scan process: 01:39:01
Infected Object Name / Virus Name / Last Action
C:\BackUpMSNCleaner\svchost.exe.vir Infected: Trojan-Downloader.Win32.Agent.cbn skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\eHome\logs\ehRecvr.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\muvee Technologies\030625\dscrp\Sample_Picture01.jpg.41b2cd64.mpd Object is locked skipped
C:\Documents and Settings\All Users\Application Data\muvee Technologies\030625\dscrp\Sample_Picture02.jpg.41b2cd64.mpd Object is locked skipped
C:\Documents and Settings\All Users\Application Data\muvee Technologies\030625\dscrp\Sample_Picture03.jpg.41b2cd64.mpd Object is locked skipped
C:\Documents and Settings\All Users\Application Data\muvee Technologies\030625\dscrp\Sample_Picture04.jpg.41b2cd62.mpd Object is locked skipped
C:\Documents and Settings\All Users\Application Data\muvee Technologies\030625\dscrp\Sample_Picture05.jpg.41b2cd64.mpd Object is locked skipped
C:\Documents and Settings\All Users\Application Data\muvee Technologies\030625\dscrp\Sample_Picture06.jpg.41b2cd64.mpd Object is locked skipped
C:\Documents and Settings\All Users\Application Data\muvee Technologies\030625\dscrp\Sample_Picture07.jpg.41b2cd64.mpd Object is locked skipped
C:\Documents and Settings\All Users\Application Data\muvee Technologies\030625\dscrp\Sample_Picture08.jpg.41b2cd64.mpd Object is locked skipped
C:\Documents and Settings\All Users\Application Data\muvee Technologies\030625\dscrp\Sample_Picture09.jpg.41b2cd64.mpd Object is locked skipped
C:\Documents and Settings\All Users\Application Data\muvee Technologies\030625\dscrp\Sample_Picture10.jpg.41b2cd64.mpd Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\064B1B8C.exe Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\136E0916.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\1C8D4D0D.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\1CAB46ED.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\1CCB6AC9.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\1CE964A8.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\1D065E88.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\1D270264.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\1D447C44.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\1D617623.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\1D7F7003.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\1D9C69E3.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\1DBA63C2.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\1DD75DA2.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\1DF45782.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\1E125161.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\1E32753D.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\1E506F1D.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\1E6D68FD.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\1E8B62DC.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\1EA85CBC.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\1EC5569C.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\1EE3507B.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\1F004A5B.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\1F1E443B.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\1F3B3E1A.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\1F5C61F6.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\1F7C05D3.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\1F9A7FB2.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\1FB77992.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\1FD47371.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\1FF26D51.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\2012112D.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\20300B0D.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\204D04ED.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\206B7ECC.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\208878AC.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\20A5728B.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\20C36C6B.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\20E0664B.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\20FE602A.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\211E0407.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\213C7DE6.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\215977C6.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\217671A5.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\21946B85.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\21B16565.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\21CF5F44.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\21EC5924.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\22095304.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\22274CE3.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\224446C3.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\226240A3.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\2282647F.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\22A05E5E.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\22BD583E.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\22DA521E.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\22F84BFD.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\231545DD.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\233669B9.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\23536399.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\23715D78.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\238E5758.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\23AB5138.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\23C94B17.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\23E96EF4.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\240768D3.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\24270CAF.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\2445068F.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\2462006F.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\24807A4E.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\249D742E.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\24BE180A.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\24DB11EA.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\24F80BC9.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\25192FA5.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\25362985.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\25542365.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\25711D44.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\258F1724.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\25AC1104.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\25C90AE3.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\25E704C3.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\26047EA3.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\26227882.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\26421C5E.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\2660163E.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\26803A1A.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\269E33FA.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\26BB2DD9.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\26DC51B5.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\26F94B95.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\271D196E.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\273A134D.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\275B3729.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\277C5B05.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\279954E5.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\27B74EC5.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\27D448A4.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\27F14284.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\280F3C64.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\282C3643.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\4B79007E.tmp Object is locked skipped
C:\Documents and Settings\All Users\Documents\Recorded TV\TempRec\TempSBE\MSDVRMM_1383251974_1900544_12101 Object is locked skipped
C:\Documents and Settings\All Users\Documents\Recorded TV\TempRec\TempSBE\SBE1.tmp Object is locked skipped
C:\Documents and Settings\All Users\Documents\Recorded TV\TempRec\{041ACD1F-F231-4A16-90E1-806C748DFB33}.TmpSBE Object is locked skipped
C:\Documents and Settings\All Users\DRM\Cache\Indiv02.tmp Object is locked skipped
C:\Documents and Settings\All Users\DRM\drmstore.hds Object is locked skipped
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\Zach\Application Data\Microsoft\MSNLiveFav\LiveFavorites.xml Object is locked skipped
C:\Documents and Settings\Zach\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\Zach\Local Settings\Application Data\Ares\My Shared Folder\___ARESTRA___04-bloody well right-supertramp.mp3 Object is locked skipped
C:\Documents and Settings\Zach\Local Settings\Application Data\Ares\My Shared Folder\___ARESTRA___106-bloody_well_right-dgn.mp3 Object is locked skipped
C:\Documents and Settings\Zach\Local Settings\Application Data\Ares\My Shared Folder\___ARESTRA___dave chappelle - block party [ptii](3).avi Object is locked skipped
C:\Documents and Settings\Zach\Local Settings\Application Data\Ares\My Shared Folder\___ARESTRA___dave chappelle's block party(5)(2).mpg Object is locked skipped
C:\Documents and Settings\Zach\Local Settings\Application Data\Ares\My Shared Folder\___ARESTRA___david guetta - love is gone (new single 2007) (radio fg)(2).mp3 Object is locked skipped
C:\Documents and Settings\Zach\Local Settings\Application Data\Ares\My Shared Folder\___ARESTRA___like_this_(remix).mp3 Object is locked skipped
C:\Documents and Settings\Zach\Local Settings\Application Data\Ares\My Shared Folder\___ARESTRA___soldier boy- crank that soldier boy(2)(2).mp3 Object is locked skipped
C:\Documents and Settings\Zach\Local Settings\Application Data\Ares\My Shared Folder\___ARESTRA___soldier boy- crank that soldier boy(2).mp3 Object is locked skipped
C:\Documents and Settings\Zach\Local Settings\Application Data\Ares\My Shared Folder\___ARESTRA___supertramp - bloody well right(2).mp3 Object is locked skipped
C:\Documents and Settings\Zach\Local Settings\Application Data\Ares\My Shared Folder\___ARESTRA___supertramp - bloody well right.mp3 Object is locked skipped
C:\Documents and Settings\Zach\Local Settings\Application Data\Ares\My Shared Folder\___ARESTRA___supertramp - supertramp - bloody well right.mp3 Object is locked skipped
C:\Documents and Settings\Zach\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat Object is locked skipped
C:\Documents and Settings\Zach\Local Settings\Application Data\Microsoft\Messenger\zachary__@hotmail.com\SharingMetadata\Logs\Dfsr00005.log Object is locked skipped
C:\Documents and Settings\Zach\Local Settings\Application Data\Microsoft\Messenger\zachary__@hotmail.com\SharingMetadata\pending.dat Object is locked skipped
C:\Documents and Settings\Zach\Local Settings\Application Data\Microsoft\Messenger\zachary__@hotmail.com\SharingMetadata\Working\database_CEB_38CE_5272_C006\dfsr.db Object is locked skipped
C:\Documents and Settings\Zach\Local Settings\Application Data\Microsoft\Messenger\zachary__@hotmail.com\SharingMetadata\Working\database_CEB_38CE_5272_C006\fsr.log Object is locked skipped
C:\Documents and Settings\Zach\Local Settings\Application Data\Microsoft\Messenger\zachary__@hotmail.com\SharingMetadata\Working\database_CEB_38CE_5272_C006\fsrtmp.log Object is locked skipped
C:\Documents and Settings\Zach\Local Settings\Application Data\Microsoft\Messenger\zachary__@hotmail.com\SharingMetadata\Working\database_CEB_38CE_5272_C006\tmp.edb Object is locked skipped
C:\Documents and Settings\Zach\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\Zach\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\Zach\Local Settings\Application Data\Microsoft\Windows Live Contacts\zachary__@hotmail.com\real\members.stg Object is locked skipped
C:\Documents and Settings\Zach\Local Settings\Application Data\Microsoft\Windows Live Contacts\zachary__@hotmail.com\shadow\members.stg Object is locked skipped
C:\Documents and Settings\Zach\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Zach\Local Settings\History\History.IE5\MSHist012007100820071009\index.dat Object is locked skipped
C:\Documents and Settings\Zach\Local Settings\Temp\~DF8977.tmp Object is locked skipped
C:\Documents and Settings\Zach\Local Settings\Temp\~DF8984.tmp Object is locked skipped
C:\Documents and Settings\Zach\Local Settings\Temp\~DF95CF.tmp Object is locked skipped
C:\Documents and Settings\Zach\Local Settings\Temp\~DF95DB.tmp Object is locked skipped
C:\Documents and Settings\Zach\Local Settings\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat Object is locked skipped
C:\Documents and Settings\Zach\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Zach\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\Zach\ntuser.dat.LOG Object is locked skipped
C:\hp\bin\KillWind.exe Infected: not-a-virus:RiskTool.Win32.PsKill.p skipped
C:\Program Files\Alwil Software\Avast4\DATA\aswResp.dat Object is locked skipped
C:\Program Files\Alwil Software\Avast4\DATA\Avast4.db Object is locked skipped
C:\Program Files\Alwil Software\Avast4\DATA\log\nshield.log Object is locked skipped
C:\Program Files\HP\Digital Imaging\bin\hpqmif08.dll Object is locked skipped
C:\qoobox\Quarantine\C\Program Files\qnanojwt\uvihgbsp.dll.vir Infected: Trojan.Win32.Agent.ayn skipped
C:\qoobox\Quarantine\C\Program Files\SecCenter\scprot4.exe.bak.vir Infected: Trojan.Win32.Agent.ayp skipped
C:\qoobox\Quarantine\C\Program Files\SecCenter\scprot4.exe.vir Infected: Trojan.Win32.Agent.ayp skipped
C:\qoobox\Quarantine\C\WINDOWS\system32\drivers\runtime2.sys.vir Infected: Rootkit.Win32.Agent.ey skipped
C:\qoobox\Quarantine\C\WINDOWS\system32\pgd.dll.vir Infected: Trojan.Win32.BHO.gv skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00000004.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00000005.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00000006.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00000007.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00000008.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00000009.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00000010.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00000011.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00000012.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00000104.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00000105.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00000106.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00000107.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00000108.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00000109.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00000110.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00000111.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00000112.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00000113.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00000206.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00000207.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00100006.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00100007.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00100008.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00100009.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00100010.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00100106.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00100107.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00100108.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00100109.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00100110.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00100111.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00100112.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00100113.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00100114.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00100115.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00100206.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00100207.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00100208.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00200006.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00200007.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00200008.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00200107.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00200207.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00300007.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00300207.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00300208.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00300506.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00300507.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00300508.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00300509.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00300510.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00300606.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00300607.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00400007.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00400206.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00400207.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00400208.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00500007.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00600006.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00600007.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00600106.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00600107.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\00600207.map Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\Aimbot NG Lite\Aimbot NG Lite.exe Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\Aimbot NG Lite\hook.dll Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\Aimbot NG Lite\Read Me.txt Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\error.txt Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\Ic.Inf Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\IP LIST\fg Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\IP LIST\Gameworld RPG Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\Patch.exe Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\Tibia.cfg Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\Tibia.dat Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\Tibia.exe Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\Tibia.pic Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\Tibia.spr Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\Tibia.url Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\unins000.dat Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc19\unins000.exe Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc20\Community\Photos.url Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc20\Entertainment\Astrology.url Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc20\Entertainment\Entertainment.url Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc20\Entertainment\Games.url Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc20\Entertainment\Movies.url Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc20\Entertainment\Music.url Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc20\Entertainment\TV Coverage.url Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc20\Home & Living\Autos.url Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc20\Home & Living\Careers.url Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc20\Home & Living\Coupons.url Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc20\Home & Living\Family Accounts.url Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc20\Home & Living\Get Local.url Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc20\Home & Living\Health.url Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc20\Home & Living\Personals.url Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc20\Home & Living\Pets.url Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc20\Home & Living\Real Estate.url Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc20\Home & Living\Yahooligans!.url Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc20\Information Management\Address Book.url Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc20\Information Management\Bookmarks.url Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc20\Information Management\Briefcase.url Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc20\Information Management\Calendar.url Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc20\Information Management\Family Accounts.url Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc20\Information Management\My Yahoo!.url Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc20\Information Management\Notepad.url Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc20\Information Management\Postal Center.url Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc20\Information Management\Toolbar.url Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc20\News\Alerts.url Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc20\News\Buzz Index.url Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc20\News\Lottery Results.url Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc20\News\News Front Page.url Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc20\News\News Full Coverage.url Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc20\News\Weather.url Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc20\Personal Finance\Bill Pay.url Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc20\Personal Finance\Finance.url Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc20\Personal Publishing\Domains.url Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc20\Personal Publishing\GeoCities.url Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc20\Personal Publishing\Photos.url Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc20\Personal Publishing\Picture Gallery.url Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc20\Shopping\Auctions.url Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc20\Shopping\Autos.url Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc20\Shopping\Classifieds.url Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc20\Shopping\Coupons.url Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc20\Shopping\Points.url Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc20\Shopping\Real Estate.url Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc20\Shopping\Shopping.url Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc20\Shopping\Wallet.url Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc20\Shopping\Yellow Pages.url Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc20\Sports & Outdoors\Fantasy Sports.url Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc20\Sports & Outdoors\Ski & Snow.url Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc20\Sports & Outdoors\Sports.url Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc20\Tools for Business\Marketing Tools.url Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc20\Tools for Business\Small Business.url Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc20\Tools for Business\Sponsor Listings.url Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc20\Tools for Business\Web Hosting.url Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc20\Tools for Business\Yahoo! Express.url Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc20\Travel & Transportation\Lodging.url Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc20\Travel & Transportation\Maps & Driving Directions.url Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc20\Travel & Transportation\Restaurants.url Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc20\Travel & Transportation\Travel.url Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc5\dazed and comfused.dvd Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc6\JACKET_P\J00___5L.MP2 Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc6\JACKET_P\J00___5M.MP2 Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc6\JACKET_P\J00___5S.MP2 Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc6\Sources\Menus\SPU_EApgc_NGsf.spu Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc6\Sources\Menus\SPU_HApgc_RGsf.spu Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc6\Sources\Menus\Video_EApgc_NGsf.mpg Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc6\Sources\Menus\Video_HApgc_RGsf.mpg Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc6\Sources\thumb2_73216908.bmp Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc6\Sources\thumb3_73217007.bmp Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc6\Sources\thumb4_73217168.bmp Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc6\Sources\thumb5_73217352.bmp Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc6\Sources\thumb6_73217494.bmp Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc6\Sources\thumb7_73217628.bmp Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc6\Sources\thumb8_73217750.bmp Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc6\Sources\Video\J00___5L.M2V Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc6\Sources\Video\J00___5M.M2V Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc6\Sources\Video\J00___5S.M2V Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc6\Sources\Videomp24x3NTSC720x480.mpg Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc6\Untitled.dvd Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc7\Harry P.dvd Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc7\JACKET_P\J00___5L.MP2 Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc7\JACKET_P\J00___5M.MP2 Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc7\JACKET_P\J00___5S.MP2 Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc7\Sources\Menus\SPU_IApgc_DHsf.spu Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc7\Sources\Menus\SPU_NApgc_JHsf.spu Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc7\Sources\Menus\Video_IApgc_DHsf.mpg Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc7\Sources\Menus\Video_NApgc_JHsf.mpg Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc7\Sources\Video\J00___5L.M2V Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc7\Sources\Video\J00___5M.M2V Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc7\Sources\Video\J00___5S.M2V Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc7\Sources\Videomp24x3NTSC720x480.mpg Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc8\burn.dvd Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc8\JACKET_P\J00___5L.MP2 Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc8\JACKET_P\J00___5M.MP2 Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc8\JACKET_P\J00___5S.MP2 Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc8\Sources\Menus\SPU_EApgc_LGsf.spu Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc8\Sources\Menus\Video_EApgc_LGsf.mpg Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc8\Sources\Video\J00___5L.M2V Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc8\Sources\Video\J00___5M.M2V Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc8\Sources\Video\J00___5S.M2V Object is locked skipped
C:\RECYCLER\S-1-5-21-792437745-2077084420-1174288204-1008\Dc8\Sources\Videomp24x3NTSC720x480.mpg Object is locked skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
C:\System Volume Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP434\A0207854.exe Infected: Trojan.Win32.Patched.aa skipped
C:\System Volume Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP434\A0207856.exe Infected: Trojan.Win32.Patched.aa skipped
C:\System Volume Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP434\A0207857.exe Infected: Trojan.Win32.Patched.aa skipped
C:\System Volume Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP434\A0207858.exe Infected: Trojan.Win32.Patched.aa skipped
C:\System Volume Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP434\A0207859.exe Infected: Trojan.Win32.Patched.aa skipped
C:\System Volume Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP434\A0207862.exe Infected: Trojan.Win32.Patched.aa skipped
C:\System Volume Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP436\A0211825.exe Infected: Trojan-Downloader.Win32.Agent.cbn skipped
C:\System Volume Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP437\A0214825.exe Infected: Email-Worm.Win32.Nulprot.b skipped
C:\System Volume Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP437\A0216825.exe Infected: Trojan-Downloader.Win32.Agent.cbn skipped
C:\System Volume Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP437\A0216826.exe Infected: Trojan.Win32.Agent.app skipped
C:\System Volume Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP468\A0228603.exe Infected: Trojan-Downloader.Win32.Agent.cbn skipped
C:\System Volume Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP469\A0228676.exe Infected: Trojan-Downloader.Win32.Agent.cbn skipped
C:\System Volume Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP469\A0229532.exe Infected: Trojan.Win32.Agent.app skipped
C:\System Volume Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP469\A0229537.exe Infected: Trojan-Downloader.Win32.Agent.cbn skipped
C:\System Volume Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP470\A0229552.exe Infected: Trojan.Win32.Agent.app skipped
C:\System Volume Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP470\A0229612.exe Infected: Trojan-Downloader.Win32.Agent.cbn skipped
C:\System Volume Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP471\A0229616.exe Infected: Trojan-Downloader.Win32.Agent.cbn skipped
C:\System Volume Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP471\A0229617.exe Infected: Trojan.Win32.Agent.app skipped
C:\System Volume Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP472\A0229635.exe Infected: Trojan.Win32.Agent.app skipped
C:\System Volume Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP472\A0229666.exe Infected: Trojan-Downloader.Win32.Agent.cbn skipped
C:\System Volume Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP473\A0229686.exe Infected: Trojan.Win32.Agent.app skipped
C:\System Volume Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP473\A0229687.exe Infected: Trojan-Downloader.Win32.Agent.cbn skipped
C:\System Volume Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP474\A0229795.exe Infected: Trojan-Downloader.Win32.Agent.cbn skipped
C:\System Volume Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP474\A0229796.exe Infected: Trojan.Win32.Agent.app skipped
C:\System Volume Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP475\A0229806.exe Infected: Trojan-Downloader.Win32.Agent.cbn skipped
C:\System Volume Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP475\A0229807.exe Infected: Trojan.Win32.Agent.app skipped
C:\System Volume Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP476\A0229821.exe Infected: Trojan.Win32.Agent.app skipped
C:\System Volume Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP476\A0230682.exe Infected: Trojan-Downloader.Win32.Agent.cbn skipped
C:\System Volume Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP476\A0230689.exe Infected: Trojan.Win32.Agent.app skipped
C:\System Volume Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP477\A0230701.exe Infected: Trojan.Win32.Agent.app skipped
C:\System Volume Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP477\A0230702.exe Infected: Trojan-Downloader.Win32.Agent.cbn skipped
C:\System Volume Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP478\A0230711.exe Infected: Trojan-Downloader.Win32.Agent.cbn skipped
C:\System Volume Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP478\A0230712.exe Infected: Trojan.Win32.Agent.app skipped
C:\System Volume Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP480\A0230734.exe Infected: Trojan.Win32.Agent.app skipped
C:\System Volume Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP480\A0230741.exe Infected: Trojan-Downloader.Win32.Agent.cbn skipped
C:\System Volume Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP481\A0230751.exe Infected: Trojan-Downloader.Win32.Agent.cbn skipped
C:\System Volume Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP481\A0230752.exe Infected: Trojan.Win32.Agent.app skipped
C:\System Volume Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP481\A0230758.exe Infected: Trojan-Downloader.Win32.Agent.cbn skipped
C:\System Volume Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP482\A0230771.exe Infected: Trojan.Win32.Agent.ayp skipped
C:\System Volume Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP482\A0230789.sys Infected: Rootkit.Win32.Agent.ey skipped
C:\System Volume Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP483\A0230875.dll Infected: Trojan.Win32.Agent.ayn skipped
C:\System Volume Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP483\A0230877.dll Infected: Trojan.Win32.BHO.gv skipped
C:\System Volume Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP483\change.log Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\Registration\{02D4B3F1-FD88-11D1-960D-00805FC79235}.{F9A4931B-1923-4CF9-8B09-D458266D2465}.crmlog Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
C:\WINDOWS\system32\config\Antivirus.Evt Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\IntelDH.evt Object is locked skipped
C:\WINDOWS\system32\config\Internet.evt Object is locked skipped
C:\WINDOWS\system32\config\Media Ce.evt Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\hpzjrd01.dll Object is locked skipped
C:\WINDOWS\system32\LogFiles\WUDF\WUDFTrace.etl Object is locked skipped
C:\WINDOWS\system32\wbem\csrss.exe Infected: Trojan.Win32.Agent.app skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\Temp\Perflib_Perfdata_604.dat Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
D:\System Volume Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP483\change.log Object is locked skipped
Scan process completed.
As for system behaviour. I don't get the usual pop-ups I was getting when I brose on Internet Explorer and I haven't recieved any noticable exstensive lag while playing games. Thanks again for all the help, get back to me when you can. Zach
|