Welcome to Tech Support Forum home to more then 136,000 problems solved. Issues have included: Spyware, Malware, Virus Issues, Windows, Microsoft, Linux, Networking, Security, Hardware, and Gaming Getting your problem solved is as easy as:
1. Registering for a free account
2. Asking your question
3. Receiving an answer

Registered members:
* Get free support
* Communicate privately with other members (PM).
* Removal of this message
* See fewer ads.
* And much more..

 




Want to know how to post a question? click here Having problems with spyware and pop-ups? First Steps
Go Back   Tech Support Forum > Security Center > HijackThis Log Help > Resolved HJT Threads
IE Pop-ups and redirects IE Pop-ups and redirects
User Name
Password
Site Map Register Donate Rules Blogs Mark Forums Read

Resolved HJT Threads Resolved spyware and popup issues.

 
Page 1 of 2 1 2 >
 
Thread Tools
Old 03-28-2007, 04:39 PM   #1 (permalink)
Registered User
 
Join Date: Jul 2006
Posts: 26
OS: XP Home SP3


IE Pop-ups and redirects
Hope you guys can help

My daughter got sent a link via Messenger which she clicked.

I now have NOD32 flagging up problems, pop-up ads within IE pages, browser pages opening on their own.

I have scanned with Adaware, Spybot S&D, and also tried CWS Shredder. I have removed anything flagged up, but still the problem is there.


Logfile of HijackThis v1.99.1
Scan saved at 23:36:03, on 28/03/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Eset\nod32kui.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Google\Gmail Notifier\gnotify.exe
C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Screenza 3.0\Screenza.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\PROGRA~1\Yahoo!\browser\ycommon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Documents and Settings\Simon\Desktop\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://uk.red.clientapps.yahoo.com/c...o/bt_side.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://uk.red.clientapps.yahoo.com/c...rch.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.sportsbikeforum.co.uk/news.php
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://uk.red.clientapps.yahoo.com/c...rch.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://uk.red.clientapps.yahoo.com/c...o/bt_side.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://uk.red.clientapps.yahoo.com/c...rch.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://uk.red.clientapps.yahoo.com/c...rch.yahoo.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] C:\Program Files\Google\Gmail Notifier\gnotify.exe
O4 - HKLM\..\Run: [MMTray] "C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Startup: Screenza.lnk = C:\Program Files\Screenza 3.0\Screenza.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL
O9 - Extra button: BT Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\PROGRA~1\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {1842B0EE-B597-11D4-8997-00104BD12D94} (iCC Class) - http://pcpitstop.com/internet/pcpConnCheck.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsu...?1167945475750
O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} (Crucial cpcScan) - http://www.crucial.com/controls/cpcScanner.cab
O16 - DPF: {C606BA60-AB76-48B6-96A7-2C4D5C386F70} (PreQualifier Class) - http://help.broadbandassist.com/preq...ivePreQual.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Symbol Technologies, Inc. - C:\Symbol_v3.9.2\Mobile Companion Installer\NDI\S24EvMon.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: YPCService - Yahoo! Inc. - C:\WINDOWS\system32\YPCSER~1.EXE
nagsville is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Bookmark on Thread SoupReddit!
Old 03-29-2007, 11:26 AM   #2 (permalink)
Analyst, Security Team
 
Join Date: Nov 2006
Posts: 215
OS: WinXP Pro


Re: IE Pop-ups and redirects
Hello nagsville and Welcome to TechSupport,

Please do the following:

Scan with HijackThis. Place a check against each of the following:
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://uk.red.clientapps.yahoo.com/c...o/bt_side.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://uk.red.clientapps.yahoo.com/c...rch.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://uk.red.clientapps.yahoo.com/c...rch.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://uk.red.clientapps.yahoo.com/c...o/bt_side.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://uk.red.clientapps.yahoo.com/c...rch.yahoo.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://uk.red.clientapps.yahoo.com/c...rch.yahoo.com/
Close all windows or browsers except for Hijackthis. Click on Fix Checked when finished and exit HijackThis.

Now run this online scan using Internet Explorer:
Kaspersky Online Scanner from http://www.kaspersky.com/virusscanner

* Turn off the real time scanner of any existing antivirus program while performing the online scan
Next Click on Launch Kaspersky Online Scanner

You will be prompted to install an ActiveX component from Kaspersky, Click Yes.
  • The program will launch and then begin downloading the latest definition files:
  • Once the files have been downloaded click on NEXT
  • Now click on Scan Settings
  • In the scan settings make that the following are selected:
  • Scan using the following Anti-Virus database:
  • Standard
  • Scan Options:
  • Scan Archives
  • Scan Mail Bases
  • Click OK
  • Now under select a target to scan:
  • Select My Computer
  • This will program will start and scan your system.
  • The scan will take a while so be patient and let it run.
  • Once the scan is complete it will display if your system has been infected.
  • Now click on the Save as Text button:
  • Save the file to your desktop.
Copy and paste that information from Kapersky in your next post.

**Note for Internet Explorer 7 users: If at any time you have trouble with the accept button of the license, click on the Zoom tool located at the right bottom of the IE window and set the zoom to 75 %. Once the license is accepted, reset to 100%.

Post (reply) with a fresh HijackThis log and the log from Kapersky.
__________________



Proud member of ASAP since 2005

If you feel we've helped you, Please donate to the forum
Susan528 is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Bookmark on Thread SoupReddit!
Old 03-29-2007, 03:31 PM   #3 (permalink)
Registered User
 
Join Date: Jul 2006
Posts: 26
OS: XP Home SP3


Re: IE Pop-ups and redirects
Thanks for helping, much appreciated

New Hijackthis Log

Logfile of HijackThis v1.99.1
Scan saved at 22:25:39, on 29/03/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Google\Gmail Notifier\gnotify.exe
C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Screenza 3.0\Screenza.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\PROGRA~1\Yahoo!\browser\ycommon.exe
C:\Documents and Settings\Simon\Desktop\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.sportsbikeforum.co.uk/news.php
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] C:\Program Files\Google\Gmail Notifier\gnotify.exe
O4 - HKLM\..\Run: [MMTray] "C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Startup: Screenza.lnk = C:\Program Files\Screenza 3.0\Screenza.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL
O9 - Extra button: BT Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\PROGRA~1\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/par...an_unicode.cab
O16 - DPF: {1842B0EE-B597-11D4-8997-00104BD12D94} (iCC Class) - http://pcpitstop.com/internet/pcpConnCheck.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsu...?1167945475750
O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} (Crucial cpcScan) - http://www.crucial.com/controls/cpcScanner.cab
O16 - DPF: {C606BA60-AB76-48B6-96A7-2C4D5C386F70} (PreQualifier Class) - http://help.broadbandassist.com/preq...ivePreQual.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Symbol Technologies, Inc. - C:\Symbol_v3.9.2\Mobile Companion Installer\NDI\S24EvMon.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: YPCService - Yahoo! Inc. - C:\WINDOWS\system32\YPCSER~1.EXE
nagsville is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Bookmark on Thread SoupReddit!
Old 03-29-2007, 03:33 PM   #4 (permalink)
Registered User
 
Join Date: Jul 2006
Posts: 26
OS: XP Home SP3


Re: IE Pop-ups and redirects
Kaspersky Log part 1

-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Thursday, March 29, 2007 10:24:12 PM
Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.83.0
Kaspersky Anti-Virus database last update: 29/03/2007
Kaspersky Anti-Virus database records: 272347
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: standard
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
A:\
C:\
D:\
E:\
G:\
H:\
I:\
J:\
K:\

Scan Statistics:
Total number of scanned objects: 184749
Number of viruses found: 4
Number of infected objects: 39 / 0
Number of suspicious objects: 0
Duration of the scan process: 03:36:25

Infected Object Name / Virus Name / Last Action
C:\Documents and Settings\Courtney\Local Settings\Temp\twesneav.dll Infected: Trojan-Spy.Win32.VBStat.h skipped
C:\Documents and Settings\Courtney\Local Settings\Temporary Internet Files\Content.IE5\YK8COCXX\is67295[1].exe Object is locked skipped
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\Rachel\Local Settings\Temp\vvwseing.dll Infected: Trojan-Spy.Win32.VBStat.h skipped
C:\Documents and Settings\Rachel\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\Rachel\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\Simon\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\Simon\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\Simon\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\Simon\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Simon\Local Settings\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat Object is locked skipped
C:\Documents and Settings\Simon\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Simon\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\Simon\ntuser.dat.LOG Object is locked skipped
C:\Program Files\ESET\cache\CACHE.NDB Object is locked skipped
C:\Program Files\ESET\infected\YVXXUCCA.NQF Infected: Packed.Win32.Klone.j skipped
C:\Program Files\ESET\logs\virlog.dat Object is locked skipped
C:\Program Files\ESET\logs\warnlog.dat Object is locked skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
C:\System Volume Information\_restore{8E0CC15B-F8F9-4493-BA7F-0C7BA7C46456}\RP1\A0002056.dll Object is locked skipped
C:\System Volume Information\_restore{8E0CC15B-F8F9-4493-BA7F-0C7BA7C46456}\RP1\change.log Object is locked skipped
C:\WINDOWS\$_hpcst$.hpc Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\system32\awtrrqp.dll Object is locked skipped
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\DEFAULT.LOG Object is locked skipped
C:\WINDOWS\system32\config\Internet.evt Object is locked skipped
C:\WINDOWS\system32\config\sam Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\security Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\SOFTWARE.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\SYSTEM.LOG Object is locked skipped
C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat Object is locked skipped
C:\WINDOWS\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\WINDOWS\system32\ddccywx.dll Object is locked skipped
C:\WINDOWS\system32\efccbxw.dll Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\hgggfgg.dll Object is locked skipped
C:\WINDOWS\system32\hgghhfd.dll Object is locked skipped
C:\WINDOWS\system32\iiffcaa.dll Object is locked skipped
C:\WINDOWS\system32\khffgff.dll Object is locked skipped
C:\WINDOWS\system32\LogFiles\WUDF\WUDFTrace.etl Object is locked skipped
C:\WINDOWS\system32\opnkhef.dll Object is locked skipped
C:\WINDOWS\system32\rqrqpqp.dll Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\system32\wvututu.dll Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
nagsville is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Bookmark on Thread SoupReddit!
Old 03-29-2007, 03:37 PM   #5 (permalink)
Registered User
 
Join Date: Jul 2006
Posts: 26
OS: XP Home SP3


Re: IE Pop-ups and redirects
Part 2

J:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\171e9f071c15b85150f062af6ca88d35_338cfaee-2493-40eb-b87e-bf15551eb57a Object is locked skipped
J:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\1c039f1a6035043237814322580fad64_338cfaee-2493-40eb-b87e-bf15551eb57a Object is locked skipped
J:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\21b08805ef86e62ea69c9975555878c7_338cfaee-2493-40eb-b87e-bf15551eb57a Object is locked skipped
J:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\38b6c7173ae59d4390eaca6ec507f4a5_338cfaee-2493-40eb-b87e-bf15551eb57a Object is locked skipped
J:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3a5a927ffb535f01e11eb593f445c7e2_338cfaee-2493-40eb-b87e-bf15551eb57a Object is locked skipped
J:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\52f8ebfe147b9119d051096c010caaa7_338cfaee-2493-40eb-b87e-bf15551eb57a Object is locked skipped
J:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5f046c0872f01523304b119c0252c6d1_338cfaee-2493-40eb-b87e-bf15551eb57a Object is locked skipped
J:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\666776174d942d05c6dd193c07848ed7_338cfaee-2493-40eb-b87e-bf15551eb57a Object is locked skipped
J:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6e12e26e73086b29b92af43b4722d40f_338cfaee-2493-40eb-b87e-bf15551eb57a Object is locked skipped
J:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\6f781f3469f8309249a69a2545dcb93e_338cfaee-2493-40eb-b87e-bf15551eb57a Object is locked skipped
J:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8c5f395cdec707109f31996b6d65feaa_338cfaee-2493-40eb-b87e-bf15551eb57a Object is locked skipped
J:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a1fd201b803231cf25887813b5cca957_338cfaee-2493-40eb-b87e-bf15551eb57a Object is locked skipped
J:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\b49e0f1e16b5e5ecc5648d0e77d89b6d_338cfaee-2493-40eb-b87e-bf15551eb57a Object is locked skipped
J:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\ba104af93d4d9e276d6bb7a9b7dbc188_338cfaee-2493-40eb-b87e-bf15551eb57a Object is locked skipped
J:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d0d47f3c2aaee5c71370c55fa8e0446f_338cfaee-2493-40eb-b87e-bf15551eb57a Object is locked skipped
J:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e04f5f16ab89762d362a521ca2ebf68d_338cfaee-2493-40eb-b87e-bf15551eb57a Object is locked skipped
J:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Adobe\Acrobat\7.0\AdobeCMapFnt07.lst Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Adobe\Acrobat\7.0\AdobeComFnt07.lst Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Adobe\Acrobat\7.0\AdobeSysFnt07.lst Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Adobe\Acrobat\7.0\Collab\RSS Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Adobe\Acrobat\7.0\JavaScripts\glob.settings.js Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Adobe\Acrobat\7.0\Preferences\AutoFillDefaults.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Adobe\Acrobat\7.0\Preferences\defaultHeuristics.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Adobe\Acrobat\7.0\Updater\udlog.txt Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Adobe\Acrobat\7.0\Updater\udstore.js Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Adobe\Acrobat\7.0\UserCache.bin Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Adobe\FileBrowser\Photoshop7\AAAAAAAA2 Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Adobe\FileBrowser\Photoshop7\AAAAAAAA2M Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Adobe\FileBrowser\Photoshop7\BAAAAAAA2 Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Adobe\FileBrowser\Photoshop7\BAAAAAAA2M Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Adobe\FileBrowser\Photoshop7\CAAAAAAA2 Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Adobe\FileBrowser\Photoshop7\CAAAAAAA2M Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Adobe\FileBrowser\Photoshop7\DAAAAAAA2 Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Adobe\FileBrowser\Photoshop7\DAAAAAAA2M Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Adobe\FileBrowser\Photoshop7\index.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Adobe\Photoshop\7.0\Adobe Photoshop 7.0 Settings\Actions Palette.psp Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Adobe\Photoshop\7.0\Adobe Photoshop 7.0 Settings\Adobe Photoshop 7.0 Prefs.psp Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Adobe\Photoshop\7.0\Adobe Photoshop 7.0 Settings\Brushes.psp Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Adobe\Photoshop\7.0\Adobe Photoshop 7.0 Settings\Color Settings.csf Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Adobe\Photoshop\7.0\Adobe Photoshop 7.0 Settings\Contours.psp Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Adobe\Photoshop\7.0\Adobe Photoshop 7.0 Settings\CustomShapes.psp Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Adobe\Photoshop\7.0\Adobe Photoshop 7.0 Settings\Gradients.psp Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Adobe\Photoshop\7.0\Adobe Photoshop 7.0 Settings\Patterns.psp Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Adobe\Photoshop\7.0\Adobe Photoshop 7.0 Settings\PluginCache.psp Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Adobe\Photoshop\7.0\Adobe Photoshop 7.0 Settings\Styles.psp Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Adobe\Photoshop\7.0\Adobe Photoshop 7.0 Settings\Swatches.psp Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Adobe\Photoshop\7.0\Adobe Photoshop 7.0 Settings\ToolPresets.psp Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Adobe\Photoshop Album\3.0\jpegviewer.xml Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Adobe\Workflow\Options.txt Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Apple Computer\iTunes\iTunesPrefs.xml Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\desktop.ini Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Google\Local Search History\google%2Eimages.w Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Google\Local Search History\google%2Eweb.w Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Jasc Software Inc\Paint Shop Pro 8\Cache\Frames.PspCache Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Jasc Software Inc\Paint Shop Pro 8\Cache\Gradients.PspCache Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Jasc Software Inc\Paint Shop Pro 8\Cache\Patterns.PspCache Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Jasc Software Inc\Paint Shop Pro 8\Cache\PSPPLCachV8E.PspCache Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Jasc Software Inc\Paint Shop Pro 8\Cache\Swatches.PspCache Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Jasc Software Inc\Paint Shop Pro 8\Cache\Textures.PspCache Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3A7SQZSH\atdmt.com\ft521-21.sol Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3A7SQZSH\bunnyherolabs.com\adopt\customize-pet.swf\lastpets.sol Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3A7SQZSH\everythinggirl.com\common\myscene_gamesNav.swf\Values.sol Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3A7SQZSH\flashtalking.com\ft497-2.sol Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3A7SQZSH\flashtalking.com\ft499-3.sol Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3A7SQZSH\flashtalking.com\ft510-5.sol Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3A7SQZSH\flashtalking.com\ft510-6.sol Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3A7SQZSH\mediaplex.com\ft468-9.sol Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3A7SQZSH\movinit.skive.co.uk\DanceOff.swf\movin_it.sol Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3A7SQZSH\myscene.everythinggirl.com\ChelseaFashionBook.sol Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3A7SQZSH\myscene.everythinggirl.com\MS_Home_History.sol Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3A7SQZSH\myscene.everythinggirl.com\MS_RM_Bedroom.sol Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3A7SQZSH\myscene.everythinggirl.com\MS_RM_Party.sol Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3A7SQZSH\myscene.everythinggirl.com\mysceneUserSettings.sol Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3A7SQZSH\neave.com\games\simon\simon.swf\neaveSimon.sol Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3A7SQZSH\neave.com\games\snake\snake.swf\neaveSnake.sol Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3A7SQZSH\revenue.net\revu4001intl572006.sol Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3A7SQZSH\video.google.com\googleplayer.swf\mediaPlayerUserSettings.sol Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\#SharedObjects\3A7SQZSH\www.youtube.com\soundData.sol Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#atdmt.com\settings.sol Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#bunnyherolabs.com\settings.sol Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#everythinggirl.com\settings.sol Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#flashtalking.com\settings.sol Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#mediaplex.com\settings.sol Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#movinit.skive.co.uk\settings.sol Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#myscene.everythinggirl.com\settings.sol Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#neave.com\settings.sol Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#revenue.net\settings.sol Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#video.google.com\settings.sol Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.youtube.com\settings.sol Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Macromedia\Shockwave Player\dirapi.mch Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Macromedia\Shockwave Player\Prefs\VNZUETCF\6FEB4C10.txt Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Macromedia\Shockwave Player\Shockwave Log Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Macromedia\Shockwave Player\xtras\download\ElectronicInk\PrintOMaticLiteXtra\PMLite.x32 Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Macromedia\Shockwave Player\xtras\download\MacromediaInc\DirectSound\DirectSound.x32 Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Macromedia\Shockwave Player\xtras\download\MacromediaInc\FlashAsset\Flash Asset.x32 Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Macromedia\Shockwave Player\xtras\download\MacromediaInc\FontAsset\Font Asset.x32 Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Macromedia\Shockwave Player\xtras\download\MacromediaInc\FontXtra\Font Xtra.x32 Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Macromedia\Shockwave Player\xtras\download\MacromediaInc\MacroMix\MacroMix.x32 Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Macromedia\Shockwave Player\xtras\download\MacromediaInc\SoundControl\Sound Control.x32 Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Macromedia\Shockwave Player\xtras\download\MacromediaInc\SWA\swadcmpr.x32 Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Macromedia\Shockwave Player\xtras\download\MacromediaInc\SWA\SWASTRM.X32 Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Macromedia\Shockwave Player\xtras\download\MacromediaInc\TextAsset\Text Asset.x32 Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Macromedia\Shockwave Player\xtras\download\MacromediaInc\TextXtra\TextXtra.x32 Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Macromedia\Shockwave Player\xtras\download\MacromediaInc\XMLParser\XMLParser.X32 Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\Address Book\Rachel.wab Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\Address Book\Rachel.wab~ Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\Clip Organizer\mstore10.mgc Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\Clip Organizer\Offic10.MGC Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\Credentials\S-1-5-21-343818398-1844237615-1801674531-1007\Credentials Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\CryptnetUrlCache\Content\087486FD43937B4695C52643C96BB94D Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\CryptnetUrlCache\Content\2BF68F4714092295550497DD56F57004 Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\CryptnetUrlCache\Content\303572DF538EDD8B1D606185F1D559B8 Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\CryptnetUrlCache\Content\33EF5DC954745FDB1C94EDBF02CDC43B Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\CryptnetUrlCache\Content\60E31627FDA0A46932B0E5948949F2A5 Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\CryptnetUrlCache\Content\696F3DE637E6DE85B458996D49D759AD Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\CryptnetUrlCache\Content\71644221AC231DBD2359C18EBB2118DC Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\CryptnetUrlCache\Content\79841F8EF00FBA86D33CC5A47696F165 Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\CryptnetUrlCache\Content\7C8A03C4580C6B04FDF34357F3474EDC Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\CryptnetUrlCache\Content\904590238400AD963F77FAAAADC9BAB5 Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015 Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\CryptnetUrlCache\Content\A44F4E7CB3133FF765C39A53AD8FCFDD Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\CryptnetUrlCache\Content\A8FABA189DB7D25FBA7CAC806625FD30 Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\CryptnetUrlCache\Content\B2F4B1D39F0694C6CDB433BC3CCF1418 Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\CryptnetUrlCache\Content\B82262A5D5DA4DDACE9EDA7F787D0DEB Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\CryptnetUrlCache\Content\C571B417AAF1F617555A0486AB3F5361 Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\CryptnetUrlCache\Content\CFC456E7E410D69E2C6F3E2DB75C7DB3 Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\CryptnetUrlCache\Content\E6024EAC88E6B6165D49FE3C95ADD735 Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\CryptnetUrlCache\Content\F482C95F83F1B59228F1B1E720F2EDF1 Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\CryptnetUrlCache\Content\FB788E090BC1F3AA2FBC9E8FB2859601 Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\CryptnetUrlCache\MetaData\087486FD43937B4695C52643C96BB94D Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\CryptnetUrlCache\MetaData\2BF68F4714092295550497DD56F57004 Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\CryptnetUrlCache\MetaData\303572DF538EDD8B1D606185F1D559B8 Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\CryptnetUrlCache\MetaData\33EF5DC954745FDB1C94EDBF02CDC43B Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\CryptnetUrlCache\MetaData\60E31627FDA0A46932B0E5948949F2A5 Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\CryptnetUrlCache\MetaData\696F3DE637E6DE85B458996D49D759AD Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\CryptnetUrlCache\MetaData\71644221AC231DBD2359C18EBB2118DC Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\CryptnetUrlCache\MetaData\79841F8EF00FBA86D33CC5A47696F165 Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\CryptnetUrlCache\MetaData\7C8A03C4580C6B04FDF34357F3474EDC Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\CryptnetUrlCache\MetaData\904590238400AD963F77FAAAADC9BAB5 Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015 Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\CryptnetUrlCache\MetaData\A44F4E7CB3133FF765C39A53AD8FCFDD Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\CryptnetUrlCache\MetaData\A8FABA189DB7D25FBA7CAC806625FD30 Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\CryptnetUrlCache\MetaData\B2F4B1D39F0694C6CDB433BC3CCF1418 Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\CryptnetUrlCache\MetaData\B82262A5D5DA4DDACE9EDA7F787D0DEB Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\CryptnetUrlCache\MetaData\C571B417AAF1F617555A0486AB3F5361 Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\CryptnetUrlCache\MetaData\CFC456E7E410D69E2C6F3E2DB75C7DB3 Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\CryptnetUrlCache\MetaData\E6024EAC88E6B6165D49FE3C95ADD735 Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\CryptnetUrlCache\MetaData\F482C95F83F1B59228F1B1E720F2EDF1 Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\CryptnetUrlCache\MetaData\FB788E090BC1F3AA2FBC9E8FB2859601 Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\Crypto\RSA\S-1-5-21-343818398-1844237615-1801674531-1007\25ff1cabd1ef7d945ea4965e97bce223_338cfaee-2493-40eb-b87e-bf15551eb57a Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\Crypto\RSA\S-1-5-21-343818398-1844237615-1801674531-1007\2d31d37e69937d9f4aeca953f21ba14e_338cfaee-2493-40eb-b87e-bf15551eb57a Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\Crypto\RSA\S-1-5-21-343818398-1844237615-1801674531-1007\354d0fd0c4f0242c7daad4f1912dc5ad_338cfaee-2493-40eb-b87e-bf15551eb57a Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\Crypto\RSA\S-1-5-21-343818398-1844237615-1801674531-1007\4edc96cbf9c9a63c4390bf6583d9e043_338cfaee-2493-40eb-b87e-bf15551eb57a Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\Crypto\RSA\S-1-5-21-343818398-1844237615-1801674531-1007\593220588bd0364d8c1e3ced9b3d90df_338cfaee-2493-40eb-b87e-bf15551eb57a Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\Crypto\RSA\S-1-5-21-343818398-1844237615-1801674531-1007\5d254296fa3c85455c31cb42455e8528_338cfaee-2493-40eb-b87e-bf15551eb57a Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\Crypto\RSA\S-1-5-21-343818398-1844237615-1801674531-1007\747795d7e756fdb1807d092b683d5a8a_338cfaee-2493-40eb-b87e-bf15551eb57a Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\Crypto\RSA\S-1-5-21-343818398-1844237615-1801674531-1007\838146604397711dbf441167ce372723_338cfaee-2493-40eb-b87e-bf15551eb57a Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\Crypto\RSA\S-1-5-21-343818398-1844237615-1801674531-1007\8b214c6fcfeebb56901bd29fe15ce76d_338cfaee-2493-40eb-b87e-bf15551eb57a Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\Crypto\RSA\S-1-5-21-343818398-1844237615-1801674531-1007\8f9989811855752951c287e7c9e65721_338cfaee-2493-40eb-b87e-bf15551eb57a Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\Crypto\RSA\S-1-5-21-343818398-1844237615-1801674531-1007\974790d05f4a47aa3068552f4b7dcd74_338cfaee-2493-40eb-b87e-bf15551eb57a Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\Crypto\RSA\S-1-5-21-343818398-1844237615-1801674531-1007\bc7c6d74d4f062c25c7fe7264f5ed052_338cfaee-2493-40eb-b87e-bf15551eb57a Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\Crypto\RSA\S-1-5-21-343818398-1844237615-1801674531-1007\cabee9eb749d463046fb35c9b30e3a9f_338cfaee-2493-40eb-b87e-bf15551eb57a Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\Crypto\RSA\S-1-5-21-343818398-1844237615-1801674531-1007\e2e6bf40f6233f7ab7971409ad93acf9_338cfaee-2493-40eb-b87e-bf15551eb57a Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\Crypto\RSA\S-1-5-21-343818398-1844237615-1801674531-1007\f9e3a7af5f63205e4e738789c0279227_338cfaee-2493-40eb-b87e-bf15551eb57a Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\Crypto\RSA\S-1-5-21-343818398-1844237615-1801674531-1007\fb02348077a63a0fc9fa5b2a5406f99b_338cfaee-2493-40eb-b87e-bf15551eb57a Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\Crypto\RSA\S-1-5-21-343818398-1844237615-1801674531-1007\fe3a746f43666001afd5ed8e802d78dc_338cfaee-2493-40eb-b87e-bf15551eb57a Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\HTML Help\hh.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\IdentityCRL\ppcrlconfig.dll Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\Internet Explorer\brndlog.txt Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\Internet Explorer\Desktop.htt Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\Internet Explorer\Internet Explorer Wallpaper.bmp Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\Internet Explorer\Quick Launch\desktop.ini Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\Media Player\004A83FD.wpl Object is locked skipped
nagsville is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Bookmark on Thread SoupReddit!
Old 03-29-2007, 03:40 PM   #6 (permalink)
Registered User
 
Join Date: Jul 2006
Posts: 26
OS: XP Home SP3


Re: IE Pop-ups and redirects
Part 3

J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1234120923\MapFile\TFR2B3A.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1234120923\MapFile\TFR2B67.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1234120923\UserTile\map.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1234120923\UserTile\TFR2B2F.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1234120923\UserTile\TFR2B30.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1234120923\UserTile\TFR2B31.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1234120923\UserTile\TFR2B32.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1234120923\UserTile\TFR2B33.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1234120923\UserTile\TFR2B34.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1234120923\UserTile\TFR2B35.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1234120923\UserTile\TFR2B36.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1234120923\UserTile\TFR2B37.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1234120923\UserTile\TFR2B38.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1234120923\UserTile\TFR2B39.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1234120923\Winks3\map.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1234120923\Winks3\TFR2B44.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1234120923\Winks3\TFR2B46.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1234120923\Winks3\TFR2B48.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1234120923\Winks3\TFR2B4A.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1234120923\Winks3\TFR2B4C.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1234120923\Winks3\TFR2B4F.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1234120923\Winks3\TFR2B51.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1234120923\Winks3\TFR2B54.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1234120923\Winks3\TFR2B57.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1234120923\Winks3\TFR2B5A.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1234120923\Winks3\TFR2B5E.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1234120923\Winks3\TFR2B60.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1234120923\Winks3\TFR2B62.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1234120923\Winks3\TFR2B64.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1234120923\Winks3\TFR2B66.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1901349967\Backgrounds\map.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1901349967\Backgrounds\TFR15.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1901349967\Backgrounds\TFR16.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1901349967\Backgrounds\TFR17.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1901349967\Backgrounds\TFR18.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1901349967\Backgrounds\TFR19.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1901349967\DynamicBackgrounds\map.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1901349967\DynamicBackgrounds\TFR1F.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1901349967\DynamicBackgrounds\TFR66.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1901349967\DynamicBackgrounds\TFR7A.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1901349967\DynamicBackgrounds\TFR87.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1901349967\ListCache.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1901349967\MapFile\TFR8F.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1901349967\MapFile\TFR90.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1901349967\MapFile\TFRAF.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1901349967\MapFile\TFRB1.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1901349967\UserTile\map.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1901349967\UserTile\TFR10.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1901349967\UserTile\TFR11.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1901349967\UserTile\TFR12.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1901349967\UserTile\TFR13.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1901349967\UserTile\TFR9.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1901349967\UserTile\TFRA.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1901349967\UserTile\TFRB.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1901349967\UserTile\TFRB0.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1901349967\UserTile\TFRC.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1901349967\UserTile\TFRD.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1901349967\UserTile\TFRE.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1901349967\UserTile\TFRF.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1901349967\Winks3\map.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1901349967\Winks3\TFR92.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1901349967\Winks3\TFR94.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1901349967\Winks3\TFR96.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1901349967\Winks3\TFR98.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1901349967\Winks3\TFR9A.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1901349967\Winks3\TFR9C.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1901349967\Winks3\TFR9E.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1901349967\Winks3\TFRA0.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1901349967\Winks3\TFRA2.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1901349967\Winks3\TFRA4.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1901349967\Winks3\TFRA6.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1901349967\Winks3\TFRA8.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1901349967\Winks3\TFRAA.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1901349967\Winks3\TFRAC.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1901349967\Winks3\TFRAE.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1981206977\Backgrounds\map.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1981206977\Backgrounds\TFRB9.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1981206977\Backgrounds\TFRBA.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1981206977\Backgrounds\TFRBB.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1981206977\Backgrounds\TFRBC.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1981206977\Backgrounds\TFRBD.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1981206977\DynamicBackgrounds\map.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1981206977\DynamicBackgrounds\TFRC1.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1981206977\DynamicBackgrounds\TFRCC.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1981206977\DynamicBackgrounds\TFRD7.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1981206977\DynamicBackgrounds\TFRE2.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1981206977\ListCache.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1981206977\MapFile\TFR10A.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1981206977\MapFile\TFR17F.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1981206977\MapFile\TFREA.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1981206977\MapFile\TFREB.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1981206977\UserTile\map.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1981206977\UserTile\TFR17D.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1981206977\UserTile\TFR17E.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1981206977\UserTile\TFRAD.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1981206977\UserTile\TFRAE.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1981206977\UserTile\TFRAF.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1981206977\UserTile\TFRB0.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1981206977\UserTile\TFRB1.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1981206977\UserTile\TFRB2.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1981206977\UserTile\TFRB3.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1981206977\UserTile\TFRB4.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1981206977\UserTile\TFRB5.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1981206977\UserTile\TFRB6.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1981206977\UserTile\TFRB7.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1981206977\Winks3\map.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1981206977\Winks3\TFR101.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1981206977\Winks3\TFR103.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1981206977\Winks3\TFR105.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1981206977\Winks3\TFR107.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1981206977\Winks3\TFR109.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1981206977\Winks3\TFRED.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1981206977\Winks3\TFREF.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1981206977\Winks3\TFRF1.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1981206977\Winks3\TFRF3.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1981206977\Winks3\TFRF5.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1981206977\Winks3\TFRF7.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1981206977\Winks3\TFRF9.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1981206977\Winks3\TFRFB.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1981206977\Winks3\TFRFD.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\1981206977\Winks3\TFRFF.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2012690357\Backgrounds\map.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2012690357\Backgrounds\TFR15D.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2012690357\Backgrounds\TFR15E.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2012690357\Backgrounds\TFR15F.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2012690357\Backgrounds\TFR160.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2012690357\Backgrounds\TFR161.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2012690357\DeluxeDisplayPictures\map.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2012690357\DynamicBackgrounds\map.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2012690357\DynamicBackgrounds\TFR165.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2012690357\DynamicBackgrounds\TFR170.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2012690357\DynamicBackgrounds\TFR17B.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2012690357\DynamicBackgrounds\TFR186.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2012690357\ListCache.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2012690357\MapFile\TFR10C2.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2012690357\MapFile\TFR15C.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2012690357\MapFile\TFR18E.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2012690357\MapFile\TFR18F.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2012690357\MapFile\TFR1AE.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2012690357\UserTile\map.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2012690357\UserTile\TFR151.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2012690357\UserTile\TFR152.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2012690357\UserTile\TFR153.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2012690357\UserTile\TFR154.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2012690357\UserTile\TFR155.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2012690357\UserTile\TFR156.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2012690357\UserTile\TFR157.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2012690357\UserTile\TFR158.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2012690357\UserTile\TFR159.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2012690357\UserTile\TFR15A.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2012690357\UserTile\TFR15B.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2012690357\Winks3\map.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2012690357\Winks3\TFR191.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2012690357\Winks3\TFR193.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2012690357\Winks3\TFR195.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2012690357\Winks3\TFR197.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2012690357\Winks3\TFR199.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2012690357\Winks3\TFR19B.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2012690357\Winks3\TFR19D.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2012690357\Winks3\TFR19F.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2012690357\Winks3\TFR1A1.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2012690357\Winks3\TFR1A3.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2012690357\Winks3\TFR1A5.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2012690357\Winks3\TFR1A7.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2012690357\Winks3\TFR1A9.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2012690357\Winks3\TFR1AB.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2012690357\Winks3\TFR1AD.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2076907393\Backgrounds\map.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2076907393\Backgrounds\TFR36.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2076907393\Backgrounds\TFR37.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2076907393\Backgrounds\TFR38.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2076907393\Backgrounds\TFR39.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2076907393\Backgrounds\TFR3A.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2076907393\DynamicBackgrounds\map.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2076907393\DynamicBackgrounds\TFR3F.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2076907393\DynamicBackgrounds\TFR4E.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2076907393\DynamicBackgrounds\TFR59.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2076907393\DynamicBackgrounds\TFR65.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2076907393\ListCache.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2076907393\MapFile\TFR6F.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2076907393\MapFile\TFR70.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2076907393\MapFile\TFR8F.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2076907393\MapFile\TFRAA.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2076907393\UserTile\map.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2076907393\UserTile\TFR2A.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2076907393\UserTile\TFR2B.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2076907393\UserTile\TFR2C.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2076907393\UserTile\TFR2D.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2076907393\UserTile\TFR2E.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2076907393\UserTile\TFR2F.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2076907393\UserTile\TFR30.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2076907393\UserTile\TFR31.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2076907393\UserTile\TFR32.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Data\Microsoft\MSN Messenger\2076907393\UserTile\TFR33.dat Object is locked skipped
J:\Documents and Settings\Rachel\Application Dat