Virus has locked me out?

Lee2k4 · 10-30-2006, 04:44 AM

Hello,

Been having a difficult time these past 2 weeks trying to get rid of spyware and viruses, tried loads of online scanners and the Anti-Virus software I use on my system is Avast. Lately my system has become so slow it takes 10 minutes just to boot and my games have become laggy in frame rate and latency has increased. Please help

Avast says this

http://img157.imageshack.us/img157/4003/pprotectcz1.jpg

HJT Log

Quote:

Logfile of HijackThis v1.99.1
Scan saved at 11:43:01, on 30/10/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
E:\Program Files\Sygate\SPF\smc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
e:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
e:\Program Files\Alwil Software\Avast4\ashServ.exe
e:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
E:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
E:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\nvsvc32.exe
e:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
e:\Program Files\Alwil Software\Avast4\ashWebSv.exe
e:\Program Files\SlimBrowser\sbrowser.exe
C:\WINDOWS\system32\svchost.exe
D:\Junk\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=cache3-lang.server.ntli.net:8080:
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O4 - HKLM\..\Run: [SmcService] E:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKLM\..\Run: [avast!] e:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [DiskeeperSystray] "E:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: &ieSpell Options - res://e:\Program Files\ieSpell\iespell.dll/SPELLOPTION.HTM
O8 - Extra context menu item: Check &Spelling - res://e:\Program Files\ieSpell\iespell.dll/SPELLCHECK.HTM
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - e:\Program Files\ieSpell\iespell.dll
O9 - Extra 'Tools' menuitem: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - e:\Program Files\ieSpell\iespell.dll
O9 - Extra button: (no name) - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - e:\Program Files\ieSpell\iespell.dll
O9 - Extra 'Tools' menuitem: ieSpell Options - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - e:\Program Files\ieSpell\iespell.dll
O16 - DPF: RaptisoftGameLoader - http://www.miniclip.com/hamsterball/...gameloader.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/par...an_unicode.cab
O16 - DPF: {85D1F3B2-2A21-11D7-97B9-0010DC2A6243} (SecureLogin class) - http://secure2.comned.com/signuptemp...ogin-devel.cab
O16 - DPF: {B1826A9F-4AA0-4510-BA77-9013E74E4B9B} - http://www.trendmicro.com/spyware-scan/as4web.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - e:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - e:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - e:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - e:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - e:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Diskeeper - Diskeeper Corporation - E:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - E:\Program Files\Sygate\SPF\smc.exe

**Glaswegian** · 11-02-2006, 04:04 PM

Hi and welcome to TSF.

Apologies for any delay in replying, but we have been rather busy lately, and, of course, all our helpers are volunteers.

There is a possibility that some items are hiding from us. Please follow these instructions carefully.

I'd like you to rename HijackThis.exe (the actual .exe file itself) to glasgow.exe.

Navigate to C:\hjt\HijackThis.exe (or wherever HJT is located)
Right click on HijackThis.exe
Select 'Rename'
Type in glasgow.exe
Press Enter.

Now run another scan and post the new log back here.

Thank you.

Lee2k4 · 11-02-2006, 04:18 PM

Thanks for getting back to me, as requested log file from the HJT program renamed to "glasglow.exe"

Logfile of HijackThis v1.99.1
Scan saved at 23:17:29, on 02/11/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
E:\Program Files\Sygate\SPF\smc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
e:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
e:\Program Files\Alwil Software\Avast4\ashServ.exe
E:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
e:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
E:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
C:\WINDOWS\system32\nvsvc32.exe
e:\Program Files\SlimBrowser\sbrowser.exe
C:\Program Files\Outlook Express\msimn.exe
D:\Junk\hijackthis\glasgow.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=cache3-lang.server.ntli.net:8080:
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {46A4E9D9-B30E-452A-8157-DBBEC8573B03} - C:\Program Files\VSAdd-in\VSAdd-in.dll
O2 - BHO: (no name) - {4C904FA9-0EAF-84A3-5FC3-02F39C81E65B} - C:\WINDOWS\system32\socgkqf.dll
O2 - BHO: (no name) - {4D4BE91C-40F4-4F12-9B60-655504637ADF} - C:\WINDOWS\system32\vtutu.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - E:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: PrintViewBHO Class - {D4E0C464-30CE-4075-9A10-71FD106C2847} - C:\PROGRA~1\PRINTV~1\PRINTH~1.DLL (file missing)
O2 - BHO: (no name) - {F18F04B0-9CF1-4b93-B004-77A288BEE28B} - C:\WINDOWS\system32\bvsjtoru.dll
O3 - Toolbar: &VSAdd-in - {74DD705D-6834-439C-A735-A6DBE2677452} - C:\Program Files\VSAdd-in\VSAdd-in.dll
O4 - HKLM\..\Run: [SmcService] E:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKLM\..\Run: [avast!] e:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [DiskeeperSystray] "E:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: &ieSpell Options - res://e:\Program Files\ieSpell\iespell.dll/SPELLOPTION.HTM
O8 - Extra context menu item: Check &Spelling - res://e:\Program Files\ieSpell\iespell.dll/SPELLCHECK.HTM
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - e:\Program Files\ieSpell\iespell.dll
O9 - Extra 'Tools' menuitem: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - e:\Program Files\ieSpell\iespell.dll
O9 - Extra button: (no name) - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - e:\Program Files\ieSpell\iespell.dll
O9 - Extra 'Tools' menuitem: ieSpell Options - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - e:\Program Files\ieSpell\iespell.dll
O16 - DPF: RaptisoftGameLoader - http://www.miniclip.com/hamsterball/...gameloader.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/par...an_unicode.cab
O16 - DPF: {85D1F3B2-2A21-11D7-97B9-0010DC2A6243} (SecureLogin class) - http://secure2.comned.com/signuptemp...ogin-devel.cab
O16 - DPF: {B1826A9F-4AA0-4510-BA77-9013E74E4B9B} - http://www.trendmicro.com/spyware-scan/as4web.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: vtutu - C:\WINDOWS\system32\vtutu.dll
O20 - Winlogon Notify: winrge32 - C:\WINDOWS\SYSTEM32\winrge32.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - e:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - e:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - e:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - e:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - e:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Diskeeper - Diskeeper Corporation - E:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - E:\Program Files\Sygate\SPF\smc.exe

**Glaswegian** · 11-03-2006, 02:51 PM

Hi again Lee

Now we can see the baddies!

You may wish to Subscribe to this thread (Thread Tools > Subscribe to this thread) so that you are notified when you receive a reply.

Please read these instructions carefully and then print out or copy this page to Notepad in order to assist you when carrying out the fix. You should not have any open browsers when you are following the procedures below.

Note that the fix may take several posts. Please continue to respond to my instructions until I confirm that your system is clean.

Show Hidden Files
Go to My Computer > Tools > Folder Options > View tab and make sure that Show hidden files and folders is enabled. Also make sure that the System files and Folders are showing / visible. Uncheck the Hide protected operating system files option.

Disable AVG Anti Spyware's Guard
Please disable AVG Anti Spyware's Guard, as it may hinder the removal of some entries. You can re-enable it after you're clean.

Double-click the icon on Desktop to launch AVG
On the top of the main screen click Shield
Click the word active to change it to inactive
Exit AVG

Downloads
Please download Cleanup! or use this Alternate Link if the main link does not work and install it. You will use this later.
*NOTE* Cleanup deletes EVERYTHING out of temporary folders and does NOT make backups. If you have any files in any TEMP directory and you need to keep them, then please MOVE THEM NOW!

I see you already have AVG Anti Spyware. Please update AVG to the latest definition files.

Double-click the icon on Desktop to launch AVG Anti Spyware.
On the top of the main screen click Shield
Click the word active to change it to inactive
On the top of the main screen click Update.
Then click on Start Update.
After the update finishes (the status bar at the bottom will display "Update successful")
select the "Settings" tab.
Once in the Settings screen click on "Recommended actions" and then select "Quarantine".
Under "Reports"
Select "Automatically generate report after every scan"
Un-Select "Only if threats were found"

When you have finished updating, EXIT AVG Anti Spyware. DO NOT scan yet.

Download this file - combofix.exe to your desktop. Alternative download location here.

IMPORTANT - You must place combofix on your desktop!!

Run Combofix

Click the Windows 'Start' button > Select Run - then copy and paste this line into the run box & click OK

"%userprofile%\desktop\combofix.exe" /v socgkqf vtutu bvsjtoru winrge32

When finished, the tool will produce a log for you at c:\combofix.txt. Post that log in your next reply.

Reboot
Reboot your system in Safe Mode.

Restart the computer. The computer begins processing a set of instructions known as BIOS.
After hearing your computer beep once during startup, but before the Windows icon appears, press F8 (dependent on your system this may be F5 or another key)
Instead of Windows loading as normal, a menu should appear
Use the arrow key to highlight Safe Mode and press Enter.

HijackThis Entries
Open Hijack This and click on Scan. Check the following entries (if they still exist) (make sure you do not miss any)

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: (no name) - {4C904FA9-0EAF-84A3-5FC3-02F39C81E65B} - C:\WINDOWS\system32\socgkqf.dll
O2 - BHO: (no name) - {4D4BE91C-40F4-4F12-9B60-655504637ADF} - C:\WINDOWS\system32\vtutu.dll
O2 - BHO: PrintViewBHO Class - {D4E0C464-30CE-4075-9A10-71FD106C2847} - C:\PROGRA~1\PRINTV~1\PRINTH~1.DLL (file missing)
O2 - BHO: (no name) - {F18F04B0-9CF1-4b93-B004-77A288BEE28B} - C:\WINDOWS\system32\bvsjtoru.dll
O20 - Winlogon Notify: vtutu - C:\WINDOWS\system32\vtutu.dll
O20 - Winlogon Notify: winrge32 - C:\WINDOWS\SYSTEM32\winrge32.dll

Please remember to close all other windows, including browsers then click Fix checked.

Run CleanUp!
*NOTE* Cleanup deletes EVERYTHING out of temporary folders and does NOT make backups. If you have any files in any TEMP directory and you need to keep them, then please MOVE THEM NOW!

Open Cleanup! by double-clicking the icon on your desktop (or from Start > All Programs). Set the program up as follows:

Click Options
Move the slider button down to Custom CleanUp!
Check the following:

Empty Recycle Bins
Delete Cookies
Delete Prefetch files
Cleanup! All Users
Click on the “Temporary Files” tab and uncheck the box for “Scan drives for file matching” if it’s checked.

Click OK, Press the CleanUp! button to start the program and DO NOT REBOOT when prompted.
Note: CleanUp! deletes EVERYTHING out of your temp/temporary folders, it does not make backups. If you have any documents or programs that are saved in any Temporary Folders, please make a backup of these BEFORE running CleanUp! If you have a 64 bit Operating System do NOT run Cleanup and let me know as we will use another utility.

Run AVG Anti Spyware
Run AVG with it's updated definitions:(...it's important that all windows must be closed)

Click Scanner
Click on the Scan tab
Click Complete System Scan to begin scanning.
When the scan is complete click Recommended Action and change it to Quarantine
Then click Apply all actions

Once finished, click the Save report button, then click Save Report As and save it to your desktop.

NOTE: AVG scan may require an hour.

Reboot
Reboot your system in Normal Mode.

Online Scan
Perform an online scan with Internet Explorer with Panda ActiveScan

Click on located at the bottom of the page.
A "pop up" window will appear. * Please ensure that your pop up blocker doesn't block it *
Enter your e-mail address, country, and state & click "Free Online Scan" *The download of the 8 MB Panda's ActiveX control will take place*

Begin the scan by selecting

If it finds any malware, it will offer you a report.
Please ignore any entry it finds and the offer to buy the program to remove the entry, as we will address this later.
Click on then click

* You needn't remain online while it's doing the scan but you have to re-connect after it has finished to see the report.
* Turn off the real time scanner of any existing antivirus program while performing the online scan

Logs required
combofix.txt
AVG Log
Panda Log
HijackThis Log

Please also let me know how your system is performing now and if you have any specific problems. In order to provide you with the best possible help, please ensure that HijackThis logs are produced only while in Normal Mode.

Lee2k4 · 11-03-2006, 05:51 PM

Hello,

thanks for taking the time to produce those instructions, it took some time but I followed them to a T. However in your instructions for removal of HJT stuff only the following was listed in HJT, the other stuff you said was not there

Quote:

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

And here are the requested logs after following your instructions

Combofix

Quote:

Administrator - 06-11-03 22:39:49.95 Service Pack 2
ComboFix 06.10.19 - Running from: "C:\Documents and Settings\Administrator\desktop"
Command switches used :: /v socgkqf vtutu bvsjtoru winrge32

(((((((((((((((((((((((((((((((((((((((((((((((( Vundo Log )))))))))))))))))))))))))))))))))))))))))))))))))))))

C:\WINDOWS\system32\socgkqf.dll
C:\WINDOWS\system32\vtutu.dll
C:\WINDOWS\system32\bvsjtoru.dll
C:\WINDOWS\system32\winrge32.dll
C:\WINDOWS\system32\ututv.bak1
C:\WINDOWS\system32\ututv.bak2
C:\WINDOWS\system32\ututv.ini

* * * POST RUN FILES/FOLDERS * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *

(((((((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))

C:\Program Files\Common Files\misc002
C:\WINDOWS\system32\components
C:\WINDOWS\system32\crunner
C:\Program Files\Common Files\{38603142-09DA-2057-0311-05070905002c}
C:\Program Files\Common Files\{98603142-09DA-2057-0311-05070905002c}

((((((((((((((((((((((((((((((( Files Created from 2006-10-03 to 2006-11-03 ))))))))))))))))))))))))))))))))))

2006-10-31 00:47 110,612 --a------ C:\WINDOWS\system32\ddcyvaaj.exe
2006-10-19 23:01 94,208 --a------ C:\WINDOWS\system32\eeyueel.dll
2006-10-19 16:21 3,968 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
2006-10-17 21:35 76,560 --a------ C:\WINDOWS\system32\drivers\tmcomm.sys
2006-10-13 01:50 98,324 --a------ C:\WINDOWS\system32\pjnsqavm.dll
2006-10-13 01:01 34,308 --a------ C:\WINDOWS\system32\BASSMOD.dll
2006-10-11 18:40 6,144 --a------ C:\WINDOWS\system32\ff_vfw.dll
2006-10-10 11:27 208,896 --a------ C:\WINDOWS\system32\nvudisp.exe
2006-10-10 11:26 208,896 --a------ C:\WINDOWS\system32\NVUNINST.EXE

(((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))

2006-11-03 22:40 -------- d-------- C:\Program Files\Common Files
2006-11-03 22:39 -------- d-------- C:\Documents and Settings\Administrator\Application Data\SlimBrowser
2006-11-03 20:08 -------- d-------- C:\Documents and Settings\Administrator\Application Data\uTorrent
2006-11-01 22:53 -------- d-------- C:\Program Files\Electronic Arts
2006-10-31 20:50 -------- d--h----- C:\Program Files\InstallShield Installation Information
2006-10-31 20:50 -------- d-------- C:\Program Files\Electronic Arts(2)
2006-10-31 00:47 -------- d-------- C:\Program Files\VSAdd-in
2006-10-25 22:44 -------- d-------- C:\Documents and Settings\Administrator\Application Data\Skype
2006-10-22 00:58 -------- d-------- C:\Program Files\Trend Micro
2006-10-21 21:52 -------- d-------- C:\Program Files\Messenger
2006-10-21 15:41 -------- d-------- C:\Documents and Settings\Administrator\Application Data\Mozilla
2006-10-17 22:29 -------- d-------- C:\Documents and Settings\Administrator\Application Data\Nokia Multimedia Player
2006-10-15 21:54 -------- d-------- C:\Documents and Settings\Administrator\Application Data\Xfire
2006-10-14 15:21 223128 --a------ C:\WINDOWS\system32\drivers\vaxscsi.sys
2006-10-14 15:18 611064 --a------ C:\WINDOWS\system32\drivers\sptd.sys
2006-10-13 19:11 -------- d-------- C:\Program Files\Yahoo!
2006-10-13 01:30 -------- d-------- C:\Documents and Settings\Administrator\Application Data\Lavasoft
2006-10-13 00:22 40 ---hs---- C:\Documents and Settings\Administrator\Application Data\.zreglib
2006-10-11 23:27 -------- d-------- C:\Program Files\MSN Messenger
2006-10-10 13:10 -------- d-------- C:\Program Files\DivX
2006-10-09 00:12 -------- d-------- C:\Program Files\Nokia
2006-10-09 00:12 -------- d-------- C:\Program Files\Common Files\Nokia
2006-10-08 19:17 -------- d-------- C:\Documents and Settings\Administrator\Application Data\LimeWire
2006-09-25 15:45 666240 --a------ C:\WINDOWS\system32\aswBoot.exe
2006-09-25 15:40 87424 --a------ C:\WINDOWS\system32\drivers\aswmon2.sys
2006-09-25 15:40 85952 --a------ C:\WINDOWS\system32\drivers\aswmon.sys
2006-09-25 15:39 36176 --a------ C:\WINDOWS\system32\drivers\aswTdi.sys
2006-09-25 15:39 16352 --a------ C:\WINDOWS\system32\drivers\aswRdr.sys
2006-09-25 15:37 90112 --a------ C:\WINDOWS\system32\AVASTSS.scr
2006-09-25 15:37 24560 --a------ C:\WINDOWS\system32\drivers\aavmker4.sys
2006-09-21 14:10 -------- d-------- C:\Program Files\The All-Seeing Eye
2006-09-16 00:58 -------- d---s---- C:\Documents and Settings\Administrator\Application Data\Microsoft
2006-09-16 00:17 -------- dr-h----- C:\Documents and Settings\Administrator\Application Data\SecuROM
2006-08-11 20:45 888832 --a------ C:\WINDOWS\system32\nvmobls.dll
2006-08-11 20:45 581632 --a------ C:\WINDOWS\system32\nvhwvid.dll
2006-08-11 20:45 5611520 --a------ C:\WINDOWS\system32\nvdisps.dll
2006-08-11 20:45 5251072 --a------ C:\WINDOWS\system32\nvdispsr.dll
2006-08-11 20:45 458752 --a------ C:\WINDOWS\system32\nvmccssr.dll
2006-08-11 20:45 45056 --a------ C:\WINDOWS\system32\nvmccsrs.dll
2006-08-11 20:45 3039232 --a------ C:\WINDOWS\system32\nvgames.dll
2006-08-11 20:45 2953216 --a------ C:\WINDOWS\system32\nvvitvsr.dll
2006-08-11 20:45 2928640 --a------ C:\WINDOWS\system32\nvgamesr.dll
2006-08-11 20:45 2904064 --a------ C:\WINDOWS\system32\nvvitvs.dll
2006-08-11 20:45 2859008 --a------ C:\WINDOWS\system32\nvmoblsr.dll
2006-08-11 20:45 266240 --a------ C:\WINDOWS\system32\nvrsesm.dll
2006-08-11 20:45 258048 --a------ C:\WINDOWS\system32\nvrsko.dll
2006-08-11 20:45 249856 --a------ C:\WINDOWS\system32\nvrssl.dll
2006-08-11 20:45 249856 --a------ C:\WINDOWS\system32\nvrssk.dll
2006-08-11 20:45 249856 --a------ C:\WINDOWS\system32\nvrshu.dll
2006-08-11 20:45 229376 --a------ C:\WINDOWS\system32\nvmccs.dll
2006-08-11 20:45 188416 --a------ C:\WINDOWS\system32\nvmccss.dll
2006-08-11 20:45 1732608 --a------ C:\WINDOWS\system32\nvwssr.dll
2006-08-11 20:45 1236992 --a------ C:\WINDOWS\system32\nvwss.dll
2006-08-11 20:44 323584 --a------ C:\WINDOWS\system32\nvrshe.dll
2006-08-11 20:44 323584 --a------ C:\WINDOWS\system32\nvrsar.dll
2006-08-11 20:44 274432 --a------ C:\WINDOWS\system32\nvrses.dll
2006-08-11 20:44 274432 --a------ C:\WINDOWS\system32\nvrsel.dll
2006-08-11 20:44 266240 --a------ C:\WINDOWS\system32\nvrspt.dll
2006-08-11 20:44 262144 --a------ C:\WINDOWS\system32\nvrsja.dll
2006-08-11 20:44 249856 --a------ C:\WINDOWS\system32\nvrstr.dll
2006-08-11 20:44 249856 --a------ C:\WINDOWS\system32\nvrspl.dll
2006-08-11 20:44 249856 --a------ C:\WINDOWS\system32\nvrsno.dll
2006-08-11 20:44 241664 --a------ C:\WINDOWS\system32\nvrscs.dll
2006-08-11 20:44 147456 --a------ C:\WINDOWS\system32\nvcolor.exe
2006-08-11 20:43 86016 --a------ C:\WINDOWS\system32\nvmctray.dll
2006-08-11 20:43 81920 --a------ C:\WINDOWS\system32\nvwddi.dll
2006-08-11 20:43 794624 --a------ C:\WINDOWS\system32\nvcplui.exe
2006-08-11 20:43 7630848 --a------ C:\WINDOWS\system32\nvcpl.dll
2006-08-11 20:43 466944 --a------ C:\WINDOWS\system32\nvshell.dll
2006-08-11 20:43 442368 --a------ C:\WINDOWS\system32\nvappbar.exe
2006-08-11 20:43 425984 --a------ C:\WINDOWS\system32\keystone.exe
2006-08-11 20:43 335872 --a------ C:\WINDOWS\system32\nvwrses.dll
2006-08-11 20:43 335872 --a------ C:\WINDOWS\system32\nvwrsel.dll
2006-08-11 20:43 327680 --a------ C:\WINDOWS\system32\nvwrsfr.dll
2006-08-11 20:43 327680 --a------ C:\WINDOWS\system32\nvwrsesm.dll
2006-08-11 20:43 323584 --a------ C:\WINDOWS\system32\nvwrspt.dll
2006-08-11 20:43 323584 --a------ C:\WINDOWS\system32\nvwrsit.dll
2006-08-11 20:43 319488 --a------ C:\WINDOWS\system32\nvwrsptb.dll
2006-08-11 20:43 319488 --a------ C:\WINDOWS\system32\nvwrsnl.dll
2006-08-11 20:43 315392 --a------ C:\WINDOWS\system32\nvwrsru.dll
2006-08-11 20:43 315392 --a------ C:\WINDOWS\system32\nvwrshu.dll
2006-08-11 20:43 311296 --a------ C:\WINDOWS\system32\nvwrsde.dll
2006-08-11 20:43 311296 --a------ C:\WINDOWS\system32\nvexpbar.dll
2006-08-11 20:43 303104 --a------ C:\WINDOWS\system32\nvwrstr.dll
2006-08-11 20:43 303104 --a------ C:\WINDOWS\system32\nvwrssl.dll
2006-08-11 20:43 303104 --a------ C:\WINDOWS\system32\nvwrsfi.dll
2006-08-11 20:43 299008 --a------ C:\WINDOWS\system32\nvwrssk.dll
2006-08-11 20:43 299008 --a------ C:\WINDOWS\system32\nvwrsno.dll
2006-08-11 20:43 294912 --a------ C:\WINDOWS\system32\nvwrssv.dll
2006-08-11 20:43 294912 --a------ C:\WINDOWS\system32\nvwrspl.dll
2006-08-11 20:43 294912 --a------ C:\WINDOWS\system32\nvwrsda.dll
2006-08-11 20:43 286720 --a------ C:\WINDOWS\system32\nvwrseng.dll
2006-08-11 20:43 286720 --a------ C:\WINDOWS\system32\nvwrscs.dll
2006-08-11 20:43 286720 --a------ C:\WINDOWS\system32\nvnt4cpl.dll
2006-08-11 20:43 282624 --a------ C:\WINDOWS\system32\nvwrsar.dll
2006-08-11 20:43 278528 --a------ C:\WINDOWS\system32\nvwrshe.dll
2006-08-11 20:43 278528 --a------ C:\WINDOWS\system32\nvrsfr.dll
2006-08-11 20:43 274432 --a------ C:\WINDOWS\system32\nvrsit.dll
2006-08-11 20:43 270336 --a------ C:\WINDOWS\system32\nvrsde.dll
2006-08-11 20:43 266240 --a------ C:\WINDOWS\system32\nvrsnl.dll
2006-08-11 20:43 262144 --a------ C:\WINDOWS\system32\nvrsru.dll
2006-08-11 20:43 262144 --a------ C:\WINDOWS\system32\nvrsptb.dll
2006-08-11 20:43 245760 --a------ C:\WINDOWS\system32\nvrssv.dll
2006-08-11 20:43 245760 --a------ C:\WINDOWS\system32\nvrsda.dll
2006-08-11 20:43 241664 --a------ C:\WINDOWS\system32\nvrsfi.dll
2006-08-11 20:43 241664 --a------ C:\WINDOWS\system32\nvrseng.dll
2006-08-11 20:43 221184 --a------ C:\WINDOWS\system32\nvrszhc.dll
2006-08-11 20:43 212992 --a------ C:\WINDOWS\system32\nvwrsja.dll
2006-08-11 20:43 196608 --a------ C:\WINDOWS\system32\nvwrsko.dll
2006-08-11 20:43 196608 --a------ C:\WINDOWS\system32\nvapi.dll
2006-08-11 20:43 167936 --a------ C:\WINDOWS\system32\nvwrszht.dll
2006-08-11 20:43 1662976 --a------ C:\WINDOWS\system32\nvwdmcpl.dll
2006-08-11 20:43 163840 --a------ C:\WINDOWS\system32\nvwrszhc.dll
2006-08-11 20:43 1519616 --a------ C:\WINDOWS\system32\nwiz.exe
2006-08-11 20:43 1470464 --a------ C:\WINDOWS\system32\nview.dll
2006-08-11 20:43 1339392 --a------ C:\WINDOWS\system32\nvdspsch.exe
2006-08-11 20:43 122880 --a------ C:\WINDOWS\system32\nvrszht.dll
2006-08-11 20:43 1019904 --a------ C:\WINDOWS\system32\nvwimg.dll
2006-08-11 20:43 1011712 --a------ C:\WINDOWS\system32\nvcpluir.dll
2006-08-11 20:42 5636096 --a------ C:\WINDOWS\system32\nvoglnt.dll
2006-08-11 20:42 4496128 --a------ C:\WINDOWS\system32\nv4_disp.dll
2006-08-11 20:42 35840 --a------ C:\WINDOWS\system32\nvcodins.dll
2006-08-11 20:42 35840 --a------ C:\WINDOWS\system32\nvcod.dll
2006-08-11 20:42 155715 --a------ C:\WINDOWS\system32\nvsvc32.exe

(((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))

*Note* empty entries are not shown

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"SmcService"="E:\\PROGRA~1\\Sygate\\SPF\\smc.exe -startgui"
"avast!"="e:\\PROGRA~1\\ALWILS~1\\Avast4\\ashDisp.exe"
"NeroCheck"="C:\\WINDOWS\\system32\\NeroCheck.exe"
"NvMediaCenter"="RunDLL32.exe NvMCTray.dll,NvTaskbarInit"
"DiskeeperSystray"="\"E:\\Program Files\\Diskeeper Corporation\\Diskeeper\\DkIcon.exe\""
"NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvCpl.dll,NvStartup"

[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components]
"DeskHtmlVersion"=dword:00000110
"DeskHtmlMinorVersion"=dword:00000005
"Settings"=dword:00000001
"GeneralFlags"=dword:00000001

[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="My Current Home Page"
"Flags"=dword:00000002
"Position"=hex:2c,00,00,00,cc,00,00,00,00,00,00,00,34,03,00,00,e2,02,00,00,00,\
00,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,00
"CurrentState"=hex:04,00,00,40
"OriginalStateInfo"=hex:18,00,00,00,ff,ff,00,00,ff,ff,00,00,ff,ff,ff,ff,ff,ff,\
ff,ff,04,00,00,00
"RestoredStateInfo"=hex:18,00,00,00,f2,01,00,00,23,00,00,00,7c,00,00,00,72,00,\
00,00,01,00,00,00

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler]
"{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Browseui preloader"
"{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Component Categories cache daemon"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"=""
"{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="AVG Anti-Spyware 7.5"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000095
"NoLowDiskSpaceChecks"=dword:00000001
"NoRecentDocsMenu"=dword:00000001

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\Run]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"dontdisplaylastusername"=dword:00000000
"legalnoticecaption"=""
"legalnoticetext"=""
"shutdownwithoutlogon"=dword:00000001
"undockwithoutlogon"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoCDBurning"=dword:00000000

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer\run]

[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091

[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload]
"PostBootReminder"="{7849596a-48ea-486e-8937-a2a3009f31a9}"
"CDBurn"="{fbeb8a05-beee-4442-804e-409d6c4515e9}"
"WebCheck"="{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"
"SysTray"="{35CEC8A3-2BE6-11D2-8773-92E220524153}"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Administrator^Start Menu^Programs^Startup^LimeWire On Startup.lnk]
"path"="C:\\Documents and Settings\\Administrator\\Start Menu\\Programs\\Startup\\LimeWire On Startup.lnk"
"backup"="C:\\WINDOWS\\pss\\LimeWire On Startup.lnkStartup"
"location"="Startup"
"command"="E:\\PROGRA~1\\LimeWire\\LimeWire.exe -startup"
"item"="LimeWire On Startup"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Administrator^Start Menu^Programs^Startup^Xfire.lnk]
"path"="C:\\Documents and Settings\\Administrator\\Start Menu\\Programs\\Startup\\Xfire.lnk"
"backup"="C:\\WINDOWS\\pss\\Xfire.lnkStartup"
"location"="Startup"
"command"="E:\\PROGRA~1\\Xfire\\Xfire.exe "
"item"="Xfire"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\!AVG Anti-Spyware]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="avgas"
"hkey"="HKLM"
"command"="\"e:\\Program Files\\Grisoft\\AVG Anti-Spyware 7.5\\avgas.exe\" /minimized"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AnyDVD]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="AnyDVD"
"hkey"="HKCU"
"command"="E:\\Program Files\\SlySoft\\AnyDVD\\AnyDVD.exe"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Cmaudio]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="RunDll32 cmicnfg"
"hkey"="HKLM"
"command"="RunDll32 cmicnfg.cpl,CMICtrlWnd"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cprocsvc]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="cproc"
"hkey"="HKCU"
"command"="C:\\WINDOWS\\system32\\crunner\\cproc.exe"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="daemon"
"hkey"="HKLM"
"command"="\"e:\\Program Files\\DAEMON Tools\\daemon.exe\" -lang 1033"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EA Core]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="Core"
"hkey"="HKCU"
"command"="C:\\Program Files\\Electronic Arts\\EA Downloader\\Core.exe -silent"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\eeyueel.dll]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="eeyueel"
"hkey"="HKLM"
"command"="C:\\WINDOWS\\system32\\rundll32.exe C:\\WINDOWS\\system32\\eeyueel.dll,fdjbawd"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IpWins]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="ipwins"
"hkey"="HKLM"
"command"="C:\\Program Files\\ipwins\\ipwins.exe"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="iTunesHelper"
"hkey"="HKLM"
"command"="\"E:\\Program Files\\iTunes\\iTunesHelper.exe\""
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="msnmsgr"
"hkey"="HKCU"
"command"="\"C:\\Program Files\\MSN Messenger\\msnmsgr.exe\" /background"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="NvCpl"
"hkey"="HKLM"
"command"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvCpl.dll,NvStartup"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="nwiz"
"hkey"="HKLM"
"command"="nwiz.exe /install"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCSuiteTrayApplication]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="LAUNCH~1"
"hkey"="HKLM"
"command"="C:\\PROGRA~1\\Nokia\\NOKIAP~1\\LAUNCH~1.EXE -startup"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PcSync]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="PcSync2"
"hkey"="HKCU"
"command"="C:\\Program Files\\Nokia\\Nokia PC Suite 6\\PcSync2.exe /NoDialog"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PVModule]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="pvmodule"
"hkey"="HKLM"
"command"="C:\\PROGRA~1\\PRINTV~1\\pvmodule.exe"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="Skype"
"hkey"="HKCU"
"command"="\"E:\\Program Files\\Skype\\Phone\\Skype.exe\" /nosplash /minimized"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="steam"
"hkey"="HKCU"
"command"="\"e:\\program files\\steam\\steam.ex\" -silent"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sunkist2k]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="shwicon2k"
"hkey"="HKLM"
"command"="C:\\Program Files\\Multimedia Card Reader\\shwicon2k.exe"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="winampa"
"hkey"="HKLM"
"command"="e:\\Program Files\\Winamp\\winampa.exe"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"

Completion time: 06-11-03 22:42:03.43
C:\ComboFix.txt ... 06-11-03 22:42

AVG Log

Quote:

---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at: 23:54:24 03/11/2006

+ Scan result:

Nothing found.

::Report end

The Panda On-Line scan found nothing therefore there is no report, however my Avast anti-virus software was going crazy telling me Panda was a virus.

HJT LOG

Quote:

Logfile of HijackThis v1.99.1
Scan saved at 00:47:58, on 04/11/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
E:\Program Files\Sygate\SPF\smc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
e:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
e:\Program Files\Alwil Software\Avast4\ashServ.exe
e:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
E:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
E:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\nvsvc32.exe
e:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
e:\Program Files\Alwil Software\Avast4\ashWebSv.exe
D:\Junk\hijackthis\glasgow.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=cache3-lang.server.ntli.net:8080:
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {46A4E9D9-B30E-452A-8157-DBBEC8573B03} - C:\Program Files\VSAdd-in\VSAdd-in.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - E:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O3 - Toolbar: &VSAdd-in - {74DD705D-6834-439C-A735-A6DBE2677452} - C:\Program Files\VSAdd-in\VSAdd-in.dll
O4 - HKLM\..\Run: [SmcService] E:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKLM\..\Run: [avast!] e:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [DiskeeperSystray] "E:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: &ieSpell Options - res://e:\Program Files\ieSpell\iespell.dll/SPELLOPTION.HTM
O8 - Extra context menu item: Check &Spelling - res://e:\Program Files\ieSpell\iespell.dll/SPELLCHECK.HTM
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - e:\Program Files\ieSpell\iespell.dll
O9 - Extra 'Tools' menuitem: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - e:\Program Files\ieSpell\iespell.dll
O9 - Extra button: (no name) - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - e:\Program Files\ieSpell\iespell.dll
O9 - Extra 'Tools' menuitem: ieSpell Options - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - e:\Program Files\ieSpell\iespell.dll
O16 - DPF: RaptisoftGameLoader - http://www.miniclip.com/hamsterball/...gameloader.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/par...an_unicode.cab
O16 - DPF: {85D1F3B2-2A21-11D7-97B9-0010DC2A6243} (SecureLogin class) - http://secure2.comned.com/signuptemp...ogin-devel.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/actives...ree/asinst.cab
O16 - DPF: {B1826A9F-4AA0-4510-BA77-9013E74E4B9B} - http://www.trendmicro.com/spyware-scan/as4web.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - e:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - e:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - e:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - e:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - e:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Diskeeper - Diskeeper Corporation - E:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - E:\Program Files\Sygate\SPF\smc.exe

**Glaswegian** · 11-04-2006, 09:38 AM

Hi again Lee.

That’s OK – I wasn’t really expecting you to find those entries, but I listed them just in case.

Please don’t use “Quote” tags when posting logs – just a straight copy and paste is fine.

P2P - I see you have P2P software (i.e. Limewire, uTorrent) installed on your machine. We are not here to pass judgment on file-sharing as a concept. However, we will warn you that engaging in this activity and having this kind of software installed on your machine will always make you more susceptible to re-infections. It may be contributing to your current situation. This page will give you further information.

Registry Fix
Click on the zip file attached to this post to open and extract the file Lee.reg to your desktop. Double click on the file Lee.reg to run it. Answer yes to any prompts and allow it to merge into the Registry.

Reboot
Reboot your system in Safe Mode.

Restart the computer. The computer begins processing a set of instructions known as BIOS.
After hearing your computer beep once during startup, but before the Windows icon appears, press F8 (dependent on your system this may be F5 or another key)
Instead of Windows loading as normal, a menu should appear
Use the arrow key to highlight Safe Mode and press Enter.

File Deletions
Delete the following Files indicated in RED and Folders indicated in BLUE if they still exist.

C:\WINDOWS\system32\ddcyvaaj.exe
C:\WINDOWS\system32\eeyueel.dll
C:\WINDOWS\system32\pjnsqavm.dll
C:\Program Files\ipwins

Reboot
Reboot your system in Normal Mode.

Run Combofix
Run combofix again.

Online Scan
Establish an internet connection & perform an online scan with Internet Explorer at Kaspersky WebScanner

Next Click on Launch Kaspersky Anti-Virus Web Scanner

You will be prompted to install an ActiveX component from Kaspersky, Click Yes.

The program will launch and then begin downloading the latest definition files:
Once the files have been downloaded click on NEXT
Now click on Scan Settings
In the scan settings make that the following are selected:

Scan using the following Anti-Virus database:

Extended

Scan Options:

Scan Archives
Scan Mail Bases

Click OK

Now under select a target to scan: Select My Computer

This will program will start and scan your system.
The scan will take a while so be patient and let it run.
Once the scan is complete it will display if your system has been infected.

Now click on the Save as Text button:

Save the file to your desktop.
Copy and paste that information in your next post.

Take note of the name(s) and location(s) of any file(s) it detects but fails to clean.

* Turn off the real time scanner of any existing antivirus program while performing the online scan

Logs required
combofix.txt
Kaspersky Log
HijackThis Log

Please also let me know how your system is performing now and if you have any specific problems. In order to provide you with the best possible help, please ensure that HijackThis logs are produced only while in Normal Mode.

Lee2k4 · 11-04-2006, 11:48 AM

Hello again Glaswegian

Thanks for the tips on P2P, I have now removed the P2P software and have gone ahead and followed your instructions

All files were succesfuly deleted apart from C:\Program Files\ipwins because it was not there.

Lee2k4 · 11-04-2006, 11:49 AM

Combofix Log

Administrator - 06-11-04 17:44:56.01 Service Pack 2
ComboFix 06.10.19 - Running from: "C:\Documents and Settings\Administrator\Desktop"

((((((((((((((((((((((((((((((( Files Created from 2006-10-04 to 2006-11-04 ))))))))))))))))))))))))))))))))))

2006-10-19 16:21 3,968 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
2006-10-17 21:35 76,560 --a------ C:\WINDOWS\system32\drivers\tmcomm.sys
2006-10-13 01:01 34,308 --a------ C:\WINDOWS\system32\BASSMOD.dll
2006-10-11 18:40 6,144 --a------ C:\WINDOWS\system32\ff_vfw.dll
2006-10-10 11:27 208,896 --a------ C:\WINDOWS\system32\nvudisp.exe
2006-10-10 11:26 208,896 --a------ C:\WINDOWS\system32\NVUNINST.EXE

(((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))

2006-11-04 17:31 -------- d-------- C:\Documents and Settings\Administrator\Application Data\SlimBrowser
2006-11-04 00:25 -------- d-------- C:\Program Files\VSAdd-in
2006-11-03 22:40 -------- d-------- C:\Program Files\Common Files
2006-11-03 20:08 -------- d-------- C:\Documents and Settings\Administrator\Application Data\uTorrent
2006-11-01 22:53 -------- d-------- C:\Program Files\Electronic Arts
2006-10-31 20:50 -------- d--h----- C:\Program Files\InstallShield Installation Information
2006-10-31 20:50 -------- d-------- C:\Program Files\Electronic Arts(2)
2006-10-25 22:44 -------- d-------- C:\Documents and Settings\Administrator\Application Data\Skype
2006-10-22 00:58 -------- d-------- C:\Program Files\Trend Micro
2006-10-21 21:52 -------- d-------- C:\Program Files\Messenger
2006-10-21 15:41 -------- d-------- C:\Documents and Settings\Administrator\Application Data\Mozilla
2006-10-17 22:29 -------- d-------- C:\Documents and Settings\Administrator\Application Data\Nokia Multimedia Player
2006-10-15 21:54 -------- d-------- C:\Documents and Settings\Administrator\Application Data\Xfire
2006-10-14 15:21 223128 --a------ C:\WINDOWS\system32\drivers\vaxscsi.sys
2006-10-14 15:18 611064 --a------ C:\WINDOWS\system32\drivers\sptd.sys
2006-10-13 19:11 -------- d-------- C:\Program Files\Yahoo!
2006-10-13 01:30 -------- d-------- C:\Documents and Settings\Administrator\Application Data\Lavasoft
2006-10-13 00:22 40 ---hs---- C:\Documents and Settings\Administrator\Application Data\.zreglib
2006-10-11 23:27 -------- d-------- C:\Program Files\MSN Messenger
2006-10-10 13:10 -------- d-------- C:\Program Files\DivX
2006-10-09 00:12 -------- d-------- C:\Program Files\Nokia
2006-10-09 00:12 -------- d-------- C:\Program Files\Common Files\Nokia
2006-10-08 19:17 -------- d-------- C:\Documents and Settings\Administrator\Application Data\LimeWire
2006-09-25 15:45 666240 --a------ C:\WINDOWS\system32\aswBoot.exe
2006-09-25 15:40 87424 --a------ C:\WINDOWS\system32\drivers\aswmon2.sys
2006-09-25 15:40 85952 --a------ C:\WINDOWS\system32\drivers\aswmon.sys
2006-09-25 15:39 36176 --a------ C:\WINDOWS\system32\drivers\aswTdi.sys
2006-09-25 15:39 16352 --a------ C:\WINDOWS\system32\drivers\aswRdr.sys
2006-09-25 15:37 90112 --a------ C:\WINDOWS\system32\AVASTSS.scr
2006-09-25 15:37 24560 --a------ C:\WINDOWS\system32\drivers\aavmker4.sys
2006-09-21 14:10 -------- d-------- C:\Program Files\The All-Seeing Eye
2006-09-16 00:58 -------- d---s---- C:\Documents and Settings\Administrator\Application Data\Microsoft
2006-09-16 00:17 -------- dr-h----- C:\Documents and Settings\Administrator\Application Data\SecuROM
2006-08-11 20:45 888832 --a------ C:\WINDOWS\system32\nvmobls.dll
2006-08-11 20:45 581632 --a------ C:\WINDOWS\system32\nvhwvid.dll
2006-08-11 20:45 5611520 --a------ C:\WINDOWS\system32\nvdisps.dll
2006-08-11 20:45 5251072 --a------ C:\WINDOWS\system32\nvdispsr.dll
2006-08-11 20:45 458752 --a------ C:\WINDOWS\system32\nvmccssr.dll
2006-08-11 20:45 45056 --a------ C:\WINDOWS\system32\nvmccsrs.dll
2006-08-11 20:45 3039232 --a------ C:\WINDOWS\system32\nvgames.dll
2006-08-11 20:45 2953216 --a------ C:\WINDOWS\system32\nvvitvsr.dll
2006-08-11 20:45 2928640 --a------ C:\WINDOWS\system32\nvgamesr.dll
2006-08-11 20:45 2904064 --a------ C:\WINDOWS\system32\nvvitvs.dll
2006-08-11 20:45 2859008 --a------ C:\WINDOWS\system32\nvmoblsr.dll
2006-08-11 20:45 266240 --a------ C:\WINDOWS\system32\nvrsesm.dll
2006-08-11 20:45 258048 --a------ C:\WINDOWS\system32\nvrsko.dll
2006-08-11 20:45 249856 --a------ C:\WINDOWS\system32\nvrssl.dll
2006-08-11 20:45 249856 --a------ C:\WINDOWS\system32\nvrssk.dll
2006-08-11 20:45 249856 --a------ C:\WINDOWS\system32\nvrshu.dll
2006-08-11 20:45 229376 --a------ C:\WINDOWS\system32\nvmccs.dll
2006-08-11 20:45 188416 --a------ C:\WINDOWS\system32\nvmccss.dll
2006-08-11 20:45 1732608 --a------ C:\WINDOWS\system32\nvwssr.dll
2006-08-11 20:45 1236992 --a------ C:\WINDOWS\system32\nvwss.dll
2006-08-11 20:44 323584 --a------ C:\WINDOWS\system32\nvrshe.dll
2006-08-11 20:44 323584 --a------ C:\WINDOWS\system32\nvrsar.dll
2006-08-11 20:44 274432 --a------ C:\WINDOWS\system32\nvrses.dll
2006-08-11 20:44 274432 --a------ C:\WINDOWS\system32\nvrsel.dll
2006-08-11 20:44 266240 --a------ C:\WINDOWS\system32\nvrspt.dll
2006-08-11 20:44 262144 --a------ C:\WINDOWS\system32\nvrsja.dll
2006-08-11 20:44 249856 --a------ C:\WINDOWS\system32\nvrstr.dll
2006-08-11 20:44 249856 --a------ C:\WINDOWS\system32\nvrspl.dll
2006-08-11 20:44 249856 --a------ C:\WINDOWS\system32\nvrsno.dll
2006-08-11 20:44 241664 --a------ C:\WINDOWS\system32\nvrscs.dll
2006-08-11 20:44 147456 --a------ C:\WINDOWS\system32\nvcolor.exe
2006-08-11 20:43 86016 --a------ C:\WINDOWS\system32\nvmctray.dll
2006-08-11 20:43 81920 --a------ C:\WINDOWS\system32\nvwddi.dll
2006-08-11 20:43 794624 --a------ C:\WINDOWS\system32\nvcplui.exe
2006-08-11 20:43 7630848 --a------ C:\WINDOWS\system32\nvcpl.dll
2006-08-11 20:43 466944 --a------ C:\WINDOWS\system32\nvshell.dll
2006-08-11 20:43 442368 --a------ C:\WINDOWS\system32\nvappbar.exe
2006-08-11 20:43 425984 --a------ C:\WINDOWS\system32\keystone.exe
2006-08-11 20:43 335872 --a------ C:\WINDOWS\system32\nvwrses.dll
2006-08-11 20:43 335872 --a------ C:\WINDOWS\system32\nvwrsel.dll
2006-08-11 20:43 327680 --a------ C:\WINDOWS\system32\nvwrsfr.dll
2006-08-11 20:43 327680 --a------ C:\WINDOWS\system32\nvwrsesm.dll
2006-08-11 20:43 323584 --a------ C:\WINDOWS\system32\nvwrspt.dll
2006-08-11 20:43 323584 --a------ C:\WINDOWS\system32\nvwrsit.dll
2006-08-11 20:43 319488 --a------ C:\WINDOWS\system32\nvwrsptb.dll
2006-08-11 20:43 319488 --a------ C:\WINDOWS\system32\nvwrsnl.dll
2006-08-11 20:43 315392 --a------ C:\WINDOWS\system32\nvwrsru.dll
2006-08-11 20:43 315392 --a------ C:\WINDOWS\system32\nvwrshu.dll
2006-08-11 20:43 311296 --a------ C:\WINDOWS\system32\nvwrsde.dll
2006-08-11 20:43 311296 --a------ C:\WINDOWS\system32\nvexpbar.dll
2006-08-11 20:43 303104 --a------ C:\WINDOWS\system32\nvwrstr.dll
2006-08-11 20:43 303104 --a------ C:\WINDOWS\system32\nvwrssl.dll
2006-08-11 20:43 303104 --a------ C:\WINDOWS\system32\nvwrsfi.dll
2006-08-11 20:43 299008 --a------ C:\WINDOWS\system32\nvwrssk.dll
2006-08-11 20:43 299008 --a------ C:\WINDOWS\system32\nvwrsno.dll
2006-08-11 20:43 294912 --a------ C:\WINDOWS\system32\nvwrssv.dll
2006-08-11 20:43 294912 --a------ C:\WINDOWS\system32\nvwrspl.dll
2006-08-11 20:43 294912 --a------ C:\WINDOWS\system32\nvwrsda.dll
2006-08-11 20:43 286720 --a------ C:\WINDOWS\system32\nvwrseng.dll
2006-08-11 20:43 286720 --a------ C:\WINDOWS\system32\nvwrscs.dll
2006-08-11 20:43 286720 --a------ C:\WINDOWS\system32\nvnt4cpl.dll
2006-08-11 20:43 282624 --a------ C:\WINDOWS\system32\nvwrsar.dll
2006-08-11 20:43 278528 --a------ C:\WINDOWS\system32\nvwrshe.dll
2006-08-11 20:43 278528 --a------ C:\WINDOWS\system32\nvrsfr.dll
2006-08-11 20:43 274432 --a------ C:\WINDOWS\system32\nvrsit.dll
2006-08-11 20:43 270336 --a------ C:\WINDOWS\system32\nvrsde.dll
2006-08-11 20:43 266240 --a------ C:\WINDOWS\system32\nvrsnl.dll
2006-08-11 20:43 262144 --a------ C:\WINDOWS\system32\nvrsru.dll
2006-08-11 20:43 262144 --a------ C:\WINDOWS\system32\nvrsptb.dll
2006-08-11 20:43 245760 --a------ C:\WINDOWS\system32\nvrssv.dll
2006-08-11 20:43 245760 --a------ C:\WINDOWS\system32\nvrsda.dll
2006-08-11 20:43 241664 --a------ C:\WINDOWS\system32\nvrsfi.dll
2006-08-11 20:43 241664 --a------ C:\WINDOWS\system32\nvrseng.dll
2006-08-11 20:43 221184 --a------ C:\WINDOWS\system32\nvrszhc.dll
2006-08-11 20:43 212992 --a------ C:\WINDOWS\system32\nvwrsja.dll
2006-08-11 20:43 196608 --a------ C:\WINDOWS\system32\nvwrsko.dll
2006-08-11 20:43 196608 --a------ C:\WINDOWS\system32\nvapi.dll
2006-08-11 20:43 167936 --a------ C:\WINDOWS\system32\nvwrszht.dll
2006-08-11 20:43 1662976 --a------ C:\WINDOWS\system32\nvwdmcpl.dll
2006-08-11 20:43 163840 --a------ C:\WINDOWS\system32\nvwrszhc.dll
2006-08-11 20:43 1519616 --a------ C:\WINDOWS\system32\nwiz.exe
2006-08-11 20:43 1470464 --a------ C:\WINDOWS\system32\nview.dll
2006-08-11 20:43 1339392 --a------ C:\WINDOWS\system32\nvdspsch.exe
2006-08-11 20:43 122880 --a------ C:\WINDOWS\system32\nvrszht.dll
2006-08-11 20:43 1019904 --a------ C:\WINDOWS\system32\nvwimg.dll
2006-08-11 20:43 1011712 --a------ C:\WINDOWS\system32\nvcpluir.dll
2006-08-11 20:42 5636096 --a------ C:\WINDOWS\system32\nvoglnt.dll
2006-08-11 20:42 4496128 --a------ C:\WINDOWS\system32\nv4_disp.dll
2006-08-11 20:42 35840 --a------ C:\WINDOWS\system32\nvcodins.dll
2006-08-11 20:42 35840 --a------ C:\WINDOWS\system32\nvcod.dll
2006-08-11 20:42 155715 --a------ C:\WINDOWS\system32\nvsvc32.exe

(((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))

*Note* empty entries are not shown

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"SmcService"="E:\\PROGRA~1\\Sygate\\SPF\\smc.exe -startgui"
"avast!"="e:\\PROGRA~1\\ALWILS~1\\Avast4\\ashDisp.exe"
"NeroCheck"="C:\\WINDOWS\\system32\\NeroCheck.exe"
"NvMediaCenter"="RunDLL32.exe NvMCTray.dll,NvTaskbarInit"
"DiskeeperSystray"="\"E:\\Program Files\\Diskeeper Corporation\\Diskeeper\\DkIcon.exe\""
"NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvCpl.dll,NvStartup"

[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components]
"DeskHtmlVersion"=dword:00000110
"DeskHtmlMinorVersion"=dword:00000005
"Settings"=dword:00000001
"GeneralFlags"=dword:00000001

[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="My Current Home Page"
"Flags"=dword:00000002
"Position"=hex:2c,00,00,00,cc,00,00,00,00,00,00,00,34,03,00,00,e2,02,00,00,00,\
00,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,00
"CurrentState"=hex:04,00,00,40
"OriginalStateInfo"=hex:18,00,00,00,ff,ff,00,00,ff,ff,00,00,ff,ff,ff,ff,ff,ff,\
ff,ff,04,00,00,00
"RestoredStateInfo"=hex:18,00,00,00,f2,01,00,00,23,00,00,00,7c,00,00,00,72,00,\
00,00,01,00,00,00

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler]
"{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Browseui preloader"
"{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Component Categories cache daemon"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"=""
"{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="AVG Anti-Spyware 7.5"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000095
"NoLowDiskSpaceChecks"=dword:00000001
"NoRecentDocsMenu"=dword:00000001

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\Run]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"dontdisplaylastusername"=dword:00000000
"legalnoticecaption"=""
"legalnoticetext"=""
"shutdownwithoutlogon"=dword:00000001
"undockwithoutlogon"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoCDBurning"=dword:00000000

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer\run]

[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091

[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload]
"PostBootReminder"="{7849596a-48ea-486e-8937-a2a3009f31a9}"
"CDBurn"="{fbeb8a05-beee-4442-804e-409d6c4515e9}"
"WebCheck"="{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"
"SysTray"="{35CEC8A3-2BE6-11D2-8773-92E220524153}"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Administrator^Start Menu^Programs^Startup^LimeWire On Startup.lnk]
"path"="C:\\Documents and Settings\\Administrator\\Start Menu\\Programs\\Startup\\LimeWire On Startup.lnk"
"backup"="C:\\WINDOWS\\pss\\LimeWire On Startup.lnkStartup"
"location"="Startup"
"command"="E:\\PROGRA~1\\LimeWire\\LimeWire.exe -startup"
"item"="LimeWire On Startup"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Administrator^Start Menu^Programs^Startup^Xfire.lnk]
"path"="C:\\Documents and Settings\\Administrator\\Start Menu\\Programs\\Startup\\Xfire.lnk"
"backup"="C:\\WINDOWS\\pss\\Xfire.lnkStartup"
"location"="Startup"
"command"="E:\\PROGRA~1\\Xfire\\Xfire.exe "
"item"="Xfire"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\!AVG Anti-Spyware]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="avgas"
"hkey"="HKLM"
"command"="\"e:\\Program Files\\Grisoft\\AVG Anti-Spyware 7.5\\avgas.exe\" /minimized"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AnyDVD]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="AnyDVD"
"hkey"="HKCU"
"command"="E:\\Program Files\\SlySoft\\AnyDVD\\AnyDVD.exe"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Cmaudio]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="RunDll32 cmicnfg"
"hkey"="HKLM"
"command"="RunDll32 cmicnfg.cpl,CMICtrlWnd"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cprocsvc]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="cproc"
"hkey"="HKCU"
"command"="C:\\WINDOWS\\system32\\crunner\\cproc.exe"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="daemon"
"hkey"="HKLM"
"command"="\"e:\\Program Files\\DAEMON Tools\\daemon.exe\" -lang 1033"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EA Core]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="Core"
"hkey"="HKCU"
"command"="C:\\Program Files\\Electronic Arts\\EA Downloader\\Core.exe -silent"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="iTunesHelper"
"hkey"="HKLM"
"command"="\"E:\\Program Files\\iTunes\\iTunesHelper.exe\""
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="msnmsgr"
"hkey"="HKCU"
"command"="\"C:\\Program Files\\MSN Messenger\\msnmsgr.exe\" /background"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="NvCpl"
"hkey"="HKLM"
"command"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvCpl.dll,NvStartup"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="nwiz"
"hkey"="HKLM"
"command"="nwiz.exe /install"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCSuiteTrayApplication]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="LAUNCH~1"
"hkey"="HKLM"
"command"="C:\\PROGRA~1\\Nokia\\NOKIAP~1\\LAUNCH~1.EXE -startup"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PcSync]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="PcSync2"
"hkey"="HKCU"
"command"="C:\\Program Files\\Nokia\\Nokia PC Suite 6\\PcSync2.exe /NoDialog"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PVModule]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="pvmodule"
"hkey"="HKLM"
"command"="C:\\PROGRA~1\\PRINTV~1\\pvmodule.exe"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="Skype"
"hkey"="HKCU"
"command"="\"E:\\Program Files\\Skype\\Phone\\Skype.exe\" /nosplash /minimized"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="steam"
"hkey"="HKCU"
"command"="\"e:\\program files\\steam\\steam.ex\" -silent"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sunkist2k]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="shwicon2k"
"hkey"="HKLM"
"command"="C:\\Program Files\\Multimedia Card Reader\\shwicon2k.exe"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="winampa"
"hkey"="HKLM"
"command"="e:\\Program Files\\Winamp\\winampa.exe"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"

Completion time: 06-11-04 17:45:27.20
C:\ComboFix.txt ... 06-11-04 17:45
C:\ComboFix2.txt ... 06-11-04 17:35

Lee2k4 · 11-04-2006, 11:50 AM

KASPERSKY Log

-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Saturday, November 04, 2006 6:39:24 PM
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.83.0
Kaspersky Anti-Virus database last update: 4/11/2006
Kaspersky Anti-Virus database records: 238300
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
A:\
C:\
D:\
E:\
F:\
G:\
H:\

Scan Statistics:
Total number of scanned objects: 62078
Number of viruses found: 6
Number of infected objects: 18 / 0
Number of suspicious objects: 0
Duration of the scan process: 00:50:04

Infected Object Name / Virus Name / Last Action
C:\Documents and Settings\Administrator\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\Administrator\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Administrator\Local Settings\History\History.IE5\MSHist012006110420061105\index.dat Object is locked skipped
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Administrator\ntuser.dat Object is locked skipped
C:\Documents and Settings\Administrator\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\Program Files\VSAdd-in\VSAdd-in.dll Infected: not-a-virus:AdWare.Win32.Agent.at skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
C:\System Volume Information\_restore{557BAF5C-B290-414F-BC55-598BBD7370C5}\RP285\A0188870.exe/stream/data0006 Infected: Trojan-Downloader.Win32.Zlob.aim skipped
C:\System Volume Information\_restore{557BAF5C-B290-414F-BC55-598BBD7370C5}\RP285\A0188870.exe/stream Infected: Trojan-Downloader.Win32.Zlob.aim skipped
C:\System Volume Information\_restore{557BAF5C-B290-414F-BC55-598BBD7370C5}\RP285\A0188870.exe NSIS: infected - 2 skipped
C:\System Volume Information\_restore{557BAF5C-B290-414F-BC55-598BBD7370C5}\RP285\A0188870.exe UPX: infected - 2 skipped
C:\System Volume Information\_restore{557BAF5C-B290-414F-BC55-598BBD7370C5}\RP308\A0198383.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.ek skipped
C:\System Volume Information\_restore{557BAF5C-B290-414F-BC55-598BBD7370C5}\RP308\A0198385.dll Infected: Packed.Win32.Klone.g skipped
C:\System Volume Information\_restore{557BAF5C-B290-414F-BC55-598BBD7370C5}\RP309\A0199551.exe Infected: not-a-virus:AdWare.Win32.Agent.at skipped
C:\System Volume Information\_restore{557BAF5C-B290-414F-BC55-598BBD7370C5}\RP309\A0199553.dll Infected: Trojan.Win32.BHO.g skipped
C:\System Volume Information\_restore{557BAF5C-B290-414F-BC55-598BBD7370C5}\RP309\change.log Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\system32\cmdow.exe Infected: not-a-virus:RiskTool.Win32.HideWindows skipped
C:\WINDOWS\system32\config\Antivirus.Evt Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\drivers\dtscsi.sys Object is locked skipped
C:\WINDOWS\system32\drivers\sptd.sys Object is locked skipped
C:\WINDOWS\system32\drivers\vaxscsi.sys Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\Temp\Perflib_Perfdata_20c.dat Object is locked skipped
C:\WINDOWS\Temp\Perflib_Perfdata_270.dat Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
D:\RECYCLER\NPROTECT\00001251.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001252.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001253.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001254.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001255.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001256.htm Object is locked skipped
D:\RECYCLER\NPROTECT\00001257.htm Object is locked skipped
D:\RECYCLER\NPROTECT\00001258.htm Object is locked skipped
D:\RECYCLER\NPROTECT\00001259.htm Object is locked skipped
D:\RECYCLER\NPROTECT\00001260.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001261.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001262.htm Object is locked skipped
D:\RECYCLER\NPROTECT\00001263.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001264.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001265.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001266.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001267.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001268.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001269.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001270.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001271.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001272.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001273.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001274.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001275.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001276.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001277.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001278.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001279.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001280.sdb Object is locked skipped
D:\RECYCLER\NPROTECT\00001281.chm Object is locked skipped
D:\RECYCLER\NPROTECT\00001282.cpl Object is locked skipped
D:\RECYCLER\NPROTECT\00001283.ttf Object is locked skipped
D:\RECYCLER\NPROTECT\00001284.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001285.ocx Object is locked skipped
D:\RECYCLER\NPROTECT\00001286.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001287.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001288.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001289.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001290.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001291.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001292.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001293.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001294.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001295.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001296.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001297.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001298.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001299.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001300.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001301.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001302.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001303.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001304.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001305.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001306.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00001307.ax Object is locked skipped
D:\RECYCLER\NPROTECT\00001308.ax Object is locked skipped
D:\RECYCLER\NPROTECT\00001309.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001310.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001311.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001312.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001313.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001314.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001315.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001316.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001317.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001318.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001319.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001320.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001321.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001322.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001323.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001324.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001325.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001326.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001327.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001328.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001329.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001330.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001331.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001332.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001333.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001334.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001335.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001336.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001337.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001338.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001339.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001340.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001341.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001342.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001343.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001344.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001345.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001346.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001347.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001348.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001349.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001350.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001351.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001352.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001353.acs Object is locked skipped
D:\RECYCLER\NPROTECT\00001354.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001355.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001356.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001357.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001358.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001359.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001360.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001361.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001362.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001363.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001364.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001365.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001366.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001367.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001368.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001369.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001370.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001371.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001372.bin Object is locked skipped
D:\RECYCLER\NPROTECT\00001373.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001374.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001375.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001376.cpl Object is locked skipped
D:\RECYCLER\NPROTECT\00001377.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001378.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001379.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001380.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001381.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001382.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001383.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001384.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001385.ocx Object is locked skipped
D:\RECYCLER\NPROTECT\00001386.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001387.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001388.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001389.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001390.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001391.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001392.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001393.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001394.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001395.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001396.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001397.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001398.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001399.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001400.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001401.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001402.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001403.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001404.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001405.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001406.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001407.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001408.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001409.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001410.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001411.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001412.sdb Object is locked skipped
D:\RECYCLER\NPROTECT\00001413.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001414.ax Object is locked skipped
D:\RECYCLER\NPROTECT\00001415.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001416.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001417.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001418.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001419.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001420.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001421.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001422.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001423.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001424.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001425.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001426.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001427.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001428.acs Object is locked skipped
D:\RECYCLER\NPROTECT\00001429.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001430.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001431.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001432.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001433.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001434.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001435.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001436.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001437.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001438.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001439.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001440.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001441.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001442.xml Object is locked skipped
D:\RECYCLER\NPROTECT\00001443.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001444.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001445.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001446.cat Object is locked skipped
D:\RECYCLER\NPROTECT\00001447.cab Object is locked skipped
D:\RECYCLER\NPROTECT\00001448.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001449.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00001450.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001451.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001452.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001453.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001454.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001455.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001456.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001457.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001458.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001459.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001460.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001461.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001462.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001463.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001464.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001465.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001466.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001467.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001468.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001469.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001470.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001471.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001472.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001473.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001474.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001475.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001476.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001477.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001478.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001479.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001480.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00001481.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001482.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001483.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001484.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001485.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001486.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001487.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001488.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001489.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001490.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00001491.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001492.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001493.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001494.ttf Object is locked skipped
D:\RECYCLER\NPROTECT\00001495.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001496.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001497.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001498.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001499.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001500.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001501.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001502.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001503.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001504.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001505.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001506.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001507.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001508.ocx Object is locked skipped
D:\RECYCLER\NPROTECT\00001509.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001510.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001511.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001512.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001513.mar Object is locked skipped
D:\RECYCLER\NPROTECT\00001514.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001515.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001516.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00001517.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001518.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001519.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001520.js Object is locked skipped
D:\RECYCLER\NPROTECT\00001521.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001522.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001523.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001524.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001525.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001526.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001527.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001528.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001529.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00001530.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001531.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001532.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001533.acm Object is locked skipped
D:\RECYCLER\NPROTECT\00001534.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001535.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001536.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001537.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001538.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001539.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001540.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001541.cpl Object is locked skipped
D:\RECYCLER\NPROTECT\00001542.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001543.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001544.sql Object is locked skipped
D:\RECYCLER\NPROTECT\00001545.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001546.cpl Object is locked skipped
D:\RECYCLER\NPROTECT\00001547.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00001548.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001549.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001550.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001551.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001552.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001553.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00001554.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00001555.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00001556.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001557.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00001558.asp Object is locked skipped
D:\RECYCLER\NPROTECT\00001559.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00001560.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001561.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00001562.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00001563.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001564.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001565.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001566.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001567.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00001568.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00001569.cab Object is locked skipped
D:\RECYCLER\NPROTECT\00001570.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001571.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001572.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00001573.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00001574.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00001575.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001576.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00001577.adm Object is locked skipped
D:\RECYCLER\NPROTECT\00001578.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001579.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00001580.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00001581.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001582.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00001583.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00001584.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00001585.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001586.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001587.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00001588.cat Object is locked skipped
D:\RECYCLER\NPROTECT\00001589.chm Object is locked skipped
D:\RECYCLER\NPROTECT\00001590.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001591.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001592.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001593.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001594.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001595.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001596.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001597.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001598.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001599.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00001600.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001601.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00001602.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001603.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00001604.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00001605.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00001606.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00001607.cat Object is locked skipped
D:\RECYCLER\NPROTECT\00001608.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00001609.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001610.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001611.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00001612.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001613.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00001614.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001615.asp Object is locked skipped
D:\RECYCLER\NPROTECT\00001616.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001617.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00001618.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001619.asp Object is locked skipped
D:\RECYCLER\NPROTECT\00001620.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001621.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001622.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001623.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001624.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001625.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001626.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001627.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001628.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001629.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001630.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001631.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001632.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001633.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001634.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001635.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001636.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001637.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001638.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001639.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001640.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001641.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001642.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001643.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001644.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001645.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001646.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001647.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001648.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001649.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001650.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001651.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001652.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001653.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001654.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00001655.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00001656.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00001657.adm Object is locked skipped
D:\RECYCLER\NPROTECT\00001658.chm Object is locked skipped
D:\RECYCLER\NPROTECT\00001659.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001660.cat Object is locked skipped
D:\RECYCLER\NPROTECT\00001661.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00001662.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00001663.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001664.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001665.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001666.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001667.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001668.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00001669.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00001670.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001671.chm Object is locked skipped
D:\RECYCLER\NPROTECT\00001672.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001673.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001674.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001675.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001676.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001677.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001678.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001679.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001680.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001681.asp Object is locked skipped
D:\RECYCLER\NPROTECT\00001682.asp Object is locked skipped
D:\RECYCLER\NPROTECT\00001683.asp Object is locked skipped
D:\RECYCLER\NPROTECT\00001684.asp Object is locked skipped
D:\RECYCLER\NPROTECT\00001685.asp Object is locked skipped
D:\RECYCLER\NPROTECT\00001686.asp Object is locked skipped
D:\RECYCLER\NPROTECT\00001687.inc Object is locked skipped
D:\RECYCLER\NPROTECT\00001688.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001689.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001690.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001691.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001692.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001693.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001694.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001695.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001696.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001697.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001698.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001699.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001700.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001701.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001702.cpl Object is locked skipped
D:\RECYCLER\NPROTECT\00001703.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001704.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001705.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001706.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001707.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001708.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001709.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001710.ax Object is locked skipped
D:\RECYCLER\NPROTECT\00001711.acm Object is locked skipped
D:\RECYCLER\NPROTECT\00001712.ime Object is locked skipped
D:\RECYCLER\NPROTECT\00001713.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001714.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001715.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001716.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001717.ime Object is locked skipped
D:\RECYCLER\NPROTECT\00001718.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001719.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001720.ime Object is locked skipped
D:\RECYCLER\NPROTECT\00001721.ime Object is locked skipped
D:\RECYCLER\NPROTECT\00001722.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001723.ime Object is locked skipped
D:\RECYCLER\NPROTECT\00001724.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001725.dic Object is locked skipped
D:\RECYCLER\NPROTECT\00001726.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001727.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001728.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001729.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001730.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001731.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001732.ini Object is locked skipped
D:\RECYCLER\NPROTECT\00001733.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001734.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001735.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001736.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001737.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001738.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001739.tpl Object is locked skipped
D:\RECYCLER\NPROTECT\00001740.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001741.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001742.ime Object is locked skipped
D:\RECYCLER\NPROTECT\00001743.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001744.dic Object is locked skipped
D:\RECYCLER\NPROTECT\00001745.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001746.dic Object is locked skipped
D:\RECYCLER\NPROTECT\00001747.imd Object is locked skipped
D:\RECYCLER\NPROTECT\00001748.imd Object is locked skipped
D:\RECYCLER\NPROTECT\00001749.imd Object is locked skipped
D:\RECYCLER\NPROTECT\00001750.imd Object is locked skipped
D:\RECYCLER\NPROTECT\00001751.imd Object is locked skipped
D:\RECYCLER\NPROTECT\00001752.chm Object is locked skipped
D:\RECYCLER\NPROTECT\00001753.chm Object is locked skipped
D:\RECYCLER\NPROTECT\00001754.ime Object is locked skipped
D:\RECYCLER\NPROTECT\00001755.imd Object is locked skipped
D:\RECYCLER\NPROTECT\00001756.imd Object is locked skipped
D:\RECYCLER\NPROTECT\00001757.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001758.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001759.ime Object is locked skipped
D:\RECYCLER\NPROTECT\00001760.ime Object is locked skipped
D:\RECYCLER\NPROTECT\00001761.ime Object is locked skipped
D:\RECYCLER\NPROTECT\00001762.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001763.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001764.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001765.ime Object is locked skipped
D:\RECYCLER\NPROTECT\00001766.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001767.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001768.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001769.ime Object is locked skipped
D:\RECYCLER\NPROTECT\00001770.ime Object is locked skipped
D:\RECYCLER\NPROTECT\00001771.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001772.xml Object is locked skipped
D:\RECYCLER\NPROTECT\00001773.xml Object is locked skipped
D:\RECYCLER\NPROTECT\00001774.chm Object is locked skipped
D:\RECYCLER\NPROTECT\00001775.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001776.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001777.mof Object is locked skipped
D:\RECYCLER\NPROTECT\00001778.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001779.nls Object is locked skipped
D:\RECYCLER\NPROTECT\00001780.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001781.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001782.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001783.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001784.scr Object is locked skipped
D:\RECYCLER\NPROTECT\00001785.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001786.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001787.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001788.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001789.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001790.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001791.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001792.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001793.mar Object is locked skipped
D:\RECYCLER\NPROTECT\00001794.txt Object is locked skipped
D:\RECYCLER\NPROTECT\00001795.xml Object is locked skipped
D:\RECYCLER\NPROTECT\00001796.mar Object is locked skipped
D:\RECYCLER\NPROTECT\00001797.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00001798.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00001799.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00001800.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00001801.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001802.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00001803.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001804.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00001805.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001806.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001807.js Object is locked skipped
D:\RECYCLER\NPROTECT\00001808.obe Object is locked skipped
D:\RECYCLER\NPROTECT\00001809.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00001810.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001811.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00001812.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001813.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001814.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001815.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001816.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001817.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001818.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001819.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001820.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001821.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001822.ax Object is locked skipped
D:\RECYCLER\NPROTECT\00001823.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001824.ax Object is locked skipped
D:\RECYCLER\NPROTECT\00001825.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001826.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001827.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001828.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001829.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001830.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001831.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001832.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001833.ax Object is locked skipped
D:\RECYCLER\NPROTECT\00001834.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001835.tlb Object is locked skipped
D:\RECYCLER\NPROTECT\00001836.tlb Object is locked skipped
D:\RECYCLER\NPROTECT\00001837.tlb Object is locked skipped
D:\RECYCLER\NPROTECT\00001838.tlb Object is locked skipped
D:\RECYCLER\NPROTECT\00001839.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001840.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001841.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001842.acm Object is locked skipped
D:\RECYCLER\NPROTECT\00001843.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001844.acm Object is locked skipped
D:\RECYCLER\NPROTECT\00001845.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001846.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001847.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001848.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001849.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001850.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001851.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001852.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001853.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001854.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001855.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001856.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001857.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001858.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001859.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001860.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001861.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001862.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001863.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001864.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001865.tlb Object is locked skipped
D:\RECYCLER\NPROTECT\00001866.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001867.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001868.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001869.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001870.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001871.ocx Object is locked skipped
D:\RECYCLER\NPROTECT\00001872.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001873.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001874.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001875.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001876.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001877.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001878.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001879.drv Object is locked skipped
D:\RECYCLER\NPROTECT\00001880.drv Object is locked skipped
D:\RECYCLER\NPROTECT\00001881.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001882.tlb Object is locked skipped
D:\RECYCLER\NPROTECT\00001883.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001884.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001885.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001886.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001887.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001888.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001889.sdb Object is locked skipped
D:\RECYCLER\NPROTECT\00001890.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001891.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001892.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001893.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001894.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001895.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001896.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001897.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001898.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001899.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001900.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001901.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001902.cat Object is locked skipped
D:\RECYCLER\NPROTECT\00001903.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001904.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00001905.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001906.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00001907.mar Object is locked skipped
D:\RECYCLER\NPROTECT\00001908.mar Object is locked skipped
D:\RECYCLER\NPROTECT\00001909.mar Object is locked skipped
D:\RECYCLER\NPROTECT\00001910.mar Object is locked skipped
D:\RECYCLER\NPROTECT\00001911.mar Object is locked skipped
D:\RECYCLER\NPROTECT\00001912.mar Object is locked skipped
D:\RECYCLER\NPROTECT\00001913.mar Object is locked skipped
D:\RECYCLER\NPROTECT\00001914.mar Object is locked skipped
D:\RECYCLER\NPROTECT\00001915.mar Object is locked skipped
D:\RECYCLER\NPROTECT\00001916.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001917.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001918.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001919.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001920.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00001921.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001922.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001923.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001924.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001925.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001926.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00001927.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001928.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001929.htm Object is locked skipped
D:\RECYCLER\NPROTECT\00001930.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001931.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001932.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001933.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001934.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001935.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001936.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001937.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001938.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001939.cab Object is locked skipped
D:\RECYCLER\NPROTECT\00001940.ocx Object is locked skipped
D:\RECYCLER\NPROTECT\00001941.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001942.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001943.ax Object is locked skipped
D:\RECYCLER\NPROTECT\00001944.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001945.ocx Object is locked skipped
D:\RECYCLER\NPROTECT\00001946.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001947.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001948.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001949.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001950.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001951.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001952.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001953.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001954.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001955.cat Object is locked skipped
D:\RECYCLER\NPROTECT\00001956.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001957.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001958.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001959.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001960.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001961.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001962.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001963.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001964.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001965.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001966.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001967.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001968.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001969.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001970.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001971.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001972.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001973.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001974.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001975.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001976.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001977.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001978.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001979.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001980.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001981.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001982.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001983.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001984.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001985.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001986.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00001987.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001988.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001989.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00001990.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001991.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001992.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00001993.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00001994.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00001995.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00001996.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00001997.img Object is locked skipped
D:\RECYCLER\NPROTECT\00001998.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00001999.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00002000.sdb Object is locked skipped
D:\RECYCLER\NPROTECT\00002001.chm Object is locked skipped
D:\RECYCLER\NPROTECT\00002002.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002003.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002004.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002005.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002006.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002007.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002008.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00002009.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00002010.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002011.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002012.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002013.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002014.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002015.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002016.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002017.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002018.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002019.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002020.ax Object is locked skipped
D:\RECYCLER\NPROTECT\00002021.ax Object is locked skipped
D:\RECYCLER\NPROTECT\00002022.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00002023.nls Object is locked skipped
D:\RECYCLER\NPROTECT\00002024.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002025.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002026.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002027.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002028.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002029.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002030.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002031.cab Object is locked skipped
D:\RECYCLER\NPROTECT\00002032.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00002033.gif Object is locked skipped
D:\RECYCLER\NPROTECT\00002034.gif Object is locked skipped
D:\RECYCLER\NPROTECT\00002035.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002036.ime Object is locked skipped
D:\RECYCLER\NPROTECT\00002037.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002038.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002039.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002040.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00002041.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00002042.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00002043.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00002044.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00002045.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00002046.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00002047.ntd Object is locked skipped
D:\RECYCLER\NPROTECT\00002048.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00002049.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002050.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002051.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002052.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002053.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002054.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002055.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002056.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002057.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002058.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002059.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00002060.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00002061.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002062.adm Object is locked skipped
D:\RECYCLER\NPROTECT\00002063.chm Object is locked skipped
D:\RECYCLER\NPROTECT\00002064.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002065.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002066.htm Object is locked skipped
D:\RECYCLER\NPROTECT\00002067.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002068.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002069.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002070.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002071.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002072.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002073.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002074.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002075.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002076.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002077.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002078.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002079.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002080.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002081.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002082.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002083.cat Object is locked skipped
D:\RECYCLER\NPROTECT\00002084.com Object is locked skipped
D:\RECYCLER\NPROTECT\00002085.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002086.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002087.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002088.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002089.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002090.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002091.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002092 Object is locked skipped
D:\RECYCLER\NPROTECT\00002093.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002094.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002095.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002096.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002097.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002098.cat Object is locked skipped
D:\RECYCLER\NPROTECT\00002099.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002100.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002101.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002102.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002103.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002104.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002105.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002106.dun Object is locked skipped
D:\RECYCLER\NPROTECT\00002107.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002108.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002109.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002110.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002111.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002112.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002113.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002114.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002115.rsp Object is locked skipped
D:\RECYCLER\NPROTECT\00002116.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002117.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002118.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002119.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002120.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002121.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002122.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002123.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002124.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002125.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002126.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002127.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002128.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002129.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002130.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002131.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002132.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002133.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002134.asp Object is locked skipped
D:\RECYCLER\NPROTECT\00002135.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002136.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002137.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002138.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002139.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002140.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002141.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002142.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002143.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002144.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002145.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002146.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002147.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002148.icw Object is locked skipped
D:\RECYCLER\NPROTECT\00002149.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00002150.obe Object is locked skipped
D:\RECYCLER\NPROTECT\00002151.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002152.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002153.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002154.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002155.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002156.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002157.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002158.hta Object is locked skipped
D:\RECYCLER\NPROTECT\00002159.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002160.ocx Object is locked skipped
D:\RECYCLER\NPROTECT\00002161.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002162.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002163.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002164.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002165.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002166.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002167.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002168.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002169.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002170.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002171.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002172.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002173.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002174.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002175.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002176.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002177.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002178.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002179.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002180.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002181.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002182.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002183.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002184.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002185.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002186.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002187.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002188.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002189.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002190.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002191.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002192.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002193.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002194.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002195.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002196.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002197.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002198.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002199.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002200.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002201.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002202.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002203.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002204.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002205.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002206.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002207.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002208.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002209.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002210.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002211.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002212.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002213.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002214.cpl Object is locked skipped
D:\RECYCLER\NPROTECT\00002215.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002216.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002217.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002218.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002219.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002220.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002221.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002222.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002223.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002224.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002225.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002226.scr Object is locked skipped
D:\RECYCLER\NPROTECT\00002227.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002228.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002229.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002230.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002231.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002232.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002233.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002234.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002235.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002236.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002237.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002238.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002239.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00002240.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002241.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002242.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002243.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002244.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002245.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002246.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002247.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002248.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002249.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002250.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002251.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002252.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002253.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002254.mar Object is locked skipped
D:\RECYCLER\NPROTECT\00002255.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002256.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002257.tlb Object is locked skipped
D:\RECYCLER\NPROTECT\00002258.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002259.acm Object is locked skipped
D:\RECYCLER\NPROTECT\00002260.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002261.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002262.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002263.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002264.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002265.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002266.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002267.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002268.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002269.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002270.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002271.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002272.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002273.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002274.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002275.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002276.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002277.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002278.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002279.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002280.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002281.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002282.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002283.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002284.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002285.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002286.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002287.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002288.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002289.scr Object is locked skipped
D:\RECYCLER\NPROTECT\00002290.scr Object is locked skipped
D:\RECYCLER\NPROTECT\00002291.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002292.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002293.scr Object is locked skipped
D:\RECYCLER\NPROTECT\00002294.scr Object is locked skipped
D:\RECYCLER\NPROTECT\00002295.scr Object is locked skipped
D:\RECYCLER\NPROTECT\00002296.scr Object is locked skipped
D:\RECYCLER\NPROTECT\00002297.scr Object is locked skipped
D:\RECYCLER\NPROTECT\00002298.scr Object is locked skipped
D:\RECYCLER\NPROTECT\00002299.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002300.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002301.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002302.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002303.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002304.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002305.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002306.EXE Object is locked skipped
D:\RECYCLER\NPROTECT\00002307.EXE Object is locked skipped
D:\RECYCLER\NPROTECT\00002308.ocx Object is locked skipped
D:\RECYCLER\NPROTECT\00002309.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002310.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002311.cpl Object is locked skipped
D:\RECYCLER\NPROTECT\00002312.sdb Object is locked skipped
D:\RECYCLER\NPROTECT\00002313.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002314.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002315.ocx Object is locked skipped
D:\RECYCLER\NPROTECT\00002316.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002317.ttf Object is locked skipped
D:\RECYCLER\NPROTECT\00002318.ttf Object is locked skipped
D:\RECYCLER\NPROTECT\00002319.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002320.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002321.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002322.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002323.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002324.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002325.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002326.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002327.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002328.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002329.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002330.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002331.mar Object is locked skipped
D:\RECYCLER\NPROTECT\00002332.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002333.ttf Object is locked skipped
D:\RECYCLER\NPROTECT\00002334.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002335.ttf Object is locked skipped
D:\RECYCLER\NPROTECT\00002336.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002337.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002338.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002339.mfl Object is locked skipped
D:\RECYCLER\NPROTECT\00002340.mof Object is locked skipped
D:\RECYCLER\NPROTECT\00002341.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002342.chm Object is locked skipped
D:\RECYCLER\NPROTECT\00002343.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002344.htm Object is locked skipped
D:\RECYCLER\NPROTECT\00002345.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002346.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002347.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002348.mar Object is locked skipped
D:\RECYCLER\NPROTECT\00002349.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002350.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002351.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002352.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002353.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002354.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002355.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002356.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002357.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002358.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002359.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002360.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002361.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002362.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002363.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002364.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002365.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002366.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002367.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002368.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002369.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002370.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002371.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002372.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002373.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002374.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002375.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002376.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00002377.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002378.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002379.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002380.ax Object is locked skipped
D:\RECYCLER\NPROTECT\00002381.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002382.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002383.ttf Object is locked skipped
D:\RECYCLER\NPROTECT\00002384.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002385.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002386.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002387.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002388.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002389.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002390.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002391.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002392.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002393.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002394.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002395.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002396.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002397.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002398.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002399.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002400.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002401.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00002402.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00002403.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00002404.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002405.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002406.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002407.msi Object is locked skipped
D:\RECYCLER\NPROTECT\00002408.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002409.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002410.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002411.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002412.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002413.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002414.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002415.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002416.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002417.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002418.drv Object is locked skipped
D:\RECYCLER\NPROTECT\00002419.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002420.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002421.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002422.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002423.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002424.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002425.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002426.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002427.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002428.mof Object is locked skipped
D:\RECYCLER\NPROTECT\00002429.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002430.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002431.ocx Object is locked skipped
D:\RECYCLER\NPROTECT\00002432.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002433.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002434.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002435.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002436.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002437.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002438.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002439.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002440.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002441.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002442.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002443.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00002444.ocx Object is locked skipped
D:\RECYCLER\NPROTECT\00002445.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002446.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002447.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002448.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002449.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002450.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002451.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002452.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002453.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002454.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002455.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002456.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002457.ax Object is locked skipped
D:\RECYCLER\NPROTECT\00002458.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002459.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002460.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002461.ax Object is locked skipped
D:\RECYCLER\NPROTECT\00002462.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002463.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002464.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002465.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002466.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002467.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002468.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002469.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002470.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002471.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002472.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002473.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002474.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002475.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002476.cab Object is locked skipped
D:\RECYCLER\NPROTECT\00002477.1 Object is locked skipped
D:\RECYCLER\NPROTECT\00002478.man Object is locked skipped
D:\RECYCLER\NPROTECT\00002479.cat Object is locked skipped
D:\RECYCLER\NPROTECT\00002480.man Object is locked skipped
D:\RECYCLER\NPROTECT\00002481.cat Object is locked skipped
D:\RECYCLER\NPROTECT\00002482.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002483.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002484.man Object is locked skipped
D:\RECYCLER\NPROTECT\00002485.cat Object is locked skipped
D:\RECYCLER\NPROTECT\00002486.man Object is locked skipped
D:\RECYCLER\NPROTECT\00002487.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002488.cat Object is locked skipped
D:\RECYCLER\NPROTECT\00002489.man Object is locked skipped
D:\RECYCLER\NPROTECT\00002490.cat Object is locked skipped
D:\RECYCLER\NPROTECT\00002491.man Object is locked skipped
D:\RECYCLER\NPROTECT\00002492.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002493.cat Object is locked skipped
D:\RECYCLER\NPROTECT\00002494.sig Object is locked skipped
D:\RECYCLER\NPROTECT\00002495.dat Object is locked skipped
D:\RECYCLER\NPROTECT\00002496.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002497.cat Object is locked skipped
D:\RECYCLER\NPROTECT\00002498.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002499.ver Object is locked skipped
D:\RECYCLER\NPROTECT\00002500.url Object is locked skipped
D:\RECYCLER\NPROTECT\00002501.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00002502.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002503.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002504.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002505.GIF Object is locked skipped
D:\RECYCLER\NPROTECT\00002506.htm Object is locked skipped
D:\RECYCLER\NPROTECT\00002507.txt Object is locked skipped
D:\RECYCLER\NPROTECT\00002509._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002510._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002511._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002512._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002513._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002514._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002515._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002516._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002517._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002518._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002519._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002520._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002521._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002522._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002523._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002524.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002525.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002526.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002527.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002528.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002529.txt Object is locked skipped
D:\RECYCLER\NPROTECT\00002530.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002531.txt Object is locked skipped
D:\RECYCLER\NPROTECT\00002532.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002533.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002534.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002535.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002536.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002537.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002538.cat Object is locked skipped
D:\RECYCLER\NPROTECT\00002539.cat Object is locked skipped
D:\RECYCLER\NPROTECT\00002540.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002541.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00002542.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00002543.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002544.ver Object is locked skipped
D:\RECYCLER\NPROTECT\00002545.ver Object is locked skipped
D:\RECYCLER\NPROTECT\00002546.ver Object is locked skipped
D:\RECYCLER\NPROTECT\00002547.txt Object is locked skipped
D:\RECYCLER\NPROTECT\00002548.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00002549.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002550.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002551.cat Object is locked skipped
D:\RECYCLER\NPROTECT\00002552.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002553.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002554.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002555._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002556._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002557._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002558._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002559._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002560._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002561._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002562._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002563._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002564._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002565._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002566._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002567._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002568._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002569._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002570._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002571._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002572._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002573._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002574._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002575._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002576._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002577._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002578._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002579._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002580._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002581._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002582._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002583._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002584._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002585._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002586._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002587._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002588._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002589._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002590.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002591.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002592.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002593.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002594.ocx Object is locked skipped
D:\RECYCLER\NPROTECT\00002595.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002596.cnv Object is locked skipped
D:\RECYCLER\NPROTECT\00002597.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002598.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002599.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002600.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002601.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002602.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002603.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002604.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002605.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002606.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002607.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002608.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002609.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002610.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002611.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002612.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002613.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002614.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002615.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002616.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002617.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002618.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002619.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002620.sdb Object is locked skipped
D:\RECYCLER\NPROTECT\00002621.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002622.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002623.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002624.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002625.txt Object is locked skipped
D:\RECYCLER\NPROTECT\00002626.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002627.ver Object is locked skipped
D:\RECYCLER\NPROTECT\00002628.url Object is locked skipped
D:\RECYCLER\NPROTECT\00002629.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00002630.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002631.cat Object is locked skipped
D:\RECYCLER\NPROTECT\00002632.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002633.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002634._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002635.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002636.txt Object is locked skipped
D:\RECYCLER\NPROTECT\00002637.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002638.ver Object is locked skipped
D:\RECYCLER\NPROTECT\00002639.url Object is locked skipped
D:\RECYCLER\NPROTECT\00002640.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00002641.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002642.cat Object is locked skipped
D:\RECYCLER\NPROTECT\00002643.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002644.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002651.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002652.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002653.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002654.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002655.txt Object is locked skipped
D:\RECYCLER\NPROTECT\00002656.ver Object is locked skipped
D:\RECYCLER\NPROTECT\00002657.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00002658.cat Object is locked skipped
D:\RECYCLER\NPROTECT\00002659.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002660.ver Object is locked skipped
D:\RECYCLER\NPROTECT\00002661.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00002662.cat Object is locked skipped
D:\RECYCLER\NPROTECT\00002663.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002664.txt Object is locked skipped
D:\RECYCLER\NPROTECT\00002665.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002666.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002667.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002668.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002669.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002670._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002671._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002672._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002673._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002674._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002675._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002676._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002677._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002678._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002679._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002680._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002681._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002682._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002683._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002684._P Object is locked skipped
D:\RECYCLER\NPROTECT\00002685.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002686.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002687.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002688.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002689.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002690.txt Object is locked skipped
D:\RECYCLER\NPROTECT\00002691.sdb Object is locked skipped
D:\RECYCLER\NPROTECT\00002692.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002693.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002694.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002695.sys Object is locked skipped
D:\RECYCLER\NPROTECT\00002696.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002697.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002698.cat Object is locked skipped
D:\RECYCLER\NPROTECT\00002699.cat Object is locked skipped
D:\RECYCLER\NPROTECT\00002700.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00002701.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00002702.txt Object is locked skipped
D:\RECYCLER\NPROTECT\00002703.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002704.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002705.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002706.ver Object is locked skipped
D:\RECYCLER\NPROTECT\00002707.ver Object is locked skipped
D:\RECYCLER\NPROTECT\00002708.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002709.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002710.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002711.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002712.txt Object is locked skipped
D:\RECYCLER\NPROTECT\00002713.ver Object is locked skipped
D:\RECYCLER\NPROTECT\00002714.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00002715.cat Object is locked skipped
D:\RECYCLER\NPROTECT\00002716.cat Object is locked skipped
D:\RECYCLER\NPROTECT\00002717.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002718.ver Object is locked skipped
D:\RECYCLER\NPROTECT\00002719.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00002720.cat Object is locked skipped
D:\RECYCLER\NPROTECT\00002721.cat Object is locked skipped
D:\RECYCLER\NPROTECT\00002722.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002723.txt Object is locked skipped
D:\RECYCLER\NPROTECT\00002724.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002725.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002726.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002727.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002728.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002729.ver Object is locked skipped
D:\RECYCLER\NPROTECT\00002730.txt Object is locked skipped
D:\RECYCLER\NPROTECT\00002731.inf Object is locked skipped
D:\RECYCLER\NPROTECT\00002732.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002733.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002734.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002735.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002736.cdf Object is locked skipped
D:\RECYCLER\NPROTECT\00002737.cat Object is locked skipped
D:\RECYCLER\NPROTECT\00002738.ocx Object is locked skipped
D:\RECYCLER\NPROTECT\00002739.exe Object is locked skipped
D:\RECYCLER\NPROTECT\00002740.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002741.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002742.dll Object is locked skipped
D:\RECYCLER\NPROTECT\00002743.dll Object is locked skipped
D:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
D:\System Volume Information\_restore{557BAF5C-B290-414F-BC55-598BBD7370C5}\RP285\A0188513.exe/run.exe/stream/data0006 Infected: Trojan-Downloader.Win32.Zlob.aim skipped
D:\System Volume Information\_restore{557BAF5C-B290-414F-BC55-598BBD7370C5}\RP285\A0188513.exe/run.exe/stream Infected: Trojan-Downloader.Win32.Zlob.aim skipped
D:\System Volume Information\_restore{557BAF5C-B290-414F-BC55-598BBD7370C5}\RP285\A0188513.exe/run.exe Infected: Trojan-Downloader.Win32.Zlob.aim skipped
D:\System Volume Information\_restore{557BAF5C-B290-414F-BC55-598BBD7370C5}\RP285\A0188513.exe ZIP: infected - 3 skipped
D:\System Volume Information\_restore{557BAF5C-B290-414F-BC55-598BBD7370C5}\RP307\A0198200.exe/stream/data0006 Infected: Trojan-Downloader.Win32.Zlob.aim skipped
D:\System Volume Information\_restore{557BAF5C-B290-414F-BC55-598BBD7370C5}\RP307\A0198200.exe/stream Infected: Trojan-Downloader.Win32.Zlob.aim skipped
D:\System Volume Information\_restore{557BAF5C-B290-414F-BC55-598BBD7370C5}\RP307\A0198200.exe NSIS: infected - 2 skipped
D:\System Volume Information\_restore{557BAF5C-B290-414F-BC55-598BBD7370C5}\RP307\A0198200.exe UPX: infected - 2 skipped
D:\System Volume Information\_restore{557BAF5C-B290-414F-BC55-598BBD7370C5}\RP309\change.log Object is locked skipped
E:\Program Files\Alwil Software\Avast4\DATA\aswResp.dat Object is locked skipped
E:\Program Files\Alwil Software\Avast4\DATA\Avast4.db Object is locked skipped
E:\Program Files\Alwil Software\Avast4\DATA\log\nshield.log Object is locked skipped
E:\Program Files\Sygate\SPF\debug.log Object is locked skipped
E:\Program Files\Sygate\SPF\rawlog.log Object is locked skipped
E:\Program Files\Sygate\SPF\seclog.log Object is locked skipped
E:\Program Files\Sygate\SPF\syslog.log Object is locked skipped
E:\Program Files\Sygate\SPF\tralog.log Object is locked skipped
E:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
E:\System Volume Information\_restore{557BAF5C-B290-414F-BC55-598BBD7370C5}\RP309\change.log Object is locked skipped

Scan process completed.

Lee2k4 · 11-04-2006, 11:51 AM

Logfile of HijackThis v1.99.1
Scan saved at 18:41:33, on 04/11/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
E:\Program Files\Sygate\SPF\smc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
E:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
e:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
e:\Program Files\Alwil Software\Avast4\ashServ.exe
e:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
E:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
C:\WINDOWS\system32\nvsvc32.exe
D:\Junk\hijackthis\glasgow.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=cache3-lang.server.ntli.net:8080:
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {46A4E9D9-B30E-452A-8157-DBBEC8573B03} - C:\Program Files\VSAdd-in\VSAdd-in.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - E:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O3 - Toolbar: &VSAdd-in - {74DD705D-6834-439C-A735-A6DBE2677452} - C:\Program Files\VSAdd-in\VSAdd-in.dll
O4 - HKLM\..\Run: [SmcService] E:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKLM\..\Run: [avast!] e:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [DiskeeperSystray] "E:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: &ieSpell Options - res://e:\Program Files\ieSpell\iespell.dll/SPELLOPTION.HTM
O8 - Extra context menu item: Check &Spelling - res://e:\Program Files\ieSpell\iespell.dll/SPELLCHECK.HTM
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - e:\Program Files\ieSpell\iespell.dll
O9 - Extra 'Tools' menuitem: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - e:\Program Files\ieSpell\iespell.dll
O9 - Extra button: (no name) - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - e:\Program Files\ieSpell\iespell.dll
O9 - Extra 'Tools' menuitem: ieSpell Options - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - e:\Program Files\ieSpell\iespell.dll
O16 - DPF: RaptisoftGameLoader - http://www.miniclip.com/hamsterball/...gameloader.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/par...an_unicode.cab
O16 - DPF: {85D1F3B2-2A21-11D7-97B9-0010DC2A6243} (SecureLogin class) - http://secure2.comned.com/signuptemp...ogin-devel.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/actives...ree/asinst.cab
O16 - DPF: {B1826A9F-4AA0-4510-BA77-9013E74E4B9B} - http://www.trendmicro.com/spyware-scan/as4web.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - e:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - e:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - e:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - e:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - e:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Diskeeper - Diskeeper Corporation - E:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - E:\Program Files\Sygate\SPF\smc.exe

I apologize for posting 3 seperate replies but it would not let me fit all the text in one. As for the system running better, yes boot up times are now much quicker, thanks again for your help.

**Glaswegian** · 11-04-2006, 04:46 PM

Hi Lee

Some files will be there but some won’t – better for me to list them just in case. And don’t worry about the 3 posts – you did just fine.

One more thing to get rid of.

Reboot
Reboot your system in Safe Mode.

Restart the computer. The computer begins processing a set of instructions known as BIOS.
After hearing your computer beep once during startup, but before the Windows icon appears, press F8 (dependent on your system this may be F5 or another key)
Instead of Windows loading as normal, a menu should appear
Use the arrow key to highlight Safe Mode and press Enter.

Uninstall Programmes
Click > Start > Control Panel > Add / Remove Programs and uninstall the following programs (if present):

VS Add-in or VSToolbar

HijackThis Entries
Open Hijack This and click on Scan. Check the following entries (if they still exist) (make sure you do not miss any)

O2 - BHO: (no name) - {46A4E9D9-B30E-452A-8157-DBBEC8573B03} - C:\Program Files\VSAdd-in\VSAdd-in.dll
O3 - Toolbar: &VSAdd-in - {74DD705D-6834-439C-A735-A6DBE2677452} - C:\Program Files\VSAdd-in\VSAdd-in.dll

Please remember to close all other windows, including browsers then click Fix checked.

File Deletions
Delete the following Folder indicated in BLUE if it still exists.

C:\Program Files\VSAdd-in

Reboot
Reboot your system in Normal Mode.

Choose any one of the folloing online scanners and post back with any log it produces.

Trend Micro - Free online virus Scan <- - you can use Firefox for this scanner
eTrust Antivirus Web Scanner
http://www.bitdefender.com/scan/license.php
McAfee – Computer Anti-Virus Software and Internet Security For Your PC
Symantec Security Check

Also post a fresh HijackThis Log.

Lee2k4 · 11-04-2006, 05:52 PM

I have removed VS Add-in from the Add/remove option in control panel and I have removed C:\Program Files\VSAdd-in

I could not find any of the hijackthis entries you listed :(

The online scanners you listed, well I tried Trend and Mcafee but both offered me no log file in txt format so I find it difficult to post the report.

**Glaswegian** · 11-05-2006, 04:44 AM

That's fine Lee. Sometimes an uninstall leaves an odd file or folder behind, but in your case it seems to have uninstalled everything correctly. If there was no report from the scanners then there was nothing to find.

Please post a fresh HijackThis Log - that should us almost finished.

Lee2k4 · 11-05-2006, 07:03 AM

Hopefully this is the last of the infections, I can't thank you enough, you have helped me a great deal, PC starts up much faster now, anyway here is the log, and THANK YOU!

Logfile of HijackThis v1.99.1
Scan saved at 14:00:01, on 05/11/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
E:\Program Files\Sygate\SPF\smc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
e:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
E:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
e:\Program Files\Alwil Software\Avast4\ashServ.exe
e:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
E:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
C:\WINDOWS\system32\nvsvc32.exe
e:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
e:\Program Files\Alwil Software\Avast4\ashWebSv.exe
D:\Junk\hijackthis\glasgow.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=cache3-lang.server.ntli.net:8080:
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - E:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O4 - HKLM\..\Run: [SmcService] E:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKLM\..\Run: [avast!] e:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [DiskeeperSystray] "E:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: &ieSpell Options - res://e:\Program Files\ieSpell\iespell.dll/SPELLOPTION.HTM
O8 - Extra context menu item: Check &Spelling - res://e:\Program Files\ieSpell\iespell.dll/SPELLCHECK.HTM
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - e:\Program Files\ieSpell\iespell.dll
O9 - Extra 'Tools' menuitem: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - e:\Program Files\ieSpell\iespell.dll
O9 - Extra button: (no name) - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - e:\Program Files\ieSpell\iespell.dll
O9 - Extra 'Tools' menuitem: ieSpell Options - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - e:\Program Files\ieSpell\iespell.dll
O16 - DPF: RaptisoftGameLoader - http://www.miniclip.com/hamsterball/...gameloader.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/par...an_unicode.cab
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/securityadvisor/v...fo/webscan.cab
O16 - DPF: {85D1F3B2-2A21-11D7-97B9-0010DC2A6243} (SecureLogin class) - http://secure2.comned.com/signuptemp...ogin-devel.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/actives...ree/asinst.cab
O16 - DPF: {B1826A9F-4AA0-4510-BA77-9013E74E4B9B} - http://www.trendmicro.com/spyware-scan/as4web.cab
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/is...86/mcfscan.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - e:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - e:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - e:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - e:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - e:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Diskeeper - Diskeeper Corporation - E:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - E:\Program Files\Sygate\SPF\smc.exe

**Glaswegian** · 11-05-2006, 08:06 AM

Hi again

Well done - your log is clean. Any more problems? If not we’ll just tidy up and I’ll let you go, along with my recommendations for staying safe and secure.

You can go ahead and delete any special tools we used (SmitRem, SmitfraudFix, ComboFix, etc). They won't serve a future purpose and are replaced with updated versions frequently, so the copies you have are probably already out of date and there is therefore no need to keep them.

Reset Hidden/System Files
To reset your hidden and system files:

Click Start.
Open My Computer.
Select the Tools menu and click Folder Options.
Select the View tab.
Deselect the Show hidden files and folders option.
Select the Hide file extensions for known types option.
Select the Hide protected operating system files option.
Click Yes to confirm.
Click OK.

System Restore
To turn off System Restore click Start > Right Click My Computer > Properties. Click the System Restore tab and Check "Turn off System Restore" or "Turn off System Restore on all drives" Click Apply. When turning off System Restore, the existing restore points will be deleted. Click Yes to do this then Click OK.

To turn on System Restore by Clicking Start. Right-click My Computer, and then click Properties. Click the System Restore tab. Uncheck "Turn off System Restore" or "Turn off System Restore on all drives." Click Apply, and then OK.

This will create a new Restore Point.

Now that you are clean, to help protect your computer in the future I recommend that you get the following free programs:

Spyware Blaster to help prevent spyware from installing in the first place.
Spyware Guard to catch and block spyware before it can execute.
Spybot - Search & Destroy with its TeaTimer option. This will provide realtime spyware & hijacker protection on your computer alongside your virus protection. You should also scan your computer with the program on a regular basis just as you would an antivirus software. A tutorial on installing & using this product can be found here.

Ad-aware
Download and install Ad-Aware. You should use this program to scan your computer on a regular basis just as you would an antivirus software in conjunction with Spybot. A tutorial on installing & using this product can be found here.

IE-SPYAD
IE-Spyad places more than 4000 dubious websites and domains in the IE Restricted list. This severely impairs attempts to infect your system. It basically prevents any downloads (Cookies etc) from the sites listed, although you will still be able to connect to the sites. A tutorial on installing this product can be found here.

SnoopFree
SnoopFree is a real time monitor that notifies you when a programme wants to record your keystrokes or read your screen. Note that SnoopFree is only for XP systems.

MVPS Hosts File
The MVPS Hosts file replaces your current HOSTS file with one that will restrict known ad sites from serving you unsolicited advertisements. Basically, this prevents your computer from connecting to those sites by redirecting them to 127.0.0.1 which is the IP of your local computer. Note that if you use a company provided HOSTS file you should not use the MVPS HOSTS file.

Alternate Browsers
Try the following free alternate browsers rather than Internet Explorer
Firefox
Opera
Maxthon

Firewalls
A good firewall will monitor incoming and outgoing traffic. NOTE: Microsoft's Firewall does not monitor outgoing traffic. If you do not have a firewall, here are 3 free ones available for personal use:
Sygate Personal Firewall
ZoneAlarm
Tiny Personal Firewall

Anti Virus Software
It is very important that you have anti-virus software running on your machine. This alone can save you a lot of trouble with malware in the future. See this link for a listing of some online antivirus scanners:
Anti-Spyware Tutorial

Here are three very good free Antivirus products which are available:
BitDefender Free
Avast!
AVG

It is imperative that you update your Antivirus software at least once a week (Even more if you wish). If you do not update your antivirus software then it will not be able to catch any of the new variants that may come out.

Other Protection
Winpatrol - Download and install the free version of Winpatrol. A tutorial for this product is located here:
Using Winpatrol to protect your computer.

In light of your recent troubles, I'm sure you'll like to avoid any future infections. Please take a look at these well written articles

PC Safety & Security - What Do I Need?.
Making Internet Explorer Safer.

Keep clean and safe and enjoy your computing!

Please respond to this thread one more time so we can mark this thread as resolved.

11-02-2006, 04:04 PM	#2 (permalink)
Glaswegian Moderator/ Rangemaster TSF Academy; Analyst, Security Team; Oor Wullie; TSF Surgeon and Resident Comic Join Date: Sep 2005 Location: Glasgow Posts: 25,509 OS: Win XP Pro SP3 / Win 7 Pro My System Blog Entries: 10	Hi and welcome to TSF. Apologies for any delay in replying, but we have been rather busy lately, and, of course, all our helpers are volunteers. There is a possibility that some items are hiding from us. Please follow these instructions carefully. I'd like you to rename HijackThis.exe (the actual .exe file itself) to glasgow.exe. Navigate to C:\hjt\HijackThis.exe (or wherever HJT is located) Right click on HijackThis.exe Select 'Rename' Type in glasgow.exe Press Enter. Now run another scan and post the new log back here. Thank you. __________________ Iain - Defender of the Haggis and all things Scottish. I don't help by PM - post in the Forums. PC Safety & Security::PC running a bit slow?::Donate::Photographers Corner

11-03-2006, 02:51 PM	#4 (permalink)
Glaswegian Moderator/ Rangemaster TSF Academy; Analyst, Security Team; Oor Wullie; TSF Surgeon and Resident Comic Join Date: Sep 2005 Location: Glasgow Posts: 25,509 OS: Win XP Pro SP3 / Win 7 Pro My System Blog Entries: 10	Hi again Lee Now we can see the baddies! You may wish to Subscribe to this thread (Thread Tools > Subscribe to this thread) so that you are notified when you receive a reply. Please read these instructions carefully and then print out or copy this page to Notepad in order to assist you when carrying out the fix. You should not have any open browsers when you are following the procedures below. Note that the fix may take several posts. Please continue to respond to my instructions until I confirm that your system is clean. Show Hidden Files Go to My Computer > Tools > Folder Options > View tab and make sure that Show hidden files and folders is enabled. Also make sure that the System files and Folders are showing / visible. Uncheck the Hide protected operating system files option. Disable AVG Anti Spyware's Guard Please disable AVG Anti Spyware's Guard, as it may hinder the removal of some entries. You can re-enable it after you're clean. Double-click the icon on Desktop to launch AVG On the top of the main screen click Shield Click the word active to change it to inactive Exit AVG Downloads Please download Cleanup! or use this Alternate Link if the main link does not work and install it. You will use this later. NOTE Cleanup deletes EVERYTHING out of temporary folders and does NOT make backups. If you have any files in any TEMP directory and you need to keep them, then please MOVE THEM NOW! I see you already have AVG Anti Spyware. Please update AVG to the latest definition files. Double-click the icon on Desktop to launch AVG Anti Spyware. On the top of the main screen click Shield Click the word active to change it to inactive On the top of the main screen click Update. Then click on Start Update. After the update finishes (the status bar at the bottom will display "Update successful") select the "Settings" tab. Once in the Settings screen click on "Recommended actions" and then select "Quarantine". Under "Reports" Select "Automatically generate report after every scan" Un-Select "Only if threats were found" When you have finished updating, EXIT AVG Anti Spyware. DO NOT scan yet. Download this file - combofix.exe to your desktop. Alternative download location here. IMPORTANT - You must place combofix on your desktop!! Run Combofix Click the Windows 'Start' button > Select Run - then copy and paste this line into the run box & click OK "%userprofile%\desktop\combofix.exe" /v socgkqf vtutu bvsjtoru winrge32 When finished, the tool will produce a log for you at c:\combofix.txt. Post that log in your next reply. Reboot Reboot your system in Safe Mode. Restart the computer. The computer begins processing a set of instructions known as BIOS. After hearing your computer beep once during startup, but before the Windows icon appears, press F8 (dependent on your system this may be F5 or another key) Instead of Windows loading as normal, a menu should appear Use the arrow key to highlight Safe Mode and press Enter. HijackThis Entries Open Hijack This and click on Scan. Check the following entries (if they still exist) (make sure you do not miss any) R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O2 - BHO: (no name) - {4C904FA9-0EAF-84A3-5FC3-02F39C81E65B} - C:\WINDOWS\system32\socgkqf.dll O2 - BHO: (no name) - {4D4BE91C-40F4-4F12-9B60-655504637ADF} - C:\WINDOWS\system32\vtutu.dll O2 - BHO: PrintViewBHO Class - {D4E0C464-30CE-4075-9A10-71FD106C2847} - C:\PROGRA~1\PRINTV~1\PRINTH~1.DLL (file missing) O2 - BHO: (no name) - {F18F04B0-9CF1-4b93-B004-77A288BEE28B} - C:\WINDOWS\system32\bvsjtoru.dll O20 - Winlogon Notify: vtutu - C:\WINDOWS\system32\vtutu.dll O20 - Winlogon Notify: winrge32 - C:\WINDOWS\SYSTEM32\winrge32.dll Please remember to close all other windows, including browsers then click Fix checked. Run CleanUp! NOTE Cleanup deletes EVERYTHING out of temporary folders and does NOT make backups. If you have any files in any TEMP directory and you need to keep them, then please MOVE THEM NOW! Open Cleanup! by double-clicking the icon on your desktop (or from Start > All Programs). Set the program up as follows: Click Options Move the slider button down to Custom CleanUp! Check the following: Empty Recycle Bins Delete Cookies Delete Prefetch files Cleanup! All Users Click on the “Temporary Files” tab and uncheck the box for “Scan drives for file matching” if it’s checked. Click OK, Press the CleanUp! button to start the program and DO NOT REBOOT when prompted. Note: CleanUp! deletes EVERYTHING out of your temp/temporary folders, it does not make backups. If you have any documents or programs that are saved in any Temporary Folders, please make a backup of these BEFORE running CleanUp! If you have a 64 bit Operating System do NOT run Cleanup and let me know as we will use another utility. Run AVG Anti Spyware Run AVG with it's updated definitions:(...it's important that all windows must be closed) Click Scanner Click on the Scan tab Click Complete System Scan to begin scanning. When the scan is complete click Recommended Action and change it to Quarantine Then click Apply all actions Once finished, click the Save report button, then click Save Report As and save it to your desktop. NOTE: AVG scan may require an hour. Reboot Reboot your system in Normal Mode. Online Scan Perform an online scan with Internet Explorer with Panda ActiveScan Click on located at the bottom of the page. A "pop up" window will appear. * Please ensure that your pop up blocker doesn't block it * Enter your e-mail address, country, and state & click "Free Online Scan" The download of the 8 MB Panda's ActiveX control will take place Begin the scan by selecting If it finds any malware, it will offer you a report. Please ignore any entry it finds and the offer to buy the program to remove the entry, as we will address this later. Click on then click * You needn't remain online while it's doing the scan but you have to re-connect after it has finished to see the report. * Turn off the real time scanner of any existing antivirus program while performing the online scan Logs required combofix.txt AVG Log Panda Log HijackThis Log Please also let me know how your system is performing now and if you have any specific problems. In order to provide you with the best possible help, please ensure that HijackThis logs are produced only while in Normal Mode. __________________ Iain - Defender of the Haggis and all things Scottish. I don't help by PM - post in the Forums. PC Safety & Security::PC running a bit slow?::Donate::Photographers Corner

11-04-2006, 09:38 AM	#6 (permalink)
Glaswegian Moderator/ Rangemaster TSF Academy; Analyst, Security Team; Oor Wullie; TSF Surgeon and Resident Comic Join Date: Sep 2005 Location: Glasgow Posts: 25,509 OS: Win XP Pro SP3 / Win 7 Pro My System Blog Entries: 10	Hi again Lee. That’s OK – I wasn’t really expecting you to find those entries, but I listed them just in case. Please don’t use “Quote” tags when posting logs – just a straight copy and paste is fine. P2P - I see you have P2P software (i.e. Limewire, uTorrent) installed on your machine. We are not here to pass judgment on file-sharing as a concept. However, we will warn you that engaging in this activity and having this kind of software installed on your machine will always make you more susceptible to re-infections. It may be contributing to your current situation. This page will give you further information. Registry Fix Click on the zip file attached to this post to open and extract the file Lee.reg to your desktop. Double click on the file Lee.reg to run it. Answer yes to any prompts and allow it to merge into the Registry. Reboot Reboot your system in Safe Mode. Restart the computer. The computer begins processing a set of instructions known as BIOS. After hearing your computer beep once during startup, but before the Windows icon appears, press F8 (dependent on your system this may be F5 or another key) Instead of Windows loading as normal, a menu should appear Use the arrow key to highlight Safe Mode and press Enter. File Deletions Delete the following Files indicated in RED and Folders indicated in BLUE if they still exist. C:\WINDOWS\system32\ddcyvaaj.exe C:\WINDOWS\system32\eeyueel.dll C:\WINDOWS\system32\pjnsqavm.dll C:\Program Files\ipwins Reboot Reboot your system in Normal Mode. Run Combofix Run combofix again. Online Scan Establish an internet connection & perform an online scan with Internet Explorer at Kaspersky WebScanner Next Click on Launch Kaspersky Anti-Virus Web Scanner You will be prompted to install an ActiveX component from Kaspersky, Click Yes. The program will launch and then begin downloading the latest definition files: Once the files have been downloaded click on NEXT Now click on Scan Settings In the scan settings make that the following are selected: Scan using the following Anti-Virus database: Extended Scan Options: Scan Archives Scan Mail Bases Click OK Now under select a target to scan: Select My Computer This will program will start and scan your system. The scan will take a while so be patient and let it run. Once the scan is complete it will display if your system has been infected. Now click on the Save as Text button: Save the file to your desktop. Copy and paste that information in your next post. Take note of the name(s) and location(s) of any file(s) it detects but fails to clean. * Turn off the real time scanner of any existing antivirus program while performing the online scan Logs required combofix.txt Kaspersky Log HijackThis Log Please also let me know how your system is performing now and if you have any specific problems. In order to provide you with the best possible help, please ensure that HijackThis logs are produced only while in Normal Mode. __________________ Iain - Defender of the Haggis and all things Scottish. I don't help by PM - post in the Forums. PC Safety & Security::PC running a bit slow?::Donate::Photographers Corner Last edited by Glaswegian; 01-05-2007 at 03:26 PM.

11-04-2006, 11:51 AM	#10 (permalink)
Lee2k4 Registered User Join Date: Oct 2006 Posts: 10 OS: Windows XP	Logfile of HijackThis v1.99.1 Scan saved at 18:41:33, on 04/11/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe E:\Program Files\Sygate\SPF\smc.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe E:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe e:\Program Files\Alwil Software\Avast4\aswUpdSv.exe e:\Program Files\Alwil Software\Avast4\ashServ.exe e:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe E:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe C:\WINDOWS\system32\nvsvc32.exe D:\Junk\hijackthis\glasgow.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=cache3-lang.server.ntli.net:8080: O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {46A4E9D9-B30E-452A-8157-DBBEC8573B03} - C:\Program Files\VSAdd-in\VSAdd-in.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - E:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O3 - Toolbar: &VSAdd-in - {74DD705D-6834-439C-A735-A6DBE2677452} - C:\Program Files\VSAdd-in\VSAdd-in.dll O4 - HKLM\..\Run: [SmcService] E:\PROGRA~1\Sygate\SPF\smc.exe -startgui O4 - HKLM\..\Run: [avast!] e:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [DiskeeperSystray] "E:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe" O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O8 - Extra context menu item: &ieSpell Options - res://e:\Program Files\ieSpell\iespell.dll/SPELLOPTION.HTM O8 - Extra context menu item: Check &Spelling - res://e:\Program Files\ieSpell\iespell.dll/SPELLCHECK.HTM O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra button: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - e:\Program Files\ieSpell\iespell.dll O9 - Extra 'Tools' menuitem: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - e:\Program Files\ieSpell\iespell.dll O9 - Extra button: (no name) - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - e:\Program Files\ieSpell\iespell.dll O9 - Extra 'Tools' menuitem: ieSpell Options - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - e:\Program Files\ieSpell\iespell.dll O16 - DPF: RaptisoftGameLoader - http://www.miniclip.com/hamsterball/...gameloader.cab O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/par...an_unicode.cab O16 - DPF: {85D1F3B2-2A21-11D7-97B9-0010DC2A6243} (SecureLogin class) - http://secure2.comned.com/signuptemp...ogin-devel.cab O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/actives...ree/asinst.cab O16 - DPF: {B1826A9F-4AA0-4510-BA77-9013E74E4B9B} - http://www.trendmicro.com/spyware-scan/as4web.cab O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - e:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - Unknown owner - e:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - e:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - e:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - e:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: Diskeeper - Diskeeper Corporation - E:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - E:\Program Files\Sygate\SPF\smc.exe I apologize for posting 3 seperate replies but it would not let me fit all the text in one. As for the system running better, yes boot up times are now much quicker, thanks again for your help. Last edited by Lee2k4; 11-04-2006 at 11:53 AM.

11-04-2006, 04:46 PM	#11 (permalink)
Glaswegian Moderator/ Rangemaster TSF Academy; Analyst, Security Team; Oor Wullie; TSF Surgeon and Resident Comic Join Date: Sep 2005 Location: Glasgow Posts: 25,509 OS: Win XP Pro SP3 / Win 7 Pro My System Blog Entries: 10	Hi Lee Some files will be there but some won’t – better for me to list them just in case. And don’t worry about the 3 posts – you did just fine. One more thing to get rid of. Reboot Reboot your system in Safe Mode. Restart the computer. The computer begins processing a set of instructions known as BIOS. After hearing your computer beep once during startup, but before the Windows icon appears, press F8 (dependent on your system this may be F5 or another key) Instead of Windows loading as normal, a menu should appear Use the arrow key to highlight Safe Mode and press Enter. Uninstall Programmes Click > Start > Control Panel > Add / Remove Programs and uninstall the following programs (if present): VS Add-in or VSToolbar HijackThis Entries Open Hijack This and click on Scan. Check the following entries (if they still exist) (make sure you do not miss any) O2 - BHO: (no name) - {46A4E9D9-B30E-452A-8157-DBBEC8573B03} - C:\Program Files\VSAdd-in\VSAdd-in.dll O3 - Toolbar: &VSAdd-in - {74DD705D-6834-439C-A735-A6DBE2677452} - C:\Program Files\VSAdd-in\VSAdd-in.dll Please remember to close all other windows, including browsers then click Fix checked. File Deletions Delete the following Folder indicated in BLUE if it still exists. C:\Program Files\VSAdd-in Reboot Reboot your system in Normal Mode. Choose any one of the folloing online scanners and post back with any log it produces. Trend Micro - Free online virus Scan <- - you can use Firefox for this scanner eTrust Antivirus Web Scanner http://www.bitdefender.com/scan/license.php McAfee – Computer Anti-Virus Software and Internet Security For Your PC Symantec Security Check Also post a fresh HijackThis Log. __________________ Iain - Defender of the Haggis and all things Scottish. I don't help by PM - post in the Forums. PC Safety & Security::PC running a bit slow?::Donate::Photographers Corner

11-02-2006, 04:18 PM	#3 (permalink)
Lee2k4 Registered User Join Date: Oct 2006 Posts: 10 OS: Windows XP	Thanks for getting back to me, as requested log file from the HJT program renamed to "glasglow.exe" Logfile of HijackThis v1.99.1 Scan saved at 23:17:29, on 02/11/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe E:\Program Files\Sygate\SPF\smc.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe e:\Program Files\Alwil Software\Avast4\aswUpdSv.exe e:\Program Files\Alwil Software\Avast4\ashServ.exe E:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe e:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe E:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe C:\WINDOWS\system32\nvsvc32.exe e:\Program Files\SlimBrowser\sbrowser.exe C:\Program Files\Outlook Express\msimn.exe D:\Junk\hijackthis\glasgow.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=cache3-lang.server.ntli.net:8080: R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {46A4E9D9-B30E-452A-8157-DBBEC8573B03} - C:\Program Files\VSAdd-in\VSAdd-in.dll O2 - BHO: (no name) - {4C904FA9-0EAF-84A3-5FC3-02F39C81E65B} - C:\WINDOWS\system32\socgkqf.dll O2 - BHO: (no name) - {4D4BE91C-40F4-4F12-9B60-655504637ADF} - C:\WINDOWS\system32\vtutu.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - E:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O2 - BHO: PrintViewBHO Class - {D4E0C464-30CE-4075-9A10-71FD106C2847} - C:\PROGRA~1\PRINTV~1\PRINTH~1.DLL (file missing) O2 - BHO: (no name) - {F18F04B0-9CF1-4b93-B004-77A288BEE28B} - C:\WINDOWS\system32\bvsjtoru.dll O3 - Toolbar: &VSAdd-in - {74DD705D-6834-439C-A735-A6DBE2677452} - C:\Program Files\VSAdd-in\VSAdd-in.dll O4 - HKLM\..\Run: [SmcService] E:\PROGRA~1\Sygate\SPF\smc.exe -startgui O4 - HKLM\..\Run: [avast!] e:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [DiskeeperSystray] "E:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe" O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O8 - Extra context menu item: &ieSpell Options - res://e:\Program Files\ieSpell\iespell.dll/SPELLOPTION.HTM O8 - Extra context menu item: Check &Spelling - res://e:\Program Files\ieSpell\iespell.dll/SPELLCHECK.HTM O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra button: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - e:\Program Files\ieSpell\iespell.dll O9 - Extra 'Tools' menuitem: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - e:\Program Files\ieSpell\iespell.dll O9 - Extra button: (no name) - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - e:\Program Files\ieSpell\iespell.dll O9 - Extra 'Tools' menuitem: ieSpell Options - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - e:\Program Files\ieSpell\iespell.dll O16 - DPF: RaptisoftGameLoader - http://www.miniclip.com/hamsterball/...gameloader.cab O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/par...an_unicode.cab O16 - DPF: {85D1F3B2-2A21-11D7-97B9-0010DC2A6243} (SecureLogin class) - http://secure2.comned.com/signuptemp...ogin-devel.cab O16 - DPF: {B1826A9F-4AA0-4510-BA77-9013E74E4B9B} - http://www.trendmicro.com/spyware-scan/as4web.cab O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O20 - Winlogon Notify: vtutu - C:\WINDOWS\system32\vtutu.dll O20 - Winlogon Notify: winrge32 - C:\WINDOWS\SYSTEM32\winrge32.dll O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - e:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - Unknown owner - e:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - e:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - e:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - e:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: Diskeeper - Diskeeper Corporation - E:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - E:\Program Files\Sygate\SPF\smc.exe

11-04-2006, 11:48 AM	#7 (permalink)
Lee2k4 Registered User Join Date: Oct 2006 Posts: 10 OS: Windows XP	Hello again Glaswegian Thanks for the tips on P2P, I have now removed the P2P software and have gone ahead and followed your instructions All files were succesfuly deleted apart from C:\Program Files\ipwins because it was not there.

11-04-2006, 11:49 AM	#8 (permalink)
Lee2k4 Registered User Join Date: Oct 2006 Posts: 10 OS: Windows XP	Combofix Log Administrator - 06-11-04 17:44:56.01 Service Pack 2 ComboFix 06.10.19 - Running from: "C:\Documents and Settings\Administrator\Desktop" ((((((((((((((((((((((((((((((( Files Created from 2006-10-04 to 2006-11-04 )))))))))))))))))))))))))))))))))) 2006-10-19 16:21 3,968 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys 2006-10-17 21:35 76,560 --a------ C:\WINDOWS\system32\drivers\tmcomm.sys 2006-10-13 01:01 34,308 --a------ C:\WINDOWS\system32\BASSMOD.dll 2006-10-11 18:40 6,144 --a------ C:\WINDOWS\system32\ff_vfw.dll 2006-10-10 11:27 208,896 --a------ C:\WINDOWS\system32\nvudisp.exe 2006-10-10 11:26 208,896 --a------ C:\WINDOWS\system32\NVUNINST.EXE (((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))) 2006-11-04 17:31 -------- d-------- C:\Documents and Settings\Administrator\Application Data\SlimBrowser 2006-11-04 00:25 -------- d-------- C:\Program Files\VSAdd-in 2006-11-03 22:40 -------- d-------- C:\Program Files\Common Files 2006-11-03 20:08 -------- d-------- C:\Documents and Settings\Administrator\Application Data\uTorrent 2006-11-01 22:53 -------- d-------- C:\Program Files\Electronic Arts 2006-10-31 20:50 -------- d--h----- C:\Program Files\InstallShield Installation Information 2006-10-31 20:50 -------- d-------- C:\Program Files\Electronic Arts(2) 2006-10-25 22:44 -------- d-------- C:\Documents and Settings\Administrator\Application Data\Skype 2006-10-22 00:58 -------- d-------- C:\Program Files\Trend Micro 2006-10-21 21:52 -------- d-------- C:\Program Files\Messenger 2006-10-21 15:41 -------- d-------- C:\Documents and Settings\Administrator\Application Data\Mozilla 2006-10-17 22:29 -------- d-------- C:\Documents and Settings\Administrator\Application Data\Nokia Multimedia Player 2006-10-15 21:54 -------- d-------- C:\Documents and Settings\Administrator\Application Data\Xfire 2006-10-14 15:21 223128 --a------ C:\WINDOWS\system32\drivers\vaxscsi.sys 2006-10-14 15:18 611064 --a------ C:\WINDOWS\system32\drivers\sptd.sys 2006-10-13 19:11 -------- d-------- C:\Program Files\Yahoo! 2006-10-13 01:30 -------- d-------- C:\Documents and Settings\Administrator\Application Data\Lavasoft 2006-10-13 00:22 40 ---hs---- C:\Documents and Settings\Administrator\Application Data\.zreglib 2006-10-11 23:27 -------- d-------- C:\Program Files\MSN Messenger 2006-10-10 13:10 -------- d-------- C:\Program Files\DivX 2006-10-09 00:12 -------- d-------- C:\Program Files\Nokia 2006-10-09 00:12 -------- d-------- C:\Program Files\Common Files\Nokia 2006-10-08 19:17 -------- d-------- C:\Documents and Settings\Administrator\Application Data\LimeWire 2006-09-25 15:45 666240 --a------ C:\WINDOWS\system32\aswBoot.exe 2006-09-25 15:40 87424 --a------ C:\WINDOWS\system32\drivers\aswmon2.sys 2006-09-25 15:40 85952 --a------ C:\WINDOWS\system32\drivers\aswmon.sys 2006-09-25 15:39 36176 --a------ C:\WINDOWS\system32\drivers\aswTdi.sys 2006-09-25 15:39 16352 --a------ C:\WINDOWS\system32\drivers\aswRdr.sys 2006-09-25 15:37 90112 --a------ C:\WINDOWS\system32\AVASTSS.scr 2006-09-25 15:37 24560 --a------ C:\WINDOWS\system32\drivers\aavmker4.sys 2006-09-21 14:10 -------- d-------- C:\Program Files\The All-Seeing Eye 2006-09-16 00:58 -------- d---s---- C:\Documents and Settings\Administrator\Application Data\Microsoft 2006-09-16 00:17 -------- dr-h----- C:\Documents and Settings\Administrator\Application Data\SecuROM 2006-08-11 20:45 888832 --a------ C:\WINDOWS\system32\nvmobls.dll 2006-08-11 20:45 581632 --a------ C:\WINDOWS\system32\nvhwvid.dll 2006-08-11 20:45 5611520 --a------ C:\WINDOWS\system32\nvdisps.dll 2006-08-11 20:45 5251072 --a------ C:\WINDOWS\system32\nvdispsr.dll 2006-08-11 20:45 458752 --a------ C:\WINDOWS\system32\nvmccssr.dll 2006-08-11 20:45 45056 --a------ C:\WINDOWS\system32\nvmccsrs.dll 2006-08-11 20:45 3039232 --a------ C:\WINDOWS\system32\nvgames.dll 2006-08-11 20:45 2953216 --a------ C:\WINDOWS\system32\nvvitvsr.dll 2006-08-11 20:45 2928640 --a------ C:\WINDOWS\system32\nvgamesr.dll 2006-08-11 20:45 2904064 --a------ C:\WINDOWS\system32\nvvitvs.dll 2006-08-11 20:45 2859008 --a------ C:\WINDOWS\system32\nvmoblsr.dll 2006-08-11 20:45 266240 --a------ C:\WINDOWS\system32\nvrsesm.dll 2006-08-11 20:45 258048 --a------ C:\WINDOWS\system32\nvrsko.dll 2006-08-11 20:45 249856 --a------ C:\WINDOWS\system32\nvrssl.dll 2006-08-11 20:45 249856 --a------ C:\WINDOWS\system32\nvrssk.dll 2006-08-11 20:45 249856 --a------ C:\WINDOWS\system32\nvrshu.dll 2006-08-11 20:45 229376 --a------ C:\WINDOWS\system32\nvmccs.dll 2006-08-11 20:45 188416 --a------ C:\WINDOWS\system32\nvmccss.dll 2006-08-11 20:45 1732608 --a------ C:\WINDOWS\system32\nvwssr.dll 2006-08-11 20:45 1236992 --a------ C:\WINDOWS\system32\nvwss.dll 2006-08-11 20:44 323584 --a------ C:\WINDOWS\system32\nvrshe.dll 2006-08-11 20:44 323584 --a------ C:\WINDOWS\system32\nvrsar.dll 2006-08-11 20:44 274432 --a------ C:\WINDOWS\system32\nvrses.dll 2006-08-11 20:44 274432 --a------ C:\WINDOWS\system32\nvrsel.dll 2006-08-11 20:44 266240 --a------ C:\WINDOWS\system32\nvrspt.dll 2006-08-11 20:44 262144 --a------ C:\WINDOWS\system32\nvrsja.dll 2006-08-11 20:44 249856 --a------ C:\WINDOWS\system32\nvrstr.dll 2006-08-11 20:44 249856 --a------ C:\WINDOWS\system32\nvrspl.dll 2006-08-11 20:44 249856 --a------ C:\WINDOWS\system32\nvrsno.dll 2006-08-11 20:44 241664 --a------ C:\WINDOWS\system32\nvrscs.dll 2006-08-11 20:44 147456 --a------ C:\WINDOWS\system32\nvcolor.exe 2006-08-11 20:43 86016 --a------ C:\WINDOWS\system32\nvmctray.dll 2006-08-11 20:43 81920 --a------ C:\WINDOWS\system32\nvwddi.dll 2006-08-11 20:43 794624 --a------ C:\WINDOWS\system32\nvcplui.exe 2006-08-11 20:43 7630848 --a------ C:\WINDOWS\system32\nvcpl.dll 2006-08-11 20:43 466944 --a------ C:\WINDOWS\system32\nvshell.dll 2006-08-11 20:43 442368 --a------ C:\WINDOWS\system32\nvappbar.exe 2006-08-11 20:43 425984 --a------ C:\WINDOWS\system32\keystone.exe 2006-08-11 20:43 335872 --a------ C:\WINDOWS\system32\nvwrses.dll 2006-08-11 20:43 335872 --a------ C:\WINDOWS\system32\nvwrsel.dll 2006-08-11 20:43 327680 --a------ C:\WINDOWS\system32\nvwrsfr.dll 2006-08-11 20:43 327680 --a------ C:\WINDOWS\system32\nvwrsesm.dll 2006-08-11 20:43 323584 --a------ C:\WINDOWS\system32\nvwrspt.dll 2006-08-11 20:43 323584 --a------ C:\WINDOWS\system32\nvwrsit.dll 2006-08-11 20:43 319488 --a------ C:\WINDOWS\system32\nvwrsptb.dll 2006-08-11 20:43 319488 --a------ C:\WINDOWS\system32\nvwrsnl.dll 2006-08-11 20:43 315392 --a------ C:\WINDOWS\system32\nvwrsru.dll 2006-08-11 20:43 315392 --a------ C:\WINDOWS\system32\nvwrshu.dll 2006-08-11 20:43 311296 --a------ C:\WINDOWS\system32\nvwrsde.dll 2006-08-11 20:43 311296 --a------ C:\WINDOWS\system32\nvexpbar.dll 2006-08-11 20:43 303104 --a------ C:\WINDOWS\system32\nvwrstr.dll 2006-08-11 20:43 303104 --a------ C:\WINDOWS\system32\nvwrssl.dll 2006-08-11 20:43 303104 --a------ C:\WINDOWS\system32\nvwrsfi.dll 2006-08-11 20:43 299008 --a------ C:\WINDOWS\system32\nvwrssk.dll 2006-08-11 20:43 299008 --a------ C:\WINDOWS\system32\nvwrsno.dll 2006-08-11 20:43 294912 --a------ C:\WINDOWS\system32\nvwrssv.dll 2006-08-11 20:43 294912 --a------ C:\WINDOWS\system32\nvwrspl.dll 2006-08-11 20:43 294912 --a------ C:\WINDOWS\system32\nvwrsda.dll 2006-08-11 20:43 286720 --a------ C:\WINDOWS\system32\nvwrseng.dll 2006-08-11 20:43 286720 --a------ C:\WINDOWS\system32\nvwrscs.dll 2006-08-11 20:43 286720 --a------ C:\WINDOWS\system32\nvnt4cpl.dll 2006-08-11 20:43 282624 --a------ C:\WINDOWS\system32\nvwrsar.dll 2006-08-11 20:43 278528 --a------ C:\WINDOWS\system32\nvwrshe.dll 2006-08-11 20:43 278528 --a------ C:\WINDOWS\system32\nvrsfr.dll 2006-08-11 20:43 274432 --a------ C:\WINDOWS\system32\nvrsit.dll 2006-08-11 20:43 270336 --a------ C:\WINDOWS\system32\nvrsde.dll 2006-08-11 20:43 266240 --a------ C:\WINDOWS\system32\nvrsnl.dll 2006-08-11 20:43 262144 --a------ C:\WINDOWS\system32\nvrsru.dll 2006-08-11 20:43 262144 --a------ C:\WINDOWS\system32\nvrsptb.dll 2006-08-11 20:43 245760 --a------ C:\WINDOWS\system32\nvrssv.dll 2006-08-11 20:43 245760 --a------ C:\WINDOWS\system32\nvrsda.dll 2006-08-11 20:43 241664 --a------ C:\WINDOWS\system32\nvrsfi.dll 2006-08-11 20:43 241664 --a------ C:\WINDOWS\system32\nvrseng.dll 2006-08-11 20:43 221184 --a------ C:\WINDOWS\system32\nvrszhc.dll 2006-08-11 20:43 212992 --a------ C:\WINDOWS\system32\nvwrsja.dll 2006-08-11 20:43 196608 --a------ C:\WINDOWS\system32\nvwrsko.dll 2006-08-11 20:43 196608 --a------ C:\WINDOWS\system32\nvapi.dll 2006-08-11 20:43 167936 --a------ C:\WINDOWS\system32\nvwrszht.dll 2006-08-11 20:43 1662976 --a------ C:\WINDOWS\system32\nvwdmcpl.dll 2006-08-11 20:43 163840 --a------ C:\WINDOWS\system32\nvwrszhc.dll 2006-08-11 20:43 1519616 --a------ C:\WINDOWS\system32\nwiz.exe 2006-08-11 20:43 1470464 --a------ C:\WINDOWS\system32\nview.dll 2006-08-11 20:43 1339392 --a------ C:\WINDOWS\system32\nvdspsch.exe 2006-08-11 20:43 122880 --a------ C:\WINDOWS\system32\nvrszht.dll 2006-08-11 20:43 1019904 --a------ C:\WINDOWS\system32\nvwimg.dll 2006-08-11 20:43 1011712 --a------ C:\WINDOWS\system32\nvcpluir.dll 2006-08-11 20:42 5636096 --a------ C:\WINDOWS\system32\nvoglnt.dll 2006-08-11 20:42 4496128 --a------ C:\WINDOWS\system32\nv4_disp.dll 2006-08-11 20:42 35840 --a------ C:\WINDOWS\system32\nvcodins.dll 2006-08-11 20:42 35840 --a------ C:\WINDOWS\system32\nvcod.dll 2006-08-11 20:42 155715 --a------ C:\WINDOWS\system32\nvsvc32.exe (((((((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))) Note empty entries are not shown [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run] "SmcService"="E:\\PROGRA~1\\Sygate\\SPF\\smc.exe -startgui" "avast!"="e:\\PROGRA~1\\ALWILS~1\\Avast4\\ashDisp.exe" "NeroCheck"="C:\\WINDOWS\\system32\\NeroCheck.exe" "NvMediaCenter"="RunDLL32.exe NvMCTray.dll,NvTaskbarInit" "DiskeeperSystray"="\"E:\\Program Files\\Diskeeper Corporation\\Diskeeper\\DkIcon.exe\"" "NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvCpl.dll,NvStartup" [HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components] "DeskHtmlVersion"=dword:00000110 "DeskHtmlMinorVersion"=dword:00000005 "Settings"=dword:00000001 "GeneralFlags"=dword:00000001 [HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\0] "Source"="About:Home" "SubscribedURL"="About:Home" "FriendlyName"="My Current Home Page" "Flags"=dword:00000002 "Position"=hex:2c,00,00,00,cc,00,00,00,00,00,00,00,34,03,00,00,e2,02,00,00,00,\ 00,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,00 "CurrentState"=hex:04,00,00,40 "OriginalStateInfo"=hex:18,00,00,00,ff,ff,00,00,ff,ff,00,00,ff,ff,ff,ff,ff,ff,\ ff,ff,04,00,00,00 "RestoredStateInfo"=hex:18,00,00,00,f2,01,00,00,23,00,00,00,7c,00,00,00,72,00,\ 00,00,01,00,00,00 [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler] "{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Browseui preloader" "{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Component Categories cache daemon" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks] "{AEB6717E-7E19-11d0-97EE-00C04FD91972}"="" "{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="AVG Anti-Spyware 7.5" [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer] "NoDriveTypeAutoRun"=dword:00000095 "NoLowDiskSpaceChecks"=dword:00000001 "NoRecentDocsMenu"=dword:00000001 [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\Run] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "dontdisplaylastusername"=dword:00000000 "legalnoticecaption"="" "legalnoticetext"="" "shutdownwithoutlogon"=dword:00000001 "undockwithoutlogon"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer] "NoCDBurning"=dword:00000000 [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer\run] [HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer] "NoDriveTypeAutoRun"=dword:00000091 [HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\policies\explorer] "NoDriveTypeAutoRun"=dword:00000091 [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload] "PostBootReminder"="{7849596a-48ea-486e-8937-a2a3009f31a9}" "CDBurn"="{fbeb8a05-beee-4442-804e-409d6c4515e9}" "WebCheck"="{E6FB5E20-DE35-11CF-9C87-00AA005127ED}" "SysTray"="{35CEC8A3-2BE6-11D2-8773-92E220524153}" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Administrator^Start Menu^Programs^Startup^LimeWire On Startup.lnk] "path"="C:\\Documents and Settings\\Administrator\\Start Menu\\Programs\\Startup\\LimeWire On Startup.lnk" "backup"="C:\\WINDOWS\\pss\\LimeWire On Startup.lnkStartup" "location"="Startup" "command"="E:\\PROGRA~1\\LimeWire\\LimeWire.exe -startup" "item"="LimeWire On Startup" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Administrator^Start Menu^Programs^Startup^Xfire.lnk] "path"="C:\\Documents and Settings\\Administrator\\Start Menu\\Programs\\Startup\\Xfire.lnk" "backup"="C:\\WINDOWS\\pss\\Xfire.lnkStartup" "location"="Startup" "command"="E:\\PROGRA~1\\Xfire\\Xfire.exe " "item"="Xfire" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\!AVG Anti-Spyware] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="avgas" "hkey"="HKLM" "command"="\"e:\\Program Files\\Grisoft\\AVG Anti-Spyware 7.5\\avgas.exe\" /minimized" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AnyDVD] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="AnyDVD" "hkey"="HKCU" "command"="E:\\Program Files\\SlySoft\\AnyDVD\\AnyDVD.exe" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Cmaudio] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="RunDll32 cmicnfg" "hkey"="HKLM" "command"="RunDll32 cmicnfg.cpl,CMICtrlWnd" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cprocsvc] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="cproc" "hkey"="HKCU" "command"="C:\\WINDOWS\\system32\\crunner\\cproc.exe" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="daemon" "hkey"="HKLM" "command"="\"e:\\Program Files\\DAEMON Tools\\daemon.exe\" -lang 1033" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EA Core] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="Core" "hkey"="HKCU" "command"="C:\\Program Files\\Electronic Arts\\EA Downloader\\Core.exe -silent" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="iTunesHelper" "hkey"="HKLM" "command"="\"E:\\Program Files\\iTunes\\iTunesHelper.exe\"" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="msnmsgr" "hkey"="HKCU" "command"="\"C:\\Program Files\\MSN Messenger\\msnmsgr.exe\" /background" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="NvCpl" "hkey"="HKLM" "command"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvCpl.dll,NvStartup" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="nwiz" "hkey"="HKLM" "command"="nwiz.exe /install" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCSuiteTrayApplication] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="LAUNCH~1" "hkey"="HKLM" "command"="C:\\PROGRA~1\\Nokia\\NOKIAP~1\\LAUNCH~1.EXE -startup" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PcSync] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="PcSync2" "hkey"="HKCU" "command"="C:\\Program Files\\Nokia\\Nokia PC Suite 6\\PcSync2.exe /NoDialog" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PVModule] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="pvmodule" "hkey"="HKLM" "command"="C:\\PROGRA~1\\PRINTV~1\\pvmodule.exe" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="Skype" "hkey"="HKCU" "command"="\"E:\\Program Files\\Skype\\Phone\\Skype.exe\" /nosplash /minimized" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="steam" "hkey"="HKCU" "command"="\"e:\\program files\\steam\\steam.ex\" -silent" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sunkist2k] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="shwicon2k" "hkey"="HKLM" "command"="C:\\Program Files\\Multimedia Card Reader\\shwicon2k.exe" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="winampa" "hkey"="HKLM" "command"="e:\\Program Files\\Winamp\\winampa.exe" "inimapping"="0" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll" Completion time: 06-11-04 17:45:27.20 C:\ComboFix.txt ... 06-11-04 17:45 C:\ComboFix2.txt ... 06-11-04 17:35

11-04-2006, 05:52 PM	#12 (permalink)
Lee2k4 Registered User Join Date: Oct 2006 Posts: 10 OS: Windows XP	I have removed VS Add-in from the Add/remove option in control panel and I have removed C:\Program Files\VSAdd-in I could not find any of the hijackthis entries you listed :( The online scanners you listed, well I tried Trend and Mcafee but both offered me no log file in txt format so I find it difficult to post the report. Last edited by Lee2k4; 11-04-2006 at 05:57 PM.

11-05-2006, 04:44 AM	#13 (permalink)
Glaswegian Moderator/ Rangemaster TSF Academy; Analyst, Security Team; Oor Wullie; TSF Surgeon and Resident Comic Join Date: Sep 2005 Location: Glasgow Posts: 25,509 OS: Win XP Pro SP3 / Win 7 Pro My System Blog Entries: 10	That's fine Lee. Sometimes an uninstall leaves an odd file or folder behind, but in your case it seems to have uninstalled everything correctly. If there was no report from the scanners then there was nothing to find. Please post a fresh HijackThis Log - that should us almost finished. __________________ Iain - Defender of the Haggis and all things Scottish. I don't help by PM - post in the Forums. PC Safety & Security::PC running a bit slow?::Donate::Photographers Corner

11-05-2006, 07:03 AM	#14 (permalink)
Lee2k4 Registered User Join Date: Oct 2006 Posts: 10 OS: Windows XP	Hopefully this is the last of the infections, I can't thank you enough, you have helped me a great deal, PC starts up much faster now, anyway here is the log, and THANK YOU! Logfile of HijackThis v1.99.1 Scan saved at 14:00:01, on 05/11/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe E:\Program Files\Sygate\SPF\smc.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe e:\Program Files\Alwil Software\Avast4\aswUpdSv.exe E:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe e:\Program Files\Alwil Software\Avast4\ashServ.exe e:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe E:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe C:\WINDOWS\system32\nvsvc32.exe e:\Program Files\Alwil Software\Avast4\ashMaiSv.exe e:\Program Files\Alwil Software\Avast4\ashWebSv.exe D:\Junk\hijackthis\glasgow.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=cache3-lang.server.ntli.net:8080: O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - E:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O4 - HKLM\..\Run: [SmcService] E:\PROGRA~1\Sygate\SPF\smc.exe -startgui O4 - HKLM\..\Run: [avast!] e:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [DiskeeperSystray] "E:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe" O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O8 - Extra context menu item: &ieSpell Options - res://e:\Program Files\ieSpell\iespell.dll/SPELLOPTION.HTM O8 - Extra context menu item: Check &Spelling - res://e:\Program Files\ieSpell\iespell.dll/SPELLCHECK.HTM O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra button: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - e:\Program Files\ieSpell\iespell.dll O9 - Extra 'Tools' menuitem: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - e:\Program Files\ieSpell\iespell.dll O9 - Extra button: (no name) - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - e:\Program Files\ieSpell\iespell.dll O9 - Extra 'Tools' menuitem: ieSpell Options - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - e:\Program Files\ieSpell\iespell.dll O16 - DPF: RaptisoftGameLoader - http://www.miniclip.com/hamsterball/...gameloader.cab O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/par...an_unicode.cab O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/securityadvisor/v...fo/webscan.cab O16 - DPF: {85D1F3B2-2A21-11D7-97B9-0010DC2A6243} (SecureLogin class) - http://secure2.comned.com/signuptemp...ogin-devel.cab O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/actives...ree/asinst.cab O16 - DPF: {B1826A9F-4AA0-4510-BA77-9013E74E4B9B} - http://www.trendmicro.com/spyware-scan/as4web.cab O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/is...86/mcfscan.cab O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - e:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - Unknown owner - e:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - e:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - e:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - e:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: Diskeeper - Diskeeper Corporation - E:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - E:\Program Files\Sygate\SPF\smc.exe

11-05-2006, 08:06 AM	#15 (permalink)
Glaswegian Moderator/ Rangemaster TSF Academy; Analyst, Security Team; Oor Wullie; TSF Surgeon and Resident Comic Join Date: Sep 2005 Location: Glasgow Posts: 25,509 OS: Win XP Pro SP3 / Win 7 Pro My System Blog Entries: 10	Hi again Well done - your log is clean. Any more problems? If not we’ll just tidy up and I’ll let you go, along with my recommendations for staying safe and secure. You can go ahead and delete any special tools we used (SmitRem, SmitfraudFix, ComboFix, etc). They won't serve a future purpose and are replaced with updated versions frequently, so the copies you have are probably already out of date and there is therefore no need to keep them. Reset Hidden/System Files To reset your hidden and system files: Click *Start.* Open *My Computer.* Select the *Tools menu* and click *Folder Options.* Select the *View* tab. Deselect the *Show hidden files and folders* option. Select the *Hide file extensions for known types* option. Select the *Hide protected operating system files* option. Click *Yes* to confirm. Click *OK.* System Restore To turn off System Restore click Start > Right Click My Computer > Properties. Click the System Restore tab and Check "Turn off System Restore" or "Turn off System Restore on all drives" Click Apply. When turning off System Restore, the existing restore points will be deleted. Click Yes to do this then Click OK. To turn on System Restore by Clicking Start. Right-click My Computer, and then click Properties. Click the System Restore tab. Uncheck "Turn off System Restore" or "Turn off System Restore on all drives." Click Apply, and then OK. This will create a new Restore Point. Now that you are clean, to help protect your computer in the future I recommend that you get the following free programs: Spyware Blaster to help prevent spyware from installing in the first place. Spyware Guard to catch and block spyware before it can execute. Spybot - Search & Destroy with its TeaTimer option. This will provide realtime spyware & hijacker protection on your computer alongside your virus protection. You should also scan your computer with the program on a regular basis just as you would an antivirus software. A tutorial on installing & using this product can be found here. Ad-aware Download and install Ad-Aware. You should use this program to scan your computer on a regular basis just as you would an antivirus software in conjunction with Spybot. A tutorial on installing & using this product can be found here. IE-SPYAD IE-Spyad places more than 4000 dubious websites and domains in the IE Restricted list. This severely impairs attempts to infect your system. It basically prevents any downloads (Cookies etc) from the sites listed, although you will still be able to connect to the sites. A tutorial on installing this product can be found here. SnoopFree SnoopFree is a real time monitor that notifies you when a programme wants to record your keystrokes or read your screen. Note that SnoopFree is only for XP systems. MVPS Hosts File The MVPS Hosts file replaces your current HOSTS file with one that will restrict known ad sites from serving you unsolicited advertisements. Basically, this prevents your computer from connecting to those sites by redirecting them to 127.0.0.1 which is the IP of your local computer. Note that if you use a company provided HOSTS file you should not use the MVPS HOSTS file. Alternate Browsers Try the following free alternate browsers rather than Internet Explorer Firefox Opera Maxthon Firewalls A good firewall will monitor incoming and outgoing traffic. NOTE: Microsoft's Firewall does not monitor outgoing traffic. If you do not have a firewall, here are 3 free ones available for personal use: Sygate Personal Firewall ZoneAlarm Tiny Personal Firewall Anti Virus Software It is very important that you have anti-virus software running on your machine. This alone can save you a lot of trouble with malware in the future. See this link for a listing of some online antivirus scanners: Anti-Spyware Tutorial Here are three very good free Antivirus products which are available: BitDefender Free Avast! AVG It is imperative that you update your Antivirus software at least once a week (Even more if you wish). If you do not update your antivirus software then it will not be able to catch any of the new variants that may come out. Other Protection Winpatrol - Download and install the free version of Winpatrol. A tutorial for this product is located here: Using Winpatrol to protect your computer. In light of your recent troubles, I'm sure you'll like to avoid any future infections. Please take a look at these well written articles PC Safety & Security - What Do I Need?. Making Internet Explorer Safer. Keep clean and safe and enjoy your computing! Please respond to this thread one more time so we can mark this thread as resolved. __________________ Iain - Defender of the Haggis and all things Scottish. I don't help by PM - post in the Forums. PC Safety & Security::PC running a bit slow?::Donate::Photographers Corner