|
|
|
|
|||||
|
|
|
|
|
|
|||
| Welcome
to Tech Support Forum home to more then 136,000 problems solved. Issues
have included: Spyware, Malware, Virus Issues, Windows, Microsoft,
Linux, Networking, Security, Hardware, and Gaming Getting your
problem solved is as easy as: 1. Registering for a free account 2. Asking your question 3. Receiving an answer Registered members: * See fewer ads. * And much more..
|
| Want to know how to post a question? click here | Having problems with spyware and pop-ups? First Steps |
|
|||||||
| Resolved HJT Threads Resolved spyware and popup issues. |
|
|
LinkBack | Thread Tools |
10-01-2007, 05:51 PM
|
#1 (permalink) |
|
Registered User
Join Date: Oct 2007
Posts: 9
OS: Win Xp SP2
|
Holy WOW!! Nothing gets rid of this ad/spyware!
The problem is I have adware/hijacker that redirects every single search result on any search page I can find, replaces it with its much more pornagraphic (sometimes not) redirections.
To resolve the problem I have run the most current version of adaware (2007)... which crashed three times (it is far to buggy for me to use again for a while) before finally removing many things. I ran it again and it crashed again, I gave up. Problem was still there. I tried S&D... no fix there either, I tried SuperAntiSpyware which is actually the best I have found for free, still no fix. I see nothing odd in hijackthisv2 logs (i'm sure you'll see I did do some "repairs") I have been trying to get this problem resolved for 16+ hours. It has taken me 3 hours to run the online scanner required (128 MB). AND I am told in step 5 those logs ARE NOT asked for on the DSS logs are... GRRR So here are the required logs, and yes this pisses me off... Deckard's System Scanner v20070905.67 Run by BJ on 2007-10-01 19:12:37 Computer is in Normal Mode. -------------------------------------------------------------------------------- -- System Restore -------------------------------------------------------------- Successfully created a Deckard's System Scanner Restore Point. -- Last 5 Restore Point(s) -- 90: 2007-10-01 23:13:08 UTC - RP372 - Deckard's System Scanner Restore Point 89: 2007-10-01 18:44:50 UTC - RP371 - Removed Ad-Aware 2007 88: 2007-10-01 15:44:35 UTC - RP370 - Installed SUPERAntiSpyware Free Edition 87: 2007-09-30 16:54:38 UTC - RP369 - Installed Ad-Aware 2007 86: 2007-09-29 22:23:45 UTC - RP368 - System Checkpoint -- First Restore Point -- 1: 2007-07-04 07:48:29 UTC - RP283 - System Checkpoint Backed up registry hives. Performed disk cleanup. Percentage of Memory in Use: 82% (more than 75%). Total Physical Memory: 128 MiB (512 MiB recommended). -- HijackThis Clone ------------------------------------------------------------ Emulating logfile of HijackThis v1.99.1 Scan saved at 2007-10-01 19:21:45 Platform: Windows XP Service Pack 2 (5.01.2600) MSIE: Internet Explorer (6.00.2900.2180) Running processes: C:\WINDOWS\system32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Grisoft\AVG7\avgamsvr.exe C:\Program Files\Grisoft\AVG7\avgupsvc.exe C:\Program Files\Grisoft\AVG7\avgemc.exe C:\WINDOWS\explorer.exe C:\Program Files\Grisoft\AVG7\avgcc.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\WINDOWS\system32\devldr32.exe C:\Documents and Settings\BJ\Desktop\dss.exe C:\WINDOWS\system32\svchost.exe O4 - HKEY_LOCAL_MACHINE\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} () - http://download.microsoft.com/downlo...22/wmv9VCM.CAB O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsu...?1149976959335 O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/actives...ree/asinst.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.macromedia.com/pub...sh/swflash.cab O18 - Protocol: lid - {5C135180-9973-46D9-ABF4-148267CBB8BF} - C:\WINDOWS\system32\msvidctl.dll O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\Program Files\Grisoft\AVG7\avgamsvr.exe O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\Program Files\Grisoft\AVG7\avgupsvc.exe O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\Program Files\Grisoft\AVG7\avgemc.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: iPod Service - Unknown owner - "C:\Program Files\iPod\bin\iPodService.exe" O23 - Service: MySQL - Unknown owner - C:\mysql\bin\mysqld MySQL -- HijackThis Fixed Entries (C:\Documents and Settings\BJ\Desktop\backups\) ---- backup-20071001-153728-448 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222 backup-20071001-153728-668 O17 - HKLM\System\CCS\Services\Tcpip\..\{61C0A815-FF02-4A96-80D1-FB75ED215556}: NameServer = 85.255.116.67,85.255.112.149 backup-20071001-153728-718 O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll backup-20071001-153728-813 O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe -- File Associations ----------------------------------------------------------- All associations okay. -- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------- R1 SASDIFSV - c:\program files\superantispyware\sasdifsv.sys R1 SASKUTIL - c:\program files\superantispyware\saskutil.sys S3 RT61 (Linksys Wireless-G PCI Adapter Driver(RT61)) - c:\windows\system32\drivers\rt61.sys <Not Verified; Ralink Technology Inc.; Ralink 802.11 Wireless Adapters> S3 SASENUM - c:\program files\superantispyware\sasenum.sys <Not Verified; SuperAdBlocker, Inc.; SuperAntiSpyware> -- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled -------------------- S4 iPod Service - "c:\program files\ipod\bin\ipodservice.exe" (file missing) S4 MySQL - c:\mysql\bin\mysqld mysql (file missing) -- Device Manager: Disabled ---------------------------------------------------- Class GUID: {00000000-0000-0000-0000-000000000000} Description: Network Controller Device ID: PCI\VEN_1814&DEV_0301&SUBSYS_00551737&REV_00\4&19FD8D60&0&50F0 Manufacturer: Name: Network Controller PNP Device ID: PCI\VEN_1814&DEV_0301&SUBSYS_00551737&REV_00\4&19FD8D60&0&50F0 Service: -- Scheduled Tasks ------------------------------------------------------------- 2007-10-01 11:15:00 264 --a------ C:\WINDOWS\Tasks\Uniblue SpeedUpMyPC Nag.job 2007-08-02 11:11:19 386 --a------ C:\WINDOWS\Tasks\Uniblue SpeedUpMyPC.job -- Files created between 2007-09-01 and 2007-10-01 ----------------------------- 2007-10-01 18:30:16 0 d-------- C:\Program Files\Zoned Out 2007-10-01 18:28:45 0 d-------- C:\ie-spyad_zo 2007-10-01 18:17:33 0 d-------- C:\Program Files\SpywareBlaster 2007-10-01 16:43:55 0 d-------- C:\WINDOWS\system32\ActiveScan 2007-10-01 11:45:51 0 d-------- C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com 2007-10-01 11:44:43 0 d-------- C:\Program Files\SUPERAntiSpyware 2007-10-01 11:44:42 0 d-------- C:\Documents and Settings\BJ\Application Data\SUPERAntiSpyware.com 2007-09-30 12:54:49 0 d-------- C:\Program Files\Lavasoft 2007-09-30 12:12:45 0 d-------- C:\Documents and Settings\BJ\Application Data\Lavasoft 2007-09-24 03:54:27 0 d-------- C:\Documents and Settings\BJ\Application Data\.BitZip 2007-09-24 03:52:52 0 d-------- C:\Program Files\BitZip 2007-09-23 12:07:09 112640 --a------ C:\WINDOWS\lsb_un20.exe 2007-09-23 12:07:07 0 d-------- C:\Program Files\EasyRename 2007-09-23 11:40:01 0 d-------- C:\Program Files\PipelineRenamer 2007-09-23 11:29:11 0 d-------- C:\Program Files\Picture Resize 2007-09-06 01:58:50 0 d-------- C:\Program Files\WS_FTP 2007-09-04 10:13:33 9728 --a------ C:\WINDOWS\system32\dotntlib.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2007-09-04 10:13:32 1348 --a------ C:\WINDOWS\system32\hglib.dll 2007-09-04 10:04:42 0 d-------- C:\Program Files\ArticleBot 2007-09-04 09:58:50 0 d-------- C:\Program Files\Microsoft.Net 2007-09-04 09:38:54 0 d-------- C:\mysql 2007-09-04 09:38:33 303616 --a------ C:\WINDOWS\IsUninst.exe <Not Verified; InstallShield Software Corporation; InstallShield® unInstaller> 2007-09-04 09:38:31 0 d-------- C:\Documents and Settings\BJ\WINDOWS 2007-09-04 08:15:50 0 d-------- C:\Documents and Settings\NetworkService\Application Data\AVG7 2007-09-04 02:18:47 0 d-------- C:\WINDOWS\system32\URTTemp 2007-09-04 02:16:40 0 d-------- C:\_abot -- Find3M Report --------------------------------------------------------------- 2007-10-01 14:45:23 0 d-------- C:\Program Files\Common Files\Wise Installation Wizard 2007-09-27 11:20:11 0 d-------- C:\Documents and Settings\BJ\Application Data\X-Chat 2 2007-09-05 20:50:22 0 d-------- C:\Program Files\Blaze Media Pro 2007-08-28 08:58:17 0 d-------- C:\Documents and Settings\BJ\Application Data\Adobe 2007-08-27 18:08:13 0 d-------- C:\Program Files\Speeditup Free 2007-08-21 09:37:54 0 d-------- C:\Program Files\GIMP-2.0 2007-08-18 23:25:06 0 d-------- C:\Program Files\OpenOffice.org 2.0 2007-08-18 23:17:17 0 d-------- C:\Documents and Settings\BJ\Application Data\GeoVid 2007-08-15 11:26:04 0 d-------- C:\Documents and Settings\BJ\Application Data\GetRightToGo 2007-08-15 11:22:35 0 dr------- C:\Program Files\Common Files 2007-08-04 12:02:31 0 d-------- C:\Documents and Settings\BJ\Application Data\Uniblue 2007-08-04 11:41:10 0 d-------- C:\Documents and Settings\BJ\Application Data\BitTorrent 2007-08-04 11:35:58 0 d-------- C:\Program Files\BitTorrent 2007-08-02 19:10:14 0 d-------- C:\Documents and Settings\BJ\Application Data\Winamp 2007-07-23 10:01:37 6513 --a------ C:\WINDOWS\mozver.dat -- Registry Dump --------------------------------------------------------------- *Note* empty entries & legit default entries are not shown [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "AVG7_CC"="C:\PROGRA~1\Grisoft\AVG7\avgcc.exe" [09/14/2007 08:13 AM] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] "{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [12/20/2006 01:55 PM 77824] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon] "System"="kdtts.exe" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vds] @="Service" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}] @="Volume shadow copy" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitTorrent] "C:\Documents and Settings\BJ\My Documents\Downloads\bittorrent.exe" --force_start_minimized [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\startemdoit] C:\WINDOWS\eltonehour.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe" -- End of Deckard's System Scanner: finished at 2007-10-01 19:26:52 ------------ |
|
     |
| Important Information |
|
Join the #1 Tech Support Forum Today - It's Totally Free!
TechSupportForum.com is a leading support website for your computer needs. We offer free, friendly and personalized computer support. Why pay to have your computer fixed when you can do it for free. Join TechSupportforum.com Today - Click Here |
|
10-01-2007, 06:53 PM
|
#2 (permalink) | |
|
Asst Manager Security, Expert Analyst, Moderator, Security Team; Rangemaster, Moderator, TSF Academy
Join Date: May 2005
Posts: 24,353
OS: N/A
|
Re: Holy WOW!! Nothing gets rid of this ad/spyware!
Quote:
---------- 1. Download & Save this file to Desktop -> http://download.bleepingcomputer.com...a/ComboFix.exe 2. Double click on combofix.exe & follow the prompts. 3. When finished, it shall produce a log for you. Post that & a fresh Hijackthis log in your next reply Note: Do not mouseclick combofix's window whilst it's running. That may cause it to stall
__________________
Question - what have you done for the community today? |
|
|
|
|
|
10-01-2007, 07:57 PM
|
#3 (permalink) |
|
Registered User
Join Date: Oct 2007
Posts: 9
OS: Win Xp SP2
|
Re: Holy WOW!! Nothing gets rid of this ad/spyware!
ComboFix 07-10-02.2 - BJ 2007-10-01 21:17:51.1 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.20 [GMT -4:00] Running from: C:\Documents and Settings\BJ\Desktop\ComboFix.exe * Created a new restore point . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . C:\Documents and Settings\admin\Application Data\FunWebProducts C:\Documents and Settings\admin\Application Data\FunWebProducts\Data\admin\avatar.dat C:\Documents and Settings\admin\Application Data\FunWebProducts\Data\admin\register.dat C:\WINDOWS\winhp32.exe . ((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))))))))))))))))))))))))))))))))) -------\nm ((((((((((((((((((((((((( Files Created from 2007-09-02 to 2007-10-02 ))))))))))))))))))))))))))))))) . 2007-10-01 21:16 51,200 --a------ C:\WINDOWS\NirCmd.exe 2007-10-01 20:51 79,688 --a------ C:\WINDOWS\system32\drivers\iksyssec.sys 2007-10-01 20:51 62,280 --a------ C:\WINDOWS\system32\drivers\iksysflt.sys 2007-10-01 20:51 41,288 --a------ C:\WINDOWS\system32\drivers\ikfilesec.sys 2007-10-01 20:51 29,000 --a------ C:\WINDOWS\system32\drivers\kcom.sys 2007-10-01 20:50 626,688 --a------ C:\WINDOWS\system32\msvcr80.dll 2007-10-01 20:50 <DIR> d-------- C:\Program Files\Spyware Doctor 2007-10-01 20:50 <DIR> d-------- C:\Documents and Settings\BJ\Application Data\PC Tools 2007-10-01 19:12 <DIR> d-------- C:\Deckard 2007-10-01 18:30 <DIR> d-------- C:\Program Files\Zoned Out 2007-10-01 18:28 <DIR> d-------- C:\ie-spyad_zo 2007-10-01 18:17 <DIR> d-------- C:\Program Files\SpywareBlaster 2007-10-01 16:43 <DIR> d-------- C:\WINDOWS\system32\ActiveScan 2007-10-01 11:45 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com 2007-10-01 11:44 <DIR> d-------- C:\Program Files\SUPERAntiSpyware 2007-10-01 11:44 <DIR> d-------- C:\Documents and Settings\BJ\Application Data\SUPERAntiSpyware.com 2007-09-30 12:12 <DIR> d-------- C:\Documents and Settings\BJ\Application Data\Lavasoft 2007-09-24 03:54 <DIR> d-------- C:\Documents and Settings\BJ\Application Data\.BitZip 2007-09-23 12:07 112,640 --a------ C:\WINDOWS\lsb_un20.exe 2007-09-23 12:07 <DIR> d-------- C:\Program Files\EasyRename 2007-09-23 11:40 <DIR> d-------- C:\Program Files\PipelineRenamer 2007-09-23 11:29 <DIR> d-------- C:\Program Files\Picture Resize 2007-09-06 01:58 <DIR> d-------- C:\Program Files\WS_FTP 2007-09-04 10:13 9,728 --a------ C:\WINDOWS\system32\dotntlib.dll 2007-09-04 10:13 1,348 --a------ C:\WINDOWS\system32\hglib.dll 2007-09-04 10:04 <DIR> d-------- C:\Program Files\ArticleBot 2007-09-04 09:58 <DIR> d-------- C:\Program Files\Microsoft.Net 2007-09-04 09:38 303,616 --a------ C:\WINDOWS\IsUninst.exe 2007-09-04 09:38 <DIR> d-------- C:\mysql 2007-09-04 09:38 <DIR> d-------- C:\Documents and Settings\BJ\WINDOWS 2007-09-04 02:18 <DIR> d-------- C:\WINDOWS\system32\URTTemp 2007-09-04 02:16 <DIR> d-------- C:\_abot . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2007-10-01 21:32 --------- d-a------ C:\Documents and Settings\All Users\Application Data\TEMP 2007-10-01 14:45 --------- d-------- C:\Program Files\Common Files\Wise Installation Wizard 2007-10-01 14:44 --------- d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy 2007-09-30 12:16 --------- d-------- C:\Documents and Settings\admin\Application Data\Lavasoft 2007-09-27 11:20 --------- d-------- C:\Documents and Settings\BJ\Application Data\X-Chat 2 2007-09-24 03:59 --------- d-------- C:\Documents and Settings\BJ\Application Data\.BitZip 2007-08-27 18:08 --------- d-------- C:\Program Files\Speeditup Free 2007-08-21 09:37 --------- d-------- C:\Program Files\GIMP-2.0 2007-08-18 23:25 --------- d-------- C:\Program Files\OpenOffice.org 2.0 2007-08-18 23:17 --------- d-------- C:\Documents and Settings\BJ\Application Data\GeoVid 2007-08-17 20:00 --------- d-------- C:\Documents and Settings\admin\Application Data\X-Chat 2 2007-08-15 12:14 --------- d-------- C:\Documents and Settings\All Users\Application Data\{CFAB4006-0AE0-414D-866A-DCB2C46553CF} 2007-08-15 11:26 --------- d-------- C:\Documents and Settings\BJ\Application Data\GetRightToGo 2007-08-04 12:02 --------- d-------- C:\Documents and Settings\BJ\Application Data\Uniblue 2007-08-04 11:41 --------- d-------- C:\Documents and Settings\BJ\Application Data\BitTorrent 2007-08-02 19:10 --------- d-------- C:\Documents and Settings\BJ\Application Data\Winamp 2007-07-30 19:19 92504 --a------ C:\WINDOWS\system32\cdm.dll 2007-07-30 19:19 549720 --a------ C:\WINDOWS\system32\wuapi.dll 2007-07-30 19:19 53080 --a------ C:\WINDOWS\system32\wuauclt.exe 2007-07-30 19:19 43352 --a------ C:\WINDOWS\system32\wups2.dll 2007-07-30 19:19 325976 --a------ C:\WINDOWS\system32\wucltui.dll 2007-07-30 19:19 203096 --a------ C:\WINDOWS\system32\wuweb.dll 2007-07-30 19:19 1712984 --a------ C:\WINDOWS\system32\wuaueng.dll 2007-07-30 19:18 33624 --a------ C:\WINDOWS\system32\wups.dll 2006-06-10 13:07 271 ---hs---- C:\Program Files\desktop.ini 2006-06-10 13:07 23357 --ah----- C:\Program Files\folder.htt . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "AVG7_CC"="C:\PROGRA~1\Grisoft\AVG7\avgcc.exe" [2007-09-14 08:13] "SDTray"="C:\Program Files\Spyware Doctor\SDTrayApp.exe" [2007-09-20 15:43] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] "{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2006-12-20 13:55 77824] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdauxservice" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdcoreservice" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe" R3 AN983;ADMtek AN983/AN985/ADM951X 10/100Mbps Fast Ethernet Adapter;C:\WINDOWS\system32\DRIVERS\AN983.sys . Contents of the 'Scheduled Tasks' folder "2007-10-01 15:15:00 C:\WINDOWS\Tasks\Uniblue SpeedUpMyPC Nag.job" - C:\Program Files\Uniblue\SpeedUpMyPC 3\SpeedUpMyPC.exe "2007-08-02 15:11:19 C:\WINDOWS\Tasks\Uniblue SpeedUpMyPC.job" - C:\Program Files\Uniblue\SpeedUpMyPC 3\SpeedUpMyPC.exe . ************************************************************************** catchme 0.3.1169 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-10-01 21:31:59 Windows 5.1.2600 Service Pack 2 NTFS detected NTDLL code modification: ZwClose scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . Completion time: 2007-10-01 21:35:22 - machine was rebooted C:\ComboFix-quarantined-files.txt ... 2007-10-01 21:35 . --- E O F --- Deckard's System Scanner v20070905.67 Run by BJ on 2007-10-01 21:42:46 Computer is in Normal Mode. -------------------------------------------------------------------------------- Percentage of Memory in Use: 82% (more than 75%). Total Physical Memory: 128 MiB (512 MiB recommended). -- HijackThis Clone ------------------------------------------------------------ Emulating logfile of HijackThis v1.99.1 Scan saved at 2007-10-01 21:43:10 Platform: Windows XP Service Pack 2 (5.01.2600) MSIE: Internet Explorer (6.00.2900.2180) Running processes: C:\WINDOWS\system32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Grisoft\AVG7\avgamsvr.exe C:\Program Files\Grisoft\AVG7\avgupsvc.exe C:\Program Files\Grisoft\AVG7\avgemc.exe C:\WINDOWS\explorer.exe C:\Program Files\Grisoft\AVG7\avgcc.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\WINDOWS\system32\devldr32.exe C:\WINDOWS\system32\svchost.exe C:\Documents and Settings\BJ\Desktop\dss.exe O4 - HKEY_LOCAL_MACHINE\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} () - http://download.microsoft.com/downlo...22/wmv9VCM.CAB O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsu...?1149976959335 O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/actives...ree/asinst.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.macromedia.com/pub...sh/swflash.cab O18 - Protocol: lid - {5C135180-9973-46D9-ABF4-148267CBB8BF} - C:\WINDOWS\system32\msvidctl.dll O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\Program Files\Grisoft\AVG7\avgamsvr.exe O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\Program Files\Grisoft\AVG7\avgupsvc.exe O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\Program Files\Grisoft\AVG7\avgemc.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: iPod Service - Unknown owner - "C:\Program Files\iPod\bin\iPodService.exe" O23 - Service: MySQL - Unknown owner - C:\mysql\bin\mysqld MySQL -- Files created between 2007-09-01 and 2007-10-01 ----------------------------- 2007-10-01 18:30:16 0 d-------- C:\Program Files\Zoned Out 2007-10-01 18:28:45 0 d-------- C:\ie-spyad_zo 2007-10-01 18:17:33 0 d-------- C:\Program Files\SpywareBlaster 2007-10-01 16:43:55 0 d-------- C:\WINDOWS\system32\ActiveScan 2007-10-01 11:45:51 0 d-------- C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com 2007-10-01 11:44:43 0 d-------- C:\Program Files\SUPERAntiSpyware 2007-10-01 11:44:42 0 d-------- C:\Documents and Settings\BJ\Application Data\SUPERAntiSpyware.com 2007-09-30 12:12:45 0 d-------- C:\Documents and Settings\BJ\Application Data\Lavasoft 2007-09-24 03:54:27 0 d-------- C:\Documents and Settings\BJ\Application Data\.BitZip 2007-09-23 12:07:09 112640 --a------ C:\WINDOWS\lsb_un20.exe 2007-09-23 12:07:07 0 d-------- C:\Program Files\EasyRename 2007-09-23 11:40:01 0 d-------- C:\Program Files\PipelineRenamer 2007-09-23 11:29:11 0 d-------- C:\Program Files\Picture Resize 2007-09-06 01:58:50 0 d-------- C:\Program Files\WS_FTP 2007-09-04 10:13:33 9728 --a------ C:\WINDOWS\system32\dotntlib.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2007-09-04 10:13:32 1348 --a------ C:\WINDOWS\system32\hglib.dll 2007-09-04 10:04:42 0 d-------- C:\Program Files\ArticleBot 2007-09-04 09:58:50 0 d-------- C:\Program Files\Microsoft.Net 2007-09-04 09:38:54 0 d-------- C:\mysql 2007-09-04 09:38:33 303616 --a------ C:\WINDOWS\IsUninst.exe <Not Verified; InstallShield Software Corporation; InstallShield® unInstaller> 2007-09-04 09:38:31 0 d-------- C:\Documents and Settings\BJ\WINDOWS 2007-09-04 08:15:50 0 d-------- C:\Documents and Settings\NetworkService\Application Data\AVG7 2007-09-04 02:18:47 0 d-------- C:\WINDOWS\system32\URTTemp 2007-09-04 02:16:40 0 d-------- C:\_abot -- Find3M Report --------------------------------------------------------------- 2007-10-01 14:45:23 0 d-------- C:\Program Files\Common Files\Wise Installation Wizard 2007-09-27 11:20:11 0 d-------- C:\Documents and Settings\BJ\Application Data\X-Chat 2 2007-08-28 08:58:17 0 d-------- C:\Documents and Settings\BJ\Application Data\Adobe 2007-08-27 18:08:13 0 d-------- C:\Program Files\Speeditup Free 2007-08-21 09:37:54 0 d-------- C:\Program Files\GIMP-2.0 2007-08-18 23:25:06 0 d-------- C:\Program Files\OpenOffice.org 2.0 2007-08-18 23:17:17 0 d-------- C:\Documents and Settings\BJ\Application Data\GeoVid 2007-08-15 11:26:04 0 d-------- C:\Documents and Settings\BJ\Application Data\GetRightToGo 2007-08-15 11:22:35 0 dr------- C:\Program Files\Common Files 2007-08-04 12:02:31 0 d-------- C:\Documents and Settings\BJ\Application Data\Uniblue 2007-08-04 11:41:10 0 d-------- C:\Documents and Settings\BJ\Application Data\BitTorrent 2007-08-02 19:10:14 0 d-------- C:\Documents and Settings\BJ\Application Data\Winamp 2007-07-23 10:01:37 6513 --a------ C:\WINDOWS\mozver.dat -- Registry Dump --------------------------------------------------------------- *Note* empty entries & legit default entries are not shown [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "AVG7_CC"="C:\PROGRA~1\Grisoft\AVG7\avgcc.exe" [09/14/2007 08:13 AM] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] "{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [12/20/2006 01:55 PM 77824] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdauxservice" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdcoreservice" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vds] @="Service" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}] @="Volume shadow copy" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe" |
|
|
|
|
10-01-2007, 07:59 PM
|
#4 (permalink) |
|
Registered User
Join Date: Oct 2007
Posts: 9
OS: Win Xp SP2
|
Re: Holy WOW!! Nothing gets rid of this ad/spyware!
BTW Yes!!! it only has 128 MB... its hell doing all these required downloads :o) But alas feeding the kids comes before buying new memory (and yes I know how "cheap" it is for some....)
|
|
|
|
|
10-01-2007, 08:06 PM
|
#5 (permalink) |
|
Asst Manager Security, Expert Analyst, Moderator, Security Team; Rangemaster, Moderator, TSF Academy
Join Date: May 2005
Posts: 24,353
OS: N/A
|
Re: Holy WOW!! Nothing gets rid of this ad/spyware!
The infection doesn't seem to there anymore. It's not showing in this current batch of logs.
Let's double check. Please locate & double click on this file > C:\Windows\Catchme.exe Let it do a full scan. A log shall be generated on your Desktop
__________________
Question - what have you done for the community today? |
|
|
|
|
10-01-2007, 08:27 PM
|
#6 (permalink) |
|
Registered User
Join Date: Oct 2007
Posts: 9
OS: Win Xp SP2
|
Re: Holy WOW!! Nothing gets rid of this ad/spyware!
catchme 0.3.1169 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-10-01 22:18:28 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes ... scanning hidden services & system hive ... scanning hidden registry entries ... scanning hidden files ... C:\Documents and Settings\admin\My Documents\My Music\.trivium- dying in your arms..mp3 C:\Documents and Settings\admin\My Documents\My Music\06 Rob Zombie - Educated Horses 06 100 ways.mp3 C:\Documents and Settings\admin\My Documents\My Music\80's rock Monster Ballads - Journey - Open Arms(3).mp3 C:\Documents and Settings\admin\My Documents\My Music\A Perfect Circle - Choke.mp3 C:\Documents and Settings\admin\My Documents\My Music\A perfect Circle - The Noose.mp3 C:\Documents and Settings\admin\My Documents\My Music\Aerosmith - Sweet Emotion.mp3 C:\Documents and Settings\admin\My Documents\My Music\Flaming Lips - Life On Mars.mp3 C:\Documents and Settings\admin\My Documents\My Music\Fleetwood Mac - Stevie Nicks and Tom Petty - Stop Draggin' My Heart Around.mp3 C:\Documents and Settings\admin\My Documents\My Music\Folder.jpg C:\Documents and Settings\admin\My Documents\My Music\Fuel - Bittersweet.mp3 C:\Documents and Settings\admin\My Documents\My Music\George Jones & Johnny Cash & Willie Nelson - Bartender's Blues.mp3 C:\Documents and Settings\admin\My Documents\My Music\girl forced to ****** at a party. rape forced **** anal **** ***** *** porn movies(1).mpeg C:\Documents and Settings\admin\My Documents\My Music\God Smack - Bad Religion.mp3 C:\Documents and Settings\admin\My Documents\My Music\Godsmack - Awake.mp3 C:\Documents and Settings\admin\My Documents\My Music\Godsmack - Greed.mp3 C:\Documents and Settings\admin\My Documents\My Music\Godsmack - I ******* Hate You.mp3 C:\Documents and Settings\admin\My Documents\My Music\Godsmack - I Stand Alone.mp3 C:\Documents and Settings\admin\My Documents\My Music\Godsmack - I'm Doing The Best That I Can.mp3 C:\Documents and Settings\admin\My Documents\My Music\Nine Inch Nails - Deep .mp3 C:\Documents and Settings\admin\My Documents\My Music\Nine Inch Nails - Fight Club Opening Theme.mp3 C:\Documents and Settings\admin\My Documents\My Music\Nine Inch Nails- I Want To **** You Like An Animal.mp3 C:\Documents and Settings\admin\My Documents\My Music\No Doubt - Hella Good.mp3 C:\Documents and Settings\admin\My Documents\My Music\No Doubt - Running.mp3 C:\Documents and Settings\admin\My Documents\My Music\NOFX - The Seperation Of Church And Skate.mp3 C:\Documents and Settings\admin\My Documents\My Music\Oasis - Champange Supernova.mp3 C:\Documents and Settings\admin\My Documents\My Music\Oasis - Wonderwall.mp3 C:\Documents and Settings\admin\My Documents\My Music\Oldies - Punk & Ska Covers - Walking On Sunshine.mp3 C:\Documents and Settings\admin\My Documents\My Music\Silverchair - Ana's Song (Acoustic Version).mp3 C:\Documents and Settings\admin\My Documents\My Music\Silverchair - Emotion Sickness.mp3 C:\Documents and Settings\admin\My Documents\My Music\Silverchair - Freak.mp3 C:\Documents and Settings\admin\My Documents\My Music\Simply Red - If You Don't Know Me By Now.mp3 C:\Documents and Settings\admin\My Documents\My Music\Skatman - I am a skat man .MP3 C:\Documents and Settings\admin\My Documents\My Music\Skinless - From Sacrifice To Survival.mp3 C:\Documents and Settings\admin\My Documents\My Music\skinless - Pool of Stool.mp3 C:\Documents and Settings\admin\My Documents\My Music\skinless- Enslavement.mp3 C:\Documents and Settings\admin\My Documents\My Music\Slayer - I Hate You.mp3 C:\Documents and Settings\admin\My Documents\My Music\Slipknot - Heretic Anthem.mp3 C:\Documents and Settings\admin\My Documents\My Music\Slipknot - I wont let this build up inside of me.mp3 C:\Documents and Settings\admin\My Documents\My Music\Slipknot- Snap.mp3 C:\Documents and Settings\admin\My Documents\My Music\Sometimes when we touch - Kenny rodgers and dolly pardon - Dolly Parton & Kenny Rogers.mp3 C:\Documents and Settings\admin\My Documents\My Music\Soundtrack - Mortal Kombat - KMFDM - Techno Combat.mp3 C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{156ED755-61B1-4172-B944-4D5AD1723277}_Small.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{3619D946-69DF-4E0D-BAB9-5AC901D225B8}_Small.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{4C3260C2-13DF-4AF1-8F8B-7889CDE478EF}_Small.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{6FDE1D78-6EB4-40B7-B3AE-606404D8C2A8}_Large.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{81C04950-83B5-4FE3-80EB-579118D0C7D8}_Small.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{9E823D48-6798-4EEE-A999-AD55D0E65450}_Large.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{D664FB71-2284-443D-A2B3-A65F8200FCB1}_Small.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{F07687AA-E346-4329-A7AD-DBC695501804}_Small.jpg C:\Documents and Settings\admin\My Documents\My Music\Black Label Society - 03 - Suicide Messiah.mp3 C:\Documents and Settings\admin\My Documents\My Music\David Allen Cole - Devil Went Down To Jamaica.mp3 C:\Documents and Settings\admin\My Documents\My Music\Devildriver - End of the Line.mp3 C:\Documents and Settings\admin\My Documents\My Music\Dying Fetus - Your Blood is my Wine.mp3 C:\Documents and Settings\admin\My Documents\My Music\Filter - Take a Picture.m4a C:\Documents and Settings\admin\My Documents\My Music\Godsmack - Keep Away.mp3 C:\Documents and Settings\admin\My Documents\My Music\Iggy Pop - I'm A Real Wild One.mp3 C:\Documents and Settings\admin\My Documents\My Music\Lucky Boys Confusion - The Party Song.mp3 C:\Documents and Settings\admin\My Documents\My Music\Lynard Skynard - Gimme Three Steps.mp3 C:\Documents and Settings\admin\My Documents\My Music\Lynard Skynard - Simple Man.mp3 C:\Documents and Settings\admin\My Documents\My Music\Lynyrd Skynyrd - Free Bird.mp3 C:\Documents and Settings\admin\My Documents\My Music\Madness - One Step Beyond.mp3 C:\Documents and Settings\admin\My Documents\My Music\Marshall Tucker Band - Heard it in a Love Song.mp3 C:\Documents and Settings\admin\My Documents\My Music\Marshall Tucker Band - Midnight Rider.mp3 C:\Documents and Settings\admin\My Documents\My Music\MC Hammer - Too Legit 2 Quit.mp3 C:\Documents and Settings\admin\My Documents\My Music\Megadeath - Symphony of Destruction.mp3 C:\Documents and Settings\admin\My Documents\My Music\Merle Haggard & Willie Nelson - Pancho And Lefty.mp3 C:\Documents and Settings\admin\My Documents\My Music\Merle Haggard - I Gotta Get Piss Drunk (Willie Nelson & George Jones).mp3 C:\Documents and Settings\admin\My Documents\My Music\Montgomery Gentry - Hell Yeah!.mp3 C:\Documents and Settings\admin\My Documents\My Music\Mudvane - Dig.mp3 C:\Documents and Settings\admin\My Documents\My Music\Murder Dolls - Mother ****** I Don't Care.mp3 C:\Documents and Settings\admin\My Documents\My Music\Dire Straights - Money For Nothing.mp3 C:\Documents and Settings\admin\My Documents\My Music\Disney - Anastasia (techno trance mix).mp3 C:\Documents and Settings\admin\My Documents\My Music\Dolly Parton & Kenny Rodgers - Islands in The Stream.mp3 C:\Documents and Settings\admin\My Documents\My Music\Dolly Parton & Kenny Rodgers - We ve Got Tonight.mp3 C:\Documents and Settings\admin\My Documents\My Music\Dolly Parton - Working 9 To 5.mp3 C:\Documents and Settings\admin\My Documents\My Music\Dooby Brothers - Black Water.mp3 C:\Documents and Settings\admin\My Documents\My Music\Drop Kick Murphy's - Blood And Whiskey.mp3 C:\Documents and Settings\admin\My Documents\My Music\Drop Kick Murphy's - Riot Tonight.mp3 C:\Documents and Settings\admin\My Documents\My Music\dying fetus - grotesque impalement - grotesque impalement.mp3 C:\Documents and Settings\admin\My Documents\My Music\Bob And Tom - Marijuanaville (Jimmy Buffet Parody).mp3 C:\Documents and Settings\admin\My Documents\My Music\Boxcar Willie & Willy Nelson - Boxcar's My Home.mp3 C:\Documents and Settings\admin\My Documents\My Music\Brooklyn Bounce - Club Bizarre.mp3 C:\Documents and Settings\admin\My Documents\My Music\Bury Your Dead - Magnolia.mp3 C:\Documents and Settings\admin\My Documents\My Music\Buzz Ballads (09) Dishwalla ~ Counting Blue Cars.mp3 C:\Documents and Settings\admin\My Documents\My Music\Buzz Ballads -1- (01) Live ~ Lightning Crashes.mp3 C:\Documents and Settings\admin\My Documents\My Music\Buzz Ballads -2- (12) Better Than Ezra ~ Desperately Wanting.mp3 C:\Documents and Settings\admin\My Documents\My Music\Puddle Of Mud - She Fuckin Hates Me.mp3 C:\Documents and Settings\admin\My Documents\My Music\Queen - We Are The Champions.mp3 C:\Documents and Settings\admin\My Documents\My Music\Quiet Riot with Randy Rhoads - Mighty Quinn (Extremely Rare).mp3 C:\Documents and Settings\admin\My Documents\My Music\Quite Riot - Come On Feel The Noise.mp3 C:\Documents and Settings\admin\My Documents\My Music\Ramstien - DerMeister.mp3 C:\Documents and Settings\admin\My Documents\My Music\Rancid & Sublime - I Wanna Riot.mp3 C:\Documents and Settings\admin\My Documents\My Music\Rancid - Junkie Man.mp3 C:\Documents and Settings\admin\My Documents\My Music\Rancid - Red Hot Moon.mp3 C:\Documents and Settings\admin\My Documents\My Music\Rancid - Salvation.mp3 C:\Documents and Settings\admin\My Documents\My Music\Rancid - Time Bomb.mp3 C:\Documents and Settings\admin\My Documents\My Music\Rancid- fall back down.mp3 C:\Documents and Settings\admin\My Documents\My Music\RARE Tom Petty-George Harrison-Neil Young-Eric Clapton-Bob Dylan-Roger McGuinn - My back pages(1).mp3 C:\Documents and Settings\admin\My Documents\My Music\RARE Tom Petty-George Harrison-Neil Young-Eric Clapton-Bob Dylan-Roger McGuinn - My back pages.mp3 C:\Documents and Settings\admin\My Documents\My Music\Sublime - Badfish.mp3 C:\Documents and Settings\admin\My Documents\My Music\Supertramp - Take The Long Way Home.mp3 C:\Documents and Settings\admin\My Documents\My Music\System Of A Down - **** The System.mp3 C:\Documents and Settings\admin\My Documents\My Music\TECHNO - MegaMan(best rave song ever).mp3 C:\Documents and Settings\admin\My Documents\My Music\Techno -DANCE,FREESTYLE,HOUSE,EURO,TRANCE,TECHNO - Warp Brothers & Aquagen - Phatt Bass (Club Mix).mp3 C:\Documents and Settings\admin\My Documents\My Music\The Cars - My Best Friend's Girl.mp3 C:\Documents and Settings\admin\My Documents\My Music\The Mighty Mighty Bosstones - You Gotta Go.mp3 C:\Documents and Settings\admin\My Documents\My Music\The Rolling Stones - Painted black.mp3 C:\Documents and Settings\admin\My Documents\My Music\Thumbs.db C:\Documents and Settings\admin\My Documents\My Music\Thumbs.db:encryptable 0 bytes hidden from API C:\Documents and Settings\admin\My Documents\My Music\Toby Kieth - I Love This Bar.mp3 C:\Documents and Settings\admin\My Documents\My Music\Tom Petty - Free Falling.mp3 C:\Documents and Settings\admin\My Documents\My Music\Tom Petty - Breakdown.mp3 C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{52914C5A-CDFA-458B-9DF0-D8FEFDB933FC}_Large.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{52914C5A-CDFA-458B-9DF0-D8FEFDB933FC}_Small.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{586E3777-93A9-4848-A453-4C467BCA8162}_Large.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{586E3777-93A9-4848-A453-4C467BCA8162}_Small.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{5F015CD2-5BEF-483C-BF5F-EBFA1D22897C}_Large.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{5F015CD2-5BEF-483C-BF5F-EBFA1D22897C}_Small.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{62EFA6B4-287B-412B-9FC2-F3B810990F8D}_Large.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{62EFA6B4-287B-412B-9FC2-F3B810990F8D}_Small.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{68DC899F-7CB1-42C1-8C70-A59994439A57}_Large.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{68DC899F-7CB1-42C1-8C70-A59994439A57}_Small.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArtSmall.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{016BE595-FCC3-48E2-86C3-AF6F28258CF8}_Large.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{016BE595-FCC3-48E2-86C3-AF6F28258CF8}_Small.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{0F8D1C91-77AE-40C0-9CC2-83D5E5A5D64D}_Large.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{0F8D1C91-77AE-40C0-9CC2-83D5E5A5D64D}_Small.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{14B79DC2-F322-44CD-AC4B-58F928BAB778}_Large.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{14B79DC2-F322-44CD-AC4B-58F928BAB778}_Small.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{156ED755-61B1-4172-B944-4D5AD1723277}_Large.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{DB850A77-78ED-4A69-AB12-70EBDE3FD3FB}_Large.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{DB850A77-78ED-4A69-AB12-70EBDE3FD3FB}_Small.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{E436C491-DCCD-401F-9167-FCF138211C9A}_Large.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{E436C491-DCCD-401F-9167-FCF138211C9A}_Small.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{E606C248-2D51-49A0-B7B6-342F2E5B526A}_Large.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{E606C248-2D51-49A0-B7B6-342F2E5B526A}_Small.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{E949BEA7-1D29-45FC-AB0C-A65803D636C5}_Large.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{E949BEA7-1D29-45FC-AB0C-A65803D636C5}_Small.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{EA0092ED-A184-435A-986F-9E00CE63BBEE}_Large.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{EA0092ED-A184-435A-986F-9E00CE63BBEE}_Small.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{F07687AA-E346-4329-A7AD-DBC695501804}_Large.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{88AB545E-EEBB-4C71-B28C-C61E1E89D0C5}_Large.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{88AB545E-EEBB-4C71-B28C-C61E1E89D0C5}_Small.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{896D50B4-EAF6-4262-8B8C-531F55139EDF}_Large.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{896D50B4-EAF6-4262-8B8C-531F55139EDF}_Small.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{8985C5B4-EA6B-40FB-9ADE-54D000F457DF}_Large.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{8985C5B4-EA6B-40FB-9ADE-54D000F457DF}_Small.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{8A4A76A9-A8D6-424D-A5BD-CD9C03B8743B}_Large.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{8A4A76A9-A8D6-424D-A5BD-CD9C03B8743B}_Small.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{8A6B120D-6EFB-40F5-84BF-94C64239F11E}_Large.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{8A6B120D-6EFB-40F5-84BF-94C64239F11E}_Small.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{94845A15-410F-4932-A1ED-858F249A52C0}_Large.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{94845A15-410F-4932-A1ED-858F249A52C0}_Small.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{395282DF-E8C6-43FA-A906-FA99275DDD31}_Large.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{395282DF-E8C6-43FA-A906-FA99275DDD31}_Small.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{3ABB36F1-5C4E-461A-8D2C-A35C0A6E1863}_Large.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{3ABB36F1-5C4E-461A-8D2C-A35C0A6E1863}_Small.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{3FCB7C6A-B2A8-4A91-9E48-4D93E0FF2640}_Large.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{3FCB7C6A-B2A8-4A91-9E48-4D93E0FF2640}_Small.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{3FEEF976-6DCD-4EA4-B0FF-FB93AFB786DE}_Large.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{3FEEF976-6DCD-4EA4-B0FF-FB93AFB786DE}_Small.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{42B60525-BC79-4F26-BE24-05B654FE25AA}_Large.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{42B60525-BC79-4F26-BE24-05B654FE25AA}_Small.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{42D57A7A-8F92-4C9F-B3FE-3267785A5972}_Large.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{42D57A7A-8F92-4C9F-B3FE-3267785A5972}_Small.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{44369261-85AC-4D9F-B3A6-1622F933F701}_Large.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{44369261-85AC-4D9F-B3A6-1622F933F701}_Small.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{4C075523-0D3A-4C37-9E12-C863B622C1E0}_Large.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{4C075523-0D3A-4C37-9E12-C863B622C1E0}_Small.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{4C3260C2-13DF-4AF1-8F8B-7889CDE478EF}_Large.jpg C:\Documents and Settings\admin\My Documents\My Music\Alice Deejay - Back In My Life.mp3 C:\Documents and Settings\admin\My Documents\My Music\Alice in Chains - Rooster.mp3 C:\Documents and Settings\admin\My Documents\My Music\Alison Krauss - You say it best when you say nothing at all.mp3 C:\Documents and Settings\admin\My Documents\My Music\Jefferson Airplane - Somebody To Love.mp3 C:\Documents and Settings\admin\My Documents\My Music\jimi hendrix - fire.mp3 C:\Documents and Settings\admin\My Documents\My Music\Jimmy Dean - Big Bad John (Original).mp3 C:\Documents and Settings\admin\My Documents\My Music\John Cougar Mellencamp - Hurts So Good.mp3 C:\Documents and Settings\admin\My Documents\My Music\Johnny Cash - Hurt.mp3 C:\Documents and Settings\admin\My Documents\My Music\Johnny Horton - The Ballad of Davy Crockett.mp3 C:\Documents and Settings\admin\My Documents\My Music\Johny Rebel - leroy the big lipped niger.mp3 C:\Documents and Settings\admin\My Documents\My Music\Johny Rebel - The South Will Rise Again.MP3 C:\Documents and Settings\admin\My Documents\My Music\Jonny Cash & Willie Nelson - Ghost Riders In the Sky.mp3 C:\Documents and Settings\admin\My Documents\My Music\Journey - Wheels In The Sky.mp3 C:\Documents and Settings\admin\My Documents\My Music\Kenny Rodgers _ Coward Of The County.mp3 C:\Documents and Settings\admin\My Documents\My Music\Kenny Rodgers- The Gambler.mp3 C:\Documents and Settings\admin\My Documents\My Music\kenny rogers - kenny rodgers - baseball song.mp3 C:\Documents and Settings\admin\My Documents\My Music\Kenny-Rodgers - Lucille.mp3 C:\Documents and Settings\admin\My Documents\My Music\Primus - Cotton Eye Joe.mp3 C:\Documents and Settings\admin\My Documents\My Music\Primus - Detachable *****.mp3 C:\Documents and Settings\admin\My Documents\My Music\Primus - Devil Went Down to Georgia.mp3 C:\Documents and Settings\admin\My Documents\My Music\Primus - Have a Cigar (Pink Floyd cover).mp3 C:\Documents and Settings\admin\My Documents\My Music\Primus - Jerry Was A Race Car Driver.mp3 C:\Documents and Settings\admin\My Documents\My Music\Primus - Master Of Puppets (Metallica Cover).mp3 C:\Documents and Settings\admin\My Documents\My Music\Primus - Wynona's Big Brown Beaver.mp3 C:\Documents and Settings\admin\My Documents\My Music\Prodigy - Firestarter.mp3 C:\Documents and Settings\admin\My Documents\My Music\Prodigy - Poison.mp3 C:\Documents and Settings\admin\My Documents\My Music\Rave Dance Techno - Happy Hardcore XTC.mp3 C:\Documents and Settings\admin\My Documents\My Music\Reba Mcentire - The Night The Lights Went Out In Georgia.mp3 C:\Documents and Settings\admin\My Documents\My Music\REM - Everybody Hurts.mp3 C:\Documents and Settings\admin\My Documents\My Music\Rob Zombie - Foxy, Foxy.mp3 C:\Documents and Settings\admin\My Documents\My Music\Rob Zombie - Living Dead Girl.mp3 C:\Documents and Settings\admin\My Documents\My Music\Ronnie James Dio - Holy Diver.mp3 C:\Documents and Settings\admin\My Documents\My Music\Seether & Evanescence - Broken.mp3 C:\Documents and Settings\admin\My Documents\My Music\Seether - **** It (Creed, Puddle of Mudd, Godsmack, Nickelback, Staind, Taproot, Nirvana, Bush, Drowning Pool).mp3 C:\Documents and Settings\admin\My Documents\My Music\Sepultura - Stronger Than Hate.mp3 C:\Documents and Settings\admin\My Documents\My Music\Sevendust - 08 Hurt (Dedicated to Johnny Cash).mp3 C:\Documents and Settings\admin\My Documents\My Music\SG Frank Sinatra - I've Got The World On A String.mp3 C:\Documents and Settings\admin\My Documents\My Music\Tom Petty - Last Dance With Mary Jane.mp3 C:\Documents and Settings\admin\My Documents\My Music\tony hawk's pro skater 2-swinging utters - five lessons learned.mp3 C:\Documents and Settings\admin\My Documents\My Music\Tony Hawk's Pro Skater 3 - Alien Ant Farm - Wish.mp3 C:\Documents and Settings\admin\My Documents\My Music\TOOL - 10000 DAYS - THE POT.mp3 C:\Documents and Settings\admin\My Documents\My Music\Tool - Drugs.mp3 C:\Documents and Settings\admin\My Documents\My Music\Tool - Parabola.mp3 C:\Documents and Settings\admin\My Documents\My Music\Tool - Schism.mp3 C:\Documents and Settings\admin\My Documents\My Music\Tool - Sober.mp3 C:\Documents and Settings\admin\My Documents\My Music\Tool - Stink Fist.mp3 C:\Documents and Settings\admin\My Documents\My Music\Tool - vicarious.mp3 C:\Documents and Settings\admin\My Documents\My Music\Tools feat. Iba - Sexy Cherry (Clap Mix).mp3 C:\Documents and Settings\admin\My Documents\My Music\Track 9.wma C:\Documents and Settings\admin\My Documents\My Music\Type O Negative - My Girlfriend's Girlfriend.mp3 C:\Documents and Settings\admin\My Documents\My Music\Ween - The Homo Rainbow.mp3 C:\Documents and Settings\admin\My Documents\My Music\Willie Nelson & Johnny Cash - Mommas Don't Let Your Babies Grow Up To Be Cow - Waylon Jennings & Willie Nelson - Country - Unknown.mp3 C:\Documents and Settings\admin\My Documents\My Music\Willie Nelson & Ray Charles - Seven Spanish Angels.mp3 C:\Documents and Settings\admin\My Documents\My Music\wolfmother - dimension.mp3 C:\Documents and Settings\admin\My Documents\My Music\WOLFMOTHER - Love Train.mp3 C:\Documents and Settings\admin\My Documents\My Music\Wolfmother - Minds Eye.mp3 C:\Documents and Settings\admin\My Documents\My Music\wolfmother - pyramid.mp3 C:\Documents and Settings\admin\My Documents\My Music\Wolfmother - Tales From the Forest of Gnomes.mp3 C:\Documents and Settings\admin\My Documents\My Music\Wolfmother - The White Unicorn.mp3 C:\Documents and Settings\admin\My Documents\My Music\wolfmother - Vagabond.mp3 C:\Documents and Settings\admin\My Documents\My Music\Wolfmother - Where Eagles Have Been.mp3 C:\Documents and Settings\admin\My Documents\My Music\Wolfmother - Woman.mp3 C:\Documents and Settings\admin\My Documents\My Music\wolfmother 06 - Joker And The Thief.mp3 C:\Documents and Settings\admin\My Documents\My Music\ZZ Top - Rough Boy.mp3 C:\Documents and Settings\admin\My Documents\My Music\Christina Agulera-Hurt.mp3 C:\Documents and Settings\admin\My Documents\My Music\Coal Chamber - Pig.mp3 C:\Documents and Settings\admin\My Documents\My Music\Conway Twitty - Baby's Got Her Blue Jeans On (Country).mp3 C:\Documents and Settings\admin\My Documents\My Music\Copy of Dire Straits - Straights - Sultans of Swing.mp3 C:\Documents and Settings\admin\My Documents\My Music\Crazy ****- Tribal 1 this track rocks ( techno tekno acid rave jungle dj drum bass electronic funk vinyl dance industrial trance juno beat tech vs remix hardcore }(1).mp3 C:\Documents and Settings\admin\My Documents\My Music\Kill Bill Soundtrack - 08 Green Hornet Theme.mp3 C:\Documents and Settings\admin\My Documents\My Music\Kill Switch Engage - Just Barely Breathing.mp3 C:\Documents and Settings\admin\My Documents\My Music\kittie - daughters down.mp3 C:\Documents and Settings\admin\My Documents\My Music\Kittie - Severed.mp3 C:\Documents and Settings\admin\My Documents\My Music\Korn and Slipknot - Queen Of The Damned.mp3 C:\Documents and Settings\admin\My Documents\My Music\Korn, Slip Knot, Acid Bath - Fading Away.mp3 C:\Documents and Settings\admin\My Documents\My Music\Kris Kristofferson, Willie Nelson - Mountain Dew.mp3 C:\Documents and Settings\admin\My Documents\My Music\Lamb Of God - 05 - Omerta.mp3 C:\Documents and Settings\admin\My Documents\My Music\Lamb of God - Black Label.mp3 C:\Documents and Settings\admin\My Documents\My Music\Lamb Of God - Omerta.mp3 C:\Documents and Settings\admin\My Documents\My Music\Less Then Jake - Jen Doesn't Like Me Anymore.mp3 C:\Documents and Settings\admin\My Documents\My Music\Less then Jake I Think I Love You.mp3 C:\Documents and Settings\admin\My Documents\My Music\Outlaws - Ghost Riders In The Sky.mp3 C:\Documents and Settings\admin\My Documents\My Music\Ozzy Osbourne - Dreamer.mp3 C:\Documents and Settings\admin\My Documents\My Music\Papa Roach - Between Angels And Insects.mp3 C:\Documents and Settings\admin\My Documents\My Music\Papa Roach - Dead Cell.mp3 C:\Documents and Settings\admin\My Documents\My Music\Paul Van **** - Castles In The Sky.mp3 C:\Documents and Settings\admin\My Documents\My Music\Paulo Nutini- Loving You.mp3 C:\Documents and Settings\admin\My Documents\My Music\Perfect Chaos - Cool People Suck (less than jake, the ataris, millencolin, lagwagon, dispatch, suicide machines, blink182, mxpx, alkaline trio, vandals, nofx, punk, ska, emo, a.mp3 C:\Documents and Settings\admin\My Documents\My Music\Pierre Lalonde - Manon Vien Danser Le ska.mp3 C:\Documents and Settings\admin\My Documents\My Music\Playlist 1.m3u C:\Documents and Settings\admin\My Documents\My Music\Eagles - House Of The Rising Sun (Acoustic).mp3 C:\Documents and Settings\admin\My Documents\My Music\Elvis Presley - Gospel - Swing Low Sweet Chariot.mp3 C:\Documents and Settings\admin\My Documents\My Music\Euro Trip - Scotty Doesn't Know (techno).mp3 C:\Documents and Settings\admin\My Documents\My Music\Evanescence, Linkin Park, Godsmack, Disturbed, Pantera, Limp Bizkit, Tool, Staind, Korn - Scars Of Life.mp3 C:\Documents and Settings\admin\My Documents\My Music\Fat Boy Slim - Wonderful Night.mp3 C:\Documents and Settings\admin\My Documents\My Music\Filter - Cancer.mp3 C:\Documents and Settings\admin\My Documents\My Music\Filter - Hey Man Nice Shot2.mp3 C:\Documents and Settings\admin\My Documents\My Music\Otis Redding - Sitting On The Dock Of The Bay (Top Gun Soundtrack).mp3 C:\Documents and Settings\admin\My Documents\My Music\Rave - Techno- Trance on Ecstasy.mp3 C:\Documents and Settings\admin\My Documents\My Music\Shrek 2 soundtrack -2 - holding our for a hero.mp3 C:\Documents and Settings\admin\My Documents\My Music\Static-X - I'm The One.mp3 C:\Documents and Settings\admin\My Documents\My Music\Tom Petty - I Won't Back Down.mp3 C:\Documents and Settings\admin\My Documents\My Music\Willie Nelson & Waylon Jennings - A Good Hearted Woman.mp3 C:\Documents and Settings\admin\My Documents\My Music\wolfmother - colossal.mp3 C:\Documents and Settings\admin\My Documents\My Music\ZZTop - Tush.mp3 C:\Documents and Settings\admin\My Documents\My Music\Godsmack - Running Blind.mp3 C:\Documents and Settings\admin\My Documents\My Music\Godsmack - ShineDown.mp3 C:\Documents and Settings\admin\My Documents\My Music\Godsmack - Speak.mp3 C:\Documents and Settings\admin\My Documents\My Music\Godsmack - Voodoo.mp3 C:\Documents and Settings\admin\My Documents\My Music\Godsmack -Serenity.mp3 C:\Documents and Settings\admin\My Documents\My Music\Gravity Kills - Enough.mp3 C:\Documents and Settings\admin\My Documents\My Music\Gravity Kills - Guilty.mp3 C:\Documents and Settings\admin\My Documents\My Music\Gravity Kills - One Thing.mp3 C:\Documents and Settings\admin\My Documents\My Music\Gravity Kills- Down (lLords of Acid Power Mix).mp3 C:\Documents and Settings\admin\My Documents\My Music\Hank Williams Jr. - A Country Boy Can Survive.mp3 C:\Documents and Settings\admin\My Documents\My Music\Hatebreed - Smash Your Enemies.mp3 C:\Documents and Settings\admin\My Documents\My Music\Hurt - Falls Apart.mp3 C:\Documents and Settings\admin\My Documents\My Music\Willie Nelson - Blues Eyes Crying In The Rain.mp3 C:\Documents and Settings\admin\My Documents\My Music\Willie Nelson - Highway Man (w Waylon Jennings, Johnny Cash and Kris Kristopherson).mp3 C:\Documents and Settings\admin\My Documents\My Music\Willie Nelson - On The Road Again.mp3 C:\Documents and Settings\admin\My Documents\My Music\Willie Nelson - Whiskey River.mp3 C:\Documents and Settings\admin\My Documents\My Music\willie nelson - you are always on my mind.mp3 C:\Documents and Settings\admin\My Documents\My Music\wolfmother - apple tree.MP3 C:\Documents and Settings\admin\My Documents\My Music\David Allen Cole - White Girl with a ******.mp3 C:\Documents and Settings\admin\My Documents\My Music\Dazed and Confused Soundtrack - No More Mr. Nice Guy (Alice Cooper).mp3 C:\Documents and Settings\admin\My Documents\My Music\Deep Purple - Smoke On the water.mp3 C:\Documents and Settings\admin\My Documents\My Music\Def Leppard -Armageddon It.mp3 C:\Documents and Settings\admin\My Documents\My Music\Deftones - Change.mp3 C:\Documents and Settings\admin\My Documents\My Music\Demis Roussos - Forever and ever.mp3 C:\Documents and Settings\admin\My Documents\My Music\Desktop.ini C:\Documents and Settings\admin\My Documents\My Music\Catch 22 - What Goes Around Comes Around.mp3 C:\Documents and Settings\admin\My Documents\My Music\Celtic Frost - Suicidal Winds.mp3 C:\Documents and Settings\admin\My Documents\My Music\charlie daniels band - dueling banjos.mp3 C:\Documents and Settings\admin\My Documents\My Music\Charlie Daniels Band - The Legend of Wooly Swamp.mp3 C:\Documents and Settings\admin\My Documents\My Music\Cherry Poppin' Daddies - Stray Cat Strut.mp3 C:\Documents and Settings\admin\My Documents\My Music\Cherry Poppin' Daddys - Jump In The Line.mp3 C:\Documents and Settings\admin\My Documents\My Music\Chevelle - Send The Pain Below.mp3 C:\Documents and Settings\admin\My Documents\My Music\chevelle - The Red.mp3 C:\Documents and Settings\admin\My Documents\My Music\Children Of Bodom - Hatebreeder - Black Widow.mp3 C:\Documents and Settings\admin\My Documents\My Music\David Alan Coe - ****** Hating Me .mp3 C:\Documents and Settings\admin\My Documents\My Music\David Allan Coe - Tight Bald *****.mp3 C:\Documents and Settings\admin\My Documents\My Music\David Allan Coe - You piss me off, you ******* jerk.mp3 C:\Documents and Settings\admin\My Documents\My Music\david allen coe (allan jackson) - *** hole song.mp3 C:\Documents and Settings\admin\My Documents\My Music\David Allen Coe - (VERY OFFENSIVE) ****** jokes.mp3 C:\Documents and Settings\admin\My Documents\My Music\David Allen Coe - Coon Shootin' Boogie.mp3 C:\Documents and Settings\admin\My Documents\My Music\david allen coe - i'd like to **** the **** out of you (2).mp3 C:\Documents and Settings\admin\My Documents\My Music\David Allen Coe - She's Fat, I'm Drunk, It's On.mp3 C:\Documents and Settings\admin\My Documents\My Music\David Allen Coe - The Ride (Ghost of Hank Williams).mp3 C:\Documents and Settings\admin\My Documents\My Music\David Allen Coe - The White Man Marches On.mp3 C:\Documents and Settings\admin\My Documents\My Music\David Allen Coe - ******* And Beer.mp3 C:\Documents and Settings\admin\My Documents\My Music\Alabama - Fiddle In The Band.mp3 C:\Documents and Settings\admin\My Documents\My Music\Alabama - Song Of The South.mp3 C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{1989C758-382A-4FF9-9E7E-F0F7FA55BC70}_Large.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{1989C758-382A-4FF9-9E7E-F0F7FA55BC70}_Small.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{19F5CAEC-6F71-422A-BEB8-EED3D3C54049}_Large.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{19F5CAEC-6F71-422A-BEB8-EED3D3C54049}_Small.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{1A459177-8866-49D4-9A11-A5B08BF159B3}_Large.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{1A459177-8866-49D4-9A11-A5B08BF159B3}_Small.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{1C9592B0-2A4F-4804-B476-EAA4ECDB498D}_Large.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{1C9592B0-2A4F-4804-B476-EAA4ECDB498D}_Small.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{1DAFA699-5F6F-4410-9443-FE8FACF1FE30}_Large.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{1DAFA699-5F6F-4410-9443-FE8FACF1FE30}_Small.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{1F1F5368-80AD-464C-956D-522CEE4B5600}_Large.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{1F1F5368-80AD-464C-956D-522CEE4B5600}_Small.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{282DEFC3-7483-4607-9887-05EFDF6C3556}_Large.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{282DEFC3-7483-4607-9887-05EFDF6C3556}_Small.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{329FDE51-7479-4E4F-8B99-54967DA3609E}_Large.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{329FDE51-7479-4E4F-8B99-54967DA3609E}_Small.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{3450CF3C-2299-483F-8147-11361569C366}_Large.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{3450CF3C-2299-483F-8147-11361569C366}_Small.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{3619D946-69DF-4E0D-BAB9-5AC901D225B8}_Large.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{9E823D48-6798-4EEE-A999-AD55D0E65450}_Small.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{A3D0E88D-5BF8-4FB2-BE54-17664CAD1EA7}_Large.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{A3D0E88D-5BF8-4FB2-BE54-17664CAD1EA7}_Small.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{A9D19F42-AAB7-4325-8F57-F1C58C0DFC99}_Large.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{A9D19F42-AAB7-4325-8F57-F1C58C0DFC99}_Small.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{AAFFD9DC-33FB-4BC3-8D3C-BB3387A11E68}_Large.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{AAFFD9DC-33FB-4BC3-8D3C-BB3387A11E68}_Small.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{AC35DED3-472D-45AA-BCFD-62AB4008867F}_Large.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{AC35DED3-472D-45AA-BCFD-62AB4008867F}_Small.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{B0257BC9-C2E6-4932-AEFE-44D9322D32C4}_Large.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{B0257BC9-C2E6-4932-AEFE-44D9322D32C4}_Small.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{D664FB71-2284-443D-A2B3-A65F8200FCB1}_Large.jpg C:\Documents and Settings\admin\My Documents\My Music\Amazing Grace - Willie Nelson, Johnny Paycheck & Dolly Parton (Live).mp3 C:\Documents and Settings\admin\My Documents\My Music\Anthrax - Got The Time.mp3 C:\Documents and Settings\admin\My Documents\My Music\Arch Enemy - My Apocalypse.mp3 C:\Documents and Settings\admin\My Documents\My Music\Arch Enemy - We Will Rise.mp3 C:\Documents and Settings\admin\My Documents\My Music\Bedouin Soundclash - Criminal.mp3 C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{F13C38D5-CAF5-4B5C-9A4C-D10DF264B123}_Large.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{F13C38D5-CAF5-4B5C-9A4C-D10DF264B123}_Small.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{F142730C-44D7-4A74-B348-C3D928BAB143}_Large.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{F142730C-44D7-4A74-B348-C3D928BAB143}_Small.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{6FDE1D78-6EB4-40B7-B3AE-606404D8C2A8}_Small.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{73560B83-693E-4FB7-87A5-A37433EC6EA3}_Large.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{73560B83-693E-4FB7-87A5-A37433EC6EA3}_Small.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{7B0ED86D-ABE5-4CDE-AE7C-1D5C196F4FC2}_Large.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{7B0ED86D-ABE5-4CDE-AE7C-1D5C196F4FC2}_Small.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{7D79AB51-75FA-48F1-8CD7-0DCC6A30B842}_Large.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{7D79AB51-75FA-48F1-8CD7-0DCC6A30B842}_Small.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{7F6B6043-3E26-4292-81C8-13EC419463C8}_Large.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{7F6B6043-3E26-4292-81C8-13EC419463C8}_Small.jpg C:\Documents and Settings\admin\My Documents\My Music\AlbumArt_{81C04950-83B5-4FE3-80EB-579118D0C7D8}_Large.jpg C:\RECYCLER\S-1-5-21-73586283-2077806209-682003330-1004\Dc180\Eminem - Encore [EAC] C:\RECYCLER\S-1-5-21-73586283-2077806209-682003330-1004\Dc180\Eminem - Encore [EAC]\09 - Paul (Skit).mp3 C:\RECYCLER\S-1-5-21-73586283-2077806209-682003330-1004\Dc180\Eminem - Encore [EAC]\17 - Crazy In Love.mp3 C:\RECYCLER\S-1-5-21-73586283-2077806209-682003330-1004\Dc180\Eminem - Encore [EAC]\01 - Curtains Up.mp3 C:\RECYCLER\S-1-5-21-73586283-2077806209-682003330-1004\Dc180\Eminem - Encore [EAC]\02 - Evil Deeds.mp3 C:\RECYCLER\S-1-5-21-73586283-2077806209-682003330-1004\Dc180\Eminem - Encore [EAC]\03 - Never Enough (feat. 50 Cent & Nate Dogg).mp3 C:\RECYCLER\S-1-5-21-73586283-2077806209-682003330-1004\Dc180\Eminem - Encore [EAC]\04 - Yellow Brick Road.mp3 C:\RECYCLER\S-1-5-21-73586283-2077806209-682003330-1004\Dc180\Eminem - Encore [EAC]\05 - Like Toy Soldiers.mp3 C:\RECYCLER\S-1-5-21-73586283-2077806209-682003330-1004\Dc180\Eminem - Encore [EAC]\06 - Mosh.mp3 C:\RECYCLER\S-1-5-21-73586283-2077806209-682003330-1004\Dc180\Eminem - Encore [EAC]\07 - Puke.mp3 C:\RECYCLER\S-1-5-21-73586283-2077806209-682003330-1004\Dc180\Eminem - Encore [EAC]\08 - My 1st Single.mp3 C:\RECYCLER\S-1-5-21-73586283-2077806209-682003330-1004\Dc180\Eminem - Encore [EAC]\10 - Rain Man.mp3 C:\RECYCLER\S-1-5-21-73586283-2077806209-682003330-1004\Dc180\Eminem - Encore [EAC]\11 - Big Weenie.mp3 C:\RECYCLER\S-1-5-21-73586283-2077806209-682003330-1004\Dc180\Eminem - Encore [EAC]\12 - Em Calls Paul (Skit).mp3 C:\RECYCLER\S-1-5-21-73586283-2077806209-682003330-1004\Dc180\Eminem - Encore [EAC]\13 - Just Lose It.mp3 C:\RECYCLER\S-1-5-21-73586283-2077806209-682003330-1004\Dc180\Eminem - Encore [EAC]\14 - *** Like That.mp3 C:\RECYCLER\S-1-5-21-73586283-2077806209-682003330-1004\Dc180\Eminem - Encore [EAC]\15 - Spend Some Time (feat. Obie Trice, Stat Quo & 50 Cent).mp3 C:\RECYCLER\S-1-5-21-73586283-2077806209-682003330-1004\Dc180\Eminem - Encore [EAC]\16 - Mockingbird.mp3 C:\RECYCLER\S-1-5-21-73586283-2077806209-682003330-1004\Dc180\Eminem - Encore [EAC]\18 - One Shot 2 Shot (feat. D12).mp3 C:\RECYCLER\S-1-5-21-73586283-2077806209-682003330-1004\Dc180\Eminem - Encore [EAC]\19 - Final Thought (Skit).mp3 C:\RECYCLER\S-1-5-21-73586283-2077806209-682003330-1004\Dc180\Eminem - Encore [EAC]\20 - Encore (Curtains) (feat. Dr. Dre & 50 Cent).mp3 C:\RECYCLER\S-1-5-21-73586283-2077806209-682003330-1004\Dc180\Eminem - Encore [EAC]\eminem-encore(Back).jpg C:\RECYCLER\S-1-5-21-73586283-2077806209-682003330-1004\Dc180\Eminem - Encore [EAC]\eminem-encore(Cd1).jpg C:\RECYCLER\S-1-5-21-73586283-2077806209-682003330-1004\Dc180\Eminem - Encore [EAC]\eminem-encore(Cd2).jpg C:\RECYCLER\S-1-5-21-73586283-2077806209-682003330-1004\Dc180\Eminem - Encore [EAC]\eminem-encore(Front).jpg C:\RECYCLER\S-1-5-21-73586283-2077806209-682003330-1004\Dc180\Eminem - Encore [EAC]\eminem-encore(Inlay).jpg C:\RECYCLER\S-1-5-21-73586283-2077806209-682003330-1004\Dc180\Eminem - Encore [EAC]\eminem-encore(Inside).jpg C:\RECYCLER\S-1-5-21-73586283-2077806209-682003330-1004\Dc180\Eminem - Encore [EAC]\Encore.log C:\RECYCLER\S-1-5-21-73586283-2077806209-682003330-1004\Dc180\Eminem - Encore [EAC]\Thumbs.db C:\RECYCLER\S-1-5-21-73586283-2077806209-682003330-1004\Dc180\Eminem - Encore [EAC]\Thumbs.db:encryptable 0 bytes hidden from API |
|
|
|
|
10-01-2007, 08:31 PM
|
#7 (permalink) |
|
Asst Manager Security, Expert Analyst, Moderator, Security Team; Rangemaster, Moderator, TSF Academy
Join Date: May 2005
Posts: 24,353
OS: N/A
|
Re: Holy WOW!! Nothing gets rid of this ad/spyware!
Is that the whole log?
__________________
Question - what have you done for the community today? |
|
|
|
|
10-01-2007, 08:33 PM
|
#8 (permalink) |
|
Registered User
Join Date: Oct 2007
Posts: 9
OS: Win Xp SP2
|
Re: Holy WOW!! Nothing gets rid of this ad/spyware!
I am so sorry. I missed the last 4 lines but you already new that :)
scan completed successfully hidden processes: 0 hidden services: 0 hidden files: 412 |
|
|
|
|
10-01-2007, 08:36 PM
|
#9 (permalink) |
|
Asst Manager Security, Expert Analyst, Moderator, Security Team; Rangemaster, Moderator, TSF Academy
Join Date: May 2005
Posts: 24,353
OS: N/A
|
Re: Holy WOW!! Nothing gets rid of this ad/spyware!
The files that it brought back appears to be false positives. Those appear to be legitimate files.
Please tell me how the machine is behaving now.
__________________
Question - what have you done for the community today? |
|
|
|
|
10-01-2007, 08:46 PM
|
#10 (permalink) |
|
Registered User
Join Date: Oct 2007
Posts: 9
OS: Win Xp SP2
|
Re: Holy WOW!! Nothing gets rid of this ad/spyware!
100% a-okay now...
So my question is, what was it infected on my system and is there nothing readily available that can detect/remove it? I am honestly surprised that over 5 products could not remove this all of which are very popular and usually highly recommended. |
|
|
|
|
10-01-2007, 08:51 PM
|
#11 (permalink) | |
|
Asst Manager Security, Expert Analyst, Moderator, Security Team; Rangemaster, Moderator, TSF Academy
Join Date: May 2005
Posts: 24,353
OS: N/A
|
Re: Holy WOW!! Nothing gets rid of this ad/spyware!
Quote:
Your system is clean, kindly follow these simple steps in order to keep your computer clean and secure:
Update all these programs regularly. Make sure you update all the programs I have listed regularly. Without regular updates you WILL NOT be protected when new malicious programs are released. Follow this list and your potential for being infected again will reduce dramatically. Here are some additional utilities that will further enhance your safety.
To find out more information about how you got infected in the first place and some great guidelines to follow to prevent future infections you can read this article by Tony Klein - http://computercops.biz/postlite7736-.html After doing all these, your system will be optimised against future threats. It's okay to delete the Hijack This folder in a couple weeks if everything is working okay. Have a safe & happy computing day.  Kindly respond to this thread once more so we can mark this thread as resolved.
__________________
Question - what have you done for the community today? |
|
|
|
|
| Thread Tools | |
|
|
