Welcome to Tech Support Forum home to more then 136,000 problems solved. Issues have included: Spyware, Malware, Virus Issues, Windows, Microsoft, Linux, Networking, Security, Hardware, and Gaming Getting your problem solved is as easy as:
1. Registering for a free account
2. Asking your question
3. Receiving an answer

Registered members:
* Get free support
* Communicate privately with other members (PM).
* Removal of this message
* See fewer ads.
* And much more..

 


Want to know how to post a question? click here Having problems with spyware and pop-ups? First Steps
Go Back   Tech Support Forum > Security Center > Virus/Trojan/Spyware Help > Resolved HJT Threads
Reload this Page Constant IE pop ups...problem is, i use Firefox
User Name
Password
Site Map Register Donate Rules Blogs Mark Forums Read


Resolved HJT Threads Resolved spyware and popup issues.

 
 
LinkBack Thread Tools
Old 10-06-2007, 03:49 AM   #1 (permalink)
Registered User
 
Join Date: Oct 2007
Posts: 5
OS: XP home edition SP2


Constant IE pop ups...problem is, i use Firefox
So apart from the occasional deletion of email, i use firefox for just about all of my browsing. However, i've been getting very irritating pop ups in IE for the last month or so. Running scans like ad-aware and spybot don't seem to be doing anything for me. Anyway, here's a hijackthis log, please help.

Logfile of HijackThis v1.99.1
Scan saved at 11:39:17 PM, on 10/6/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AlienGUIse\wbload.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\ATKKBService.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\Program Files\NetLimiter 2 Pro\nlsvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ASUS\GamerOSD\GamerOSD.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Razer\Copperhead\razerhid.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Razer\Tarantula\razerhid.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\NetLimiter 2 Pro\NLClient.exe
C:\Program Files\AlienGUIse\AlienwareDock\ObjectDock.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Razer\Copperhead\razerofa.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Razer\Tarantula\razertra.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\WC3Banlist\WC3Banlist.exe
C:\Program Files\HijackThis\HijackThis.exe

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [ASUSGamerOSD] C:\Program Files\ASUS\GamerOSD\GamerOSD.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [razer] C:\Program Files\Razer\Copperhead\razerhid.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Tarantula] C:\Program Files\Razer\Tarantula\razerhid.exe
O4 - HKLM\..\Run: [AXIS TONS THE MP3] C:\Documents and Settings\All Users\Application Data\Readme Live Axis Tons\Cool sixth.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [skip htm] C:\DOCUME~1\Zak\APPLIC~1\PUREWI~1\jugs chic.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Startup: Alienware Dock.lnk = C:\Program Files\AlienGUIse\AlienwareDock\ObjectDock.exe
O4 - Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{E8ACBC48-6231-4476-81B8-76D0038F8296}: NameServer = 203.96.152.4,203.96.152.12
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
O20 - Winlogon Notify: WB - C:\Program Files\AlienGUIse\fastload.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NetLimiter (nlsvc) - Locktime Software - C:\Program Files\NetLimiter 2 Pro\nlsvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
Omnifire is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Bookmark on Thread SoupReddit!
Sponsored Links
Old 10-06-2007, 08:50 AM   #2 (permalink)
Manager, Security Center, TSF Academy; Analyst, Security Team
 
tetonbob's Avatar
 
Join Date: Jan 2005
Location: Transylvania County, North Carolina, USA
Posts: 32,568
OS: 2000 Pro; XP Pro; XP Home


Re: Constant IE pop ups...problem is, i use Firefox
Hello and Welcome. Please subscribe to this thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe.

Before beginning the fix, read this post completely. If there's anything that you do not understand, kindly ask your questions before proceeding. Ensure that there aren't any opened browsers when you are carrying out the procedures below. Save the following instructions in Notepad as this webpage would not be available when you're carrying out the fix.

It is IMPORTANT that you don't miss a step & perform everything in the correct order/sequence.

I need more information before continuing, please.

---------------------------------------------------------------------------------------------

You are using an outdated version of HijackThis. Please uninstall from Add/Remove programs, and delete your current version.

Next, download HijackThis to your desktop

Alternate link

This program will help us determine if there are any spyware/malware on your computer. Double-click on the file you just downloaded.
Click on the "Unzip" button to install. It will by default install to the directory - C:\Program Files\Trend Micro\HijackThis

Upon install, HijackThis should open for you.

Should it not open, navigate to C:\Program Files\Trend Micro\HijackThis and double click on HijackThis.exe

1. If it gives you an intro screen, just choose 'Do a system scan and save a logfile'.
2. If you don't get the intro screen, just hit Scan and then click on Save log.
3. Do not post that log, instead, do this next:

---------------------------------------------------------------------------------------------


Download Deckard's System Scanner (DSS) to your Desktop. Note: You must be logged onto an account with administrator privileges.
  1. Close all applications and windows.
  2. Double-click on dss.exe to run it, and follow the prompts.
  3. When the scan is complete, two text files will open - main.txt <- this one will be maximized and extra.txt <-this one will be minimized
  4. Copy (Ctrl+A then Ctrl+C) and paste (Ctrl+V) the contents of main.txt here.
  5. Please attach extra.txt to your post.
To attach a file to a new post, simply
  1. Click the[Manage Attachments] button under Additional Options > Attach Files on the post composition page, and
  2. copy and paste the following into the "Upload File from your Computer" box:
    C:\Deckard\System Scanner\extra.txt
  3. Click Upload.

What DSS will do:
  • create a new System Restore point in Windows XP and Vista.
  • clean your Temporary Files, Downloaded Program Files, and Internet Cache Files, and also empty the Recycle Bin on all drives.
  • check some important areas of your system and produce a report for your analyst to review. DSS automatically runs HijackThis for you, but it will also install and place a shortcut to HijackThis on your desktop if you do not already have HijackThis installed.

---------------------------------------------------------------------------------------------
__________________
Practice Safe Surfing
Because what you don't know, CAN hurt you.
Proud Member of ASAP since 2005
Proud Member of UNITE since 2006


Please do not ask for help via Private Message.
tetonbob is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Bookmark on Thread SoupReddit!
Old 10-09-2007, 12:58 AM   #3 (permalink)
Registered User
 
Join Date: Oct 2007
Posts: 5
OS: XP home edition SP2


Re: Constant IE pop ups...problem is, i use Firefox
Hi, sorry about this tremendously late reply but it seems i have another symptom. IE seems to have stopped working completely, I only noticed when MSN failed to open the hotmail window. It says 'Cannot find server or DNS error' but i haven't changed my DNS at all, so i can't imagine what it would be. I've followed your instructions though, and here's the report:

Deckard's System Scanner v20070905.67
Run by Zak on 2007-10-09 20:46:57
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

Successfully created a Deckard's System Scanner Restore Point.


-- Last 5 Restore Point(s) --
89: 2007-10-09 07:47:05 UTC - RP89 - Deckard's System Scanner Restore Point
88: 2007-10-06 05:20:35 UTC - RP88 - System Checkpoint
87: 2007-10-05 00:08:38 UTC - RP87 - System Checkpoint
86: 2007-10-02 03:05:10 UTC - RP86 - System Checkpoint
85: 2007-09-30 15:48:55 UTC - RP85 - System Checkpoint


-- First Restore Point --
1: 2007-08-18 01:23:02 UTC - RP1 - System Checkpoint


Backed up registry hives.
Performed disk cleanup.



-- HijackThis (run as Zak.exe) -------------------------------------------------

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:48:11 PM, on 10/9/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AlienGUIse\wbload.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ASUS\GamerOSD\GamerOSD.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Razer\Copperhead\razerhid.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Razer\Tarantula\razerhid.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\AlienGUIse\AlienwareDock\ObjectDock.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Razer\Copperhead\razerofa.exe
C:\WINDOWS\ATKKBService.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\Program Files\NetLimiter 2 Pro\nlsvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Razer\Tarantula\razertra.exe
C:\Program Files\NetLimiter 2 Pro\NLClient.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Documents and Settings\Zak\Desktop\dss.exe
C:\PROGRA~1\TRENDM~1\HIJACK~1\Zak.exe

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [ASUSGamerOSD] C:\Program Files\ASUS\GamerOSD\GamerOSD.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [razer] C:\Program Files\Razer\Copperhead\razerhid.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Tarantula] C:\Program Files\Razer\Tarantula\razerhid.exe
O4 - HKLM\..\Run: [AXIS TONS THE MP3] C:\Documents and Settings\All Users\Application Data\Readme Live Axis Tons\Cool sixth.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [skip htm] C:\DOCUME~1\Zak\APPLIC~1\PUREWI~1\jugs chic.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Default user')
O4 - Startup: Alienware Dock.lnk = C:\Program Files\AlienGUIse\AlienwareDock\ObjectDock.exe
O4 - Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{E8ACBC48-6231-4476-81B8-76D0038F8296}: NameServer = 203.96.152.4,203.96.152.12
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NetLimiter (nlsvc) - Locktime Software - C:\Program Files\NetLimiter 2 Pro\nlsvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe

--
End of file - 5943 bytes

-- File Associations -----------------------------------------------------------

.bat - batfile - DefaultIcon - C:\WINDOWS\system32\shell32.dll,71
.inf - inffile - DefaultIcon - C:\WINDOWS\system32\shell32.dll,69
.ini - inifile - DefaultIcon - C:\WINDOWS\system32\shell32.dll,69
.txt - txtfile - DefaultIcon - C:\WINDOWS\system32\shell32.dll,70


-- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------

R1 asuskbnt (Enhanced Display Driver Helper Service) - c:\windows\system32\drivers\atkkbnt.sys <Not Verified; ASUSTeK COMPUTER INC.; ASUS Help driver For Keyboard Service.>
R1 EIO - c:\windows\system32\drivers\eio.sys <Not Verified; ASUSTeK Computer Inc.; ASUS Kernel Mode Driver for NT>
R3 asusgsb (ASUS Virtual Video Capture Device Driver) - c:\windows\system32\drivers\asusgsb.sys <Not Verified; ASUSTeK Computer Inc.; ASUS Virtual Video Capture Device Driver>
R3 ASUSVRC (ASUSTeK Virtual Capture Device) - c:\windows\system32\drivers\asusvrc.sys <Not Verified; ASUSTeK COMPUTER INC.; Microsoft(R) Windows NT(R) Operating System>
R3 Video3D (ASUS Video3D Service) - c:\windows\system32\drivers\video3d32.sys <Not Verified; ASUSTeK COMPUTER INC.; ASUS Video3D driver>

S3 NPF (NetGroup Packet Filter Driver) - c:\windows\system32\drivers\npf.sys <Not Verified; CACE Technologies; WinPcap Netgroup Packet Filter Driver>
S3 Razerlow (Razer Copperhead Driver) - c:\windows\system32\drivers\razerlow.sys <Not Verified; Razer (Asia-Pacific) Pte Ltd; Diamondback USB Optical Mouse>


-- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------

R2 ATKKeyboardService (ATK Keyboard Service) - c:\windows\atkkbservice.exe <Not Verified; ASUSTeK COMPUTER INC.; ASUS Keyboard Service>
R2 nlsvc (NetLimiter) - "c:\program files\netlimiter 2 pro\nlsvc.exe" <Not Verified; Locktime Software; NetLimiter 2 Pro>

S3 rpcapd (Remote Packet Capture Protocol v.0 (experimental)) - "c:\program files\winpcap\rpcapd.exe" -d -f "c:\program files\winpcap\rpcapd.ini" <Not Verified; CACE Technologies; Remote Packet Capture Daemon>


-- Device Manager: Disabled ----------------------------------------------------

No disabled devices found.


-- Scheduled Tasks -------------------------------------------------------------

2007-10-09 20:00:00 264 --ah----- C:\WINDOWS\Tasks\A047FFEF9184778B.job


-- Files created between 2007-09-09 and 2007-10-09 -----------------------------

2007-10-09 20:41:13 0 d-------- C:\Program Files\Trend Micro
2007-10-07 14:44:06 0 d-------- C:\Program Files\SpeedSim
2007-10-06 11:18:42 253440 --a------ C:\WINDOWS\system32\glide2x.dll <Not Verified; 3Dfx Interactive, Inc.; Glide® for Voodoo Banshee®, Voodoo3®, & Velocity(tm) 100/200; Windows 95®, Windows 98®, & Windows NT®>
2007-10-06 11:18:42 0 d-------- C:\Cs1.6ÖÐÎÄ°æ
2007-10-04 2151 0 d-------- C:\Program Files\VentriloMIX
2007-09-30 22:44:50 0 d-------- C:\Documents and Settings\Zak\Application Data\pure window first
2007-09-30 12:21:54 0 d-------- C:\Program Files\pure window first
2007-09-24 03:56:37 0 d-------- C:\Documents and Settings\All Users\Application Data\Readme Live Axis Tons
2007-09-18 07:23:00 823296 --a------ C:\WINDOWS\system32\divx_xx0c.dll <Not Verified; DivX, Inc.; DivX®>
2007-09-18 07:23:00 823296 --a------ C:\WINDOWS\system32\divx_xx07.dll <Not Verified; DivX, Inc.; DivX®>
2007-09-18 07:22:58 802816 --a------ C:\WINDOWS\system32\divx_xx11.dll <Not Verified; DivX, Inc.; DivX?>
2007-09-18 07:22:58 739840 --a------ C:\WINDOWS\system32\DivX.dll <Not Verified; DivX, Inc.; DivX®>
2007-09-12 22:31:14 679936 --a------ C:\WINDOWS\system32\D3DX81ab.dll <Not Verified; Generated for JEDI. www.delphi-jedi.org; D3DX81>
2007-09-12 22:25:02 0 d-------- C:\Program Files\WinPcap
2007-09-12 22:24:52 0 d-------- C:\Program Files\WC3Banlist
2007-09-12 15:51:01 14592 --a------ C:\WINDOWS\system32\drivers\Usbicp.sys <Not Verified; Motorola; >
2007-09-12 15:50:43 0 d-------- C:\Documents and Settings\Zak\Application Data\InstallShield


-- Find3M Report ---------------------------------------------------------------

2007-10-09 18:32:16 0 d-------- C:\Program Files\Warcraft III
2007-10-09 08:12:06 0 d-------- C:\Documents and Settings\Zak\Application Data\AVG7
2007-10-06 01:13:40 0 d-------- C:\Documents and Settings\Zak\Application Data\uTorrent
2007-09-27 21:03:00 0 d--h----- C:\Program Files\InstallShield Installation Information
2007-09-27 20:45:20 0 d-------- C:\Program Files\Jade Empire
2007-09-24 04:02:15 0 d-------- C:\Program Files\DivX
2007-09-21 23:56:44 0 d-------- C:\Documents and Settings\Zak\Application Data\mIRC
2007-09-21 23:56:20 0 d-------- C:\Program Files\mIRC
2007-09-13 16:27:03 0 d-------- C:\Program Files\MSN Messenger
2007-09-12 15:50:56 0 d-------- C:\Program Files\Razer
2007-09-04 21:31:20 982 --a------ C:\WINDOWS\eReg.dat
2007-09-04 21:24:11 0 d-------- C:\Program Files\EA GAMES
2007-09-02 01:15:01 0 d-------- C:\Documents and Settings\Zak\Application Data\Adobe
2007-09-02 01:14:00 0 d-------- C:\Program Files\Common Files\Adobe
2007-09-02 01:13:42 0 d-------- C:\Program Files\Common Files
2007-08-30 22:42:59 0 d-------- C:\Program Files\VideoLAN
2007-08-30 22:36:32 0 d-------- C:\Documents and Settings\Zak\Application Data\Media Player Classic
2007-08-30 22:34:26 0 d-------- C:\Documents and Settings\Zak\Application Data\DivX
2007-08-30 02:22:41 75924 --a------ C:\WINDOWS\War3Unin.dat
2007-08-30 01:54:47 2829 --a------ C:\WINDOWS\War3Unin.pif
2007-08-30 01:54:47 139264 --a------ C:\WINDOWS\War3Unin.exe <Not Verified; Blizzard Entertainment; Warcraft III Uninstaller>
2007-08-30 01:22:43 0 d-------- C:\Program Files\Lavasoft
2007-08-30 01:21:48 0 d-------- C:\Program Files\Common Files\Wise Installation Wizard
2007-08-29 02:05:49 0 d-------- C:\Program Files\GameFace Messenger
2007-08-29 01:47:43 0 d-------- C:\Program Files\ASUS
2007-08-29 01:46:26 737280 --a------ C:\WINDOWS\iun6002.exe <Not Verified; Indigo Rose Corporation; Setup Factory 6.0 Runtime Module>
2007-08-26 09:50:50 0 d-------- C:\Program Files\Atari
2007-08-23 00:55:36 0 d-------- C:\Program Files\Ocean Technology
2007-08-23 00:31:40 0 d-------- C:\Documents and Settings\Zak\Application Data\Ventrilo
2007-08-22 23:42:14 0 d-------- C:\Program Files\AlienGUIse
2007-08-22 23:07:04 0 d-------- C:\Program Files\Common Files\Stardock
2007-08-21 13:26:52 196608 --a------ C:\WINDOWS\system32\dtu100.dll <Not Verified; DivX, Inc.; DivX, Inc. dtu100>
2007-08-21 13:26:52 81920 --a------ C:\WINDOWS\system32\dpl100.dll <Not Verified; DivX, Inc.; DivX, Inc. dpl100>
2007-08-21 06:56:58 0 d-------- C:\Documents and Settings\Zak\Application Data\MSNInstaller
2007-08-21 03:57:40 0 d-------- C:\Program Files\Java
2007-08-20 22:47:20 0 d-------- C:\Program Files\Microsoft Works
2007-08-20 22:47:05 0 d-------- C:\Program Files\MSBuild
2007-08-20 22:45:25 0 d-------- C:\Program Files\Microsoft.NET
2007-08-20 22:43:51 0 d-------- C:\Program Files\Microsoft Visual Studio 8
2007-08-20 22:31:31 0 d-------- C:\Program Files\DAEMON Tools
2007-08-20 22:23:54 0 d-------- C:\Documents and Settings\Zak\Application Data\Sun
2007-08-20 22:23:36 1277 --a------ C:\WINDOWS\mozver.dat
2007-08-20 22:22:35 0 d-------- C:\Program Files\Common Files\Java
2007-08-19 02:09:45 0 d-------- C:\Program Files\Common Files\ODBC
2007-08-19 02:09:43 0 d-------- C:\Program Files\Common Files\SpeechEngines
2007-08-19 02:09:19 62 --ahs---- C:\Documents and Settings\Zak\Application Data\desktop.ini
2007-08-18 22:26:08 0 d-------- C:\Program Files\Messenger
2007-08-18 22:09:18 0 dr-h----- C:\Documents and Settings\Zak\Application Data\SecuROM
2007-08-18 16:44:16 0 d-------- C:\Documents and Settings\Zak\Application Data\Macromedia
2007-08-18 16:27:45 0 d-------- C:\Program Files\Windows Media Connect 2
2007-08-18 16:02:04 0 d-------- C:\Program Files\Combined Community Codec Pack
2007-08-18 15:48:54 0 d-------- C:\Documents and Settings\Zak\Application Data\Locktime
2007-08-18 15:47:32 0 d-------- C:\Program Files\NetLimiter 2 Pro
2007-08-18 15:45:29 0 d-------- C:\Documents and Settings\Zak\Application Data\WinRAR
2007-08-18 15:40:26 0 d-------- C:\Program Files\uTorrent
2007-08-18 15:38:14 0 --a------ C:\WINDOWS\nsreg.dat
2007-08-18 15:38:11 0 d-------- C:\Documents and Settings\Zak\Application Data\Mozilla
2007-08-18 1514 98304 --a------ C:\WINDOWS\system32\CmdLineExt.dll <Not Verified; Sony DADC Austria AG.; >
2007-08-18 14:45:33 0 d-------- C:\Program Files\Realtek Sound Manager
2007-08-18 14:45:33 0 d-------- C:\Program Files\AvRack
2007-08-18 14:45:09 0 d-------- C:\Program Files\Common Files\InstallShield
2007-08-18 14:44:50 0 d-------- C:\Program Files\AMD
2007-08-18 14:41:43 0 d-------- C:\Program Files\Hewlett-Packard
2007-08-18 14:41:26 0 d--h----- C:\Program Files\Zenographics
2007-08-18 14:32:39 0 d-------- C:\Program Files\Common Files\Nero
2007-08-18 14:31:18 0 d-------- C:\Program Files\Ahead
2007-08-18 14:31:08 0 d-------- C:\Program Files\Common Files\Ahead
2007-08-18 14:27:01 0 d-------- C:\Program Files\My Company Name
2007-08-18 14:22:51 0 d-------- C:\Documents and Settings\Zak\Application Data\Identities
2007-08-18 14:19:01 0 d-------- C:\Program Files\microsoft frontpage
2007-08-18 14:18:47 0 -rahs---- C:\MSDOS.SYS
2007-08-18 14:18:47 0 -rahs---- C:\IO.SYS
2007-08-18 14:18:47 0 --a------ C:\CONFIG.SYS
2007-08-18 14:18:47 0 --a------ C:\AUTOEXEC.BAT
2007-08-18 14:17:38 0 d--h----- C:\Program Files\WindowsUpdate
2007-08-18 14:16:58 0 d-------- C:\Program Files\Common Files\MSSoap
2007-08-18 14:16:51 0 d-------- C:\Program Files\Movie Maker
2007-08-18 14:16:31 21640 --a------ C:\WINDOWS\system32\emptyregdb.dat
2007-08-18 14:15:51 0 d-------- C:\Program Files\Online Services
2007-08-18 14:15:43 0 d-------- C:\Program Files\MSN Gaming Zone
2007-08-18 14:15:37 0 d-------- C:\Program Files\Windows NT
2007-08-16 11:33:14 3596288 --a------ C:\WINDOWS\system32\qt-dx331.dll
2007-08-16 11:30:26 12288 --a------ C:\WINDOWS\system32\DivXWMPExtType.dll


-- Registry Dump ---------------------------------------------------------------

*Note* empty entries & legit default entries are not shown


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [05/11/2007 11:03 AM]
"nwiz"="nwiz.exe" [05/11/2007 11:03 AM C:\WINDOWS\system32\nwiz.exe]
"ASUSGamerOSD"="C:\Program Files\ASUS\GamerOSD\GamerOSD.exe" [06/01/2007 10:37 AM]
"SoundMan"="SOUNDMAN.EXE" [12/22/2004 10:09 PM C:\WINDOWS\SOUNDMAN.EXE]
"razer"="C:\Program Files\Razer\Copperhead\razerhid.exe" [10/08/2005 05:27 PM]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe" [07/12/2007 05:00 AM]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [05/11/2007 11:03 AM]
"AVG7_CC"="C:\PROGRA~1\Grisoft\AVG7\avgcc.exe" [09/14/2007 05:22 PM]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [05/11/2007 04:06 AM]
"Tarantula"="C:\Program Files\Razer\Tarantula\razerhid.exe" [05/07/2007 11:52 AM]
"AXIS TONS THE MP3"="C:\Documents and Settings\All Users\Application Data\Readme Live Axis Tons\Cool sixth.exe" [10/09/2007 03:38 PM]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [08/05/2004 01:00 AM]
"skip htm"="C:\DOCUME~1\Zak\APPLIC~1\PUREWI~1\jugs chic.exe" []
"msnmsgr"="C:\Program Files\MSN Messenger\msnmsgr.exe" [01/19/2007 01:54 PM]

C:\Documents and Settings\Zak\Start Menu\Programs\Startup\
Alienware Dock.lnk - C:\Program Files\AlienGUIse\AlienwareDock\ObjectDock.exe [8/22/2007 11:07:05 PM]
OneNote 2007 Screen Clipper and Launcher.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE [10/26/2006 9:24:54 PM]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\WB]
C:\Program Files\AlienGUIse\fastload.dll 12/21/2001 12:34 AM 24576 C:\Program Files\AlienGUIse\fastload.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"appinit_dlls"=wbsys.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AAWTray]
C:\Program Files\Lavasoft\Ad-Aware 2007\AAWTray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUS SmartDoctor]
C:\Program Files\ASUS\SmartDoctor\SmartDoctor.exe /start

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools]
"C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GameFace Messenger]
C:\Program Files\GameFace Messenger\GameFace.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
"C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\WINDOWS\system32\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OrderReminder]
C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PWRISOVM.EXE]
C:\Program Files\PowerISO\PWRISOVM.EXE


[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{f5e4f096-4d2c-11dc-b94b-806d6172696f}]
AutoRun\command- D:\autoplay.exe




-- Hosts -----------------------------------------------------------------------

127.0.0.1 bin.errorprotector.com ## added by CiD
127.0.0.1 br.errorsafe.com ## added by CiD
127.0.0.1 br.winantivirus.com ## added by CiD
127.0.0.1 br.winfixer.com ## added by CiD
127.0.0.1 cdn.drivecleaner.com ## added by CiD
127.0.0.1 cdn.errorsafe.com ## added by CiD
127.0.0.1 cdn.winsoftware.com ## added by CiD
127.0.0.1 de.errorsafe.com ## added by CiD
127.0.0.1 de.winantivirus.com ## added by CiD
127.0.0.1 download.cdn.drivecleaner.com ## added by CiD

60 more entries in hosts file.


-- End of Deckard's System Scanner: finished at 2007-10-09 20:50:06 ------------
Attached Files
File Type: txt extra.txt (17.8 KB, 1 views)
Omnifire is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Bookmark on Thread SoupReddit!
Old 10-09-2007, 10:10 AM   #4 (permalink)
Manager, Security Center, TSF Academy; Analyst, Security Team
 
tetonbob's Avatar
 
Join Date: Jan 2005
Location: Transylvania County, North Carolina, USA
Posts: 32,568
OS: 2000 Pro; XP Pro; XP Home


Re: Constant IE pop ups...problem is, i use Firefox
Not sure if this will solve the new IE issue, but it is the cause of the popups.

Before beginning the fix, read this post completely. If there's anything that you do not understand, kindly ask your questions before proceeding. Ensure that there aren't any opened browsers when you are carrying out the procedures below. Save the following instructions in Notepad as this webpage would not be available when you're carrying out the fix.

It is IMPORTANT that you don't miss a step & perform everything in the correct order/sequence.

---------------------------------------------------------------------------------------------

Download HostsXpert.
  • Unzip HostsXpert to it's own folder.
  • Run HostsXpert.exe
  • Click "Make Writable?" in the upper left corner.
  • Click "Restore MS Hosts file" and then click OK.
  • Close HostsXpert.
  • Note: If a custom Hosts file was in place, you'll have to edit those entries back in.

---------------------------------------------------------------------------------------------

Please Download NoLop to your desktop from here or here
  • First close any other programs you have running as this will require a reboot
  • Double click NoLop.exe to run it
  • Now click the button labelled "Search and Destroy"
    <<your computer will now be scanned for infected files>>
  • When scanning is finished you will be prompted to reboot only if infected, Click OK
  • Now click the "REBOOT" Button.
  • A Message should popup from NoLop. If not, double click the program again and it will finish Please Post the contents of C:\NoLop.log in your next reply at the end of this fix.
--If you receive an error, "mscomctl.ocx or one of its dependencies are not correctly registered," please download mscomctl.ocx to your system32 folder then rerun the program. --

---------------------------------------------------------------------------------------------


Uninstall the following via the Add/Remove Panel (Start->(Settings)->Control Panel->Add/Remove Programs) if they exist:

CiD Help

---------------------------------------------------------------------------------------------

Open HijackThis and click on 'Do a System Scan Only'. Check the following entries if they exist (make sure you do not miss any) and click Fix Checked

O4 - HKLM\..\Run: [AXIS TONS THE MP3] C:\Documents and Settings\All Users\Application Data\Readme Live Axis Tons\Cool sixth.exe
O4 - HKCU\..\Run: [skip htm] C:\DOCUME~1\Zak\APPLIC~1\PUREWI~1\jugs chic.exe

Close HijackThis now.

---------------------------------------------------------------------------------------------

Go to My Computer->Tools->Folder Options->View tab:
* Under the Hidden files and folders heading, select Show hidden files and folders.
* Uncheck the Hide protected operating system files (recommended) option.
* Also make sure there is no checkmark beside Hide file extensions for known file types
* Click Yes to confirm and then click OK.


Delete the following if they exist:

C:\Documents and Settings\Zak\Application Data\pure window first
C:\Program Files\pure window first
C:\Documents and Settings\All Users\Application Data\Readme Live Axis Tons

---------------------------------------------------------------------------------------------

Download fl.zip
Extract the contents to a new folder on your Desktop.
Within the folder, locate & double-click fl.bat.
It should produce a report at c:\findlop.txt. Post the contents of the report in your next reply

---------------------------------------------------------------------------------------------

Open HijackThis and click on 'Do a System Scan and save a Logfile'. Save the log file and post it here.

---------------------------------------------------------------------------------------------

So I need logs from NoLOP, findlop and HijackThis


Do you have any idea what this folder is?

C:\Cs1.6ÖÐÎÄ°æ

I believe it's related to this program:

Esai Cs1.6

Do you recognize this as something you've intentionally installed?
__________________
Practice Safe Surfing
Because what you don't know, CAN hurt you.
Proud Member of ASAP since 2005
Proud Member of UNITE since 2006


Please do not ask for help via Private Message.
tetonbob is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Bookmark on Thread SoupReddit!
Old 10-09-2007, 01:36 PM   #5 (permalink)
Registered User
 
Join Date: Oct 2007
Posts: 5
OS: XP home edition SP2


Re: Constant IE pop ups...problem is, i use Firefox
Ok, it turns out i blocked IE with my firewall out of desperation. BUt i carried out the steps after unblocking. I installed the CS at a lan where some people didn't have steam. AT any rate, here are the logs:

NoLop! Log by Skate_Punk_21

Fix running from: C:\Documents and Settings\Zak\Desktop
[10/10/2007]
[9:21:02 AM]

---Infection Files Found/Removed---
C:\WINDOWS\tasks\A047FFEF9184778B.job

Beginning Removal...
Rebooting...
Removing Lop's Leftover Files/Folders...
Editing Registry...
**Fix Complete!**

---Listing AppData sub directories---

C:\Documents and Settings\All Users\Application Data\Adobe
C:\Documents and Settings\All Users\Application Data\Avg7
C:\Documents and Settings\All Users\Application Data\Google
C:\Documents and Settings\All Users\Application Data\Grisoft
C:\Documents and Settings\All Users\Application Data\Lavasoft
C:\Documents and Settings\All Users\Application Data\Locktime
C:\Documents and Settings\All Users\Application Data\Microsoft
C:\Documents and Settings\All Users\Application Data\Microsoft Help
C:\Documents and Settings\All Users\Application Data\Nview_profiles -- EMPTY Directory
C:\Documents and Settings\All Users\Application Data\Readme Live Axis Tons
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
C:\Documents and Settings\Default User\Application Data\Microsoft
C:\Documents and Settings\Localservice\Application Data\Avg7 -- EMPTY Directory
C:\Documents and Settings\Localservice\Application Data\Microsoft
C:\Documents and Settings\Networkservice\Application Data\Microsoft
C:\Documents and Settings\Zak\Application Data\Adobe
C:\Documents and Settings\Zak\Application Data\Avg7
C:\Documents and Settings\Zak\Application Data\Divx
C:\Documents and Settings\Zak\Application Data\Identities
C:\Documents and Settings\Zak\Application Data\Installshield
C:\Documents and Settings\Zak\Application Data\Locktime
C:\Documents and Settings\Zak\Application Data\Macromedia
C:\Documents and Settings\Zak\Application Data\Media Player Classic
C:\Documents and Settings\Zak\Application Data\Microsoft
C:\Documents and Settings\Zak\Application Data\Mirc
C:\Documents and Settings\Zak\Application Data\Mozilla
C:\Documents and Settings\Zak\Application Data\Msninstaller
C:\Documents and Settings\Zak\Application Data\Pure Window First -- EMPTY Directory
C:\Documents and Settings\Zak\Application Data\Securom
C:\Documents and Settings\Zak\Application Data\Sun
C:\Documents and Settings\Zak\Application Data\Utorrent
C:\Documents and Settings\Zak\Application Data\Ventrilo
C:\Documents and Settings\Zak\Application Data\Winrar -- EMPTY Directory





Volume in drive C has no label.
Volume Serial Number is 00EB-4F53

Directory of C:\Documents and Settings\All Users\Application Data

09/02/2007 01:14 AM <DIR> Adobe
08/30/2007 05:16 PM <DIR> AVG7
08/18/2007 03:50 PM <DIR> Google
08/30/2007 01:39 AM <DIR> Grisoft
08/30/2007 01:22 AM <DIR> Lavasoft
08/18/2007 03:47 PM <DIR> Locktime
09/19/2007 07:07 AM <DIR> Microsoft Help
08/21/2007 04:51 PM <DIR> nView_Profiles
08/30/2007 01:33 AM <DIR> Spybot - Search & Destroy
08/18/2007 04:26 PM <DIR> Windows Genuine Advantage
0 File(s) 0 bytes
10 Dir(s) 66,140,925,952 bytes free
Volume in drive C has no label.
Volume Serial Number is 00EB-4F53

Directory of C:\Documents and Settings\Zak\Application Data

09/02/2007 01:15 AM <DIR> Adobe
10/10/2007 09:10 AM <DIR> AVG7
08/30/2007 10:34 PM <DIR> DivX
08/18/2007 02:22 PM <DIR> Identities
09/12/2007 03:50 PM <DIR> InstallShield
08/18/2007 03:48 PM <DIR> Locktime
08/18/2007 04:44 PM <DIR> Macromedia
08/30/2007 10:36 PM <DIR> Media Player Classic
09/21/2007 11:56 PM <DIR> mIRC
08/18/2007 03:38 PM <DIR> Mozilla
08/21/2007 06:56 AM <DIR> MSNInstaller
08/20/2007 10:23 PM <DIR> Sun
10/10/2007 02:18 AM <DIR> uTorrent
08/23/2007 12:31 AM <DIR> Ventrilo
08/18/2007 03:45 PM <DIR> WinRAR
0 File(s) 0 bytes
15 Dir(s) 66,140,921,856 bytes free
Volume in drive C has no label.
Volume Serial Number is 00EB-4F53

Directory of C:\Documents and Settings\Default User\Application Data

08/19/2007 02:09 AM <DIR> .
08/19/2007 02:09 AM <DIR> ..
08/19/2007 02:09 AM 62 desktop.ini
1 File(s) 62 bytes
2 Dir(s) 66,140,921,856 bytes free
Volume in drive C has no label.
Volume Serial Number is 00EB-4F53

Directory of C:\Documents and Settings\LocalService\Application Data

Volume in drive C has no label.
Volume Serial Number is 00EB-4F53

Directory of C:\Documents and Settings\NetworkService\Application Data

[TRACE] Enumerating jobs and queues





Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:31:40 AM, on 10/10/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AlienGUIse\wbload.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ASUS\GamerOSD\GamerOSD.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Razer\Copperhead\razerhid.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Razer\Tarantula\razerhid.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\AlienGUIse\AlienwareDock\ObjectDock.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Razer\Copperhead\razerofa.exe
C:\WINDOWS\ATKKBService.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\Program Files\NetLimiter 2 Pro\nlsvc.exe
C:\Program Files\Razer\Tarantula\razertra.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\NetLimiter 2 Pro\NLClient.exe
C:\Program Files\Microsoft Office\Office12\WINWORD.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\cmd.exe
C:\WINDOWS\system32\notepad.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [ASUSGamerOSD] C:\Program Files\ASUS\GamerOSD\GamerOSD.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [razer] C:\Program Files\Razer\Copperhead\razerhid.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Tarantula] C:\Program Files\Razer\Tarantula\razerhid.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Default user')
O4 - Startup: Alienware Dock.lnk = C:\Program Files\AlienGUIse\AlienwareDock\ObjectDock.exe
O4 - Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{E8ACBC48-6231-4476-81B8-76D0038F8296}: NameServer = 203.96.152.4,203.96.152.12
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NetLimiter (nlsvc) - Locktime Software - C:\Program Files\NetLimiter 2 Pro\nlsvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe

--
End of file - 5752 bytes
Omnifire is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Bookmark on Thread SoupReddit!
Old 10-09-2007, 02:01 PM   #6 (permalink)
Manager, Security Center, TSF Academy; Analyst, Security Team
 
tetonbob's Avatar
 
Join Date: Jan 2005
Location: Transylvania County, North Carolina, USA
Posts: 32,568
OS: 2000 Pro; XP Pro; XP Home


Re: Constant IE pop ups...problem is, i use Firefox
Good work. Your popups should be a thing of the past.

Please run this online scan to help look for remnants.

Establish an internet connection & perform an online scan with Internet Explorer at Kaspersky Online Scanner

Answer Yes, when prompted to install an ActiveX component.
  • The program will then begin downloading the latest definition files.
  • Once the files have been downloaded click on NEXT
  • Locate the Scan Settings button & configure to:
    • Scan using the following Anti-Virus database:
      • Extended
    • Scan Options:
      • Scan Archives
      • Scan Mail Bases
  • Click OK & have it scan My Computer
  • Once the scan is complete, it will display if your system has been infected. It does not provide an option to clean/disinfect. We only require a report from it.
  • Click the Save as Text button to save the file to your desktop so that you may post it in your next reply
* Turn off the real time scanner of any existing antivirus program while performing the online scan

Note for Internet Explorer 7 users: If at any time you have trouble viewing the accept button of the licence, click on the Zoom tool located at the bottom right of the IE window and set the zoom to 75 %. Once the license accepted, reset to 100%.

---------------------------------------------------------------------------------------------
__________________
Practice Safe Surfing
Because what you don't know, CAN hurt you.
Proud Member of ASAP since 2005
Proud Member of UNITE since 2006


Please do not ask for help via Private Message.
tetonbob is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Bookmark on Thread SoupReddit!
Old 10-10-2007, 09:41 PM   #7 (permalink)
Registered User
 
Join Date: Oct 2007
Posts: 5
OS: XP home edition SP2


Re: Constant IE pop ups...problem is, i use Firefox
Right here is the log:

KASPERSKY ONLINE SCANNER REPORT
Thursday, October 11, 2007 5:40:16 PM
Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 11/10/2007
Kaspersky Anti-Virus database records: 430669
Scan Settings
Scan using the following antivirus database extended
Scan Archives true
Scan Mail Bases true
Scan Target My Computer
A:\
C:\
D:\
E:\
F:\
Scan Statistics
Total number of scanned objects 41147
Number of viruses found 3
Number of infected objects 100
Number of suspicious objects 0
Duration of the scan process 01:02:36

Infected Object Name Virus Name Last Action
C:\Deckard\System Scanner\20071009205854\backup\DOCUME~1\Zak\LOCALS~1\Temp\bis22.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\Deckard\System Scanner\20071009205854\backup\DOCUME~1\Zak\LOCALS~1\Temp\sta1.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\avg7log.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\avg7log.log.lck Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-00C5EC81-024E-4766-8A8B-995B230BC1FA.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-017AC72D-C457-4B7E-BD97-88CC79E33EDD.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-0187D588-EB70-4047-BC4D-FEC26E5E6498.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-019013A9-E98C-45FB-BB5C-864F4A188391.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-032253AC-F432-4E77-8FBD-A4EE9920410C.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-04DCCB29-603F-497F-AA25-E662E6C67CBA.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-0649DE7F-61E5-485C-8A2D-6A28D1A53C7D.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-06C3BB9E-7262-4BA9-B2DA-0860D7E23C58.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-0706C66F-C2AC-4306-9FCC-DBE6F4972C8B.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-07951712-AD60-4F7F-AC02-725675334A64.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-08F033BF-C1E4-4C83-BDFB-18AB1E059B97.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-0CFE0592-52CF-4A26-AA1F-9803F7EDD405.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-0DB0D961-A851-46F4-A069-9A68B4C8DD36.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-0EF22149-F237-4284-97FD-45E985AA417A.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-10EB3A11-A176-4FC6-81DB-CF40502B9E5B.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-11021D48-BEAC-4EDC-87A7-1975DBBF0E4D.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-12DCCF71-23AC-4230-9BD8-4055DBE4F3DC.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-14169B81-9BB9-41D6-A479-5DF4773AD30C.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-1463C5CA-1157-49D1-9449-115962074C93.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-15122121-7DAA-42E1-AA98-67A5FCA89FD2.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-17041D6D-721E-424A-A6AF-8EC04253CFEC.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-17E7BF55-9F27-41E0-9F90-7FBA1916F4EC.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-190CFDB1-6A2D-46F2-912F-D3815C5B24F3.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-192F93FA-4A11-40AF-9B10-62AD7F7BC116.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-19374A37-0398-480C-B039-AFB209EF5A3D.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-1A0AE401-921E-4E7E-875C-E4E0DBFA015E.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-1A595538-6216-4D39-BB20-623379FCDFD0.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-1C63298C-E3E3-4008-8039-01515C4FCB29.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-1CC534B8-8707-4013-A5DF-54FF0F1F4C06.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-1F9B5FCA-EB92-46D0-B572-7C9B5ECCEF7C.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-207D6892-B1ED-4544-9584-005D2C73F0B9.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-21E1131D-FC57-4C4F-B354-BD114FEEC0FC.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-242A482B-F56F-4C3D-98A5-31793B6B59DB.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-253BA43E-3D10-4FBB-8E81-8C66F9F4767D.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-25C947A1-8992-40EB-9E08-F08B7705D0E5.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-26FBC00E-358E-4A71-92DF-D6B72911AB4A.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-28ACFBAC-AB9D-4C82-8EE6-0EF46F4ED980.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-292ED21E-A9BF-4B46-9BA9-0D958376FE8E.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-29EC910B-122F-4FA2-8425-5F31E289BE7B.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-2A775091-10DD-42F6-A861-282249A570FF.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-2A9B8A67-6A90-4C94-94C4-98E184AE3D22.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-2E20FFE3-17FF-4AF8-AF41-0F7358B57B12.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-2F05FABC-4FE5-4137-8133-506CB2452DF7.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-3060ACF5-C60E-41C8-B941-C837E0DFE970.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-306104FF-A22B-4F85-954C-2760FBAFC1CC.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-30F39D29-E5E3-4480-BFAA-2219AEEFAC04.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-30F88E66-5E22-4CBE-B538-B3C189814D69.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-31011252-1655-4AA3-819C-A569429EF15B.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-323F0D43-81BA-4A8A-8A82-26742B29336E.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-340F7842-D186-42B1-AC0B-94E39FEE8AE9.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-35C7EB88-B2FE-4940-873D-4AE4CB159918.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-36776766-E334-4EEA-B91A-35CE64FC972C.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-369E3D94-2C1C-437A-921D-EF1A50A47881.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-36ABE765-DE66-433D-A460-8A836EB3C732.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-37FC0A00-3470-4FB5-94F2-BE75CE814CEF.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-3856FC23-12E5-44F3-A8E1-0F1EA9146DC0.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-3898D0EE-D33A-4A81-839E-8053CC92D71E.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-3912C264-5A63-4349-90B6-837DD5B8D08B.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-3968A3EC-EDEB-48B8-8A5B-034F8B0D1B56.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-3C045DE6-0DC2-4EF5-B1DE-7FB466E17D01.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-3D783407-F68A-49EB-97FD-D25676BFEEBF.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-3D8AC330-07F5-460C-A810-307EB62E9193.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-4125BF2F-29F2-49F7-8538-B0CD92FFB108.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-423FBC95-F551-471F-BEDC-7077EEFD50D6.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-42F20292-A20B-4AA6-8420-BFB8E6CFC0DB.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-43E8EDDE-F7B2-4F8D-B2DC-7653D2E209C3.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-447FDEF0-DE5B-4E70-8773-CC21A1AD4AC4.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-44A36729-1360-4396-B8C9-975BA1153140.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-49B99D7F-2C6A-4E88-8EA7-A7B8E88D8B70.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-4C5105CA-68B6-4A42-98F0-3F5B2FDE68E7.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-504B0937-FC99-4B8C-9A19-E38AB7357E6C.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-508392C2-731A-4204-87F9-7F73D6663A49.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-51A71F3A-ACB4-40E0-96EF-115EB091CA78.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-51D61A11-3403-42C7-807A-8A878032F4BC.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-51D73B97-4388-4351-B4F0-DEF94E79B6AA.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-526BE39F-96B3-471D-93E8-7934F3B5500F.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-5287915F-FC90-4CAB-BA96-4F501005F114.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-539736D1-C743-4803-967B-6AF7130F456A.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-53DF3874-213F-41F1-AE37-4383245B0689.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-54254853-1C5A-4FDB-AA48-BD5C17CD44CD.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-54508FFC-65DD-4549-A635-9E3DB474EBB7.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-5461DED6-3AED-4431-A2C4-4523111C9E87.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-551E8F11-3FAA-41C7-B880-37929856302B.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-557289C4-A561-4658-A261-6857DF77485B.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-56881DF9-E6F1-4E00-93A3-33572C54CECB.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-5A394644-59DE-4FE5-A4E7-38557A611A15.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-5AB5ACA0-592A-4633-A779-E9B1453E5D5A.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-5AF75B99-5BA6-4693-9CF2-2E0A4C09EE48.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-5C107515-3713-4575-8DAB-E03133337B98.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-5C38B61C-A122-4C14-BE53-EEF4526A45E5.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-5C8A82EA-4091-47FB-8B2F-2A7E375AA9AA.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-5D2BEA4A-1BF4-4EDC-8DBC-D1E3B40A42CC.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-5EB966C7-D9B1-4818-AA90-0F102FFFFB60.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-5F2D03BC-FCAB-4538-BCC2-34BAB41F9498.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-60159679-AD4F-4246-97D1-497BFEDE36B9.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-6534130C-EAB9-41EA-8C3C-2874C64692B7.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-695CD44D-A41B-41FC-9774-E20519D74C4A.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-69825C26-B432-4CD9-A23F-21E487A506DC.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-699049D4-B87D-42EF-84D3-39B4DB70B4FC.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-6995C0D9-54B3-4078-8453-FE4EC6ACB6AB.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-6A081951-ADD6-46FA-AC47-3B9AAE27C82C.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-6A6BFB5A-4E81-471C-A2E9-2CB85B258C98.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-6B90BCC0-9BCD-4DA1-A335-C8243B54F01C.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-6D67EFEA-899B-4A06-85D7-CF9D6C547A69.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-6E4FA0E6-30D4-4B26-8FF5-86461FDC4C29.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-6F4489CA-1A5E-45F3-AC8A-E13F1E6BF835.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-701BEC6C-2CB0-4BFA-99D2-EB4462721ABA.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-70862B5E-D32A-4BF5-95A6-07700DF3DC1C.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-717E3C98-8F16-4F7E-BA97-1757C4C66777.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-7201B58B-4DBD-451C-B378-FA7AAD9BC120.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-72C291E4-9F29-409F-B35D-4F831E1B7E80.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-73F68E20-20F2-4369-A890-81075D1A48E5.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-74A14E3D-B5DA-4134-A6D6-7F1815DDA210.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-7631FAF4-83D5-4C84-A570-57E58F6542D5.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-76874200-858B-4BED-A180-5E5E5BED5FED.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-768E7FE1-DD00-47B0-B361-C9A41ABFE103.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-76C3102E-76BB-49B1-B52D-370D7390E0CB.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-770D741A-F59E-4480-97B2-3F3E547D529B.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-77F757D2-BEC8-491D-915B-E64F6B50FA81.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-7978708B-BBF5-4B75-9C84-61D376FC8C73.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-79E4D4DE-1062-4909-A98F-F1B5A3E970FF.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-7B9D961A-7996-47B1-8FA2-7586BB319DB0.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-7CBD96D3-D1C1-44CE-B94B-4C5DFE5B867A.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-7E937513-7ECD-4BC8-A4AA-9AC5DD63A9AC.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-7EB9BC78-6DF8-42A0-93D7-DFCB0073D5B0.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-817635F1-F6BA-444A-B15C-796C5C76254E.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-81E2AE0B-AA28-4B0C-86FE-D0628ED48C4E.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-82478AED-EB66-4BA0-B1DA-EF045FCF1205.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-8478F2E5-8E92-48DB-B51A-F062E9E1A38E.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-84D4E996-D729-41CA-B57F-11F1EC5959D4.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-84E38307-964D-48D1-9C98-302B3189B6FA.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-858AC889-CB78-4DAB-98BA-790066A73AA2.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-85CD9DD7-7E4C-404B-B3D3-50CDD1BE2D76.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-8604AF44-7C06-4BF9-97FF-A761E0ACF0D6.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-87395CF0-3562-4C0F-AAEB-643665E85E49.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-887A507F-A477-4458-A592-B1DB8BD253E4.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-891DACA3-2B0D-41BE-B404-EE1966880104.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-898FA4C0-0A4E-4884-8A38-09FEFD70025A.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-89B5F808-E545-4EEB-954A-17D8C12E59FC.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-89EF9061-D431-4DCA-AC37-4A615745F151.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-8C889DB9-97BE-4F6D-BCD8-96DDF03779A1.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-8D0AD85B-B2A3-451D-A0D9-17C56AE7C707.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-8D20F0AC-E806-4DB2-85FF-DF4BA63BDA35.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-8F8DF45D-86F6-474E-BC87-B54963365B70.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-8FB35CCB-627B-4008-A57A-94D94EC92C81.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-8FB89A5E-081B-4882-8FFD-64A57E5D2D2F.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-92B8BAF0-6E83-48B6-8803-F27AC2C377F1.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-934301D0-F4C2-4F1E-9783-142CBD5F35CC.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-934C7E0A-F090-41F6-811A-1AFD7E57CA10.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-939D7BAD-DD1A-418A-8A8F-3F0AF7438F09.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-94018EE0-8A03-4E36-ADFD-4673A7192515.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-956D295E-AE5A-4E94-A788-BD40B1A3E0BF.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-95796758-8493-44FD-A8AA-DE74AA305778.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-97FD56D2-E110-4E3F-A992-66480E88802B.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-986A4CD3-6AD6-4C83-BD21-936C1711D71F.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-986EB5A3-C153-40F0-B96E-ADB0110F5BCD.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-9AC16CAF-B5D3-44A6-9709-AABB63C58AF9.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-9D9223DB-0F28-4676-80C3-0977FF8C6A28.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-9E4A54BC-3314-4DC2-9282-49A2BF6DBE3F.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-9ECF7C46-340D-456E-B48A-D546F2A0166F.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-9FA058C0-C812-45A0-934A-F106C54C2F4D.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-A06BE348-1596-41BE-A28C-A060C2BF6D7B.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-A3B48C58-F045-4275-A481-D6FA3D90B76C.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-A501F67E-719F-4730-888C-A02D989C74E9.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-A50E2546-F337-4080-9B1D-6340745942B6.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-A623B876-8E20-413E-8758-A524C7A26D2D.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-A6294AA2-1C34-4421-AB86-4D309E98B916.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-A6ACD05C-1B77-4267-9FE2-A803AA32C5F6.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-A6C61619-C0DF-4401-8A9C-A33C6CEA586A.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-A74771DD-BB2E-4A86-A50D-2501DD36E03D.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-A75380E9-F544-495F-94D7-9762B0E6DDB2.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-A990B8CB-1D47-49DC-A368-10BBBE86C20C.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-AAE4AB73-49C7-41E1-9CAB-BA91AFF870FF.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-ABA67268-57DE-4CCE-AA4D-F076D2E715F7.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-ABBEA8D8-6B88-4CA4-9593-8690502543F5.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-ACB6C120-2102-4F83-978B-90CF830B8982.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-AD849E8D-437B-4E33-928A-4A0EAD41895D.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-B0F5CAE2-B921-470F-8240-4B1BE6085C88.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-B245FBDB-8B16-49CB-B180-83F6E8D30DD1.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-B250BEEF-9B07-42FB-B58D-A00D9F5CE558.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-B2917A06-9797-4A56-B0FF-1069F5C8CDBE.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-B60BD95B-98C7-4FE9-865A-FDA096219D12.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-B8E8856D-0B99-4900-B10F-6890E40FB38A.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-B99BED5E-0AAA-43CA-9EE0-D460DE2379AA.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-BACE8F0C-6059-4CD5-9838-F41890EE465B.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-BC9C6111-C92B-436D-8FDA-E8BE5DDEE0C5.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-BDD05435-3C39-41B5-88BF-18B897A68B18.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-BEAAAC53-D1DC-4181-AC4B-F88B2D7FCC55.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-BF765C56-773F-4E22-B9E0-891F90700195.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-C0348436-7BBC-4847-8793-C90DFC27DF3E.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-C3BEB915-2E5D-40B9-8C14-274979C33BC9.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-C450EE63-097D-411F-90F2-87FFBA1401B1.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-C4B27B41-7C16-4AC4-942F-D94276CCACC2.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-C4E37849-1FA5-4687-A0EF-D05E79E8F16A.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-C7A5E34F-0F92-4BD5-B687-027FEC8A4865.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-C946068E-773E-4827-BA01-A630AD48A81F.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-CA4C8019-CB2D-411E-B147-708CF4439464.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-CCAA5E2D-4C06-47CF-903B-091783569DED.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-CCF5B799-AA95-4BA3-B6D1-D3C2592AA05A.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-CE0B6A30-9EF7-4EA3-B268-D84B6A41FA28.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-CE29E450-3FA7-44F4-87C0-4EC78F314CB4.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-CFC9F9CB-980D-4696-9B91-EC191F717805.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-D02E7B88-F055-4C73-B0B1-EC204D8D1EAF.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-D25C8578-FD3B-42C4-95D7-E166B183FDCA.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-D295648A-D7F4-443F-AEC6-64E6853A4E19.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-D31DE5A7-4653-44C8-9BC2-E3B4F6B5AA65.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-D36C1AF8-02BC-4344-BCAA-EC4B43433C60.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-D6C0DE2B-D82E-441B-95A3-CE76AA1D823E.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-D6E6ECEB-C815-4EDB-83BB-F50D562F7A09.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-D74A1DF5-1E99-4607-A868-B836DC64179A.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-D971D9FC-E612-44C8-9696-11427C1EA0E9.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-DCA4463E-A129-40F6-8A4C-BD11587A6A4D.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-DEE8B6FF-0071-4332-8516-7543334EEB3B.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-E0DDB1F5-B972-4CF7-998E-8D4E04CC0BF0.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-E242F4FE-D5B5-4B89-BAA7-73DFAF96BC02.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-E38F8BE9-53C4-4D4C-84FE-837D1289993D.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-E3F35029-9F50-466C-8D03-4434A0D7E6B3.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-E41A8A59-72DC-400B-A81D-5707B3960493.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-E59A6CFD-2CC7-4E8C-9555-F8E7E0F16A47.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-E5A66B95-3433-4380-9FF6-1BA857765FB1.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-E6171412-A09E-47F3-8127-85E27846D576.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-E6BD4069-C41B-472A-9CD6-BDB5E4E41BEA.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-E6D35560-EE61-4E51-82AE-ADCF426CBE9C.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-E8154DC5-0108-43C3-8E23-4A4EE6559EB7.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-EA0DC6BF-8DD6-433E-A538-5593FE3DF883.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-EAAA6BD4-532E-4C25-B1CF-9770CA3BFB57.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-EB9C1AED-37C9-4B04-B7C8-E327F73BC65D.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-EBD498DD-4E73-4D54-8691-FA5891B1FA67.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-EC5AC579-9DED-4DBC-9630-CAB2EBA599A2.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-ED88F010-55A4-49B3-B31F-A0B60470B7E3.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-EEB5C86C-C057-49D2-B087-7CE58FBF8E33.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-EF3B6B76-02FD-4AD2-B92B-2F7D9EE78B43.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-EFDB873F-C122-4382-8A1F-5262AA4829EB.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-F1BBABAD-820E-4690-B9E6-6180CD5EB12B.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-F4BDDD3F-E1BD-410D-9FB6-F0ADD127AC34.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-F4F24EB4-0C63-4A22-8EBB-A58E62F22FF7.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-F5D27A74-FE7C-4E98-AE85-B60124F360AB.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-F671AF5A-9F3E-453A-9A78-73F6D810C40B.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-F7E0027B-E5C4-496B-A30D-6F0DE57B9516.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-F8374857-7149-4B9F-B0E1-F277FDC44C3E.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-F86AD5C1-0C5D-4EC7-85DB-7A20C0B163ED.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-F9CE63B5-66AC-4DA6-8D04-6C4067CC533F.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-F9E6A3B0-76BB-4219-8245-A80F021A37F7.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-FA65617A-FCFB-4939-8C22-B36D6C45AD0C.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-FA84D168-7D9B-43C8-A5CB-F6B2466E2421.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-FBE34195-4C36-4B7F-BD86-CA46F5A6BE43.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-FD68BC31-C93C-4E03-AF4E-508DAC761B43.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-FD7F7340-084E-4A53-BFFB-3ABCF106E86C.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-FDA0C202-61DF-4912-8CD8-BF1FDED39125.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-FEA85174-AF05-4003-A3E9-4F487C4D424D.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-FEE782C7-0F3C-40CC-B653-B95E49BFB405.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Locktime\NetLimiter\2\Stats\nlstats-FFBA0556-334D-42EC-8E2A-AC073B11DCC7.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\Zak\Application Data\Mozilla\Firefox\Profiles\w478g883.default\cert8.db Object is locked skipped
C:\Documents and Settings\Zak\Application Data\Mozilla\Firefox\Profiles\w478g883.default\GoogleToolbarData\googlesafebrowsing.db Object is locked skipped
C:\Documents and Settings\Zak\Application Data\Mozilla\Firefox\Profiles\w478g883.default\history.dat Object is locked skipped
C:\Documents and Settings\Zak\Application Data\Mozilla\Firefox\Profiles\w478g883.default\key3.db Object is locked skipped
C:\Documents and Settings\Zak\Application Data\Mozilla\Firefox\Profiles\w478g883.default\parent.lock Object is locked skipped
C:\Documents and Settings\Zak\Application Data\Mozilla\Firefox\Profiles\w478g883.default\search.sqlite Object is locked skipped
C:\Documents and Settings\Zak\Application Data\Mozilla\Firefox\Profiles\w478g883.default\urlclassifier2.sqlite Object is locked skipped
C:\Documents and Settings\Zak\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\Zak\Local Settings\Application Data\Microsoft\Media Player\CurrentDatabase_360.wmdb Object is locked skipped
C:\Documents and Settings\Zak\Local Settings\Application Data\Microsoft\Messenger\omnifire2003@hotmail.com\SharingMetadata\Logs\Dfsr00005.log Object is locked skipped
C:\Documents and Settings\Zak\Local Settings\Application Data\Microsoft\Messenger\omnifire2003@hotmail.com\SharingMetadata\pending.dat Object is locked skipped
C:\Documents and Settings\Zak\Local Settings\Application Data\Microsoft\Messenger\omnifire2003@hotmail.com\SharingMetadata\Working\database_D200_EB65_EB_4F53\dfsr.db Object is locked skipped
C:\Documents and Settings\Zak\Local Settings\Application Data\Microsoft\Messenger\omnifire2003@hotmail.com\SharingMetadata\Working\database_D200_EB65_EB_4F53\fsr.log Object is locked skipped
C:\Documents and Settings\Zak\Local Settings\Application Data\Microsoft\Messenger\omnifire2003@hotmail.com\SharingMetadata\Working\database_D200_EB65_EB_4F53\fsrtmp.log Object is locked skipped
C:\Documents and Settings\Zak\Local Settings\Application Data\Microsoft\Messenger\omnifire2003@hotmail.com\SharingMetadata\Working\database_D200_EB65_EB_4F53\tmp.edb Object is locked skipped
C:\Documents and Settings\Zak\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\Zak\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\Zak\Local Settings\Application Data\Microsoft\Windows Live Contacts\omnifire2003@hotmail.com\real\members.stg Object is locked skipped
C:\Documents and Settings\Zak\Local Settings\Application Data\Microsoft\Windows Live Contacts\omnifire2003@hotmail.com\shadow\members.stg Object is locked skipped
C:\Documents and Settings\Zak\Local Settings\Application Data\Mozilla\Firefox\Profiles\w478g883.default\Cache\_CACHE_001_ Object is locked skipped
C:\Documents and Settings\Zak\Local Settings\Application Data\Mozilla\Firefox\Profiles\w478g883.default\Cache\_CACHE_002_ Object is locked skipped
C:\Documents and Settings\Zak\Local Settings\Application Data\Mozilla\Firefox\Profiles\w478g883.default\Cache\_CACHE_003_ Object is locked skipped
C:\Documents and Settings\Zak\Local Settings\Application Data\Mozilla\Firefox\Profiles\w478g883.default\Cache\_CACHE_MAP_ Object is locked skipped
C:\Documents and Settings\Zak\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Zak\Local Settings\Temp\Perflib_Perfdata_1b4.dat Object is locked skipped
C:\Documents and Settings\Zak\Local Settings\Temp\Perflib_Perfdata_2f8.dat Object is locked skipped
C:\Documents and Settings\Zak\Local Settings\Temp\Perflib_Perfdata_eb4.dat Object is locked skipped
C:\Documents and Settings\Zak\Local Settings\Temp\~DF7972.tmp Object is locked skipped
C:\Documents and Settings\Zak\Local Settings\Temp\~DF7A12.tmp Object is locked skipped
C:\Documents and Settings\Zak\Local Settings\Temp\~DF9B95.tmp Object is locked skipped
C:\Documents and Settings\Zak\Local Settings\Temp\~DF9BFD.tmp Object is locked skipped
C:\Documents and Settings\Zak\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Zak\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\Zak\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\Zak\UserData\index.dat Object is locked skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP55\A0015258.exe/SpywareBot/SpywareBot.exe Infected: not-a-virus:FraudTool.Win32.SpywareBot.a skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP55\A0015258.exe 7-Zip: infected - 1 skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP55\A0015258.exe UPX: infected - 1 skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP55\A0015258.exe PE_Patch.UPX: infected - 1 skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP75\A0028139.dll Infected: not-a-virus:FraudTool.Win32.WinZix.a skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP75\A0028146.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP75\A0028155.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP75\A0028164.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP76\A0029164.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP76\A0029174.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP76\A0029180.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP76\A0029193.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP76\A0029200.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP76\A0029213.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP77\A0029225.exe/file02 Infected: not-a-virus:FraudTool.Win32.WinZix.a skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP77\A0029225.exe/file12 Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP77\A0029225.exe Inno: infected - 2 skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP77\A0030212.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP77\A0031212.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP77\A0031229.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP77\A0031235.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP77\A0031261.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP77\A0031267.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP77\A0032266.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP83\A0032698.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP83\A0032705.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP83\A0033704.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP83\A0034703.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP83\A0034717.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP83\A0034729.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP83\A0034750.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP83\A0034769.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP83\A0034794.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP83\A0034807.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP84\A0034821.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP84\A0034834.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP84\A0034859.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP84\A0035859.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP84\A0036859.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP84\A0036873.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP84\A0036883.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP84\A0036884.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP84\A0036897.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP84\A0036911.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP84\A0037910.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP84\A0037914.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP84\A0037915.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP84\A0037916.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP84\A0037917.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP84\A0038910.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP84\A0039911.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP85\A0039929.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP85\A0039936.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP85\A0039949.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP85\A0039969.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP85\A0039990.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP85\A0040003.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP85\A0041004.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP85\A0042004.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP85\A0042021.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP85\A0042035.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP86\A0042063.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP86\A0042068.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP86\A0042085.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP86\A0042101.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP86\A0042123.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP86\A0043124.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP86\A0044124.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP86\A0044138.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP86\A0044156.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP86\A0044168.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP86\A0044189.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP86\A0044219.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP86\A0044232.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP87\A0045233.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP87\A0045252.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP87\A0045267.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP87\A0045280.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP87\A0045295.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP87\A0045311.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP88\A0046312.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP88\A0046323.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP88\A0046341.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP88\A0046361.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP88\A0047360.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP88\A0047377.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP88\A0047392.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP88\A0047410.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP88\A0047445.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP88\A0047459.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP88\A0047472.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP88\A0047485.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP88\A0047505.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP89\A0047549.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP89\A0047556.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP89\A0047572.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP89\A0047586.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP89\A0047719.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{F12E3551-1FCD-4767-89A5-7C2262410DF1}\RP90\change.log Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\NetLimit.evt Object is locked skipped
C:\WINDOWS\system32\config\ODiag.evt Object is locked skipped
C:\WINDOWS\system32\config\OSession.evt Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\drivers\sptd.sys Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\Temp\Cookies\index.dat Object is locked skipped
C:\WINDOWS\Temp\History\History.IE5\index.dat Object is locked skipped
C:\WINDOWS\Temp\History\History.IE5\MSHist012007101120071012\index.dat Object is locked skipped
C:\WINDOWS\Temp\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
Scan process completed.
Omnifire is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Bookmark on Thread SoupReddit!
Old 10-10-2007, 09:59 PM   #8 (permalink)
Manager, Security Center, TSF Academy; Analyst, Security Team
 
tetonbob's Avatar
 
Join Date: Jan 2005
Location: Transylvania County, North Carolina, USA
Posts: 32,568
OS: 2000 Pro; XP Pro; XP Home


Re: Constant IE pop ups...problem is, i use Firefox
Most of those items are in System Restore. Easily removed.

Delete C:\Deckard, as we should no longer require the logs or backups.



CLEAR & RESET SYSTEM RESTORE'S CACHE

Go to Start >> Run - type or copy/paste control sysdm.cpl,,4 & press Enter

* Tick on the checkbox - Turn off System Restore on all drives
* Click Apply

Turn it back 'On' by unticking the same checkbox & click Apply, and then OK

---------------------------------------------------------------------------------------------

How is your system behaving?
__________________
Practice Safe Surfing
Because what you don't know, CAN hurt you.
Proud Member of ASAP since 2005
Proud Member of UNITE since 2006


Please do not ask for help via Private Message.
tetonbob is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Bookmark on Thread SoupReddit!
Old 10-11-2007, 09:24 PM   #9 (permalink)
Registered User
 
Join Date: Oct 2007
Posts: 5
OS: XP home edition SP2


Re: Constant IE pop ups...problem is, i use Firefox
Well, my system is around a year old and as far as performance goes i can't fault it. However i had to get a new graphics card a month ago because my mum turned off the power at the wall while the system was on and unwittingly fried the old graphics card as well as corrupting all the data on my hard drive.

Since then the system has made a habait of restarting itself when i try to a Warcraft III game from the desktop, or play a Media file. Oddly, the thing with the game (as its only that one game) happens about a third of every time i try to tab into it from desktop, and the media file restart seems to happen once every 50 times or so. Is this a hardware problem? Can it be fixed?
Omnifire is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Bookmark on Thread SoupReddit!
Old 10-12-2007, 08:52 AM   #10 (permalink)
Manager, Security Center, TSF Academy; Analyst, Security Team
 
tetonbob's Avatar
 
Join Date: Jan 2005
Location: Transylvania County, North Carolina, USA
Posts: 32,568
OS: 2000 Pro; XP Pro; XP Home


Re: Constant IE pop ups...problem is, i use Firefox
I really meant from a malware perspective. Sorry I wasn't more clear. If your popups are resolved, your logs appear clean.

The other issues are better taken up in the Hardware or Windows XP forums. The staff and members there will be better able to assist you with that. Seems like it might either be a driver conflict with that game, or perhaps a power supply issue.

Let them know you've been here, and have been cleared of malware.



We still have a few items to address.

C:\Deckard is DSS working folder. You can safely delete it. Also delete dss.exe

You can also delete NoLOP and findlop tools and logs.

Reset hidden/system files and folders
  • Click Start.
  • Open My Computer.
  • Select the Tools menu and click Folder Options.
  • Select the View tab.
  • Deselect the Show hidden files and folders option.
  • Select the Hide file extensions for known types option.
  • Select the Hide protected operating system files option.
  • Click Yes to confirm.
  • Click OK.

Now that you are clean, to help protect your computer in the future I recommend that you get the following free programs if you don't have them already:
  • SpywareBlaster to help prevent spyware from installing in the first place.
    • Install & update SpywareBlaster with the latest definitions.
      After you have updated, click the button - enable protection for all unprotected items
  • SpywareGuard to catch and block spyware before it can execute.
  • SPYBOT - SEARCH & DESTROY
    Download and install Spybot - Search & Destroy with its TeaTimer option. This will provide realtime spyware & hijacker protection on your computer alongside your virus protection. You should also scan your computer with the program on a regular basis just as you would an antivirus software. A tutorial on installing & using this product can be found here

    IE-SpyAd - IE/Spyad places more than 4000 dubious websites and domains in the IE Restricted list. This severely impairs attempts to infect your system. It basically prevents any downloads (Cookies etc) from the sites listed, although you will still be able to connect to the sites. An installation tutorial is available here.

  • MVPS HOST FILE
    The MVPS Hosts file replaces your current HOSTS file with one that will restrict known ad sites form serving you unsolicited advertisements. Basically, this prevents your computer from connecting to those sites by redirecting them to 127.0.0.1 which is the IP of your local computer.
    • Download Host.zip to your desktop.
    • From your Desktop right-click (hosts.zip) and select:
      Extract All from the menu.
    • Click Next, click Next, select the option:
      "Show Extracted files", click Finish
    • This will open the newly created hosts folder on your Desktop.
    • Double-click on the included mvps.bat file, this will rename the existing HOSTS file to HOSTS.MVP, then it will copy the included updated HOSTS file to the correct location on your machine.
    • Once updated you should see another prompt that the task was completed.
  • FIREWALL
    If you do not have a firewall, here are a couple of great free ones available for personal use. Using a third-party firewall will allow you to give/deny access for applications that want to go online. Select one of these, or another of your choice:

    Do not install more than one firewall program because they will conflict with each other.

Here are some additional utilities that will further enhance your safety.
  • http://www.trillian.cc ? Trillian or http://www.miranda-im.com ? Miranda-IM - These are Malware free Instant Messenger programs which allow you to connect to multiple IM services in one program! (AOL, Yahoo, ICQ, IRC, MSN)

  • http://www.mozilla.org/products/firefox/ - Firefox - Use this alternate browser. While Internet Explorer is not a bad browser, almost every exploit crafted is targeted to take advantage of an IE weakness.

  • http://java.com/en/index.jsp - Sun's Java - It's much more secure than Microsoft's Java Virtual Machine.

  • http://www.aumha.org/downloads/erunt-setup.exe - ERUNT - A useful freeware utility for users of Windows 2000/XP. It's made up of two parts - ERUNT & NTREGOPT.

    ERUNT will create daily complete backups of your computer's Registry. Whilst System Restore does the same thing, a corrupt registry file may prevent Windows from booting & this effectively renders disables System Restore. With ERUNT, you're able to restore the damaged Registry.

    NTREGOPT works by recreating each registry hive "from scratch", thus removing any slack space that may be left from previously modified or deleted keys. In other words, it compacts the Registry to a small size which allows Windows to load & perform faster.


In light of your recent troubles, I'm sure you'll like to avoid any future infections. Please take a look at these well written articles
If you want to fight back the Malware Writers that have made your life a misery, please take a look here and read what you can do against it.

Please respond to this thread one more time so we can mark this thread as resolved.
__________________
Practice Safe Surfing
Because what you don't know, CAN hurt you.
Proud Member of ASAP since 2005
Proud Member of UNITE since 2006


Please do not ask for help via Private Message.
tetonbob is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Bookmark on Thread SoupReddit!
 

« Previous Thread | Next Thread »

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off



All times are GMT -7. The time now is 05:13 PM.

Contact Us - Tech Support Forum - Archive - Privacy Statement - Top


Copyright 2001 - 2009, Tech Support Forum
Home Tips Plus | Outdoor Basecamp | Automotive Support Forum

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84