Help Computer Is Dying

Naomi420 · 01-07-2008, 02:05 AM

computer is running extremely slow lose internet connection had generic errors a couple times and get some yellow triangle icon with a exclamation mark in the middle saying something about needing virus scanner then i.e opens up this weird virus scan site. happens every time i open up a folder on my desktop or start menu please help in desperate need of help would really appreciate any help possible im not very familiar with computers but like i said would very much appreciate any help possible thank you very much here is my hijackthis log

Logfile of HijackThis v1.98.2
Scan saved at 5:08:01 a.m., on 1/7/2008
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\System32\urdvxc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
C:\HJKT\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn6\yt.dll
F2 - REG:system.ini: UserInit=C:\WINDOWS\System32\Userinit.exe
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn6\yt.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: (no name) - {86ABDA6E-15D2-4C0D-86F7-D2E37E3E986B} - C:\WINDOWS\System32\cryptdl.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn6\yt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\Money Express.exe"
O4 - Global Startup: Printkey2000.lnk = C:\Program Files\PrintKey2000\Printkey2000.exe
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Poker.com - {6FDD5236-C9F0-49ef-935D-385F5E21991A} - C:\Documents and Settings\Owner\Start Menu\Programs\Poker.com\Poker.com.lnk (HKCU)
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {29C13B62-B9F7-4CD3-8CEF-0A58A1A99441} - http://fdl.msn.com/public/chat/msnchat41.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsu...?1136532715105
O16 - DPF: {6AA85413-165C-4200-8154-71166077B22E} - http://scripts.dlv4.com/binaries/IA/...vc32_EN_XP.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsof...?1166267171419
O16 - DPF: {7A32634B-029C-4836-A023-528983982A49} - http://fdl.msn.com/public/chat/msnchat42.cab
O16 - DPF: {87C1805D-C5AE-4455-AB39-E245BB516136} - http://us2-scripts.dlv4.com/binaries...s4_1059_XP.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = BIATCH
O17 - HKLM\Software\..\Telephony: DomainName = BIATCH
O17 - HKLM\System\CCS\Services\Tcpip\..\{1088C928-C4C8-4876-813B-FE7E7FD176D6}: NameServer = 203.152.100.32 203.152.112.32
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = BIATCH
O17 - HKLM\System\CS1\Services\Tcpip\..\{1088C928-C4C8-4876-813B-FE7E7FD176D6}: NameServer = 203.152.100.32 203.152.112.32
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = BIATCH
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - AppInit_DLLs:
O21 - SSODL: BzZaPo - {743505B2-DE9F-AF18-D5D6-100483B085AB} - (no file)

Naomi420 · 01-07-2008, 05:04 PM

please help me can anyone give me some information from my log

Naomi420 · 01-07-2008, 08:26 PM

isn't there someone who can read this log and help me please

Ried · 01-07-2008, 08:35 PM

We can't work with what you've posted.

1. Your version of HijackThis is terribly outdated. Uninstall it and download HijackThis 2.02 to your desktop.

Double-click on the file you just downloaded.
Click on the "Install" button to install. It will by default install to the directory - C:\Program Files\Trend Micro\HijackThis
Upon install, HijackThis should open for you. Close it--do not run a scan.

2. Next, kindly follow the instructions in our sticky topic (Updated!) IMPORTANT - Read This Before Posting A Log If you have any difficulty with any of the steps, move on to the next one. Be sure to reach Step 5 and post the requested logs in your next reply.

**Please note this section of the forum is very busy, so please familiarize yourself with the Bumping Rules also found in Step 5 of our sticky topic mentioned above. One of our Analysts will review your log as soon as possible.

Naomi420 · 01-08-2008, 02:02 AM

oh im sorry i didnt realize it was so old thank you very much heres my new post hopefully that helps you guys out a little better thank you very much and i really do appreciate it

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 5:07:44 a.m., on 1/8/2008
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\System32\urdvxc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\PrintKey2000\Printkey2000.exe
C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn6\yt.dll
F2 - REG:system.ini: UserInit=C:\WINDOWS\System32\Userinit.exe
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn6\yt.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: (no name) - {86ABDA6E-15D2-4C0D-86F7-D2E37E3E986B} - C:\WINDOWS\System32\cryptdl.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn6\yt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\Money Express.exe"
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [Compliant] gbloblqbw.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Printkey2000.lnk = C:\Program Files\PrintKey2000\Printkey2000.exe
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Poker.com - {6FDD5236-C9F0-49ef-935D-385F5E21991A} - C:\Documents and Settings\Owner\Start Menu\Programs\Poker.com\Poker.com.lnk (HKCU)
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O15 - Trusted Zone: http://click.getmirar.com (HKLM)
O15 - Trusted Zone: http://click.mirarsearch.com (HKLM)
O15 - Trusted Zone: http://redirect.mirarsearch.com (HKLM)
O16 - DPF: {29C13B62-B9F7-4CD3-8CEF-0A58A1A99441} - http://fdl.msn.com/public/chat/msnchat41.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsu...?1136532715105
O16 - DPF: {6AA85413-165C-4200-8154-71166077B22E} - http://scripts.dlv4.com/binaries/IA/...vc32_EN_XP.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsof...?1166267171419
O16 - DPF: {7A32634B-029C-4836-A023-528983982A49} - http://fdl.msn.com/public/chat/msnchat42.cab
O16 - DPF: {87C1805D-C5AE-4455-AB39-E245BB516136} - http://us2-scripts.dlv4.com/binaries...s4_1059_XP.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = BIATCH
O17 - HKLM\Software\..\Telephony: DomainName = BIATCH
O17 - HKLM\System\CCS\Services\Tcpip\..\{1088C928-C4C8-4876-813B-FE7E7FD176D6}: NameServer = 203.152.100.32 203.152.112.32
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = BIATCH
O17 - HKLM\System\CS1\Services\Tcpip\..\{1088C928-C4C8-4876-813B-FE7E7FD176D6}: NameServer = 203.152.100.32 203.152.112.32
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = BIATCH
O20 - AppInit_DLLs:
O20 - Winlogon Notify: MS-DOS Emulation - C:\WINDOWS\
O21 - SSODL: BzZaPo - {743505B2-DE9F-AF18-D5D6-100483B085AB} - (no file)
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Network Windows Service (MSWindows) - Unknown owner - C:\WINDOWS\System32\urdvxc.exe
O24 - Desktop Component 0: Desktop Uninstall - (no file)

--
End of file - 5308 bytes

Naomi420 · 01-08-2008, 04:24 AM

i also forgot to add that system restore always fails and internet explorer wont work properly nor will it update :(

Ried · 01-08-2008, 06:34 AM

Hi Naomi420,

I see quite an infected system here, and no evidence of an onboard Anti-Virus program. Before we begin, I'd like as much information as possible.

While I appreciate your obtaining the latest version of HijackThis, did you follow all 5 steps that I linked you to?

We prefer a more comprehensive set of logs to assist in detecting the level the malware has infiltrated a system. As noted in our sticky topic (Updated!) IMPORTANT - Read This Before Posting A Log, download Deckard's System Scanner (DSS) to your Desktop.

What DSS will do:

create a new System Restore point in Windows XP and Vista.
clean your Temporary Files, Downloaded Program Files, and Internet Cache Files, and also empty the Recycle Bin on all drives.
check some important areas of your system and produce a report for your analyst to review.
DSS automatically runs HijackThis for you, but it will also install and place a shortcut to HijackThis on your desktop if you do not already have HijackThis installed.

Note: You must be logged onto an account with administrator privileges.

Close all applications and windows.
Double-click on dss.exe to run it, and follow the prompts.
When the scan is complete, two text files will open - main.txt <- this one will be maximized and extra.txt <-this one will be minimized
Copy (Ctrl+A then Ctrl+C) and paste (Ctrl+V) the contents of main.txt in your next reply.
Please attach extra.txt to your post.

To attach a file to a new post, simply

Click the[Manage Attachments] button under Additional Options > Attach Files on the post composition page, and
copy and paste the following into the "Upload File from your Computer" box:
C:\Deckard\System Scanner\extra.txt
Click Upload.

Please include the following in your next reply so we may get started:

main.txt
an attached extra.txt

Naomi420 · 01-08-2008, 09:37 AM

sorry for this you must think im really ditsy lol but i really do appreciate you're help well the problem with going to download things like pandasoftware or any other big programs it takes way to long im lagging like anything my internet explorer doesnt work i have to use firefox and you cant get many online scans with that browser every time i try to open up a folder on my desktop a little triangle icon with a exclamation mark in the middle of it appears on my task bar either stating found errors on system or something like that then it automatically opens up internet explorer to a strange looking site i cant do system restore everytime i try it says system restore failed everything is running extremely slow but i did those steps you asked me to do i also ran dss with hijackthis i posted it after the main.txt and extra.txt hopefully i didn't forget anything but thank you so much i really do appreciate this help heres my new post hopefully this is what you needed

Deckard's System Scanner v20071014.68
Run by Owner on 2008-01-08 12:19:59
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

Successfully created a Deckard's System Scanner Restore Point.

-- Last 5 Restore Point(s) --
65: 2008-01-08 17:20:25 UTC - RP660 - Deckard's System Scanner Restore Point
64: 2008-01-06 18:24:04 UTC - RP659 - System Checkpoint
63: 2008-01-05 17:38:08 UTC - RP658 - System Checkpoint
62: 2008-01-04 15:40:20 UTC - RP657 - System Checkpoint
61: 2008-01-03 14:51:20 UTC - RP656 - System Checkpoint

-- First Restore Point --
1: 2007-10-23 09:08:36 UTC - RP596 - System restore point

Backed up registry hives.
Performed disk cleanup.

Total Physical Memory: 120 MiB (512 MiB recommended).

-- HijackThis (run as Owner.exe) -----------------------------------------------

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:22:12 p.m., on 1/8/2008
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\System32\urdvxc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\PrintKey2000\Printkey2000.exe
C:\Program Files\dss.exe
C:\PROGRA~1\TRENDM~1\HIJACK~1\Owner.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn6\yt.dll
F2 - REG:system.ini: UserInit=C:\WINDOWS\System32\Userinit.exe
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn6\yt.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: (no name) - {86ABDA6E-15D2-4C0D-86F7-D2E37E3E986B} - C:\WINDOWS\System32\cryptdl.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn6\yt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\Money Express.exe"
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [Compliant] gbloblqbw.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Printkey2000.lnk = C:\Program Files\PrintKey2000\Printkey2000.exe
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Poker.com - {6FDD5236-C9F0-49ef-935D-385F5E21991A} - C:\Documents and Settings\Owner\Start Menu\Programs\Poker.com\Poker.com.lnk (HKCU)
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O15 - Trusted Zone: http://click.getmirar.com (HKLM)
O15 - Trusted Zone: http://click.mirarsearch.com (HKLM)
O15 - Trusted Zone: http://redirect.mirarsearch.com (HKLM)
O16 - DPF: {29C13B62-B9F7-4CD3-8CEF-0A58A1A99441} - http://fdl.msn.com/public/chat/msnchat41.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsu...?1136532715105
O16 - DPF: {6AA85413-165C-4200-8154-71166077B22E} - http://scripts.dlv4.com/binaries/IA/...vc32_EN_XP.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsof...?1166267171419
O16 - DPF: {7A32634B-029C-4836-A023-528983982A49} - http://fdl.msn.com/public/chat/msnchat42.cab
O16 - DPF: {87C1805D-C5AE-4455-AB39-E245BB516136} - http://us2-scripts.dlv4.com/binaries...s4_1059_XP.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = BIATCH
O17 - HKLM\Software\..\Telephony: DomainName = BIATCH
O17 - HKLM\System\CCS\Services\Tcpip\..\{1088C928-C4C8-4876-813B-FE7E7FD176D6}: NameServer = 203.152.100.32 203.152.112.32
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = BIATCH
O17 - HKLM\System\CS1\Services\Tcpip\..\{1088C928-C4C8-4876-813B-FE7E7FD176D6}: NameServer = 203.152.100.32 203.152.112.32
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = BIATCH
O20 - AppInit_DLLs:
O20 - Winlogon Notify: MS-DOS Emulation - C:\WINDOWS\
O21 - SSODL: BzZaPo - {743505B2-DE9F-AF18-D5D6-100483B085AB} - (no file)
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Network Windows Service (MSWindows) - Unknown owner - C:\WINDOWS\System32\urdvxc.exe
O24 - Desktop Component 0: Desktop Uninstall - (no file)

--
End of file - 5266 bytes

-- File Associations -----------------------------------------------------------

.cpl - cplfile - shell\cplopen\command - rundll32.exe shell32.dll,Control_RunDLL "%1",%*

-- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------

R0 BsStor (InCD Storage Helper Driver) - c:\windows\system32\drivers\bsstor.sys <Not Verified; B.H.A Co.,Ltd.; >
R0 Imagedrv - c:\windows\system32\drivers\imagedrv.sys <Not Verified; ahead software gmbh && its licensors; NERO IMAGEDRIVE SCSI Controller driver>
R0 sthpsstv - c:\windows\system32\drivers\gipddqup.dat
R1 VIAPFD - c:\windows\system32\drivers\viapfd.sys <Not Verified; VIA Technologies. Inc.; VIA PFD driver>
R2 BsUDF (InCD UDF Driver) - c:\windows\system32\drivers\bsudf.sys <Not Verified; ahead software; UDF File System Driver (WindowsNT5.x)>
R2 Vcs (Vcs support) - c:\windows\system32\drivers\vcs.sys

S1 alfacleaner - c:\windows\system32\drivers\hesvc.sys (file missing)
S3 GMSIPCI - d:\install\gmsipci.sys (file missing)
S3 ham50 (Intel V92 HaM Data Fax Voice) - c:\windows\system32\drivers\intelh51.sys <Not Verified; Intel Corporation; Intel® Hardware accelerated Modem Driver>
S3 KLIF - c:\progra~1\pctool~1\klif.sys (file missing)
S3 mohfilt (MOH Filter) - c:\windows\system32\drivers\mohfilt.sys <Not Verified; Intel; Filter Driver to Support Modem-on-Hold>

-- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------

R2 MSWindows (Network Windows Service) - "c:\windows\system32\urdvxc.exe" /service

S4 Tmntsrv (Trend NT Realtime Service) - "c:\program files\trend micro\pc-cillin 2000\tmntsrv.exe" <Not Verified; Trend Micro Inc.; Trend Pc-cillin 7.61>

-- Device Manager: Disabled ----------------------------------------------------

No disabled devices found.

-- Files created between 2007-12-08 and 2008-01-08 -----------------------------

2008-01-08 12:15:48 686630 --a------ C:\Program Files\dss.exe
2008-01-06 10:14:07 96256 --ahs---- C:\WINDOWS\System32\urdvxc.exe

-- Find3M Report ---------------------------------------------------------------

2008-01-08 11:55:38 0 d-------- C:\Program Files\Full Tilt Poker
2008-01-08 05

58 0 d-------- C:\Program Files\Trend Micro
2008-01-06 10:42:37 0 --ahs---- C:\WINDOWS\System32\.exe
2007-11-29 06:15:37 0 d-------- C:\Program Files\Common Files\Wise Installation Wizard
2007-11-29 06:15:33 0 d-------- C:\Program Files\Vodafone
2007-11-24 06:56:25 0 d-------- C:\Program Files\Common Files\Companion Wizard
2007-11-24 06:56:24 0 d-------- C:\Program Files\cmer_uninstallers
2007-11-24 06:56:23 0 d-------- C:\Program Files\Y!Deceasedv2.0b
2007-11-24 06:56:13 0 d-------- C:\Program Files\QuickTime
2007-11-17 06:25:42 0 d-------- C:\Program Files\Lavasoft
2007-11-17 06:22:35 0 d-a------ C:\Program Files\Common Files
2007-11-17 04:56:53 0 d-------- C:\Program Files\XoftSpySE
2007-11-17 04:56:48 0 d-------- C:\Program Files\SmitfraudFix
2007-11-17 04:56:41 0 d--h----- C:\Program Files\InstallShield Installation Information
2007-11-17 04:56:28 0 d-------- C:\Program Files\Poker.com
2007-11-17 03:54:52 0 d-------- C:\Program Files\Enigma Software Group
2007-11-16 05:45:32 1502 --a------ C:\WINDOWS\System32\tmp.reg
2007-11-16 05:41:48 1043644 --a------ C:\Program Files\SmitfraudFix.exe

-- Registry Dump ---------------------------------------------------------------

*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{86ABDA6E-15D2-4C0D-86F7-D2E37E3E986B}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MoneyAgent"="C:\Program Files\Microsoft Money\System\Money Express.exe" [07/25/2001 12:00 p.m.]

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"Compliant"=gbloblqbw.exe

C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programs\Startup\
Printkey2000.lnk - C:\Program Files\PrintKey2000\Printkey2000.exe [11/2/2003 9:37:38 a.m.]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"NoColorChoice"=0 (0x0)
"NoSizeChoice"=0 (0x0)
"NoDispScrSavPage"=0 (0x0)
"NoDispCPL"=0 (0x0)
"NoVisualStyleChoice"=0 (0x0)
"NoDispSettingsPage"=0 (0x0)
"NoDispAppearancePage"=0 (0x0)
"NoDispBackgroundPage"=0 (0x0)
"DisableCMD"=0 (0x0)
"DisableRegistryTools"=0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoActiveDesktopChanges"=0 (0x0)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoSaveSettings"=0 (0x0)
"NoThemesTab"=0 (0x0)
"ForceActiveDesktopOn"=0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\MS-DOS Emulation]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"appinit_dlls"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
SecurityProviders msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll, zwebauth.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vds]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]
@="Volume shadow copy"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Start Menu^Programs^Startup^Microsoft Office.lnk]
backup=C:\WINDOWS\pss\Microsoft Office.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Start Menu^Programs^Startup^Microsoft Works Calendar Reminders.lnk]
backup=C:\WINDOWS\pss\Microsoft Works Calendar Reminders.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Start Menu^Programs^Startup^Printkey2000.lnk]
backup=C:\WINDOWS\pss\Printkey2000.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Start Menu^Programs^Startup^Real-time Monitor.lnk]
backup=C:\WINDOWS\pss\Real-time Monitor.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Sharlene Hokianga.TROJANCREW^Start Menu^Programs^Startup^Quick ShutDown.lnk]
backup=C:\WINDOWS\pss\Quick ShutDown.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\banmanpro]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Browser Pal]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BrowserBrand]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BrowserFortress]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Compliant]
gbloblqbw.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Computer Alarm Clock]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\drsmartloadb]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\enewsletterpro]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\InCD]
C:\Program Files\ahead\InCD\InCD.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\InvisibleBrowsing]
C:\Program Files\Invisible Browsing\InvisibleBrowsing.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Load]
??????????

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LWBMOUSE]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MailSkinner]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MediaGateway]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Microsoft Configs 32]
msgconfigrs.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Microsoft Works Portfolio]
C:\Program Files\Microsoft Works\WksSb.exe /AllUsers

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Microsoft Works Update Detection]
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mopsp1]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OWMngr]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Perfect Keyboard PRO]
"C:\Program Files\Perfect Keyboard PRO\pk32.exe" /winstart

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Pop3trap.exe]
"C:\Program Files\Trend Micro\PC-cillin 2000\Pop3trap.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Run]
??????????

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\sdpmsv]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sygate Personal Firewall]
sysgut.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
C:\Program Files\Common Files\Real\Update_OB\evntsvc.exe -osboot

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\wcmdmgr]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WebTrapNT.exe]
"C:\Program Files\Trend Micro\PC-cillin 2000\WebTrapNT.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WT GameChannel]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"Tmntsrv"=2 (0x2)

-- Hosts -----------------------------------------------------------------------

127.0.0.1 www.pacimedia.com
127.0.0.1 www.exactsearch.net
127.0.0.1 www.contextplus.net
127.0.0.1 www.contextplus.net

-- End of Deckard's System Scanner: finished at 2008-01-08 12:24:07 ------------

Deckard's System Scanner v20071014.68
Extra logfile - please post this as an attachment with your post.
--------------------------------------------------------------------------------

-- System Information ----------------------------------------------------------

Microsoft Windows XP Home Edition (build 2600) SP 1.0
Architecture: X86; Language: English

CPU 0: AMD Duron(tm) processor
Percentage of Memory in Use: 66%
Physical Memory (total/avail): 119.48 MiB / 39.95 MiB
Pagefile Memory (total/avail): 288.38 MiB / 133.64 MiB
Virtual Memory (total/avail): 2047.88 MiB / 1954.08 MiB

A: is Removable (No Media)
C: is Fixed (NTFS) - 37.27 GiB total, 23.95 GiB free.
D: is CDROM (No Media)

\\.\PHYSICALDRIVE0 - ST340810A - 37.27 GiB - 1 partition
\PARTITION0 (bootable) - Installable File System - 37.27 GiB - C:

-- Security Center -------------------------------------------------------------

AUOptions is disabled.

-- Environment Variables -------------------------------------------------------

ALLUSERSPROFILE=C:\Documents and Settings\All Users.WINDOWS
APPDATA=C:\Documents and Settings\Owner\Application Data
CommonProgramFiles=C:\Program Files\Common Files
COMPUTERNAME=BIATCH
ComSpec=C:\WINDOWS\system32\cmd.exe
FP_NO_HOST_CHECK=NO
HOMEDRIVE=C:
HOMEPATH=\Documents and Settings\Owner
LANG=C
LOGONSERVER=\\BIATCH
NUMBER_OF_PROCESSORS=1
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\system32\WBEM;C:\Program Files\Common Files\GTK\2.0\bin;C:\Program Files\Mozilla Firefox
PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
PROCESSOR_ARCHITECTURE=x86
PROCESSOR_IDENTIFIER=x86 Family 6 Model 3 Stepping 1, AuthenticAMD
PROCESSOR_LEVEL=6
PROCESSOR_REVISION=0301
ProgramFiles=C:\Program Files
PROMPT=$P$G
SESSIONNAME=Console
SystemDrive=C:
SystemRoot=C:\WINDOWS
TEMP=C:\DOCUME~1\Owner\LOCALS~1\Temp
TMP=C:\DOCUME~1\Owner\LOCALS~1\Temp
USERDOMAIN=BIATCH
USERNAME=Owner
USERPROFILE=C:\Documents and Settings\Owner
windir=C:\WINDOWS

-- User Profiles ---------------------------------------------------------------

Sharlene Hokianga.TROJANCREW
Owner (admin)
Administrator (admin)
Guest (new local, guest)

-- Add/Remove Programs ---------------------------------------------------------

--> C:\Program Files\Common Files\Real\Update_OB\rnuninst.exe RealNetworks|RealPlayer|6.0
--> rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Abexo Free Registry Cleaner --> C:\Program Files\Abexo\afrc\uninst.exe
Ad-Aware 2007 --> MsiExec.exe /I{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}
Ad-aware 6 Personal --> C:\PROGRA~1\Lavasoft\AD-AWA~1\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~1\INSTALL.LOG
Adobe Acrobat 4.0 --> C:\WINDOWS\ISUNINST.EXE -f"C:\Program Files\Common Files\Adobe\Acrobat 4.0\NT\Uninst.isu" -c"C:\Program Files\Common Files\Adobe\Acrobat 4.0\NT\Uninst.dll"
Adobe Acrobat 4.0, 5.0 --> C:\WINDOWS\ISUNINST.EXE -f"C:\Program Files\Common Files\Adobe\Acrobat 5.0\NT\Uninst.isu" -c"C:\Program Files\Common Files\Adobe\Acrobat 5.0\NT\Uninst.dll"
Adobe Acrobat Reader 3.0 --> C:\WINDOWS\uninst.exe -fC:\Acrobat3\Reader\DeIsL1.isu
Adobe Flash Player 9 ActiveX --> C:\WINDOWS\System32\Macromed\Flash\UninstFl.exe -q
ArcSoft PhotoImpression --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E142615E-5ED8-4511-9BF0-0284BFA25766}\setup.exe" -l0x9 -uninst
AV Voice Changer Software 3.0 --> C:\PROGRA~1\AVVCS3~1.0\UNWISE.EXE C:\PROGRA~1\AVVCS3~1.0\INSTALL.LOG
AVG Anti-Spyware 7.5 --> C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\Uninstall.exe
Bazooka Scanner --> "C:\Program Files\Bazooka Scanner\Uninstall.exe" "C:\Program Files\Bazooka Scanner\install.log"
Computer Alarm Clock --> C:\PROGRA~1\COMPUT~2\UNWISE.EXE C:\PROGRA~1\COMPUT~2\INSTALL.LOG
Digital Camera Drivers --> MsiExec.exe /X{E9A2ECEB-CE47-4AB9-9ABC-29731A1F5733}
EPSON Printer Software --> C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EPUPDATE.EXE /R
Full Tilt Poker --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D4C9692E-4EFA-4DA0-8B7F-9439466D9E31}\setup.exe" -l0x9 -removeonly
HijackThis 2.0.2 --> "C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
Image Resizer Powertoy for Windows XP --> MsiExec.exe /I{1CB92574-96F2-467B-B793-5CEB35C40C29}
ImageDrive (ahead software) --> C:\WINDOWS\UNIDRV.exe /UNINSTALL
InCD (ahead software) --> C:\WINDOWS\NuNInst.exe /UNINSTALL
Invisible Browsing 3.0 --> "C:\Program Files\Invisible Browsing\unins000.exe"
J2SE Runtime Environment 5.0 Update 3 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150030}
LimeWire PRO 4.12.6 --> "C:\Program Files\LimeWire\uninstall.exe"
Mavis Beacon Teaches Typing 9.0.0 --> C:\PROGRA~1\MINDSC~1\MAVISB~1\UNINST.EXE
Messenger Plus! --> "C:\Program Files\Messenger Plus! 2\MsgPlus.exe" /Uninstall
Microsoft Encarta Encyclopedia Standard - WE 2002 --> MsiExec.exe /I{01400202-823E-46CD-A70E-BEE818F97169}
Microsoft Money --> MsiExec.exe /I{E7298FD5-1386-11D5-8D6C-0050DAD32D95}
Microsoft Money System Pack --> MsiExec.exe /I{CF5193F7-6B37-11D5-B7D2-00AA00A204F1}
Microsoft Picture It! Photo 2002 --> MsiExec.exe /I{C769A271-7E1C-48F9-B331-474600DD4C06}
Microsoft Word 2002 --> MsiExec.exe /I{911B0409-6000-11D3-8CFE-0050048383C9}
Microsoft Works 2002 Setup Launcher --> C:\Program Files\Microsoft Works Suite 2002\Setup\Launcher.exe D:\
Microsoft Works 6.0 --> MsiExec.exe /I{A1B7B9B3-E1D2-41CA-9B4A-F18DC2710704}
Microsoft Works Suite Add-in for Microsoft Word --> MsiExec.exe /I{C3A439E4-7303-491F-A678-CEA36A87D517}
Mozilla Firefox (2.0.0.4) --> C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSN Gaming Zone --> C:\PROGRA~1\MSNGAM~1\zsetup.exe /Uninstall
MSN Messenger 7.5 --> MsiExec.exe /I{CEB3A11A-03EA-11DA-BFBD-00065BBDC0B5}
Nero - Burning Rom --> MsiExec.exe /X{A4D7B764-4140-11D4-88EB-0050DA3579C0}
NeroMediaPlayer --> C:\WINDOWS\UNNMP.exe /UNINSTALL
PC-cillin 2000 --> MsiExec.exe /X{A839294B-70A9-11D5-9F5A-0050DAD742CD}
Perfect Keyboard PRO --> C:\Program Files\Perfect Keyboard PRO\uninst.exe
PrintKey2000 --> C:\PROGRA~1\PRINTK~1\UNWISE.EXE C:\PROGRA~1\PRINTK~1\INSTALL.LOG
Quick ShutDown --> C:\WINDOWS\unvise32.exe C:\Program Files\Quick ShutDown\uninstal.log
QuickTime --> C:\WINDOWS\unvise32qt.exe C:\WINDOWS\System32\QuickTime\Uninstall.log
RealOne Player --> C:\Program Files\Common Files\Real\Update_OB\rnuninst.exe RealNetworks|RealPlayer|6.0
Registry Mechanic 4.0 --> "C:\Program Files\Registry Mechanic\unins000.exe"
Spybot - Search & Destroy 1.3 --> "C:\Program Files\Spybot - Search & Destroy\unins000.exe"
VB Runtime --> C:\WINDOWS\system32\UNINSTAL.EXE /A /R C:\WINDOWS\system32\VBRunTme.LOG
VBRunDLL 3.0 --> C:\PROGRA~1\ZAKFRO~1\VBRunDLL\Setup.exe /remove
VideoEgg Publisher --> C:\Program Files\VideoEgg\Uninstall.exe
Viewpoint Manager (Remove Only) --> C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgrInstaller.exe /u /k
Viewpoint Media Player --> C:\Program Files\Viewpoint\Viewpoint Media Player\mtsAxInstaller.exe /u
Vodafone Mobile Connect Lite Runtime Components --> MsiExec.exe /X{CFA76A76-03CF-43AC-AAB4-E2E3DACE4E02}
Voice Balancing System --> C:\Program Files\VoiceSync\vbs\Uninstal.exe
WinMX --> C:\Program Files\WinMX\uninstall.exe
WinRAR archiver --> C:\Program Files\WinRAR\uninstall.exe
WinZip --> "C:\Program Files\WinZip\WINZIP32.EXE" /uninstall
YahELite 298 --> C:\PROGRA~1\YahELite\Setup.exe /remove
Yahoo! Anti-Spy --> C:\PROGRA~1\Yahoo!\Common\unypsr.exe
Yahoo! Browser Services --> C:\PROGRA~1\Yahoo!\Common\unyext.exe
Yahoo! Install Manager --> C:\WINDOWS\System32\regsvr32 /u C:\PROGRA~1\Yahoo!\Common\YINSTH~1.DLL
Yahoo! Internet Mail --> C:\WINDOWS\System32\regsvr32 /u /s C:\PROGRA~1\Yahoo!\Common\YMMAPI~1.DLL
Yahoo! Messenger --> C:\PROGRA~1\Yahoo!\MESSEN~1\UNWISE.EXE /U C:\PROGRA~1\Yahoo!\MESSEN~1\INSTALL.LOG
Yahoo! Toolbar --> C:\PROGRA~1\Yahoo!\Common\unyt.exe

-- Application Event Log -------------------------------------------------------

Event Record #/Type2554 / Error
Event Submitted/Written: 01/07/2008 07:16:54 AM
Event ID/Source: 8193 / VSS
Event Description:
Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance. hr = 0x80040206.

Event Record #/Type2553 / Error
Event Submitted/Written: 01/07/2008 07:16:54 AM
Event ID/Source: 4609 / EventSystem
Event Description:
The COM+ Event System detected a bad return code during its internal processing. HRESULT was 8007043C from line 44 of d:\nt\com\com1x\src\events\tier1\eventsystemobj.cpp. Please contact Microsoft Product Support Services to report this error.

Event Record #/Type2552 / Error
Event Submitted/Written: 01/06/2008 10:41:54 AM
Event ID/Source: 1000 / Application Error
Event Description:
Faulting application , version 0.0.0.0, faulting module unknown, version 0.0.0.0, fault address 0x00000000.

Event Record #/Type2551 / Error
Event Submitted/Written: 01/06/2008 10:14:36 AM
Event ID/Source: 1000 / Application Error
Event Description:
Faulting application , version 0.0.0.0, faulting module unknown, version 0.0.0.0, fault address 0x00000000.

Event Record #/Type2550 / Error
Event Submitted/Written: 01/01/2008 09:28:51 AM / 01/01/2008 09:28:52 AM
Event ID/Source: 1015 / Perflib
Event Description:
The timeout waiting for the performance data collection function "PerfOS"
in the "C:\WINDOWS\System32\perfos.dll" Library to finish has expired. There may be a problem with
this extensible counter or the service it is collecting data from or the
system may have been very busy when this call was attempted.

-- Security Event Log ----------------------------------------------------------

No Errors/Warnings found.

-- System Event Log ------------------------------------------------------------

Event Record #/Type14167 / Error
Event Submitted/Written: 01/08/2008 00:13:40 PM
Event ID/Source: 7001 / Service Control Manager
Event Description:
The SSDP Discovery Service service depends on the HTTP service which failed to start because of the following error:
%%127

Event Record #/Type14166 / Error
Event Submitted/Written: 01/08/2008 00:13:40 PM
Event ID/Source: 7000 / Service Control Manager
Event Description:
The HTTP service failed to start due to the following error:
%%127

Event Record #/Type14165 / Error
Event Submitted/Written: 01/08/2008 00:13:21 PM
Event ID/Source: 7001 / Service Control Manager
Event Description:
The SSDP Discovery Service service depends on the HTTP service which failed to start because of the following error:
%%127

Event Record #/Type14164 / Error
Event Submitted/Written: 01/08/2008 00:13:21 PM
Event ID/Source: 7000 / Service Control Manager
Event Description:
The HTTP service failed to start due to the following error:
%%127

Event Record #/Type14161 / Error
Event Submitted/Written: 01/08/2008 00:13:16 PM
Event ID/Source: 7026 / Service Control Manager
Event Description:
The following boot-start or system-start driver(s) failed to load:
alfacleaner
FltMgr

-- End of Deckard's System Scanner: finished at 2008-01-08 12:24:07 ------------

Deckard's System Scanner v20071014.68
Run by Owner on 2008-01-08 12:46:58
Computer is in Normal Mode.
--------------------------------------------------------------------------------

Percentage of Memory in Use: 85% (more than 75%).
Total Physical Memory: 120 MiB (512 MiB recommended).

-- HijackThis (run as Owner.exe) -----------------------------------------------

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:47:14 p.m., on 1/8/2008
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\System32\urdvxc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Owner\Desktop\dss.exe
C:\PROGRA~1\TRENDM~1\HIJACK~1\Owner.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn6\yt.dll
F2 - REG:system.ini: UserInit=C:\WINDOWS\System32\Userinit.exe
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn6\yt.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: (no name) - {86ABDA6E-15D2-4C0D-86F7-D2E37E3E986B} - C:\WINDOWS\System32\cryptdl.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn6\yt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\Money Express.exe"
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [Compliant] gbloblqbw.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Printkey2000.lnk = C:\Program Files\PrintKey2000\Printkey2000.exe
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Poker.com - {6FDD5236-C9F0-49ef-935D-385F5E21991A} - C:\Documents and Settings\Owner\Start Menu\Programs\Poker.com\Poker.com.lnk (HKCU)
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O15 - Trusted Zone: http://click.getmirar.com (HKLM)
O15 - Trusted Zone: http://click.mirarsearch.com (HKLM)
O15 - Trusted Zone: http://redirect.mirarsearch.com (HKLM)
O16 - DPF: {29C13B62-B9F7-4CD3-8CEF-0A58A1A99441} - http://fdl.msn.com/public/chat/msnchat41.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsu...?1136532715105
O16 - DPF: {6AA85413-165C-4200-8154-71166077B22E} - http://scripts.dlv4.com/binaries/IA/...vc32_EN_XP.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsof...?1166267171419
O16 - DPF: {7A32634B-029C-4836-A023-528983982A49} - http://fdl.msn.com/public/chat/msnchat42.cab
O16 - DPF: {87C1805D-C5AE-4455-AB39-E245BB516136} - http://us2-scripts.dlv4.com/binaries...s4_1059_XP.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = BIATCH
O17 - HKLM\Software\..\Telephony: DomainName = BIATCH
O17 - HKLM\System\CCS\Services\Tcpip\..\{1088C928-C4C8-4876-813B-FE7E7FD176D6}: NameServer = 203.152.100.32 203.152.112.32
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = BIATCH
O17 - HKLM\System\CS1\Services\Tcpip\..\{1088C928-C4C8-4876-813B-FE7E7FD176D6}: NameServer = 203.152.100.32 203.152.112.32
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = BIATCH
O20 - AppInit_DLLs:
O20 - Winlogon Notify: MS-DOS Emulation - C:\WINDOWS\
O21 - SSODL: BzZaPo - {743505B2-DE9F-AF18-D5D6-100483B085AB} - (no file)
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Network Windows Service (MSWindows) - Unknown owner - C:\WINDOWS\System32\urdvxc.exe
O24 - Desktop Component 0: Desktop Uninstall - (no file)

--
End of file - 5287 bytes

-- Files created between 2007-12-08 and 2008-01-08 -----------------------------

2008-01-06 10:14:07 96256 --ahs---- C:\WINDOWS\System32\urdvxc.exe

-- Find3M Report ---------------------------------------------------------------

2008-01-08 11:55:38 0 d-------- C:\Program Files\Full Tilt Poker
2008-01-08 05

58 0 d-------- C:\Program Files\Trend Micro
2008-01-06 10:42:37 0 --ahs---- C:\WINDOWS\System32\.exe
2007-11-29 06:15:37 0 d-------- C:\Program Files\Common Files\Wise Installation Wizard
2007-11-29 06:15:33 0 d-------- C:\Program Files\Vodafone
2007-11-24 06:56:25 0 d-------- C:\Program Files\Common Files\Companion Wizard
2007-11-24 06:56:24 0 d-------- C:\Program Files\cmer_uninstallers
2007-11-24 06:56:23 0 d-------- C:\Program Files\Y!Deceasedv2.0b
2007-11-24 06:56:13 0 d-------- C:\Program Files\QuickTime
2007-11-17 06:25:42 0 d-------- C:\Program Files\Lavasoft
2007-11-17 06:22:35 0 d-a------ C:\Program Files\Common Files
2007-11-17 04:56:53 0 d-------- C:\Program Files\XoftSpySE
2007-11-17 04:56:48 0 d-------- C:\Program Files\SmitfraudFix
2007-11-17 04:56:41 0 d--h----- C:\Program Files\InstallShield Installation Information
2007-11-17 04:56:28 0 d-------- C:\Program Files\Poker.com
2007-11-17 03:54:52 0 d-------- C:\Program Files\Enigma Software Group
2007-11-16 05:45:32 1502 --a------ C:\WINDOWS\System32\tmp.reg
2007-11-16 05:41:48 1043644 --a------ C:\Program Files\SmitfraudFix.exe

-- Registry Dump ---------------------------------------------------------------

*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{86ABDA6E-15D2-4C0D-86F7-D2E37E3E986B}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MoneyAgent"="C:\Program Files\Microsoft Money\System\Money Express.exe" [07/25/2001 12:00 p.m.]

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"Compliant"=gbloblqbw.exe

C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programs\Startup\
Printkey2000.lnk - C:\Program Files\PrintKey2000\Printkey2000.exe [11/2/2003 9:37:38 a.m.]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"NoColorChoice"=0 (0x0)
"NoSizeChoice"=0 (0x0)
"NoDispScrSavPage"=0 (0x0)
"NoDispCPL"=0 (0x0)
"NoVisualStyleChoice"=0 (0x0)
"NoDispSettingsPage"=0 (0x0)
"NoDispAppearancePage"=0 (0x0)
"NoDispBackgroundPage"=0 (0x0)
"DisableCMD"=0 (0x0)
"DisableRegistryTools"=0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoActiveDesktopChanges"=0 (0x0)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoSaveSettings"=0 (0x0)
"NoThemesTab"=0 (0x0)
"ForceActiveDesktopOn"=0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\MS-DOS Emulation]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"appinit_dlls"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
SecurityProviders msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll, zwebauth.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vds]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]
@="Volume shadow copy"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Start Menu^Programs^Startup^Microsoft Office.lnk]
backup=C:\WINDOWS\pss\Microsoft Office.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Start Menu^Programs^Startup^Microsoft Works Calendar Reminders.lnk]
backup=C:\WINDOWS\pss\Microsoft Works Calendar Reminders.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Start Menu^Programs^Startup^Printkey2000.lnk]
backup=C:\WINDOWS\pss\Printkey2000.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Start Menu^Programs^Startup^Real-time Monitor.lnk]
backup=C:\WINDOWS\pss\Real-time Monitor.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Sharlene Hokianga.TROJANCREW^Start Menu^Programs^Startup^Quick ShutDown.lnk]
backup=C:\WINDOWS\pss\Quick ShutDown.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\banmanpro]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Browser Pal]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BrowserBrand]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BrowserFortress]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Compliant]
gbloblqbw.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Computer Alarm Clock]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\drsmartloadb]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\enewsletterpro]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\InCD]
C:\Program Files\ahead\InCD\InCD.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\InvisibleBrowsing]
C:\Program Files\Invisible Browsing\InvisibleBrowsing.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Load]
??????????

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LWBMOUSE]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MailSkinner]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MediaGateway]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Microsoft Configs 32]
msgconfigrs.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Microsoft Works Portfolio]
C:\Program Files\Microsoft Works\WksSb.exe /AllUsers

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Microsoft Works Update Detection]
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mopsp1]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OWMngr]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Perfect Keyboard PRO]
"C:\Program Files\Perfect Keyboard PRO\pk32.exe" /winstart

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Pop3trap.exe]
"C:\Program Files\Trend Micro\PC-cillin 2000\Pop3trap.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Run]
??????????

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\sdpmsv]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sygate Personal Firewall]
sysgut.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
C:\Program Files\Common Files\Real\Update_OB\evntsvc.exe -osboot

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\wcmdmgr]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WebTrapNT.exe]
"C:\Program Files\Trend Micro\PC-cillin 2000\WebTrapNT.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WT GameChannel]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"Tmntsrv"=2 (0x2)

-- End of Deckard's System Scanner: finished at 2008-01-08 12:48:06 ------------

Ried · 01-08-2008, 10:09 AM

Thanks, Naomi420.

No worries about the online scan just yet--I understood the issue with online scans and IE from your first post.

I see plenty of Anti-Malware programs onboard, which is good--but they do not take the place of an Anti Virus program. An Anti Virus program is essential to have onboard as well, and is one of the reasons your system is so infected right now.

As soon as we stabilize the system a bit, I'll have instructions for a very good free AV program to use.

The other reason is the use of P2P programs. Even if you are using a "safe" P2P program, it is only the program that is safe. You will be sharing files from uncertified sources, and these are often infected. The bad guys use P2P filesharing as a major conduit to spread their wares.

This will require more than one round to properly eradicate. Please stay with me until given the 'all clear' even if symptoms seemingly abate.

Please copy this page to Notepad and save to your desktop for reference as you will not have any browsers open while you are carrying out portions of these instructions.

It's IMPORTANT to carry out the instructions in the sequence listed below.

***************************************************

Download Combofix from any of the links below, and save it to your desktop.

Link 1
Link 2
Link 3

**Note: It is important that it is saved directly to your desktop**

--------------------------------------------------------------------

1. Disconnect from the internet.

2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

--------------------------------------------------------------------

Open HijackThis and click on 'Do a System Scan Only'. 'Check' the following entries:

O15 - Trusted Zone: http://click.getmirar.com (HKLM)
O15 - Trusted Zone: http://click.mirarsearch.com (HKLM)
O15 - Trusted Zone: http://redirect.mirarsearch.com (HKLM)

Click 'Fix Checked' and close HijackThis.

--------------------------------------------------------------------

Double click on ComboFix.exe & follow the prompts.

When finished, it will produce a report for you. I'll need to see that in your next reply to continue cleaning the system.

Note:
Do not mouseclick combofix's window while it's running. That may cause it to stall

********************************************************

Please download FindAWF to your Desktop.

Double-click FindAWF.exe to start the tool.
Select option #1 - Scan for bak folders by typing 1 and press 'Enter'
When the tool has completed, a report will open up in notepad. Please post the results of the awf.txt here.

**Do not run any other option unless directed to do so.**

-------------------------------------------------------------------

Please include the following in your next reply:

C:\ComboFix.txt
awf.txt

Naomi420 · 01-08-2008, 11:29 AM

ok i did the ComboFix and the FindAWF also after i did the FindAWF i.e icon popped up on my desktop is that suppose to happen? lol alright thanks a lot for that and heres my new logs

ComboFix 08-01-08.4 - Owner 2008-01-08 13:55:56.1 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.1.1252.1.1033.18.20 [GMT -5:00]
Running from: C:\Documents and Settings\Owner\Desktop\ComboFix.exe
* Created a new restore point
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\LocalService.NT AUTHORITY.000\Application Data\NetMon
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Application Data\NetMon\domains.txt
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Application Data\NetMon\log.txt
C:\Documents and Settings\Owner\Application Data\macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.broadcaster.com
C:\Documents and Settings\Owner\Application Data\macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.broadcaster.com\settings.sol
C:\Documents and Settings\Owner\err.log
C:\Program Files\Common Files\companion wizard
C:\Program Files\Common Files\Companion Wizard\log.txt
C:\Program Files\network monitor
C:\Program Files\WinBudget
C:\Program Files\WinBudget\bin\crap.1165968882.old
C:\Program Files\WinBudget\bin\crap.1165990849.old
C:\Program Files\WinBudget\bin\matrix.dll.1165990848.old
C:\Program Files\WinBudget\bin\matrix.dll.1166081033.old
C:\Program Files\WinBudget\bin\matrix.dll.1166332366.old
C:\Program Files\WinBudget\bin\matrix.dll.1166674113.old
C:\Program Files\WinBudget\bin\matrix.dll.1166850156.old
C:\Program Files\WinBudget\bin\matrix.dll.1167119113.old
C:\Program Files\WinBudget\bin\matrix.dll.1167370646.old
C:\Program Files\WinBudget\bin\matrix.dll.1167715233.old
C:\Program Files\WinBudget\bin\matrix.dll.1167993327.old
C:\Program Files\WinBudget\bin\matrix.dll.1168235954.old
C:\Program Files\WinBudget\bin\matrix.dll.1168498341.old
C:\Program Files\WinBudget\bin\matrix.dll.1169192289.old
C:\WA6P
C:\WINDOWS\Downloaded Program Files.\sysiasvc32.inf
C:\WINDOWS\Downloaded Program Files\rave
C:\WINDOWS\Downloaded Program Files\rave\avirexe.vdm
C:\WINDOWS\Downloaded Program Files\rave\avirscr.vdm
C:\WINDOWS\Downloaded Program Files\rave\base.vdm
C:\WINDOWS\Downloaded Program Files\rave\daily.vdm
C:\WINDOWS\Downloaded Program Files\rave\daily.vdt
C:\WINDOWS\Downloaded Program Files\rave\filters.vdm
C:\WINDOWS\Downloaded Program Files\rave\kernel.vdk
C:\WINDOWS\Downloaded Program Files\rave\keyring.vdk
C:\WINDOWS\Downloaded Program Files\rave\mapi_vdm.vdm
C:\WINDOWS\Downloaded Program Files\rave\modules.vdk
C:\WINDOWS\Downloaded Program Files\rave\rav8def.vdm
C:\WINDOWS\Downloaded Program Files\rave\rufs.vdm
C:\WINDOWS\Downloaded Program Files\rave\rufsplg.vdm
C:\WINDOWS\Downloaded Program Files\rave\unarch.vdm
C:\WINDOWS\Downloaded Program Files\rave\unmail.vdm
C:\WINDOWS\Downloaded Program Files\rave\unpack.vdm
C:\WINDOWS\Downloaded Program Files\temp
C:\WINDOWS\emdat.tm
C:\WINDOWS\emdat.tmp
C:\WINDOWS\enewsletterpro1.dat
C:\WINDOWS\system32\.exe
C:\WINDOWS\system32\atmtd.dll.tmp
C:\WINDOWS\system32\cryptdl.dll
C:\WINDOWS\system32\drivers\gipddqup.dat
C:\WINDOWS\system32\euoslgtyv.dat
C:\WINDOWS\system32\euoslgtyv_nav.dat
C:\WINDOWS\system32\euoslgtyv_navps.dat
C:\WINDOWS\system32\guard.tmp
C:\WINDOWS\system32\kr_done1
C:\WINDOWS\system32\qbnfvgsty.dat
C:\WINDOWS\system32\qbnfvgsty_nav.dat
C:\WINDOWS\system32\qbnfvgsty_navps.dat
C:\WINDOWS\system32\stera.job
C:\WINDOWS\system32\stera.log

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))

.
-------\LEGACY_CMDSERVICE
-------\LEGACY_NETWORK_MONITOR
-------\LEGACY_STHPSSTV
-------\LEGACY_VSPF
-------\LEGACY_VSPF_HK
-------\sthpsstv

((((((((((((((((((((((((( Files Created from 2007-12-08 to 2008-01-08 )))))))))))))))))))))))))))))))
.

2008-01-08 13:54 . 2000-08-31 08:00 51,200 --a------ C:\WINDOWS\NirCmd.exe
2008-01-08 12:19 . 2008-01-08 12:19 <DIR> d-------- C:\Deckard
2008-01-08 05:04 . 2008-01-08 05:06 812,344 --a------ C:\Program Files\HJTInstall.exe
2008-01-06 10:14 . 2008-01-06 10:14 96,256 --ahs---- C:\WINDOWS\system32\urdvxc.exe

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-01-08 16:55 --------- d-----w C:\Program Files\Full Tilt Poker
2008-01-08 10:06 --------- d-----w C:\Program Files\Trend Micro
2007-11-29 11:15 --------- d-----w C:\Program Files\Vodafone
2007-11-29 11:15 --------- d-----w C:\Program Files\Common Files\Wise Installation Wizard
2007-11-24 11:56 --------- d-----w C:\Program Files\Y!Deceasedv2.0b
2007-11-24 11:56 --------- d-----w C:\Program Files\QuickTime
2007-11-24 11:56 --------- d-----w C:\Program Files\cmer_uninstallers
2007-11-24 11:00 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\Grisoft
2007-11-17 11:25 --------- d-----w C:\Program Files\Lavasoft
2007-11-17 11:25 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\Lavasoft
2007-11-17 11:10 21,216,112 ----a-w C:\Program Files\aaw2007.exe
2007-11-17 09:56 --------- d--h--w C:\Program Files\InstallShield Installation Information
2007-11-17 09:56 --------- d-----w C:\Program Files\XoftSpySE
2007-11-17 09:56 --------- d-----w C:\Program Files\SmitfraudFix
2007-11-17 09:56 --------- d-----w C:\Program Files\Poker.com
2007-11-17 09:04 3,178,952 ----a-w C:\Program Files\XoftSpySE433_263.exe
2007-11-17 08:54 --------- d-----w C:\Program Files\Enigma Software Group
2007-11-17 08:32 4,067,176 ----a-w C:\Program Files\Free-SpyHunter-Scanner-Install.exe
2007-11-16 10:41 1,043,644 ----a-w C:\Program Files\SmitfraudFix.exe
2007-09-23 16:53 1,006,207 ----a-w C:\Program Files\Poker.exe
2007-06-20 18:16 10,171,623 ----a-w C:\Program Files\FullTiltSetup.exe
2007-05-23 05:59 1,542,034 ----a-w C:\Program Files\voy15-01d_hi.wmv
2007-05-23 05:51 1,478,498 ----a-w C:\Program Files\voy15-01c_hi.wmv
2007-05-23 05:46 1,565,138 ----a-w C:\Program Files\voy15-01b_hi.wmv
2007-05-23 05:33 1,212,200 ----a-w C:\Program Files\hh_07092006_3.mpg
2007-05-23 05:26 1,867,776 ----a-w C:\Program Files\157_allmypornstars.com_c.mpg
2007-05-23 05:17 1,574,355 ----a-w C:\Program Files\movie_4.wmv
2007-05-23 05:00 464,900 ----a-w C:\Program Files\V01964_t6_350.mpg
2007-05-22 14:18 1,803,424 ----a-w C:\Program Files\babe-posing-and-masturbating-movies_04.mpg
2007-05-22 14:12 1,910,328 ----a-w C:\Program Files\babe-posing-and-toying-movies_04.mpg
2007-05-22 14:06 1,605,636 ----a-w C:\Program Files\video4.mpg
2007-05-22 13:50 1,713,134 ----a-w C:\Program Files\spy4.mpg
2007-05-22 13:40 1,587,204 ----a-w C:\Program Files\spy2.mpg
2007-05-22 13:32 1,107,972 ----a-w C:\Program Files\beach-sex-06.mpg
2007-05-22 13:26 1,447,154 ----a-w C:\Program Files\spy.wmv
2007-05-21 15:25 2,547,716 ----a-w C:\Program Files\V01382_big_02.mpg
2007-05-21 15:06 1,071,108 ----a-w C:\Program Files\beach-sex-05.mpg
2007-05-21 14:53 1,478,498 ----a-w C:\Program Files\fil12-01d_hi.wmv
2007-05-21 14:45 1,487,162 ----a-w C:\Program Files\fil12-01b_hi.wmv
2007-05-21 14:35 1,555,960 ----a-w C:\Program Files\fil08-02a_hi.wmv
2007-05-18 13:20 1,547,296 ----a-w C:\Program Files\fil08-02d_hi.wmv
2007-05-18 13:04 1,541,520 ----a-w C:\Program Files\fil08-02c_hi.wmv
2007-05-18 12:58 1,532,856 ----a-w C:\Program Files\fil08-02b_hi.wmv
2007-05-18 12:51 2,786,476 ----a-w C:\Program Files\7777.wmv
2007-05-03 09:21 54,087 ----a-w C:\Program Files\smile_sexy.jpg
2007-04-30 03:44 465,520 ----a-w C:\Program Files\msgr8us.exe
2007-04-29 15:57 2,265,956 ----a-w C:\Program Files\candyhi03_chunk_3.wmv
2007-04-29 15:39 1,735,853 ----a-w C:\Program Files\video5.mpg
2007-04-28 16:43 1,762,945 ----a-w C:\Program Files\video4.wmv
2007-04-28 16:36 1,523,716 ----a-w C:\Program Files\00006.mpg
2007-04-28 16:29 1,145,107 ----a-w C:\Program Files\00005.mpg
2007-04-28 16:24 1,589,252 ----a-w C:\Program Files\00004.mpg
2007-04-28 16:17 2,084,868 ----a-w C:\Program Files\video3.mpg
2007-04-28 16:09 3,437,579 ----a-w C:\Program Files\clip4.wmv
2007-04-28 15:44 1,619,972 ----a-w C:\Program Files\0002.mpg
2007-04-28 15:31 1,221,494 ----a-w C:\Program Files\001.wmv
2007-04-25 10:36 338,781 ----a-w C:\Program Files\Rose_for_Wifey.jpg
2007-04-23 11:08 34,044 ----a-w C:\Program Files\mcsmiclock.zip
2007-04-23 11:07 7,310 ----a-w C:\Program Files\own_the_mic.zip
2007-04-14 13:02 851 ----a-w C:\Program Files\resize.reg
2007-04-14 12:49 532,616 ----a-w C:\Program Files\ImageResizerPowertoySetup(2).exe
2007-04-05 13:52 1,247,274 ----a-w C:\Program Files\0003.wmv
2007-04-01 11:06 1,557,566 ----a-w C:\Program Files\4_chunk_24.wmv
2007-04-01 09:55 348,457 ----a-w C:\Program Files\reacharoundbuddiesfilm2_246.wmv
2007-04-01 00:52 7,930,697 ----a-w C:\Program Files\gimp-2.2.13-i586-setup-1.zip
2007-04-01 00:23 5,671,965 ----a-w C:\Program Files\gtk+-2.10.6-1-setup.zip
2007-03-31 23:49 5,322,802 ----a-w C:\Program Files\setupAIR.exe
2007-03-31 07:33 4,537,848 ----a-w C:\Program Files\PortraitProfessionalTrialSetup.exe
2007-03-15 04:23 2,064,388 -c--a-w C:\Program Files\blonde-lesbians-04.mpg
2007-03-15 04:16 2,064,388 -c--a-w C:\Program Files\sex-with-strapon-04.mpg
2007-03-15 04:05 2,064,388 -c--a-w C:\Program Files\red-strapon-action-hard-sex-02.mpg
2007-03-15 03:58 2,064,388 -c--a-w C:\Program Files\red-strapon-action-hard-sex-03.mpg
2007-03-15 03:49 1,778,951 -c--a-w C:\Program Files\hotties_licking_***_204.wmv
2007-03-15 03:41 1,963,883 -c--a-w C:\Program Files\lss1.mpg
2007-03-15 03:32 1,122,304 -c--a-w C:\Program Files\lesbiansex03.mpg
2007-03-15 03:28 1,150,976 -c--a-w C:\Program Files\lesbiansex02.mpg
2007-03-15 03:23 1,177,600 -c--a-w C:\Program Files\lesbiansex01.mpg
2007-03-15 03:19 935,936 -c--a-w C:\Program Files\lesbiansex04.mpg
2007-03-14 15:45 2,064,388 -c--a-w C:\Program Files\strapon-lesbos-hard-sex-04.mpg
2007-03-14 15:35 1,345,540 ----a-w C:\Program Files\whipped-ass4.mpg
2007-03-14 15:24 649,934 -c--a-w C:\Program Files\4a.mpeg
2007-03-14 15:21 1,099,780 ----a-w C:\Program Files\lls.mpg
2007-03-14 15:10 1,093,636 -c--a-w C:\Program Files\bossbitches_02_02_straponforcefucking_06a_tagged.mpg
2007-03-14 15:04 1,492,996 -c--a-w C:\Program Files\take2.mpg
2007-03-14 14:30 468,996 ----a-w C:\Program Files\0ls.mpg
2007-03-14 14:29 473,092 -c--a-w C:\Program Files\ls3.mpg
2007-03-14 14:27 475,140 -c--a-w C:\Program Files\ls2.mpg
2007-03-14 14:24 473,092 -c--a-w C:\Program Files\ls.mpg
2007-03-11 14:10 1,004,873 -c--a-w C:\Program Files\a3.wmv
2007-03-11 14:01 289,478 -c--a-w C:\Program Files\strap-on-movie-01.mpg
2007-03-05 07:33 1,574,008 -c--a-w C:\Program Files\Fonts_1_1.zip
2007-03-02 07:32 12,580,696 -c--a-w C:\Program Files\mm20enu.exe
2007-02-26 09:51 81,408 -c--a-w C:\Program Files\Takanui aka Williams Whanau.doc
2007-02-26 04:18 372,224 -c--a-w C:\Program Files\Familystuff(2).wps
2007-02-26 04:07 372,224 -c--a-w C:\Program Files\Familystuff.wps
2007-02-23 14:16 1,887,088 -c--a-w C:\Program Files\lesbian-strapon-action_04.mpg
2007-02-19 03:07 11,759 -c--a-w C:\Program Files\gargoyles.zip
2007-02-19 03:06 20,262 ----a-w C:\Program Files\bulwarknf.zip
2007-02-19 03:03 100,055 -c--a-w C:\Program Files\bulletholz.zip
2007-02-19 03:02 32,644 -c--a-w C:\Program Files\bloodofdracula.zip
2006-04-30 05:58 602,758 --sh--w C:\WINDOWS\system32\hgjjl.bak1
2002-12-17 05:50 602,741 --sh--w C:\WINDOWS\system32\hgjjl.bak2
.

Code:

<pre>
-c--a-w         2,318,611 2003-01-15 22:53:38  C:\Documents and Settings\Owner\My Documents\Net Commando 2000 lite\Net Commando 2000 lite\Net-Commando .exe
</pre>

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{86ABDA6E-15D2-4C0D-86F7-D2E37E3E986B}]
C:\WINDOWS\System32\cryptdl.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MoneyAgent"="C:\Program Files\Microsoft Money\System\Money Express.exe" [2001-07-25 12:00 184376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"combofix"="C:\WINDOWS\system32\cmd.exe" [2003-03-31 07:00 375808]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2003-03-31 07:00 13312]
"Compliant"="gbloblqbw.exe" []

C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programs\Startup\
Printkey2000.lnk - C:\Program Files\PrintKey2000\Printkey2000.exe [2003-11-02 09:37:38]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"NoColorChoice"= 0 (0x0)
"NoSizeChoice"= 0 (0x0)
"NoDispScrSavPage"= 0 (0x0)
"NoDispCPL"= 0 (0x0)
"NoVisualStyleChoice"= 0 (0x0)
"NoDispSettingsPage"= 0 (0x0)
"NoDispAppearancePage"= 0 (0x0)
"DisableCMD"= 0 (0x0)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoThemesTab"= 0 (0x0)
"ForceActiveDesktopOn"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\MS-DOS Emulation]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
SecurityProviders msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll, zwebauth.dll

[HKLM\~\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Start Menu^Programs^Startup^Microsoft Office.lnk]
backup=C:\WINDOWS\pss\Microsoft Office.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Start Menu^Programs^Startup^Microsoft Works Calendar Reminders.lnk]
backup=C:\WINDOWS\pss\Microsoft Works Calendar Reminders.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Start Menu^Programs^Startup^Printkey2000.lnk]
backup=C:\WINDOWS\pss\Printkey2000.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Start Menu^Programs^Startup^Real-time Monitor.lnk]
backup=C:\WINDOWS\pss\Real-time Monitor.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^Sharlene Hokianga.TROJANCREW^Start Menu^Programs^Startup^Quick ShutDown.lnk]
backup=C:\WINDOWS\pss\Quick ShutDown.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\banmanpro]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Browser Pal]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BrowserBrand]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BrowserFortress]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Compliant]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Computer Alarm Clock]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\drsmartloadb]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\enewsletterpro]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\InCD]
-----c--- 2001-11-26 16:35 856064 C:\Program Files\ahead\InCD\InCD.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\InvisibleBrowsing]
--a--c--- 2004-10-05 11:02 790528 C:\Program Files\Invisible Browsing\InvisibleBrowsing.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Load]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LWBMOUSE]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MailSkinner]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MediaGateway]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Microsoft Configs 32]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Microsoft Works Portfolio]
--a--c--- 2001-08-23 16:52 331830 C:\Program Files\Microsoft Works\WksSb.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Microsoft Works Update Detection]
--a--c--- 2001-08-16 23:41 28738 C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mopsp1]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OWMngr]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Perfect Keyboard PRO]
--a--c--- 2001-01-22 10:54 122880 C:\Program Files\Perfect Keyboard PRO\pk32.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Pop3trap.exe]
--a--c--- 2001-09-13 09:59 294982 C:\Program Files\Trend Micro\PC-cillin 2000\Pop3trap.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Run]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\sdpmsv]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sygate Personal Firewall]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
--a------ 2002-07-12 22:50 146432 C:\Program Files\Common Files\Real\Update_OB\evntsvc.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\wcmdmgr]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WebTrapNT.exe]
--a--c--- 2001-09-13 09:53 235520 C:\Program Files\Trend Micro\PC-cillin 2000\WebTrapNT.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WT GameChannel]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"Tmntsrv"=2 (0x2)

R0 BsStor;InCD Storage Helper Driver;C:\WINDOWS\System32\drivers\BsStor.sys [2001-11-08 04:00]
R1 VIAPFD;VIAPFD;C:\WINDOWS\System32\Drivers\VIAPFD.SYS [2001-12-18 09:45]
R2 BsUDF;InCD UDF Driver;C:\WINDOWS\System32\drivers\BsUDF.sys [2001-11-26 16:36]
R2 MSWindows;Network Windows Service;"C:\WINDOWS\System32\urdvxc.exe" [2008-01-06 10:14]
R2 Vcs;Vcs support;C:\WINDOWS\System32\Drivers\Vcs.sys [2002-12-10 08:11]
R3 trid3d;trid3d;C:\WINDOWS\System32\DRIVERS\trid3dm.sys [2001-08-17 07:51]
S0 sthpsstv;sthpsstv;C:\WINDOWS\System32\drivers\gipddqup.da_ []
S1 alfacleaner;alfacleaner;C:\WINDOWS\System32\drivers\hesvc.sys []
S3 ham50;Intel V92 HaM Data Fax Voice;C:\WINDOWS\System32\DRIVERS\IntelH51.sys [2001-10-11 21:48]

.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-01-08 14:08:37
Windows 5.1.2600 Service Pack 1 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2008-01-08 14:14:53 - machine was rebooted
ComboFix-quarantined-files.txt 2008-01-08 19:14:50

Find AWF report by noahdfear ©2006
Version 1.40

The current date is: Tue 01/08/2008
The current time is: 14:16:51.94

bak folders found
~~~~~~~~~~~

Directory of C:\PROGRA~1\MESSEN~1\BAK

0 File(s) 0 bytes

Directory of C:\PROGRA~1\MICROS~3\BAK

0 File(s) 0 bytes

Directory of C:\PROGRA~1\QUICKT~1\BAK

02/01/2003 04:19 a.m. 77,824 qttask.exe
1 File(s) 77,824 bytes

Directory of C:\WINDOWS\SYSTEM32\BAK

07/08/2001 09:50 p.m. 155,648 NeroCheck.exe
1 File(s) 155,648 bytes

Directory of C:\PROGRA~1\MICAC0~1\SYSTEM\BAK

0 File(s) 0 bytes

Directory of C:\PROGRA~1\PLAXO\2111~1.5\BAK

08/30/2006 12:46 p.m. 183,367 PlaxoHelper.exe
1 File(s) 183,367 bytes

Directory of C:\PROGRA~1\YAHOO!\MESSEN~1\BAK

0 File(s) 0 bytes

Directory of C:\PROGRA~1\JAVA\JRE15~1.0_0\BIN\BAK

04/13/2005 02:48 a.m. 36,975 jusched.exe
1 File(s) 36,975 bytes

Duplicate files of bak directory contents
~~~~~~~~~~~~~~~~~~~~~~~

77824 1 Feb 2003 "C:\Program Files\QuickTime\bak\qttask.exe"
155648 8 Jul 2001 "C:\WINDOWS\system32\bak\NeroCheck.exe"
183367 30 Aug 2006 "C:\Program Files\Plaxo\PlaxoHelper.exe"
183367 30 Aug 2006 "C:\Program Files\Plaxo\2.5.10.17\PlaxoHelper.exe"
183367 30 Aug 2006 "C:\Program Files\Plaxo\2.11.1.5\bak\PlaxoHelper.exe"
36975 13 Apr 2005 "C:\Program Files\Java\jre1.5.0_03\bin\bak\jusched.exe"

end of report

Naomi420 · 01-08-2008, 11:32 AM

i also have family members who use my computer is there anyway i can block certain sites that they may use? without them knowing how to disable it?

Ried · 01-08-2008, 08:14 PM

As I mentioned earlier, this system is a mess. Let's concentrate on cleaning it first.

Please copy this page to Notepad and save to your desktop for reference as you will not have any browsers open while you are carrying out portions of these instructions.

Just as before, it's IMPORTANT to carry out the instructions in the sequence listed below.

***************************************************

Download SDFix and save it to your Desktop.

Double click SDFix.exe and it will extract the files to %systemdrive% -(Drive that contains the Windows Directory, typically C:\SDFix). Do not run it yet.

--------------------------------------------------------------------

Double-click FindAWF.exe to start the tool once again.

Select option #4 - Reset Domain Zones by typing 4 and press 'Enter'
You will be prompted to answer "Reset the domain zones?" Type 1 and press Enter.
After completion, then type E and press 'Enter'

----------------------------------------------------------------------

1) Restart your computer
2) After hearing your computer beep once during startup, but before the Windows icon appears, press F8.
3) Instead of Windows loading as normal, a menu should appear
4) Use the up arrow key to highlight Safe Mode and press Enter.
5) Login with your usual account.

--------------------------------------------------------------------

1. Open the extracted SDFix folder and double click RunThis.bat to start the script.

Type Y to begin the cleanup process.
It will remove any Trojan Services and Registry Entries that it finds then prompt you to press any key to Reboot.
Press any Key and it will restart the PC.
When the PC restarts the Fixtool will run again and complete the removal process then display Finished, press any key to end the script and load your desktop icons.
Once the desktop icons load the SDFix report will open on screen and also save into the SDFix folder as Report.txt I'll need that in your next reply.

--------------------------------------------------------------------

2. After SDFix has rebooted your system to Normal Mode....

Open notepad and copy/paste the text in the code box below into it:

Code:

File::
C:\Program Files\voy15-01d_hi.wmv
C:\Program Files\voy15-01c_hi.wmv
C:\Program Files\voy15-01b_hi.wmv
C:\Program Files\hh_07092006_3.mpg
C:\Program Files\157_allmypornstars.com_c.mpg
C:\Program Files\movie_4.wmv
C:\Program Files\V01964_t6_350.mpg
C:\Program Files\babe-posing-and-masturbating-movies_04.mpg
C:\Program Files\babe-posing-and-toying-movies_04.mpg
C:\Program Files\video4.mpg
C:\Program Files\spy4.mpg
C:\Program Files\spy2.mpg
C:\Program Files\beach-sex-06.mpg
C:\Program Files\spy.wmv
C:\Program Files\V01382_big_02.mpg
C:\Program Files\beach-sex-05.mpg
C:\Program Files\fil12-01d_hi.wmv
C:\Program Files\fil12-01b_hi.wmv
C:\Program Files\fil08-02a_hi.wmv
C:\Program Files\fil08-02d_hi.wmv
C:\Program Files\fil08-02c_hi.wmv
C:\Program Files\fil08-02b_hi.wmv
C:\Program Files\7777.wmv
C:\Program Files\smile_sexy.jpg
C:\Program Files\msgr8us.exe
C:\Program Files\candyhi03_chunk_3.wmv
C:\Program Files\video5.mpg
C:\Program Files\video4.wmv
C:\Program Files\00006.mpg
C:\Program Files\00005.mpg
C:\Program Files\00004.mpg
C:\Program Files\video3.mpg
C:\Program Files\clip4.wmv
C:\Program Files\0002.mpg
C:\Program Files\001.wmv
C:\Program Files\Rose_for_Wifey.jpg
C:\Program Files\mcsmiclock.zip
C:\Program Files\own_the_mic.zip
C:\Program Files\resize.reg
C:\Program Files\ImageResizerPowertoySetup(2).exe
C:\Program Files\0003.wmv
C:\Program Files\4_chunk_24.wmv
C:\Program Files\reacharoundbuddiesfilm2_246.wmv
C:\Program Files\gimp-2.2.13-i586-setup-1.zip
C:\Program Files\gtk+-2.10.6-1-setup.zip
C:\Program Files\setupAIR.exe
C:\Program Files\PortraitProfessionalTrialSetup.exe
C:\Program Files\blonde-lesbians-04.mpg
C:\Program Files\sex-with-strapon-04.mpg
C:\Program Files\red-strapon-action-hard-sex-02.mpg
C:\Program Files\red-strapon-action-hard-sex-03.mpg
C:\Program Files\hotties_licking_***_204.wmv
C:\Program Files\lss1.mpg
C:\Program Files\lesbiansex03.mpg
C:\Program Files\lesbiansex02.mpg
C:\Program Files\lesbiansex01.mpg
C:\Program Files\lesbiansex04.mpg
C:\Program Files\strapon-lesbos-hard-sex-04.mpg
C:\Program Files\whipped-ass4.mpg
C:\Program Files\4a.mpeg
C:\Program Files\lls.mpg
C:\Program Files\bossbitches_02_02_straponforcefucking_06a_tagged.mpg
C:\Program Files\take2.mpg
C:\Program Files\0ls.mpg
C:\Program Files\ls3.mpg
C:\Program Files\ls2.mpg
C:\Program Files\ls.mpg
C:\Program Files\a3.wmv
C:\Program Files\strap-on-movie-01.mpg
C:\Program Files\lesbian-strapon-action_04.mpg
C:\WINDOWS\system32\hgjjl.bak1
C:\WINDOWS\system32\hgjjl.bak2

Folder::
C:\Program Files\Y!Deceasedv2.0b
C:\Program Files\cmer_uninstallers
C:\Documents and Settings\Owner\My Documents\Net Commando 2000 lite
C:\Program Files\QuickTime\bak
C:\WINDOWS\system32\bak
C:\Program Files\Plaxo\2.11.1.5\bak

Driver::
alfacleaner

Registry::
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{86ABDA6E-15D2-4C0D-86F7-D2E37E3E986B}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"combofix"=-
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"Compliant"=-
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"NoColorChoice"=-
"NoSizeChoice"=-
"NoDispScrSavPage"=-
"NoDispCPL"=-
"NoVisualStyleChoice"=-
"NoDispSettingsPage"=-
"NoDispAppearancePage"=-
"DisableCMD"=-
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoThemesTab"=-
"ForceActiveDesktopOn"=-
[-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\MS-DOS Emulation]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=""
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\banmanpro]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Browser Pal]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BrowserBrand]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BrowserFortress]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Compliant]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\drsmartloadb]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\enewsletterpro]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Load]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MailSkinner]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MediaGateway]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Microsoft Configs 32]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mopsp1]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OWMngr]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Run]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\sdpmsv]

Save this as CFScript.txt, in the same location as ComboFix.exe

Refering to the picture above, drag CFScript into ComboFix.exe

When finished, it shall produce a log for you at C:\ComboFix.txt

Note:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall

****************************************************

3. I see no evidence of an AntiVirus program on your system. This must be resolved. Connecting to the Internet without antivirus protection is a "Welcome" doormat for malware.

Download this very good, free Anti Virus program:

Avira AntiVir PersonalEdition Classic.

Install, update definitions, and run a full system scan.

****************************************************

4. After you've completed the full system scan with Avira, please run this online scan to search for any remnants. It can take some time, so please be patient and allow it to run it's full course:

Using Internet Explorer, visit http://www.kaspersky.com/kos/eng/par...avwebscan.html

Answer Yes, when prompted to install an ActiveX component.

The program will then begin downloading the latest definition files.
Once the files have been downloaded click on NEXT
Locate the Scan Settings button & configure to:
- Scan using the following Anti-Virus database:
  - Extended
- Scan Options:
  - Scan Archives
  - Scan Mail Bases
Click OK & have it scan My Computer
Once the scan is complete, it will display if your system has been infected. It does not provide an option to clean/disinfect. We only require a report from it.
Click the Save as Text button to save the file to your desktop so that you may post it in your next reply

* Turn off the real time scanner of any existing antivirus program while performing the online scan

---------------------------------------------------------------

5. Run a new scan with dss.exe.

--------------------------------------------------------------------

Please include the following in your next reply:

C:\SDFix\Report.txt
C:\ComboFix.txt
Kaspersky report
main.txt

Naomi420 · 01-09-2008, 09:55 PM

hey there again what a mission that was hahaha but thanks alot for that theres one thing um really unsure about though after finally being able to download the avira antivir personal edition classic scanner i did the scan right but i wasnt sure wether i should delete the infections or just quarantine them so i just on the safe side quarantined all infections found because deckard had some kind of infection and things like system volume restore were also quarantined i didnt want to go deleting all these things i wasnt sure about and have certain programs not running right because i did that.... i also saved a report on that antivir scan and i know you didnt ask for it but i thought maybe if i actually showed you you'd understand more of what im saying.....the other thing is im not sure if it suppose to be there but a folder named Qoobox has popped up in my c: drive? im so sorry if i have been such a hassle and i really do appreciate all the hard work and effort you have put toward helping me fix everything...i have noticed some changes though i.e seems to be working fine so and im not lagging as much as i was previously so thank you so much for that here is the logs you asked for i will post the avira log after ive posted the logs you asked for even if its not neccessary

SDFix: Version 1.125

Run by Owner on Wed 01/09/2008 at 04:38 a.m.

Microsoft Windows XP [Version 5.1.2600]

Running From: C:\SDFix

Safe Mode:
Checking Services:

Name:
MSWindows

Path:
"C:\WINDOWS\System32\urdvxc.exe" /service

MSWindows - Deleted

Restoring Windows Registry Values
Restoring Windows Default Hosts File

Rebooting...

Normal Mode:
Checking Files:

Trojan Files Found:

C:\WINDOWS\SYSTEM32\SP1_32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SP1_32.DLL - Deleted
C:\ANTIVI~1.EXE - Deleted
C:\WINDOWS\system32\CatRoot\TMP12.tmp - Deleted
C:\WINDOWS\system32\bpk.dat - Deleted
C:\WINDOWS\system32\inst.dat - Deleted
C:\WINDOWS\system32\pk.bin - Deleted
C:\WINDOWS\system32\TFTP1360 - Deleted
C:\WINDOWS\system32\TFTP1396 - Deleted
C:\WINDOWS\system32\TFTP1432 - Deleted
C:\WINDOWS\system32\TFTP1444 - Deleted
C:\WINDOWS\system32\TFTP1652 - Deleted
C:\WINDOWS\system32\TFTP1720 - Deleted
C:\WINDOWS\system32\TFTP1932 - Deleted
C:\WINDOWS\system32\TFTP1972 - Deleted
C:\WINDOWS\system32\TFTP204 - Deleted
C:\WINDOWS\system32\TFTP2096 - Deleted
C:\WINDOWS\system32\TFTP2124 - Deleted
C:\WINDOWS\system32\TFTP2184 - Deleted
C:\WINDOWS\system32\TFTP2228 - Deleted
C:\WINDOWS\system32\TFTP2548 - Deleted
C:\WINDOWS\system32\TFTP256 - Deleted
C:\WINDOWS\system32\TFTP2644 - Deleted
C:\WINDOWS\system32\TFTP2664 - Deleted
C:\WINDOWS\system32\TFTP2680 - Deleted
C:\WINDOWS\system32\TFTP2692 - Deleted
C:\WINDOWS\system32\TFTP2708 - Deleted
C:\WINDOWS\system32\TFTP2812 - Deleted
C:\WINDOWS\system32\TFTP2976 - Deleted
C:\WINDOWS\system32\TFTP3104 - Deleted
C:\WINDOWS\system32\TFTP3120 - Deleted
C:\WINDOWS\system32\TFTP3144 - Deleted
C:\WINDOWS\system32\TFTP3332 - Deleted
C:\WINDOWS\system32\TFTP3444 - Deleted
C:\WINDOWS\system32\TFTP3572 - Deleted
C:\WINDOWS\system32\TFTP3716 - Deleted
C:\WINDOWS\system32\TFTP3776 - Deleted
C:\WINDOWS\system32\TFTP3820 - Deleted
C:\WINDOWS\system32\TFTP388 - Deleted
C:\WINDOWS\system32\TFTP3920 - Deleted
C:\WINDOWS\system32\TFTP4036 - Deleted
C:\WINDOWS\system32\TFTP4528 - Deleted
C:\WINDOWS\system32\TFTP4700 - Deleted
C:\WINDOWS\system32\TFTP4848 - Deleted
C:\WINDOWS\system32\TFTP4904 - Deleted
C:\WINDOWS\system32\TFTP888 - Deleted
C:\WINDOWS\system32\urdvxc.exe - Deleted
C:\WINDOWS\system32\web.dat - Deleted

Removing Temp Files...

ADS Check:

C:\WINDOWS
No streams found.

C:\WINDOWS\system32
No streams found.

C:\WINDOWS\system32\svchost.exe
No streams found.

C:\WINDOWS\system32\ntoskrnl.exe
No streams found.

Final Check:

catchme 0.3.1344.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-01-09 04:50:22
Windows 5.1.2600 Service Pack 1 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

scanning hidden registry entries ...

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0

Remaining Services:
------------------

Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

Remaining Files:
---------------

File Backups: - C:\SDFix\backups\backups.zip

Files with Hidden Attributes:

Wed 30 Nov 2005 52,224 ..SHR --- "C:\Program Files\yahelite\Setup.exe"
Sun 30 Apr 2006 602,758 ..SH. --- "C:\WINDOWS\system32\hgjjl.bak1"
Tue 17 Dec 2002 602,741 ..SH. --- "C:\WINDOWS\system32\hgjjl.bak2"
Fri 26 Jan 2007 700,928 ...H. --- "C:\WINDOWS\system32\wodfamoh.dll"
Sun 22 Jun 2003 4,348 ..SH. --- "C:\Documents and Settings\All Users.WINDOWS\DRM\DRMv1.bak"
Mon 7 Aug 2006 400 ..SH. --- "C:\Documents and Settings\All Users.WINDOWS\DRM\v2ks.bla.bak"
Mon 7 Aug 2006 48 ..SH. --- "C:\Documents and Settings\All Users.WINDOWS\DRM\v2ks.sec.bak"
Wed 6 Sep 2006 50,688 ..SHR --- "C:\Program Files\ZakFromAnotherPlanet\VBRunDLL\Setup.exe"
Thu 19 Jan 2006 5,319,000 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\483b14dfd4304c14bae99ca9db08dab8\BIT10.tmp"

Finished!

Naomi420 · 01-09-2008, 10:01 PM

ComboFix 08-01-08.4 - Owner 2008-01-09 5:19:24.2 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.1.1252.1.1033.18.23 [GMT -5:00]
Running from: C:\Documents and Settings\Owner\Desktop\ComboFix.exe
Command switches used :: C:\Documents and Settings\Owner\Desktop\CFScript.txt
* Created a new restore point

FILE
C:\Program Files\00004.mpg
C:\Program Files\00005.mpg
C:\Program Files\00006.mpg
C:\Program Files\0002.mpg
C:\Program Files\0003.wmv
C:\Program Files\001.wmv
C:\Program Files\0ls.mpg
C:\Program Files\157_allmypornstars.com_c.mpg
C:\Program Files\4_chunk_24.wmv
C:\Program Files\4a.mpeg
C:\Program Files\7777.wmv
C:\Program Files\a3.wmv
C:\Program Files\babe-posing-and-masturbating-movies_04.mpg
C:\Program Files\babe-posing-and-toying-movies_04.mpg
C:\Program Files\beach-sex-05.mpg
C:\Program Files\beach-sex-06.mpg
C:\Program Files\blonde-lesbians-04.mpg
C:\Program Files\bossbitches_02_02_straponforcefucking_06a_tagged.mpg
C:\Program Files\candyhi03_chunk_3.wmv
C:\Program Files\clip4.wmv
C:\Program Files\fil08-02a_hi.wmv
C:\Program Files\fil08-02b_hi.wmv
C:\Program Files\fil08-02c_hi.wmv
C:\Program Files\fil08-02d_hi.wmv
C:\Program Files\fil12-01b_hi.wmv
C:\Program Files\fil12-01d_hi.wmv
C:\Program Files\gimp-2.2.13-i586-setup-1.zip
C:\Program Files\gtk+-2.10.6-1-setup.zip
C:\Program Files\hh_07092006_3.mpg
C:\Program Files\ImageResizerPowertoySetup(2).exe
C:\Program Files\lesbian-strapon-action_04.mpg
C:\Program Files\lesbiansex01.mpg
C:\Program Files\lesbiansex02.mpg
C:\Program Files\lesbiansex03.mpg
C:\Program Files\lesbiansex04.mpg
C:\Program Files\lls.mpg
C:\Program Files\ls.mpg
C:\Program Files\ls2.mpg
C:\Program Files\ls3.mpg
C:\Program Files\lss1.mpg
C:\Program Files\mcsmiclock.zip
C:\Program Files\movie_4.wmv
C:\Program Files\msgr8us.exe
C:\Program Files\own_the_mic.zip
C:\Program Files\PortraitProfessionalTrialSetup.exe
C:\Program Files\reacharoundbuddiesfilm2_246.wmv
C:\Program Files\red-strapon-action-hard-sex-02.mpg
C:\Program Files\red-strapon-action-hard-sex-03.mpg
C:\Program Files\resize.reg
C:\Program Files\Rose_for_Wifey.jpg
C:\Program Files\setupAIR.exe
C:\Program Files\sex-with-strapon-04.mpg
C:\Program Files\smile_sexy.jpg
C:\Program Files\spy.wmv
C:\Program Files\spy2.mpg
C:\Program Files\spy4.mpg
C:\Program Files\strap-on-movie-01.mpg
C:\Program Files\strapon-lesbos-hard-sex-04.mpg
C:\Program Files\take2.mpg
C:\Program Files\V01382_big_02.mpg
C:\Program Files\V01964_t6_350.mpg
C:\Program Files\video3.mpg
C:\Program Files\video4.mpg
C:\Program Files\video4.wmv
C:\Program Files\video5.mpg
C:\Program Files\voy15-01b_hi.wmv
C:\Program Files\voy15-01c_hi.wmv
C:\Program Files\voy15-01d_hi.wmv
C:\Program Files\whipped-ass4.mpg
C:\WINDOWS\system32\hgjjl.bak1
C:\WINDOWS\system32\hgjjl.bak2
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\Owner\My Documents\Net Commando 2000 lite
C:\Documents and Settings\Owner\My Documents\Net Commando 2000 lite\Net Commando 2000 lite\Net-Commando .exe
C:\Documents and Settings\Owner\My Documents\Net Commando 2000 lite\Net Commando 2000 lite\ReadMe.txt
C:\Program Files\00004.mpg
C:\Program Files\00005.mpg
C:\Program Files\00006.mpg
C:\Program Files\0002.mpg
C:\Program Files\0003.wmv
C:\Program Files\001.wmv
C:\Program Files\0ls.mpg
C:\Program Files\157_allmypornstars.com_c.mpg
C:\Program Files\4_chunk_24.wmv
C:\Program Files\4a.mpeg
C:\Program Files\7777.wmv
C:\Program Files\a3.wmv
C:\Program Files\babe-posing-and-masturbating-movies_04.mpg
C:\Program Files\babe-posing-and-toying-movies_04.mpg
C:\Program Files\beach-sex-05.mpg
C:\Program Files\beach-sex-06.mpg
C:\Program Files\blonde-lesbians-04.mpg
C:\Program Files\bossbitches_02_02_straponforcefucking_06a_tagged.mpg
C:\Program Files\candyhi03_chunk_3.wmv
C:\Program Files\clip4.wmv
C:\Program Files\cmer_uninstallers
C:\Program Files\fil08-02a_hi.wmv
C:\Program Files\fil08-02b_hi.wmv
C:\Program Files\fil08-02c_hi.wmv
C:\Program Files\fil08-02d_hi.wmv
C:\Program Files\fil12-01b_hi.wmv
C:\Program Files\fil12-01d_hi.wmv
C:\Program Files\gimp-2.2.13-i586-setup-1.zip
C:\Program Files\gtk+-2.10.6-1-setup.zip
C:\Program Files\hh_07092006_3.mpg
C:\Program Files\ImageResizerPowertoySetup(2).exe
C:\Program Files\lesbian-strapon-action_04.mpg
C:\Program Files\lesbiansex01.mpg
C:\Program Files\lesbiansex02.mpg
C:\Program Files\lesbiansex03.mpg
C:\Program Files\lesbiansex04.mpg
C:\Program Files\lls.mpg
C:\Program Files\ls.mpg
C:\Program Files\ls2.mpg
C:\Program Files\ls3.mpg
C:\Program Files\lss1.mpg
C:\Program Files\mcsmiclock.zip
C:\Program Files\movie_4.wmv
C:\Program Files\msgr8us.exe
C:\Program Files\own_the_mic.zip
C:\Program Files\Plaxo\2.11.1.5\bak
C:\Program Files\Plaxo\2.11.1.5\bak\PlaxoHelper.exe
C:\Program Files\PortraitProfessionalTrialSetup.exe
C:\Program Files\QuickTime\bak
C:\Program Files\QuickTime\bak\qttask.exe
C:\Program Files\reacharoundbuddiesfilm2_246.wmv
C:\Program Files\red-strapon-action-hard-sex-02.mpg
C:\Program Files\red-strapon-action-hard-sex-03.mpg
C:\Program Files\resize.reg
C:\Program Files\Rose_for_Wifey.jpg
C:\Program Files\setupAIR.exe
C:\Program Files\sex-with-strapon-04.mpg
C:\Program Files\smile_sexy.jpg
C:\Program Files\spy.wmv
C:\Program Files\spy2.mpg
C:\Program Files\spy4.mpg
C:\Program Files\strap-on-movie-01.mpg
C:\Program Files\strapon-lesbos-hard-sex-04.mpg
C:\Program Files\take2.mpg
C:\Program Files\V01382_big_02.mpg
C:\Program Files\V01964_t6_350.mpg
C:\Program Files\video3.mpg
C:\Program Files\video4.mpg
C:\Program Files\video4.wmv
C:\Program Files\video5.mpg
C:\Program Files\voy15-01b_hi.wmv
C:\Program Files\voy15-01c_hi.wmv
C:\Program Files\voy15-01d_hi.wmv
C:\Program Files\whipped-ass4.mpg
C:\Program Files\Y!Deceasedv2.0b
C:\Program Files\Y!Deceasedv2.0b\Y!Deceased v2.0b.exe
C:\WINDOWS\system32\bak
C:\WINDOWS\system32\bak\NeroCheck.exe
C:\WINDOWS\system32\hgjjl.bak1
C:\WINDOWS\system32\hgjjl.bak2

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))

.
-------\LEGACY_ALFACLEANER
-------\alfacleaner

((((((((((((((((((((((((( Files Created from 2007-12-09 to 2008-01-09 )))))))))))))))))))))))))))))))
.

2008-01-09 04:36 . 2008-01-09 04:36 <DIR> d-------- C:\WINDOWS\ERUNT
2008-01-09 02:41 . 2008-01-09 03:49 21,177,300 --a------ C:\antivir_workstation_win7u_en_h.exe.part
2008-01-08 13:54 . 2000-08-31 08:00 51,200 --a------ C:\WINDOWS\NirCmd.exe
2008-01-08 12:19 . 2008-01-08 12:19 <DIR> d-------- C:\Deckard
2008-01-08 05:04 . 2008-01-08 05:06 812,344 --a------ C:\Program Files\HJTInstall.exe

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-01-09 10:26 --------- d-----w C:\Program Files\QuickTime
2008-01-09 09:04 --------- d-----w C:\Program Files\Lavasoft
2008-01-09 01:08 --------- d-----w C:\Program Files\Full Tilt Poker
2008-01-08 10:06 --------- d-----w C:\Program Files\Trend Micro
2007-11-29 11:15 --------- d-----w C:\Program Files\Vodafone
2007-11-24 11:00 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\Grisoft
2007-11-17 11:10 21,216,112 ----a-w C:\Program Files\aaw2007.exe
2007-11-17 09:56 --------- d--h--w C:\Program Files\InstallShield Installation Information
2007-11-17 09:56 --------- d-----w C:\Program Files\XoftSpySE
2007-11-17 09:56 --------- d-----w C:\Program Files\SmitfraudFix
2007-11-17 09:56 --------- d-----w C:\Program Files\Poker.com
2007-11-17 09:04 3,178,952 ----a-w C:\Program Files\XoftSpySE433_263.exe
2007-11-17 08:54 --------- d-----w C:\Program Files\Enigma Software Group
2007-11-17 08:32 4,067,176 ----a-w C:\Program Files\Free-SpyHunter-Scanner-Install.exe
2007-11-16 10:41 1,043,644 ----a-w C:\Program Files\SmitfraudFix.exe
2007-09-23 16:53 1,006,207 ----a-w C:\Program Files\Poker.exe
2007-06-20 18:16 10,171,623 ----a-w C:\Program Files\FullTiltSetup.exe
2007-03-15 03:49 1,778,951 -c--a-w C:\Program Files\hotties_licking_***_204.wmv
2007-03-05 07:33 1,574,008 -c--a-w C:\Program Files\Fonts_1_1.zip
2007-03-02 07:32 12,580,696 -c--a-w C:\Program Files\mm20enu.exe
2007-02-26 09:51 81,408 -c--a-w C:\Program Files\Takanui aka Williams Whanau.doc
2007-02-26 04:18 372,224 -c--a-w C:\Program Files\Familystuff(2).wps
2007-02-26 04:07 372,224 -c--a-w C:\Program Files\Familystuff.wps
2007-02-19 03:07 11,759 -c--a-w C:\Program Files\gargoyles.zip
2007-02-19 03:06 20,262 ----a-w C:\Program Files\bulwarknf.zip
2007-02-19 03:03 100,055 -c--a-w C:\Program Files\bulletholz.zip
2007-02-19 03:02 32,644 -c--a-w C:\Program Files\bloodofdracula.zip
2007-02-19 02:59 53,096 -c--a-w C:\Program Files\batmanforever.zip
2007-02-19 02:56 10,359 -c--a-w C:\Program Files\achilles.zip
2007-02-19 02:52 84,348 -c--a-w C:\Program Files\alexis.zip
2007-02-18 10:24 32,973 -c--a-w C:\Program Files\japanese.zip
2007-02-18 10:11 13,764 -c--a-w C:\Program Files\chinese_takeaway.zip
2007-02-18 08:02 737,732 -c--a-w C:\Program Files\gifcompr.exe
2007-02-16 00:11 48,529 -c--a-w C:\Program Files\snipple.zip
2007-02-07 05:32 1,919,936 -c--a-w C:\Program Files\3521744801.zip
2007-02-06 12:26 314,336 -c--a-w C:\Program Files\lsc_lss_8677-07.wmv
2007-02-06 07:31 19,075 -c--a-w C:\Program Files\melting.zip
2007-02-03 13:04 1,800,903 ----a-w C:\Program Files\002.mpg
2007-02-03 12:57 2,068,480 -c--a-w C:\Program Files\07.mpg
2007-02-03 12:41 1,276,197 -c--a-w C:\Program Files\lsc_lss_8677-09.wmv
2007-02-03 05:07 3,606,944 -c--a-w C:\Program Files\SFTPMSI.exe
2007-02-02 10:18 5,537,187 -c--a-w C:\Program Files\backgrounds.zip
2007-02-02 09:09 824,707 -c--a-w C:\Program Files\s7.zip
2007-02-02 02:26 2,272,410 -c--a-w C:\Program Files\pix.zip
2007-02-01 09:15 1,410,680 -c--a-w C:\Program Files\install_flash_player(2).exe
2007-02-01 09:04 4,144,085 -c--a-w C:\Program Files\bv.zip
2007-01-31 11:31 1,619,972 -c--a-w C:\Program Files\06.mpg
2007-01-31 11:24 1,801,018 ----a-w C:\Program Files\05.mpg
2007-01-31 11:18 1,772,686 -c--a-w C:\Program Files\02.mpg
2007-01-31 11:10 1,802,850 -c--a-w C:\Program Files\04.mpg
2007-01-31 11:03 1,536,004 ----a-w C:\Program Files\03.mpg
2007-01-29 13:09 7,718,504 ----a-w C:\Program Files\winzip110.exe
2007-01-29 12:38 1,023,524 -c--a-w C:\Program Files\superzip.exe
2007-01-10 09:01 8,130,640 -c--a-w C:\Program Files\CoolComment.exe
2007-01-10 06:20 19,381,811 -c--a-w C:\Program Files\glanda.zip
2007-01-10 02:08 35,570 -c--a-w C:\Program Files\degrassi.zip
2007-01-10 02:08 15,014 -c--a-w C:\Program Files\delusion.zip
2007-01-10 02:06 417,431 -c--a-w C:\Program Files\black.zip
2007-01-10 02:03 29,804 -c--a-w C:\Program Files\AngloText.zip
2007-01-10 02:02 230,944 -c--a-w C:\Program Files\ACharmingFont.zip
2007-01-10 02:00 170,173 -c--a-w C:\Program Files\Abaddon.zip
2006-12-16 22:59 15,505,200 ----a-w C:\Program Files\IE7-WindowsXP-x86-enu.exe
2006-12-16 12:32 1,475,376 ----a-w C:\Program Files\GenuineCheck.exe
2006-12-16 03:51 577,612 -c--a-w C:\Program Files\printkey.exe
2006-12-10 06:14 24,265,736 ----a-w C:\Program Files\dotnetfx.exe
2006-12-08 10:09 3,599,761 -c--a-w C:\Program Files\XnView-win.zip
2006-12-08 09:55 2,184,537 ----a-w C:\Program Files\PhotobieInstaller.zip
2006-12-08 09:30 348,521 -c--a-w C:\Program Files\HarrysFilters3.zip
2006-12-07 22:32 311,696 -c--a-w C:\Program Files\VideoEggPublisher.exe
2006-12-01 00:00 532,616 ----a-w C:\Program Files\ImageResizerPowertoySetup.exe
2006-11-20 01:12 22 -c--a-w C:\Program Files\LWPro126.zip
2006-11-19 21:29 4,218,890 -c--a-w C:\Program Files\LWPro126(2).zip
2006-11-13 08:37 1,355,912 ----a-w C:\Program Files\install_flash_player.exe
2006-11-13 01:32 5,900,416 ----a-w C:\Program Files\Firefox Setup 2.0.exe
2006-11-12 23:30 6,469,352 ----a-w C:\Program Files\avgas-setup-7.5.0.50.exe
2006-11-12 21:51 5,375,056 -c--a-w C:\Program Files\SpyWareNukerXT.exe
2006-11-04 08:17 40,176 ----a-w C:\WINDOWS\Fonts\Writers.zip
2006-11-04 08:16 88,300 ----a-w C:\WINDOWS\Fonts\subway.zip
2006-11-04 08:15 3,860 ----a-w C:\WINDOWS\Fonts\tagster.zip
2006-11-04 08:15 14,416 ----a-w C:\WINDOWS\Fonts\inthacity.zip
2006-11-04 08:13 41,568 ----a-w C:\WINDOWS\Fonts\tagsxtrm.zip
2006-11-04 08:10 24,837 ----a-w C:\WINDOWS\Fonts\PuteiroAnarquista.zip
2006-10-23 06:10 182,945 -c--a-w C:\Program Files\80Proof2.0.zip
2006-10-23 05:09 47,981 -c--a-w C:\Program Files\Ownage_Proxy_Cracker.rar
2006-10-23 01:22 4,577,996 -c--a-w C:\Program Files\ytunnelhack.exe
2006-10-21 09:45 1,620,303 ----a-w C:\Program Files\Missing-OCX-FilesPart2.zip
2006-10-21 09:31 28,955 -c--a-w C:\Program Files\Y!Deceasedv2.0b.zip
2006-10-18 14:31 286,169 -c--a-w C:\Program Files\Blake-Incs-Scanner.zip
2006-10-18 09:40 41,423 -c--a-w C:\Program Files\On The Mic.zip
2006-10-18 08:31 10,493 -c--a-w C:\Program Files\again.JPG
2006-10-18 08:16 8,805 -c--a-w C:\Program Files\meandbottle.JPG
2006-10-18 06:02 426,547 ----a-w C:\Program Files\Proxy Scanner v4.06.zip
2006-10-18 05:40 125,317 -c--a-w C:\Program Files\GenesisReborn2.zip
2006-10-18 05:26 72,795 -c--a-w C:\Program Files\AniGIF2.lic.zip
2006-10-18 05:24 160,385 -c--a-w C:\Program Files\Active Scan 1.7.zip
2006-10-18 04:30 247,952 -c--a-w C:\Program Files\Bot Checker Pro.rar
2006-10-18 03:11 98,769 -c--a-w C:\Program Files\Explcit-BombBeta2.zip
2006-10-17 14:04 328,096 ----a-w C:\Program Files\eidm.zip
2006-10-15 14:23 895,554 -c--a-w C:\Program Files\lesbian_strapon_movie_04.wmv
2006-10-15 14:20 901,330 -c--a-w C:\Program Files\lesbian_strapon_movie_03.wmv
.

((((((((((((((((((((((((((((( snapshot@2008-01-08_14.14.21.13 )))))))))))))))))))))))))))))))))))))))))
.
+ 2008-01-09 06:50:30 163,328 ----a-w C:\WINDOWS\ERUNT\SDFIX\ERDNT.EXE
+ 2008-01-09 09:36:45 4,546,560 ----a-w C:\WINDOWS\ERUNT\SDFIX\Users\00000001\ntuser.dat
+ 2008-01-09 09:36:45 126,976 ----a-w C:\WINDOWS\ERUNT\SDFIX\Users\00000002\UsrClass.dat
+ 2008-01-09 06:50:30 163,328 ----a-w C:\WINDOWS\ERUNT\SDFIX_First_Run\ERDNT.EXE
+ 2008-01-09 09:36:28 4,546,560 ----a-w C:\WINDOWS\ERUNT\SDFIX_First_Run\Users\00000001\ntuser.dat
+ 2008-01-09 09:36:28 126,976 ----a-w C:\WINDOWS\ERUNT\SDFIX_First_Run\Users\00000002\UsrClass.dat
- 2008-01-08 18:55:46 278,528 ----a-w C:\WINDOWS\system32\config\systemprofile\ntuser.dat
+ 2008-01-09 10:19:09 278,528 ----a-w C:\WINDOWS\system32\config\systemprofile\ntuser.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MoneyAgent"="C:\Program Files\Microsoft Money\System\Money Express.exe" [2001-07-25 12:00 184376]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2003-03-31 07:00 13312]

C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programs\Startup\
Printkey2000.lnk - C:\Program Files\PrintKey2000\Printkey2000.exe [2003-11-02 09:37:38]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
SecurityProviders msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll, zwebauth.dll

[HKLM\~\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Start Menu^Programs^Startup^Microsoft Office.lnk]
backup=C:\WINDOWS\pss\Microsoft Office.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Start Menu^Programs^Startup^Microsoft Works Calendar Reminders.lnk]
backup=C:\WINDOWS\pss\Microsoft Works Calendar Reminders.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Start Menu^Programs^Startup^Printkey2000.lnk]
backup=C:\WINDOWS\pss\Printkey2000.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Start Menu^Programs^Startup^Real-time Monitor.lnk]
backup=C:\WINDOWS\pss\Real-time Monitor.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^Sharlene Hokianga.TROJANCREW^Start Menu^Programs^Startup^Quick ShutDown.lnk]
backup=C:\WINDOWS\pss\Quick ShutDown.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Computer Alarm Clock]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\InCD]
-----c--- 2001-11-26 16:35 856064 C:\Program Files\ahead\InCD\InCD.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\InvisibleBrowsing]
--a--c--- 2004-10-05 11:02 790528 C:\Program Files\Invisible Browsing\InvisibleBrowsing.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LWBMOUSE]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Microsoft Works Portfolio]
--a--c--- 2001-08-23 16:52 331830 C:\Program Files\Microsoft Works\WksSb.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Microsoft Works Update Detection]
--a--c--- 2001-08-16 23:41 28738 C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Perfect Keyboard PRO]
--a--c--- 2001-01-22 10:54 122880 C:\Program Files\Perfect Keyboard PRO\pk32.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Pop3trap.exe]
--a--c--- 2001-09-13 09:59 294982 C:\Program Files\Trend Micro\PC-cillin 2000\Pop3trap.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sygate Personal Firewall]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
--a------ 2002-07-12 22:50 146432 C:\Program Files\Common Files\Real\Update_OB\evntsvc.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\wcmdmgr]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WebTrapNT.exe]
--a--c--- 2001-09-13 09:53 235520 C:\Program Files\Trend Micro\PC-cillin 2000\WebTrapNT.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WT GameChannel]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"Tmntsrv"=2 (0x2)

R0 BsStor;InCD Storage Helper Driver;C:\WINDOWS\System32\drivers\BsStor.sys [2001-11-08 04:00]
R1 VIAPFD;VIAPFD;C:\WINDOWS\System32\Drivers\VIAPFD.SYS [2001-12-18 09:45]
R2 BsUDF;InCD UDF Driver;C:\WINDOWS\System32\drivers\BsUDF.sys [2001-11-26 16:36]
R2 Vcs;Vcs support;C:\WINDOWS\System32\Drivers\Vcs.sys [2002-12-10 08:11]
R3 trid3d;trid3d;C:\WINDOWS\System32\DRIVERS\trid3dm.sys [2001-08-17 07:51]
S3 ham50;Intel V92 HaM Data Fax Voice;C:\WINDOWS\System32\DRIVERS\IntelH51.sys [2001-10-11 21:48]

.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-01-09 05:30:57
Windows 5.1.2600 Service Pack 1 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2008-01-09 5:35:54 - machine was rebooted
ComboFix-quarantined-files.txt 2008-01-09 10:35:52
ComboFix2.txt 2008-01-08 19:14:53

Naomi420 · 01-09-2008, 10:09 PM

ComboFix 08-01-08.4 - Owner 2008-01-09 5:19:24.2 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.1.1252.1.1033.18.23 [GMT -5:00]
Running from: C:\Documents and Settings\Owner\Desktop\ComboFix.exe
Command switches used :: C:\Documents and Settings\Owner\Desktop\CFScript.txt
* Created a new restore point

FILE
C:\Program Files\00004.mpg
C:\Program Files\00005.mpg
C:\Program Files\00006.mpg
C:\Program Files\0002.mpg
C:\Program Files\0003.wmv
C:\Program Files\001.wmv
C:\Program Files\0ls.mpg
C:\Program Files\157_allmypornstars.com_c.mpg
C:\Program Files\4_chunk_24.wmv
C:\Program Files\4a.mpeg
C:\Program Files\7777.wmv
C:\Program Files\a3.wmv
C:\Program Files\babe-posing-and-masturbating-movies_04.mpg
C:\Program Files\babe-posing-and-toying-movies_04.mpg
C:\Program Files\beach-sex-05.mpg
C:\Program Files\beach-sex-06.mpg
C:\Program Files\blonde-lesbians-04.mpg
C:\Program Files\bossbitches_02_02_straponforcefucking_06a_tagged.mpg
C:\Program Files\candyhi03_chunk_3.wmv
C:\Program Files\clip4.wmv
C:\Program Files\fil08-02a_hi.wmv
C:\Program Files\fil08-02b_hi.wmv
C:\Program Files\fil08-02c_hi.wmv
C:\Program Files\fil08-02d_hi.wmv
C:\Program Files\fil12-01b_hi.wmv
C:\Program Files\fil12-01d_hi.wmv
C:\Program Files\gimp-2.2.13-i586-setup-1.zip
C:\Program Files\gtk+-2.10.6-1-setup.zip
C:\Program Files\hh_07092006_3.mpg
C:\Program Files\ImageResizerPowertoySetup(2).exe
C:\Program Files\lesbian-strapon-action_04.mpg
C:\Program Files\lesbiansex01.mpg
C:\Program Files\lesbiansex02.mpg
C:\Program Files\lesbiansex03.mpg
C:\Program Files\lesbiansex04.mpg
C:\Program Files\lls.mpg
C:\Program Files\ls.mpg
C:\Program Files\ls2.mpg
C:\Program Files\ls3.mpg
C:\Program Files\lss1.mpg
C:\Program Files\mcsmiclock.zip
C:\Program Files\movie_4.wmv
C:\Program Files\msgr8us.exe
C:\Program Files\own_the_mic.zip
C:\Program Files\PortraitProfessionalTrialSetup.exe
C:\Program Files\reacharoundbuddiesfilm2_246.wmv
C:\Program Files\red-strapon-action-hard-sex-02.mpg
C:\Program Files\red-strapon-action-hard-sex-03.mpg
C:\Program Files\resize.reg
C:\Program Files\Rose_for_Wifey.jpg
C:\Program Files\setupAIR.exe
C:\Program Files\sex-with-strapon-04.mpg
C:\Program Files\smile_sexy.jpg
C:\Program Files\spy.wmv
C:\Program Files\spy2.mpg
C:\Program Files\spy4.mpg
C:\Program Files\strap-on-movie-01.mpg
C:\Program Files\strapon-lesbos-hard-sex-04.mpg
C:\Program Files\take2.mpg
C:\Program Files\V01382_big_02.mpg
C:\Program Files\V01964_t6_350.mpg
C:\Program Files\video3.mpg
C:\Program Files\video4.mpg
C:\Program Files\video4.wmv
C:\Program Files\video5.mpg
C:\Program Files\voy15-01b_hi.wmv
C:\Program Files\voy15-01c_hi.wmv
C:\Program Files\voy15-01d_hi.wmv
C:\Program Files\whipped-ass4.mpg
C:\WINDOWS\system32\hgjjl.bak1
C:\WINDOWS\system32\hgjjl.bak2
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\Owner\My Documents\Net Commando 2000 lite
C:\Documents and Settings\Owner\My Documents\Net Commando 2000 lite\Net Commando 2000 lite\Net-Commando .exe
C:\Documents and Settings\Owner\My Documents\Net Commando 2000 lite\Net Commando 2000 lite\ReadMe.txt
C:\Program Files\00004.mpg
C:\Program Files\00005.mpg
C:\Program Files\00006.mpg
C:\Program Files\0002.mpg
C:\Program Files\0003.wmv
C:\Program Files\001.wmv
C:\Program Files\0ls.mpg
C:\Program Files\157_allmypornstars.com_c.mpg
C:\Program Files\4_chunk_24.wmv
C:\Program Files\4a.mpeg
C:\Program Files\7777.wmv
C:\Program Files\a3.wmv
C:\Program Files\babe-posing-and-masturbating-movies_04.mpg
C:\Program Files\babe-posing-and-toying-movies_04.mpg
C:\Program Files\beach-sex-05.mpg
C:\Program Files\beach-sex-06.mpg
C:\Program Files\blonde-lesbians-04.mpg
C:\Program Files\bossbitches_02_02_straponforcefucking_06a_tagged.mpg
C:\Program Files\candyhi03_chunk_3.wmv
C:\Program Files\clip4.wmv
C:\Program Files\cmer_uninstallers
C:\Program Files\fil08-02a_hi.wmv
C:\Program Files\fil08-02b_hi.wmv
C:\Program Files\fil08-02c_hi.wmv
C:\Program Files\fil08-02d_hi.wmv
C:\Program Files\fil12-01b_hi.wmv
C:\Program Files\fil12-01d_hi.wmv
C:\Program Files\gimp-2.2.13-i586-setup-1.zip
C:\Program Files\gtk+-2.10.6-1-setup.zip
C:\Program Files\hh_07092006_3.mpg
C:\Program Files\ImageResizerPowertoySetup(2).exe
C:\Program Files\lesbian-strapon-action_04.mpg
C:\Program Files\lesbiansex01.mpg
C:\Program Files\lesbiansex02.mpg
C:\Program Files\lesbiansex03.mpg
C:\Program Files\lesbiansex04.mpg
C:\Program Files\lls.mpg
C:\Program Files\ls.mpg
C:\Program Files\ls2.mpg
C:\Program Files\ls3.mpg
C:\Program Files\lss1.mpg
C:\Program Files\mcsmiclock.zip
C:\Program Files\movie_4.wmv
C:\Program Files\msgr8us.exe
C:\Program Files\own_the_mic.zip
C:\Program Files\Plaxo\2.11.1.5\bak
C:\Program Files\Plaxo\2.11.1.5\bak\PlaxoHelper.exe
C:\Program Files\PortraitProfessionalTrialSetup.exe
C:\Program Files\QuickTime\bak
C:\Program Files\QuickTime\bak\qttask.exe
C:\Program Files\reacharoundbuddiesfilm2_246.wmv
C:\Program Files\red-strapon-action-hard-sex-02.mpg
C:\Program Files\red-strapon-action-hard-sex-03.mpg
C:\Program Files\resize.reg
C:\Program Files\Rose_for_Wifey.jpg
C:\Program Files\setupAIR.exe
C:\Program Files\sex-with-strapon-04.mpg
C:\Program Files\smile_sexy.jpg
C:\Program Files\spy.wmv
C:\Program Files\spy2.mpg
C:\Program Files\spy4.mpg
C:\Program Files\strap-on-movie-01.mpg
C:\Program Files\strapon-lesbos-hard-sex-04.mpg
C:\Program Files\take2.mpg
C:\Program Files\V01382_big_02.mpg
C:\Program Files\V01964_t6_350.mpg
C:\Program Files\video3.mpg
C:\Program Files\video4.mpg
C:\Program Files\video4.wmv
C:\Program Files\video5.mpg
C:\Program Files\voy15-01b_hi.wmv
C:\Program Files\voy15-01c_hi.wmv
C:\Program Files\voy15-01d_hi.wmv
C:\Program Files\whipped-ass4.mpg
C:\Program Files\Y!Deceasedv2.0b
C:\Program Files\Y!Deceasedv2.0b\Y!Deceased v2.0b.exe
C:\WINDOWS\system32\bak
C:\WINDOWS\system32\bak\NeroCheck.exe
C:\WINDOWS\system32\hgjjl.bak1
C:\WINDOWS\system32\hgjjl.bak2

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))

.
-------\LEGACY_ALFACLEANER
-------\alfacleaner

((((((((((((((((((((((((( Files Created from 2007-12-09 to 2008-01-09 )))))))))))))))))))))))))))))))
.

2008-01-09 04:36 . 2008-01-09 04:36 <DIR> d-------- C:\WINDOWS\ERUNT
2008-01-09 02:41 . 2008-01-09 03:49 21,177,300 --a------ C:\antivir_workstation_win7u_en_h.exe.part
2008-01-08 13:54 . 2000-08-31 08:00 51,200 --a------ C:\WINDOWS\NirCmd.exe
2008-01-08 12:19 . 2008-01-08 12:19 <DIR> d-------- C:\Deckard
2008-01-08 05:04 . 2008-01-08 05:06 812,344 --a------ C:\Program Files\HJTInstall.exe

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-01-09 10:26 --------- d-----w C:\Program Files\QuickTime
2008-01-09 09:04 --------- d-----w C:\Program Files\Lavasoft
2008-01-09 01:08 --------- d-----w C:\Program Files\Full Tilt Poker
2008-01-08 10:06 --------- d-----w C:\Program Files\Trend Micro
2007-11-29 11:15 --------- d-----w C:\Program Files\Vodafone
2007-11-24 11:00 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\Grisoft
2007-11-17 11:10 21,216,112 ----a-w C:\Program Files\aaw2007.exe
2007-11-17 09:56 --------- d--h--w C:\Program Files\InstallShield Installation Information
2007-11-17 09:56 --------- d-----w C:\Program Files\XoftSpySE
2007-11-17 09:56 --------- d-----w C:\Program Files\SmitfraudFix
2007-11-17 09:56 --------- d-----w C:\Program Files\Poker.com
2007-11-17 09:04 3,178,952 ----a-w C:\Program Files\XoftSpySE433_263.exe
2007-11-17 08:54 --------- d-----w C:\Program Files\Enigma Software Group
2007-11-17 08:32 4,067,176 ----a-w C:\Program Files\Free-SpyHunter-Scanner-Install.exe
2007-11-16 10:41 1,043,644 ----a-w C:\Program Files\SmitfraudFix.exe
2007-09-23 16:53 1,006,207 ----a-w C:\Program Files\Poker.exe
2007-06-20 18:16 10,171,623 ----a-w C:\Program Files\FullTiltSetup.exe
2007-03-15 03:49 1,778,951 -c--a-w C:\Program Files\hotties_licking_***_204.wmv
2007-03-05 07:33 1,574,008 -c--a-w C:\Program Files\Fonts_1_1.zip
2007-03-02 07:32 12,580,696 -c--a-w C:\Program Files\mm20enu.exe
2007-02-26 09:51 81,408 -c--a-w C:\Program Files\Takanui aka Williams Whanau.doc
2007-02-26 04:18 372,224 -c--a-w C:\Program Files\Familystuff(2).wps
2007-02-26 04:07 372,224 -c--a-w C:\Program Files\Familystuff.wps
2007-02-19 03:07 11,759 -c--a-w C:\Program Files\gargoyles.zip
2007-02-19 03:06 20,262 ----a-w C:\Program Files\bulwarknf.zip
2007-02-19 03:03 100,055 -c--a-w C:\Program Files\bulletholz.zip
2007-02-19 03:02 32,644 -c--a-w C:\Program Files\bloodofdracula.zip
2007-02-19 02:59 53,096 -c--a-w C:\Program Files\batmanforever.zip
2007-02-19 02:56 10,359 -c--a-w C:\Program Files\achilles.zip
2007-02-19 02:52 84,348 -c--a-w C:\Program Files\alexis.zip
2007-02-18 10:24 32,973 -c--a-w C:\Program Files\japanese.zip
2007-02-18 10:11 13,764 -c--a-w C:\Program Files\chinese_takeaway.zip
2007-02-18 08:02 737,732 -c--a-w C:\Program Files\gifcompr.exe
2007-02-16 00:11 48,529 -c--a-w C:\Program Files\snipple.zip
2007-02-07 05:32 1,919,936 -c--a-w C:\Program Files\3521744801.zip
2007-02-06 12:26 314,336 -c--a-w C:\Program Files\lsc_lss_8677-07.wmv
2007-02-06 07:31 19,075 -c--a-w C:\Program Files\melting.zip
2007-02-03 13:04 1,800,903 ----a-w C:\Program Files\002.mpg
2007-02-03 12:57 2,068,480 -c--a-w C:\Program Files\07.mpg
2007-02-03 12:41 1,276,197 -c--a-w C:\Program Files\lsc_lss_8677-09.wmv
2007-02-03 05:07 3,606,944 -c--a-w C:\Program Files\SFTPMSI.exe
2007-02-02 10:18 5,537,187 -c--a-w C:\Program Files\backgrounds.zip
2007-02-02 09:09 824,707 -c--a-w C:\Program Files\s7.zip
2007-02-02 02:26 2,272,410 -c--a-w C:\Program Files\pix.zip
2007-02-01 09:15 1,410,680 -c--a-w C:\Program Files\install_flash_player(2).exe
2007-02-01 09:04 4,144,085 -c--a-w C:\Program Files\bv.zip
2007-01-31 11:31 1,619,972 -c--a-w C:\Program Files\06.mpg
2007-01-31 11:24 1,801,018 ----a-w C:\Program Files\05.mpg
2007-01-31 11:18 1,772,686 -c--a-w C:\Program Files\02.mpg
2007-01-31 11:10 1,802,850 -c--a-w C:\Program Files\04.mpg
2007-01-31 11:03 1,536,004 ----a-w C:\Program Files\03.mpg
2007-01-29 13:09 7,718,504 ----a-w C:\Program Files\winzip110.exe
2007-01-29 12:38 1,023,524 -c--a-w C:\Program Files\superzip.exe
2007-01-10 09:01 8,130,640 -c--a-w C:\Program Files\CoolComment.exe
2007-01-10 06:20 19,381,811 -c--a-w C:\Program Files\glanda.zip
2007-01-10 02:08 35,570 -c--a-w C:\Program Files\degrassi.zip
2007-01-10 02:08 15,014 -c--a-w C:\Program Files\delusion.zip
2007-01-10 02:06 417,431 -c--a-w C:\Program Files\black.zip
2007-01-10 02:03 29,804 -c--a-w C:\Program Files\AngloText.zip
2007-01-10 02:02 230,944 -c--a-w C:\Program Files\ACharmingFont.zip
2007-01-10 02:00 170,173 -c--a-w C:\Program Files\Abaddon.zip
2006-12-16 22:59 15,505,200 ----a-w C:\Program Files\IE7-WindowsXP-x86-enu.exe
2006-12-16 12:32 1,475,376 ----a-w C:\Program Files\GenuineCheck.exe
2006-12-16 03:51 577,612 -c--a-w C:\Program Files\printkey.exe
2006-12-10 06:14 24,265,736 ----a-w C:\Program Files\dotnetfx.exe
2006-12-08 10:09 3,599,761 -c--a-w C:\Program Files\XnView-win.zip
2006-12-08 09:55 2,184,537 ----a-w C:\Program Files\PhotobieInstaller.zip
2006-12-08 09:30 348,521 -c--a-w C:\Program Files\HarrysFilters3.zip
2006-12-07 22:32 311,696 -c--a-w C:\Program Files\VideoEggPublisher.exe
2006-12-01 00:00 532,616 ----a-w C:\Program Files\ImageResizerPowertoySetup.exe
2006-11-20 01:12 22 -c--a-w C:\Program Files\LWPro126.zip
2006-11-19 21:29 4,218,890 -c--a-w C:\Program Files\LWPro126(2).zip
2006-11-13 08:37 1,355,912 ----a-w C:\Program Files\install_flash_player.exe
2006-11-13 01:32 5,900,416 ----a-w C:\Program Files\Firefox Setup 2.0.exe
2006-11-12 23:30 6,469,352 ----a-w C:\Program Files\avgas-setup-7.5.0.50.exe
2006-11-12 21:51 5,375,056 -c--a-w C:\Program Files\SpyWareNukerXT.exe
2006-11-04 08:17 40,176 ----a-w C:\WINDOWS\Fonts\Writers.zip
2006-11-04 08:16 88,300 ----a-w C:\WINDOWS\Fonts\subway.zip
2006-11-04 08:15 3,860 ----a-w C:\WINDOWS\Fonts\tagster.zip
2006-11-04 08:15 14,416 ----a-w C:\WINDOWS\Fonts\inthacity.zip
2006-11-04 08:13 41,568 ----a-w C:\WINDOWS\Fonts\tagsxtrm.zip
2006-11-04 08:10 24,837 ----a-w C:\WINDOWS\Fonts\PuteiroAnarquista.zip
2006-10-23 06:10 182,945 -c--a-w C:\Program Files\80Proof2.0.zip
2006-10-23 05:09 47,981 -c--a-w C:\Program Files\Ownage_Proxy_Cracker.rar
2006-10-23 01:22 4,577,996 -c--a-w C:\Program Files\ytunnelhack.exe
2006-10-21 09:45 1,620,303 ----a-w C:\Program Files\Missing-OCX-FilesPart2.zip
2006-10-21 09:31 28,955 -c--a-w C:\Program Files\Y!Deceasedv2.0b.zip
2006-10-18 14:31 286,169 -c--a-w C:\Program Files\Blake-Incs-Scanner.zip
2006-10-18 09:40 41,423 -c--a-w C:\Program Files\On The Mic.zip
2006-10-18 08:31 10,493 -c--a-w C:\Program Files\again.JPG
2006-10-18 08:16 8,805 -c--a-w C:\Program Files\meandbottle.JPG
2006-10-18 06:02 426,547 ----a-w C:\Program Files\Proxy Scanner v4.06.zip
2006-10-18 05:40 125,317 -c--a-w C:\Program Files\GenesisReborn2.zip
2006-10-18 05:26 72,795 -c--a-w C:\Program Files\AniGIF2.lic.zip
2006-10-18 05:24 160,385 -c--a-w C:\Program Files\Active Scan 1.7.zip
2006-10-18 04:30 247,952 -c--a-w C:\Program Files\Bot Checker Pro.rar
2006-10-18 03:11 98,769 -c--a-w C:\Program Files\Explcit-BombBeta2.zip
2006-10-17 14:04 328,096 ----a-w C:\Program Files\eidm.zip
2006-10-15 14:23 895,554 -c--a-w C:\Program Files\lesbian_strapon_movie_04.wmv
2006-10-15 14:20 901,330 -c--a-w C:\Program Files\lesbian_strapon_movie_03.wmv
.

((((((((((((((((((((((((((((( snapshot@2008-01-08_14.14.21.13 )))))))))))))))))))))))))))))))))))))))))
.
+ 2008-01-09 06:50:30 163,328 ----a-w C:\WINDOWS\ERUNT\SDFIX\ERDNT.EXE
+ 2008-01-09 09:36:45 4,546,560 ----a-w C:\WINDOWS\ERUNT\SDFIX\Users\00000001\ntuser.dat
+ 2008-01-09 09:36:45 126,976 ----a-w C:\WINDOWS\ERUNT\SDFIX\Users\00000002\UsrClass.dat
+ 2008-01-09 06:50:30 163,328 ----a-w C:\WINDOWS\ERUNT\SDFIX_First_Run\ERDNT.EXE
+ 2008-01-09 09:36:28 4,546,560 ----a-w C:\WINDOWS\ERUNT\SDFIX_First_Run\Users\00000001\ntuser.dat
+ 2008-01-09 09:36:28 126,976 ----a-w C:\WINDOWS\ERUNT\SDFIX_First_Run\Users\00000002\UsrClass.dat
- 2008-01-08 18:55:46 278,528 ----a-w C:\WINDOWS\system32\config\systemprofile\ntuser.dat
+ 2008-01-09 10:19:09 278,528 ----a-w C:\WINDOWS\system32\config\systemprofile\ntuser.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MoneyAgent"="C:\Program Files\Microsoft Money\System\Money Express.exe" [2001-07-25 12:00 184376]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2003-03-31 07:00 13312]

C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programs\Startup\
Printkey2000.lnk - C:\Program Files\PrintKey2000\Printkey2000.exe [2003-11-02 09:37:38]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
SecurityProviders msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll, zwebauth.dll

[HKLM\~\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Start Menu^Programs^Startup^Microsoft Office.lnk]
backup=C:\WINDOWS\pss\Microsoft Office.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Start Menu^Programs^Startup^Microsoft Works Calendar Reminders.lnk]
backup=C:\WINDOWS\pss\Microsoft Works Calendar Reminders.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Start Menu^Programs^Startup^Printkey2000.lnk]
backup=C:\WINDOWS\pss\Printkey2000.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Start Menu^Programs^Startup^Real-time Monitor.lnk]
backup=C:\WINDOWS\pss\Real-time Monitor.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^Sharlene Hokianga.TROJANCREW^Start Menu^Programs^Startup^Quick ShutDown.lnk]
backup=C:\WINDOWS\pss\Quick ShutDown.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Computer Alarm Clock]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\InCD]
-----c--- 2001-11-26 16:35 856064 C:\Program Files\ahead\InCD\InCD.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\InvisibleBrowsing]
--a--c--- 2004-10-05 11:02 790528 C:\Program Files\Invisible Browsing\InvisibleBrowsing.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LWBMOUSE]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Microsoft Works Portfolio]
--a--c--- 2001-08-23 16:52 331830 C:\Program Files\Microsoft Works\WksSb.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Microsoft Works Update Detection]
--a--c--- 2001-08-16 23:41 28738 C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Perfect Keyboard PRO]
--a--c--- 2001-01-22 10:54 122880 C:\Program Files\Perfect Keyboard PRO\pk32.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Pop3trap.exe]
--a--c--- 2001-09-13 09:59 294982 C:\Program Files\Trend Micro\PC-cillin 2000\Pop3trap.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sygate Personal Firewall]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
--a------ 2002-07-12 22:50 146432 C:\Program Files\Common Files\Real\Update_OB\evntsvc.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\wcmdmgr]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WebTrapNT.exe]
--a--c--- 2001-09-13 09:53 235520 C:\Program Files\Trend Micro\PC-cillin 2000\WebTrapNT.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WT GameChannel]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"Tmntsrv"=2 (0x2)

R0 BsStor;InCD Storage Helper Driver;C:\WINDOWS\System32\drivers\BsStor.sys [2001-11-08 04:00]
R1 VIAPFD;VIAPFD;C:\WINDOWS\System32\Drivers\VIAPFD.SYS [2001-12-18 09:45]
R2 BsUDF;InCD UDF Driver;C:\WINDOWS\System32\drivers\BsUDF.sys [2001-11-26 16:36]
R2 Vcs;Vcs support;C:\WINDOWS\System32\Drivers\Vcs.sys [2002-12-10 08:11]
R3 trid3d;trid3d;C:\WINDOWS\System32\DRIVERS\trid3dm.sys [2001-08-17 07:51]
S3 ham50;Intel V92 HaM Data Fax Voice;C:\WINDOWS\System32\DRIVERS\IntelH51.sys [2001-10-11 21:48]

.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-01-09 05:30:57
Windows 5.1.2600 Service Pack 1 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2008-01-09 5:35:54 - machine was rebooted
ComboFix-quarantined-files.txt 2008-01-09 10:35:52
ComboFix2.txt 2008-01-08 19:14:53

Naomi420 · 01-09-2008, 10:23 PM

im having problems trying to post the kaspersky.txt The text that you have entered is too long (594922 characters). Please shorten it to 100000 characters long. so what i have decided to do was split it up hopefully you can understand it.

-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Wednesday, January 09, 2008 11:58:04 PM
Operating System: Microsoft Windows XP Home Edition, Service Pack 1 (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 10/01/2008
Kaspersky Anti-Virus database records: 506052
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
A:\
C:\
D:\

Scan Statistics:
Total number of scanned objects: 60505
Number of viruses found: 23
Number of infected objects: 346
Number of suspicious objects: 0
Duration of the scan process: 01:37:08

Infected Object Name / Virus Name / Last Action
C:\Deckard\System Scanner\20080108124041\backup\DOCUME~1\Owner\LOCALS~1\Temp\Temporary Internet Files\Content.IE5\89ABCDEF\index[1].htm Infected: Net-Worm.Win32.Allaple.a skipped
C:\Deckard\System Scanner\20080108124041\backup\DOCUME~1\Owner\LOCALS~1\Temp\Temporary Internet Files\Content.IE5\OTMF0HUZ\Time-Clock[1].htm Infected: Net-Worm.Win32.Allaple.a skipped
C:\Deckard\System Scanner\20080108124041\backup\DOCUME~1\Owner\LOCALS~1\Temp\Temporary Internet Files\Content.IE5\STIJKLMZ\CAW1IFWH.HTM Infected: Net-Worm.Win32.Allaple.a skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\10.0\Webcache\bdgtwlcm.htm Infected: Net-Worm.Win32.Allaple.a skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\10.0\Webcache\debtwlcm.htm Infected: Net-Worm.Win32.Allaple.a skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\10.0\Webcache\defenrll.htm Infected: Net-Worm.Win32.Allaple.a skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\10.0\Webcache\defserv.htm Infected: Net-Worm.Win32.Allaple.a skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\10.0\Webcache\ltwelco2.htm Infected: Net-Worm.Win32.Allaple.a skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\10.0\Webcache\ltwelcom.htm Infected: Net-Worm.Win32.Allaple.a skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\10.0\Webcache\mktplace.htm Infected: Net-Worm.Win32.Allaple.a skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\10.0\Webcache\oempage.htm Infected: Net-Worm.Win32.Allaple.a skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\10.0\Webcache\oltour.htm Infected: Net-Worm.Win32.Allaple.a skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\10.0\Webcache\osudflt.htm Infected: Net-Worm.Win32.Allaple.a skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\10.0\Webcache\passportfaqs.htm Infected: Net-Worm.Win32.Allaple.a skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\10.0\Webcache\plnwlcm2.htm Infected: Net-Worm.Win32.Allaple.a skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\10.0\Webcache\pssprtbnftfaq.htm Infected: Net-Worm.Win32.Allaple.a skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\10.0\Webcache\pssprtscrtyfaq.htm Infected: Net-Worm.Win32.Allaple.a skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\10.0\Webcache\Repaircorruptedfiles2002.htm Infected: Net-Worm.Win32.Allaple.a skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\10.0\Webcache\Resolving Windows Cryptography Error.htm Infected: Net-Worm.Win32.Allaple.a skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\10.0\Webcache\sbwelcome.htm Infected: Net-Worm.Win32.Allaple.a skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Money\10.0\Webcache\shopping.htm Infected: Net-Worm.Win32.Allaple.a skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\Crypto\DSS\MachineKeys\226782687a4a9ddff186cbabee1355b5_7b241f1c-e3e6-440c-8082-6770731d537f Object is locked skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\Dr Watson\user.dmp Object is locked skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\Money\10.0\Webcache\bdgtwlcm.htm Infected: Net-Worm.Win32.Allaple.a skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\Money\10.0\Webcache\debtwlcm.htm Infected: Net-Worm.Win32.Allaple.a skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\Money\10.0\Webcache\defenrll.htm Infected: Net-Worm.Win32.Allaple.a skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\Money\10.0\Webcache\defserv.htm Infected: Net-Worm.Win32.Allaple.a skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\Money\10.0\Webcache\ltwelco2.htm Infected: Net-Worm.Win32.Allaple.a skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\Money\10.0\Webcache\ltwelcom.htm Infected: Net-Worm.Win32.Allaple.a skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\Money\10.0\Webcache\mktplace.htm Infected: Net-Worm.Win32.Allaple.a skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\Money\10.0\Webcache\oempage.htm Infected: Net-Worm.Win32.Allaple.a skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\Money\10.0\Webcache\oltour.htm Infected: Net-Worm.Win32.Allaple.a skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\Money\10.0\Webcache\osudflt.htm Infected: Net-Worm.Win32.Allaple.a skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\Money\10.0\Webcache\passportfaqs.htm Infected: Net-Worm.Win32.Allaple.a skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\Money\10.0\Webcache\plnwlcm2.htm Infected: Net-Worm.Win32.Allaple.a skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\Money\10.0\Webcache\pssprtbnftfaq.htm Infected: Net-Worm.Win32.Allaple.a skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\Money\10.0\Webcache\pssprtscrtyfaq.htm Infected: Net-Worm.Win32.Allaple.a skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\Money\10.0\Webcache\Repaircorruptedfiles2002.htm Infected: Net-Worm.Win32.Allaple.a skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\Money\10.0\Webcache\Resolving Windows Cryptography Error.htm Infected: Net-Worm.Win32.Allaple.a skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\Money\10.0\Webcache\sbwelcome.htm Infected: Net-Worm.Win32.Allaple.a skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\Money\10.0\Webcache\shopping.htm Infected: Net-Worm.Win32.Allaple.a skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY.000\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService.NT AUTHORITY.000\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService.NT AUTHORITY.000\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService.NT AUTHORITY.000\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService.NT AUTHORITY.000\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\Owner\Application Data\Real\RealOne Player\DataCache\Channels\main.html Infected: Net-Worm.Win32.Allaple.a skipped
C:\Documents and Settings\Owner\Application Data\Real\RealOne Player\DataCache\GetMedia\main.html Infected: Net-Worm.Win32.Allaple.a skipped
C:\Documents and Settings\Owner\Application Data\Real\RealOne Player\DataCache\GPFeat\DevicesOffline\index.html Infected: Net-Worm.Win32.Allaple.a skipped
C:\Documents and Settings\Owner\Application Data\Real\RealOne Player\DataCache\GPFeat\index.htm Infected: Net-Worm.Win32.Allaple.a skipped
C:\Documents and Settings\Owner\Application Data\Real\RealOne Player\DataCache\Help\gsg.html Infected: Net-Worm.Win32.Allaple.a skipped
C:\Documents and Settings\Owner\Application Data\Real\RealOne Player\DataCache\Help\tutorial.html Infected: Net-Worm.Win32.Allaple.a skipped
C:\Documents and Settings\Owner\Application Data\Real\RealOne Player\DataCache\Login\welcome.html Infected: Net-Worm.Win32.Allaple.a skipped
C:\Documents and Settings\Owner\Application Data\Real\RealOne Player\DataCache\Radio\main.html Infected: Net-Worm.Win32.Allaple.a skipped
C:\Documents and Settings\Owner\Application Data\Real\RealOne Player\DataCache\search\main.html Infected: Net-Worm.Win32.Allaple.a skipped
C:\Documents and Settings\Owner\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\Owner\Incomplete\T-370462-_uncensored_ loser koby bryant 34.wma Infected: Trojan-Downloader.WMA.Wimad.d skipped
C:\Documents and Settings\Owner\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\Owner\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\Owner\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Owner\Local Settings\History\History.IE5\MSHist012008010920080110\index.dat Object is locked skipped
C:\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Owner\My Documents\Mindscape\Mavis Beacon 9\mavis.htm Infected: Net-Worm.Win32.Allaple.a skipped
C:\Documents and Settings\Owner\My Documents\pk\i_keys.htm Infected: Net-Worm.Win32.Allaple.a skipped
C:\Documents and Settings\Owner\My Documents\pk\other.htm Infected: Net-Worm.Win32.Allaple.a skipped
C:\Documents and Settings\Owner\My Documents\pk\pkother.htm Infected: Net-Worm.Win32.Allaple.a skipped
C:\Documents and Settings\Owner\My Documents\pkeybp\pkother.htm Infected: Net-Worm.Win32.Allaple.a skipped
C:\Documents and Settings\Owner\My Documents\shortkeybp\pkother.htm Infected: Net-Worm.Win32.Allaple.a skipped
C:\Documents and Settings\Owner\My Documents\virusreport.html Infected: Net-Worm.Win32.Allaple.a skipped
C:\Documents and Settings\Owner\ntuser.dat Object is locked skipped
C:\Documents and Settings\Owner\NTUSER.DAT.LOG Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.housecall\log\everything0.log Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.housecall\log\execution0.log Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\0.class-1191785c-4f9d46bd.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\0.class-1191785c-4f9d46bd.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\0.class-1191785d-1b9d6aaa.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\0.class-1191785d-1b9d6aaa.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\0.class-1191785e-3f1c7ce5.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\0.class-1191785e-3f1c7ce5.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\0.class-62fd6f67-448c83a9.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\0.class-62fd6f67-448c83a9.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\1.class-4677b39e-71a26a95.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\1.class-4677b39e-71a26a95.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\1.class-4677b39f-3d0fe410.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\1.class-4677b39f-3d0fe410.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\10.class-3c0ce078-153b5687.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\10.class-3c0ce078-153b5687.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\10.class-3c0ce079-1d1018f3.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\10.class-3c0ce079-1d1018f3.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\100.class-791d4ede-3a03cfad.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\100.class-791d4ede-3a03cfad.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\100.class-791d4edf-3ceee87e.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\100.class-791d4edf-3ceee87e.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\103.class-17d000a0-21106036.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\103.class-17d000a0-21106036.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\103.class-17d000a1-2c5a28c9.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\103.class-17d000a1-2c5a28c9.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\103.class-17d000a2-1d7cca22.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\103.class-17d000a2-1d7cca22.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\105.class-19c7722-61a497b9.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\105.class-19c7722-61a497b9.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\105.class-19c7723-773528ff.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\105.class-19c7723-773528ff.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\105.class-19c7724-31e0299a.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\105.class-19c7724-31e0299a.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\106.class-3682b263-2480a5a4.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\106.class-3682b263-2480a5a4.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\106.class-3682b264-6da9c665.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\106.class-3682b264-6da9c665.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\106.class-3682b265-1e6183a2.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\106.class-3682b265-1e6183a2.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\107.class-6b68eda5-707db1bd.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\107.class-6b68eda5-707db1bd.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\107.class-6b68eda6-71b79ef2.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\107.class-6b68eda6-71b79ef2.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\11.class-4d064e79-59a905fb.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\11.class-4d064e79-59a905fb.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\11.class-70f31bb8-4e2dddbd.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\11.class-70f31bb8-4e2dddbd.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\11.class-70f31bb9-5f24e7b5.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\11.class-70f31bb9-5f24e7b5.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\11.class-70f31bba-61ec713a.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\11.class-70f31bba-61ec713a.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\111.class-15e4b6fd-7f19ba94.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\111.class-15e4b6fd-7f19ba94.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\111.class-15e4b6fe-3f0f76b8.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\111.class-15e4b6fe-3f0f76b8.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\111.class-15e4b6ff-7b7d65d2.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\111.class-15e4b6ff-7b7d65d2.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\113.class-7fb12d7f-12a4e284.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\113.class-7fb12d7f-12a4e284.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\113.class-7fb12d80-3fa81654.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\113.class-7fb12d80-3fa81654.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\113.class-7fb12d81-215e2539.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\113.class-7fb12d81-215e2539.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\114.class-349768c1-510e6fb5.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\114.class-349768c1-510e6fb5.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\114.class-349768c2-3b0f57db.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\114.class-349768c2-3b0f57db.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\117.class-534a1a85-5624cfc8.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\117.class-534a1a85-5624cfc8.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\119.class-3d169105-1f1d946c.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\119.class-3d169105-1f1d946c.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\119.class-3d169106-536570d1.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\119.class-3d169106-536570d1.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\119.class-3d169107-1edfd597.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\119.class-3d169107-1edfd597.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\12.class-25d956f9-1665146c.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\12.class-25d956f9-1665146c.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\12.class-25d956fa-61f9dff4.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\12.class-25d956fa-61f9dff4.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\12.class-25d956fb-1e873025.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\12.class-25d956fb-1e873025.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\121.class-7dc5e3dd-32cb849e.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\121.class-7dc5e3dd-32cb849e.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\121.class-7dc5e3de-7f85b6d2.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\121.class-7dc5e3de-7f85b6d2.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\122.class-32ac1f1e-6d6f66d2.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\122.class-32ac1f1e-6d6f66d2.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\122.class-32ac1f1f-14989716.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\122.class-32ac1f1f-14989716.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\124.class-1c78959f-18052a67.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\124.class-1c78959f-18052a67.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\124.class-1c7895a0-2968b054.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\124.class-1c7895a0-2968b054.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\124.class-1c7895a1-35d068d5.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\124.class-1c7895a1-35d068d5.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\129.class-24f7bde4-581b6bab.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\129.class-24f7bde4-581b6bab.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\129.class-24f7bde5-5d79ccf4.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\129.class-24f7bde5-5d79ccf4.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\13.class-5abf923a-5d51d3ce.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\13.class-5abf923a-5d51d3ce.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\13.class-5abf923b-6759f3cb.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\13.class-5abf923b-6759f3cb.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\13.class-5abf923c-6cf26730.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\13.class-5abf923c-6cf26730.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\130.class-30c0d57a-429480c5.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\130.class-30c0d57a-429480c5.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\130.class-30c0d57b-1994adf4.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\130.class-30c0d57b-1994adf4.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\130.class-30c0d57c-5ffb0774.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\130.class-30c0d57c-5ffb0774.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\132.class-1a8d4bfc-506150b7.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\132.class-1a8d4bfc-506150b7.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\132.class-1a8d4bfe-314b52e0.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\132.class-1a8d4bfe-314b52e0.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\136.class-6e263901-35ed98e9.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\136.class-6e263901-35ed98e9.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\136.class-6e263902-130cbb5e.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\136.class-6e263902-130cbb5e.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\138.class-57f2af82-7c7d96ed.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\138.class-57f2af82-7c7d96ed.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\138.class-57f2af83-113e51eb.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\138.class-57f2af83-113e51eb.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\138.class-57f2af84-77546d8b.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\138.class-57f2af84-77546d8b.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\14.class-6bb9003c-428fc4e1.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\14.class-6bb9003c-428fc4e1.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\14.class-fa5cd7b-4c75fee3.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\14.class-fa5cd7b-4c75fee3.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\14.class-fa5cd7c-2dfaa3d0.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\14.class-fa5cd7c-2dfaa3d0.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\14.class-fa5cd7d-2b5d0503.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\14.class-fa5cd7d-2b5d0503.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\141.class-4d883d9a-55c280f9.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\141.class-4d883d9a-55c280f9.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\141.class-4d883d9b-1118428c.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\141.class-4d883d9b-1118428c.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\141.class-4d883d9c-7541a540.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\141.class-4d883d9c-7541a540.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\142.class-26e78dc-3bcb82af.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\142.class-26e78dc-3bcb82af.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\142.class-26e78dd-3cf3b8a7.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\142.class-26e78dd-3cf3b8a7.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\143.class-3754b41c-192f72ca.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\143.class-3754b41c-192f72ca.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\143.class-3754b41d-1f042229.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\143.class-3754b41d-1f042229.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\143.class-3754b41e-70c52edd.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\143.class-3754b41e-70c52edd.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\144.class-6c3aef5d-6b5b43b1.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\144.class-6c3aef5d-6b5b43b1.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\144.class-6c3aef5e-5cfd138d.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\144.class-6c3aef5e-5cfd138d.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\144.class-6c3aef5f-519917a5.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\144.class-6c3aef5f-519917a5.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\145.class-21212a9e-62357485.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\145.class-21212a9e-62357485.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\145.class-21212a9f-67360ba4.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\145.class-21212a9f-67360ba4.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\145.class-21212aa0-2e3feba1.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\145.class-21212aa0-2e3feba1.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\147.class-aeda120-35f0a2a3.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\147.class-aeda120-35f0a2a3.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\147.class-aeda121-4c349dae.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\147.class-aeda121-4c349dae.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\147.class-aeda122-5bbe1918.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\147.class-aeda122-5bbe1918.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\15.class-209f3b7d-24e97724.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\15.class-209f3b7d-24e97724.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\151.class-35696a79-2d3581c0.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\151.class-35696a79-2d3581c0.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\151.class-35696a7a-7e5b1f27.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\151.class-35696a7a-7e5b1f27.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\151.class-35696a7b-3352298c.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\151.class-35696a7b-3352298c.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\152.class-6a4fa5bb-686353b2.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\152.class-6a4fa5bb-686353b2.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\152.class-6a4fa5bc-11dd0ff3.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\152.class-6a4fa5bc-11dd0ff3.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\153.class-1f35e0fc-40cc389e.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\153.class-1f35e0fc-40cc389e.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\153.class-1f35e0fd-25826f75.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\153.class-1f35e0fd-25826f75.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\155.class-902577d-66116b27.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\155.class-902577d-66116b27.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\155.class-902577e-1048ad5d.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\155.class-902577e-1048ad5d.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\155.class-902577f-5d47ecc9.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\155.class-902577f-5d47ecc9.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\157.class-72cece00-3246be37.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\157.class-72cece00-3246be37.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\157.class-72cece01-12106512.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\157.class-72cece01-12106512.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\16.class-558576be-69deab15.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\16.class-558576be-69deab15.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\160.class-68645c17-22fe8c24.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\160.class-68645c17-22fe8c24.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\160.class-68645c18-6d3f4abc.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\160.class-68645c18-6d3f4abc.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\160.class-68645c19-4d650299.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\160.class-68645c19-4d650299.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\161.class-1d4a9759-7672c12b.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\161.class-1d4a9759-7672c12b.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\161.class-1d4a975a-5bb3c50c.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\161.class-1d4a975a-5bb3c50c.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\162.class-5230d29a-1913fba6.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\162.class-5230d29a-1913fba6.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\162.class-5230d29b-23ee5103.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\162.class-5230d29b-23ee5103.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\163.class-7170dda-3090f22f.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\163.class-7170dda-3090f22f.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\163.class-7170ddb-770fb5c5.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\163.class-7170ddb-770fb5c5.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\163.class-7170ddc-6c79350e.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\163.class-7170ddc-6c79350e.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\168.class-f96361f-636bf632.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\168.class-f96361f-636bf632.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\168.class-f963620-48252679.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\168.class-f963620-48252679.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\168.class-f963621-6d172817.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\168.class-f963621-6d172817.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\169.class-447c7160-6285166f.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\169.class-447c7160-6285166f.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\169.class-447c7161-1c2bbf91.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\169.class-447c7161-1c2bbf91.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\169.class-447c7162-6ff84c52.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\169.class-447c7162-6ff84c52.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\17.class-2e587f3e-34a4a3e9.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\17.class-2e587f3e-34a4a3e9.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\17.class-2e587f3f-375623bf.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\17.class-2e587f3f-375623bf.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\17.class-2e587f40-466df176.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\17.class-2e587f40-466df176.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\172.class-3a11ff78-44f2d954.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\172.class-3a11ff78-44f2d954.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\172.class-3a11ff79-691c5c8d.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\172.class-3a11ff79-691c5c8d.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\172.class-3a11ff7a-429debc8.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\172.class-3a11ff7a-429debc8.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\18.class-633eba7f-244985f2.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\18.class-633eba7f-244985f2.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\18.class-633eba80-622bce2f.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\18.class-633eba80-622bce2f.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\18.class-633eba81-70ab4aa5.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\18.class-633eba81-70ab4aa5.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\19.class-74382881-60aa8ce8.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\19.class-74382881-60aa8ce8.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\2.class-4cc9e5e9-28c3a677.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\2.class-4cc9e5e9-28c3a677.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\20.class-23ee0d56-717c61b1.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\20.class-23ee0d56-717c61b1.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\20.class-23ee0d57-6b75d481.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\20.class-23ee0d57-6b75d481.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\20.class-23ee0d58-2d538ae4.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\20.class-23ee0d58-2d538ae4.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\21.class-58d44897-5aab297a.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\21.class-58d44897-5aab297a.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\21.class-58d44898-1711f731.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\21.class-58d44898-1711f731.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\21.class-58d44899-5889e0af.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\21.class-58d44899-5889e0af.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\22.class-69cdb699-7e6db021.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\22.class-69cdb699-7e6db021.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\24.class-7786fa5a-55576513.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\24.class-7786fa5a-55576513.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\24.class-7786fa5b-11e1e66a.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\24.class-7786fa5b-11e1e66a.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\24.class-7786fa5c-75ecdab4.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\24.class-7786fa5c-75ecdab4.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\26.class-615370dc-4bc95edb.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\26.class-615370dc-4bc95edb.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\26.class-615370dd-5cb01684.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\26.class-615370dd-5cb01684.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\26.class-615370de-624bec4e.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\26.class-615370de-624bec4e.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\27.class-724cdede-238347ed.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\27.class-724cdede-238347ed.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\28.class-27331a1f-331e3c93.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\28.class-27331a1f-331e3c93.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\28.class-4b1fe760-663f1be6.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\28.class-4b1fe760-663f1be6.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\29.class-622a0-1b671fa8.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\29.class-622a0-1b671fa8.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\29.class-622a1-6764aa35.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\29.class-622a1-6764aa35.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\3.class-1b0212a-7e5908a8.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\3.class-1b0212a-7e5908a8.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\3.class-30442a20-4031bbf2.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\3.class-30442a20-4031bbf2.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\3.class-30442a21-30d9a258.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\3.class-30442a21-30d9a258.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\31.class-40b57576-73e31bd1.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\31.class-40b57576-73e31bd1.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\31.class-40b57577-53a4b141.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\31.class-40b57577-53a4b141.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\31.class-40b57578-2f02931a.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\31.class-40b57578-2f02931a.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\32.class-51aee378-640a089e.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\32.class-51aee378-640a089e.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\33.class-2a81ebf9-45ecb2f6.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\33.class-2a81ebf9-45ecb2f6.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\33.class-6951eb9-55844dfb.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\33.class-6951eb9-55844dfb.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\34.class-5f682739-7bebae48.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\34.class-5f682739-7bebae48.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\34.class-5f68273a-17a6a6f1.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\34.class-5f68273a-17a6a6f1.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\34.class-5f68273b-71f3000d.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\34.class-5f68273b-71f3000d.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\35.class-144e627a-43e9a977.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\35.class-144e627a-43e9a977.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\35.class-144e627b-19554dc1.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\35.class-144e627b-19554dc1.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\35.class-144e627c-6d5764bb.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\35.class-144e627c-6d5764bb.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\36.class-2547d07c-1b5dc1d1.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\36.class-2547d07c-1b5dc1d1.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\37.class-5a2e0bbd-5a090989.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\37.class-5a2e0bbd-5a090989.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\37.class-7e1ad8fc-366e6dce.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\37.class-7e1ad8fc-366e6dce.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\37.class-7e1ad8fd-2c976889.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\37.class-7e1ad8fd-2c976889.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\37.class-7e1ad8fe-760ec9e4.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\37.class-7e1ad8fe-760ec9e4.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\38.class-f1446fe-3a261429.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\38.class-f1446fe-3a261429.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\39.class-43fa823f-252921ac.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\39.class-43fa823f-252921ac.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\40.class-4fc399d5-3826ab12.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\40.class-4fc399d5-3826ab12.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\42.class-39901057-581ad2c7.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\42.class-39901057-581ad2c7.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\42.class-5d7cdd97-55b9f161.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\42.class-5d7cdd97-55b9f161.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\42.class-5d7cdd98-462c1a39.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\42.class-5d7cdd98-462c1a39.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\43.class-6e764b98-12ed603d.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\43.class-6e764b98-12ed603d.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\47.class-65fc05dc-40a2383e.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\47.class-65fc05dc-40a2383e.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\47.class-65fc05dd-7ae2f90f.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\47.class-65fc05dd-7ae2f90f.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\48.class-1ae2411c-56d19b2a.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\48.class-1ae2411c-56d19b2a.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\48.class-1ae2411d-26d80a96.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\48.class-1ae2411d-26d80a96.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\48.class-1ae2411e-7e446771.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\48.class-1ae2411e-7e446771.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\48.class-76f573dd-2911c929.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\48.class-76f573dd-2911c929.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\50.class-37a4c6b4-1a221f5b.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\50.class-37a4c6b4-1a221f5b.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\51.class-1077cf34-366612d8.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\51.class-1077cf34-366612d8.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\51.class-1077cf35-72e22ea9.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\51.class-1077cf35-72e22ea9.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\51.class-1077cf36-31d62b64.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\51.class-1077cf36-31d62b64.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\53.class-7a4445b7-2d1f226e.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\53.class-7a4445b7-2d1f226e.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\53.class-7a4445b8-4cd24830.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\53.class-7a4445b8-4cd24830.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\54.class-2f2a80f7-3f7a74de.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\54.class-2f2a80f7-3f7a74de.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\54.class-2f2a80f8-507152b4.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\54.class-2f2a80f8-507152b4.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\54.class-2f2a80f9-27d433e9.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\54.class-2f2a80f9-27d433e9.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\55.class-6410bc3a-7669eaf5.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\55.class-6410bc3a-7669eaf5.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\58.class-5ed6a0bc-26f576e9.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\58.class-5ed6a0bc-26f576e9.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\59.class-13bcdbfd-7580ad67.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\59.class-13bcdbfd-7580ad67.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\6.class-4ef6dbe2-651aa389.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\6.class-4ef6dbe2-651aa389.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\6.class-4ef6dbe3-2327cc52.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\6.class-4ef6dbe3-2327cc52.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\6.class-4ef6dbe4-61396564.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\6.class-4ef6dbe4-61396564.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\60.class-4372c0d2-4efdd4b2.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\60.class-4372c0d2-4efdd4b2.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\60.class-4372c0d3-612f6231.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\60.class-4372c0d3-612f6231.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\60.class-4372c0d4-2bed0ee2.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\60.class-4372c0d4-2bed0ee2.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\61.class-546c2ed4-5297218b.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\61.class-546c2ed4-5297218b.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\62.class-2d3f3754-387cbb31.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\62.class-2d3f3754-387cbb31.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\62.class-2d3f3755-1dbd357a.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\62.class-2d3f3755-1dbd357a.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\62.class-2d3f3756-3bf2f4af.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\62.class-2d3f3756-3bf2f4af.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\62.class-9526a15-55124806.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\62.class-9526a15-55124806.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\63.class-62257296-304dce98.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\63.class-62257296-304dce98.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\63.class-62257297-25059e23.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\63.class-62257297-25059e23.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\64.class-170badd6-5df53bdf.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\64.class-170badd6-5df53bdf.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\64.class-170badd7-5504ae99.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\64.class-170badd7-5504ae99.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\64.class-170badd8-1a1d1b19.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\64.class-170badd8-1a1d1b19.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\69.class-1f8ad61b-68daee0f.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\69.class-1f8ad61b-68daee0f.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\69.class-1f8ad61c-5c321f41.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\69.class-1f8ad61c-5c321f41.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\69.class-1f8ad61d-1abb4fae.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\69.class-1f8ad61d-1abb4fae.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\70.class-2b53edb1-496dcc2f.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\70.class-2b53edb1-496dcc2f.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\70.class-2b53edb2-6070e147.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\70.class-2b53edb2-6070e147.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\70.class-2b53edb3-14c85b21.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\70.class-2b53edb3-14c85b21.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\71.class-603a28f2-535ec020.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\71.class-603a28f2-535ec020.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\71.class-603a28f3-106da0f6.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\71.class-603a28f3-106da0f6.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\71.class-603a28f4-63fbabd5.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\71.class-603a28f4-63fbabd5.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\72.class-15206433-7a35b360.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\72.class-15206433-7a35b360.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\72.class-15206434-3e1a313b.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\72.class-15206434-3e1a313b.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\72.class-15206435-126859c2.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\72.class-15206435-126859c2.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\75.class-33d315f6-6e775547.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\75.class-33d315f6-6e775547.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\75.class-33d315f7-12eb0ca3.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\75.class-33d315f7-12eb0ca3.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\75.class-33d315f8-578a1819.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\75.class-33d315f8-578a1819.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\76.class-68b95137-29c5e3bf.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\76.class-68b95137-29c5e3bf.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\76.class-68b95138-1fa29f3d.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\76.class-68b95138-1fa29f3d.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\76.class-68b95139-10be0eb8.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\76.class-68b95139-10be0eb8.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\77.class-1d9f8c78-267cc532.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\77.class-1d9f8c78-267cc532.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\77.class-1d9f8c79-5576cd3c.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\77.class-1d9f8c79-5576cd3c.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\77.class-1d9f8c7a-3630dfe2.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\77.class-1d9f8c7a-3630dfe2.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\78.class-5285c7b9-1e193717.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\78.class-5285c7b9-1e193717.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\78.class-5285c7ba-5650c8ef.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\78.class-5285c7ba-5650c8ef.idx Object is locked skipped

Naomi420 · 01-09-2008, 10:31 PM

C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\78.class-5285c7ba-5650c8ef.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\78.class-5285c7bb-3ccfe302.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\78.class-5285c7bb-3ccfe302.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\79.class-76c02fa-4ce1e3cb.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\79.class-76c02fa-4ce1e3cb.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\79.class-76c02fb-4aa13748.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\79.class-76c02fb-4aa13748.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\79.class-76c02fc-5bff28c2.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\79.class-76c02fc-5bff28c2.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\8.class-38c35264-53343217.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\8.class-38c35264-53343217.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\8.class-38c35265-578ebf45.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\8.class-38c35265-578ebf45.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\8.class-38c35266-10338da7.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\8.class-38c35266-10338da7.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\8.class-a2f496f-615ee72a.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\8.class-a2f496f-615ee72a.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\80.class-13351a91-2ddff28e.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\80.class-13351a91-2ddff28e.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\80.class-13351a92-40468e03.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\80.class-13351a92-40468e03.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\82.class-7d019112-172a5473.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\82.class-7d019112-172a5473.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\82.class-7d019113-3a9a9cbd.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\82.class-7d019113-3a9a9cbd.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\82.class-7d019114-6ff7916d.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\82.class-7d019114-6ff7916d.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\83.class-31e7cc53-7920fed6.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\83.class-31e7cc53-7920fed6.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\83.class-31e7cc54-52267866.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\83.class-31e7cc54-52267866.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\83.class-31e7cc55-3e2e9355.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\83.class-31e7cc55-3e2e9355.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\84.class-66ce0794-5d30f1e9.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\84.class-66ce0794-5d30f1e9.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\84.class-66ce0795-59e6ad21.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\84.class-66ce0795-59e6ad21.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\84.class-66ce0796-14939ec9.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\84.class-66ce0796-14939ec9.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\86.class-509a7e17-6e9a22a9.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\86.class-509a7e17-6e9a22a9.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\86.class-509a7e18-4bbd85c0.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\86.class-509a7e18-4bbd85c0.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\87.class-580b958-2f58ccab.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\87.class-580b958-2f58ccab.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\87.class-580b959-73e6f804.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\87.class-580b959-73e6f804.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\9.class-3f1584b0-1ebb1e50.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\9.class-3f1584b0-1ebb1e50.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\90.class-7b164770-7f4d273d.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\90.class-7b164770-7f4d273d.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\90.class-7b164771-15728a74.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\90.class-7b164771-15728a74.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\92.class-64e2bdf2-1d2cefee.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\92.class-64e2bdf2-1d2cefee.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\92.class-64e2bdf3-620b20ac.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\92.class-64e2bdf3-620b20ac.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\94.class-4eaf3474-13f5be62.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\94.class-4eaf3474-13f5be62.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\94.class-4eaf3475-10cb2968.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\94.class-4eaf3475-10cb2968.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\96.class-387baaf6-47db2e35.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\96.class-387baaf6-47db2e35.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\96.class-387baaf7-45c38bba.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\96.class-387baaf7-45c38bba.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\99.class-572e5cb9-1a99fa09.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\99.class-572e5cb9-1a99fa09.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\99.class-572e5cba-50e9d0e0.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\99.class-572e5cba-50e9d0e0.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\beep.au-53348e18-6b2f4c01.au Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\beep.au-53348e18-6b2f4c01.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\IYAcsEvents.class-4d40aca5-56b79282.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\IYAcsEvents.class-4d40aca5-56b79282.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\PBLaunchLink.class-586b913e-288432d9.class Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\file\1.0\PBLaunchLink.class-586b913e-288432d9.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\jar\1.0\chat.jar-1a724dc2-33865363.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\jar\1.0\chat.jar-1a724dc2-33865363.zip Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\jar\1.0\potc.jar-3a883612-5e6aafe6.idx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.jpi_cache\jar\1.0\potc.jar-3a883612-5e6aafe6.zip Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\.NetworkShare\LimeWireWin4.10.0-f.exe Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\49splashfree.png Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\createtimes.cache Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\fileurns.bak Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\fileurns.cache Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\filters.props Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\gnutella.net Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\installation.props Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\library.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\limewire.props Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\pub1.key Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\public.key Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\questions.props Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\simpp.xml Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\tables.props Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\black_theme\01_star.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\black_theme\02_star.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\black_theme\03_star.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\black_theme\04_star.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\black_theme\05_star.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\black_theme\chat.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\black_theme\dir_closed.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\black_theme\dir_open.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\black_theme\forward_dn.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\black_theme\forward_up.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\black_theme\kill.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\black_theme\kill_on.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\black_theme\lime.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\black_theme\logo.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\black_theme\notsearching.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\black_theme\pause_dn.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\black_theme\pause_up.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\black_theme\play_dn.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\black_theme\play_up.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\black_theme\question.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\black_theme\rewind_dn.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\black_theme\rewind_up.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\black_theme\searching.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\black_theme\splash.png Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\black_theme\stop_dn.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\black_theme\stop_up.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\black_theme\theme.txt Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\black_theme\warning.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\black_theme.lwtp Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\classic_theme\01_star.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\classic_theme\02_star.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\classic_theme\03_star.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\classic_theme\04_star.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\classic_theme\05_star.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\classic_theme\chat.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\classic_theme\dir_closed.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\classic_theme\dir_open.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\classic_theme\forward_dn.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\classic_theme\forward_up.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\classic_theme\kill.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\classic_theme\logo.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\classic_theme\notsearching.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\classic_theme\pause_dn.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\classic_theme\pause_up.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\classic_theme\play_dn.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\classic_theme\play_up.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\classic_theme\question.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\classic_theme\rewind_dn.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\classic_theme\rewind_up.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\classic_theme\search.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\classic_theme\searching.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\classic_theme\splash.png Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\classic_theme\stop_dn.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\classic_theme\stop_up.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\classic_theme\theme.txt Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\classic_theme\warning.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\classic_theme.lwtp Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\limewire_theme\01_star.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\limewire_theme\02_star.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\limewire_theme\03_star.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\limewire_theme\04_star.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\limewire_theme\05_star.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\limewire_theme\chat.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\limewire_theme\dir_closed.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\limewire_theme\dir_open.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\limewire_theme\forward_dn.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\limewire_theme\forward_up.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\limewire_theme\kill.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\limewire_theme\kill_on.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\limewire_theme\lime.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\limewire_theme\logo.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\limewire_theme\notsearching.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\limewire_theme\pause_dn.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\limewire_theme\pause_up.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\limewire_theme\play_dn.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\limewire_theme\play_up.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\limewire_theme\question.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\limewire_theme\rewind_dn.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\limewire_theme\rewind_up.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\limewire_theme\searching.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\limewire_theme\splash.png Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\limewire_theme\stop_dn.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\limewire_theme\stop_up.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\limewire_theme\theme.txt Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\limewire_theme\warning.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\limewire_theme.lwtp Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\other_theme\01_star.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\other_theme\02_star.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\other_theme\03_star.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\other_theme\04_star.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\other_theme\05_star.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\other_theme\chat.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\other_theme\forward_dn.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\other_theme\forward_up.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\other_theme\kill.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\other_theme\kill_on.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\other_theme\logo.png Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\other_theme\notsearching.png Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\other_theme\pause_dn.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\other_theme\pause_up.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\other_theme\play_dn.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\other_theme\play_up.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\other_theme\question.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\other_theme\rewind_dn.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\other_theme\rewind_up.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\other_theme\searching.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\other_theme\splash.png Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\other_theme\stop_dn.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\other_theme\stop_up.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\other_theme\theme.txt Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\other_theme\warning.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\other_theme.lwtp Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\windows_theme\01_star.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\windows_theme\02_star.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\windows_theme\03_star.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\windows_theme\04_star.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\windows_theme\05_star.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\windows_theme\chat.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\windows_theme\forward_dn.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\windows_theme\forward_up.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\windows_theme\kill.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\windows_theme\kill_on.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\windows_theme\logo.png Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\windows_theme\notsearching.png Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\windows_theme\pause_dn.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\windows_theme\pause_up.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\windows_theme\play_dn.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\windows_theme\play_up.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\windows_theme\question.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\windows_theme\rewind_dn.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\windows_theme\rewind_up.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\windows_theme\searching.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\windows_theme\splash.png Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\windows_theme\stop_dn.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\windows_theme\stop_up.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\windows_theme\theme.txt Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\windows_theme\warning.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\themes\windows_theme.lwtp Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\ttree.cache Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\update.xml Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\version.key Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\version.xml Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\xml\data\audio.sxml Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\xml\data\delete_me Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\xml\data\video.sxml Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\xml\misc\application.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\xml\misc\audio.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\xml\misc\image.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\xml\misc\text.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\xml\misc\video.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\xml\schemas\audio.xsd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.limewire\xml\schemas\video.xsd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\.plugin141_03.trace Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Adobe\Acrobat\Whapi\CreatePDFWinColor.ico Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Adobe\Acrobat\Whapi\CreatePDFWinGray.ico Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Adobe\Acrobat\Whapi\SearchPDFWinColor.ico Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Adobe\Acrobat\Whapi\SearchPDFWinGray.ico Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Adobe\Acrobat\Whapi\WHAppList.xml Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\ArcSoft\ArcSoft PhotoImpression\3.0.1\PhotoImpression.ini Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\desktop.ini Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\GDIPFONTCACHEV1.DAT Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Help\WinHlp32.BMK Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Lavasoft\Ad-Aware\description.ini Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Lavasoft\Ad-Aware\Logs\Ad-Aware log2006-01-20 15-22-24.txt Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Lavasoft\Ad-Aware\Quarantine\auto-quarantine- 2006-01-20 15-23-26.bckp Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Lavasoft\Ad-Aware\settings.awc Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Lavasoft\Ad-Aware\stats.awd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Macromedia\Flash Player\#SharedObjects\WYUPL5UV\assets.bravenet.com\wfswf5day.sol Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Macromedia\Flash Player\#SharedObjects\WYUPL5UV\localhost\AVPrefs.sol Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Macromedia\Flash Player\#SharedObjects\WYUPL5UV\localhost\core.sol Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Macromedia\Flash Player\#SharedObjects\WYUPL5UV\plus.yahoo.com\us.yimg.com\i\us\plus\swf\pcm\111505.swf\vidplayer.sol Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Macromedia\Flash Player\bandbuilder.com\gunit\player.swf\BBSO.sol Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Macromedia\Flash Player\bandbuilder.com\gunit\player.swf\BBSO_104.sol Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Macromedia\Flash Player\localhost\core.sol Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#assets.bravenet.com\settings.sol Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#bandbuilder.com\settings.sol Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#last.fm\settings.sol Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#local\settings.sol Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#luthervandross.com\settings.sol Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#mediaonenetwork.net\settings.sol Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#msn.com\settings.sol Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#plus.yahoo.com\settings.sol Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#worldwinner.com\settings.sol Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#yourbodyextreme.com\settings.sol Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Macromedia\Flash Player\mediaonenetwork.net\MediaOne.sol Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Macromedia\Flash Player\msn.com\binGame\cabj\default\Blackjack.swf\zone_casino_by_jamdat.sol Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Macromedia\Flash Player\msn.com\binGame\cas1\default\slots.swf\zone_casino_by_jamdat.sol Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Macromedia\Flash Player\yourbodyextreme.com\bdx\en\enStart.swf\movieStart.sol Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Address Book\Sharlen.wab Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Address Book\Sharlen.wa~ Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Address Book\Sharlene Hokianga.wab Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Address Book\Sharlene Hokianga.wa~ Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Clip Organizer\mstore10.mgc Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Clip Organizer\Offic10.MGC Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Credentials\S-1-5-21-1960408961-813497703-1957994488-1004\Credentials Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Crypto\RSA\S-1-5-21-1960408961-813497703-1957994488-1004\226782687a4a9ddff186cbabee1355b5_7b241f1c-e3e6-440c-8082-6770731d537f Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Crypto\RSA\S-1-5-21-1960408961-813497703-1957994488-1004\40f6607c62aacd402d29e07abf974d59_7b241f1c-e3e6-440c-8082-6770731d537f Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Crypto\RSA\S-1-5-21-1960408961-813497703-1957994488-1004\83aa4cc77f591dfc2374580bbd95f6ba_7b241f1c-e3e6-440c-8082-6770731d537f Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Crypto\RSA\S-1-5-21-1960408961-813497703-1957994488-1004\bc7c6d74d4f062c25c7fe7264f5ed052_7b241f1c-e3e6-440c-8082-6770731d537f Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Crypto\RSA\S-1-5-21-1960408961-813497703-1957994488-1004\d642018b883da684e9c7dcbbfa2f2836_7b241f1c-e3e6-440c-8082-6770731d537f Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Forms\WINWORD.box Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\HTML Help\hh.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Internet Explorer\brndlog.bak Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Internet Explorer\brndlog.txt Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Internet Explorer\Desktop.htt Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Internet Explorer\Internet Explorer Wallpaper.bmp Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Internet Explorer\Quick Launch\desktop.ini Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Media Catalog\artgal50.mmc Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Media Player\0037F503.wpl Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Media Player\cyprusPresets.asx Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Media Player\OfflineUpdates.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MMC\dfrg Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Movie Maker\Windows Movie Maker.COL Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSDAIPP\Offline\0x00000001_R Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSDAIPP\Offline\0x00000003_R Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2162204675\Backgrounds\map.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2162204675\Backgrounds\TFR68.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2162204675\Backgrounds\TFR69.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2162204675\Backgrounds\TFR6A.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2162204675\Backgrounds\TFR6B.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2162204675\Backgrounds\TFR6C.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2162204675\Backgrounds\TFR6D.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2162204675\ListCache.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2162204675\UserTile\map.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2162204675\UserTile\TFR5C.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2162204675\UserTile\TFR5D.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2162204675\UserTile\TFR5E.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2162204675\UserTile\TFR5F.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2162204675\UserTile\TFR60.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2162204675\UserTile\TFR61.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2162204675\UserTile\TFR62.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2162204675\UserTile\TFR63.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2162204675\UserTile\TFR64.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2162204675\UserTile\TFR65.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2162204675\UserTile\TFR66.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2162204675\UserTile\TFR67.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2170198236\Backgrounds\map.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2170198236\Backgrounds\TFR16.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2170198236\Backgrounds\TFR17.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2170198236\Backgrounds\TFR18.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2170198236\Backgrounds\TFR19.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2170198236\Backgrounds\TFR1A.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2170198236\Backgrounds\TFR1B.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2170198236\ListCache.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2170198236\UserTile\map.dat Object is locked skipped

Naomi420 · 01-09-2008, 10:32 PM

C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2170198236\UserTile\TFR10.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2170198236\UserTile\TFR11.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2170198236\UserTile\TFR12.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2170198236\UserTile\TFR13.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2170198236\UserTile\TFR14.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2170198236\UserTile\TFR15.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2170198236\UserTile\TFRA.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2170198236\UserTile\TFRB.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2170198236\UserTile\TFRC.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2170198236\UserTile\TFRD.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2170198236\UserTile\TFRE.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2170198236\UserTile\TFRF.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2462515908\Backgrounds\map.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2462515908\Backgrounds\TFR51.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2462515908\Backgrounds\TFR52.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2462515908\Backgrounds\TFR53.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2462515908\Backgrounds\TFR54.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2462515908\Backgrounds\TFR55.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2462515908\ListCache.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2462515908\MapFile\TFR50.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2462515908\MapFile\TFR56.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2462515908\MapFile\TFR75.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2462515908\sqmdata00.sqm Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2462515908\sqmdata01.sqm Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2462515908\sqmdata02.sqm Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2462515908\sqmdata03.sqm Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2462515908\sqmdata04.sqm Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2462515908\sqmdata05.sqm Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2462515908\sqmdata06.sqm Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2462515908\sqmdata07.sqm Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2462515908\sqmdata08.sqm Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2462515908\sqmdata09.sqm Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2462515908\sqmdata10.sqm Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2462515908\sqmdata11.sqm Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2462515908\UserTile\map.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2462515908\UserTile\TFR45.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2462515908\UserTile\TFR46.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2462515908\UserTile\TFR47.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2462515908\UserTile\TFR48.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2462515908\UserTile\TFR49.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2462515908\UserTile\TFR4A.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2462515908\UserTile\TFR4B.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2462515908\UserTile\TFR4C.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2462515908\UserTile\TFR4D.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2462515908\UserTile\TFR4E.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2462515908\UserTile\TFR4F.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2462515908\Winks3\map.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2462515908\Winks3\TFR58.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2462515908\Winks3\TFR5A.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2462515908\Winks3\TFR5C.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2462515908\Winks3\TFR5E.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2462515908\Winks3\TFR60.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2462515908\Winks3\TFR62.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2462515908\Winks3\TFR64.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2462515908\Winks3\TFR66.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2462515908\Winks3\TFR68.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2462515908\Winks3\TFR6A.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2462515908\Winks3\TFR6C.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2462515908\Winks3\TFR6E.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2462515908\Winks3\TFR70.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2462515908\Winks3\TFR72.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\2462515908\Winks3\TFR74.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\3255961238\Backgrounds\map.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\3255961238\Backgrounds\TFR14.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\3255961238\Backgrounds\TFR15.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\3255961238\Backgrounds\TFR16.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\3255961238\Backgrounds\TFR17.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\3255961238\Backgrounds\TFR18.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\3255961238\Backgrounds\TFR19.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\3255961238\ListCache.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\3255961238\UserTile\map.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\3255961238\UserTile\TFR10.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\3255961238\UserTile\TFR11.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\3255961238\UserTile\TFR12.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\3255961238\UserTile\TFR13.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\3255961238\UserTile\TFR8.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\3255961238\UserTile\TFR9.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\3255961238\UserTile\TFRA.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\3255961238\UserTile\TFRB.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\3255961238\UserTile\TFRC.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\3255961238\UserTile\TFRD.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\3255961238\UserTile\TFRE.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\3255961238\UserTile\TFRF.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\633103398\Backgrounds\map.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\633103398\Backgrounds\TFR28.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\633103398\Backgrounds\TFR29.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\633103398\Backgrounds\TFR2A.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\633103398\Backgrounds\TFR2B.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\633103398\Backgrounds\TFR2C.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\633103398\Backgrounds\TFR2D.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\633103398\ListCache.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\633103398\UserTile\map.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\633103398\UserTile\TFR1C.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\633103398\UserTile\TFR1D.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\633103398\UserTile\TFR1E.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\633103398\UserTile\TFR1F.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\633103398\UserTile\TFR20.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\633103398\UserTile\TFR21.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\633103398\UserTile\TFR22.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\633103398\UserTile\TFR23.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\633103398\UserTile\TFR24.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\633103398\UserTile\TFR25.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\633103398\UserTile\TFR26.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\MSN Messenger\633103398\UserTile\TFR27.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Office\fbc8.tmp Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Office\MSO1033.acl Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Office\MSO3081.acl Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Office\Organi10.pip Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Office\Recent\.tmp on us.f1.yahoofs.com.url Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Office\Recent\1 October 2004.doc.LNK Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Office\Recent\3½ Floppy (A).LNK Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Office\Recent\Comfort Inn Hotel.doc.LNK Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Office\Recent\Contemporary Resume.dot.LNK Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Office\Recent\Desktop.LNK Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Office\Recent\Dialysis Petition.doc.LNK Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Office\Recent\DOCTOR CERT.mht.LNK Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Office\Recent\DOCTOR VISIT ONE.doc.LNK Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Office\Recent\Elegant Resume.dot.LNK Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Office\Recent\Elegant Resume.LNK Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Office\Recent\games.amishdonkey.com.url Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Office\Recent\index.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Office\Recent\Insight Diagnostic Center.doc.LNK Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Office\Recent\James Info Folder.LNK Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Office\Recent\keycopy.LNK Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Office\Recent\Letters.LNK Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Office\Recent\Lisa Dawson.htm.LNK Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Office\Recent\lisa.doc.LNK Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Office\Recent\Mail+Attachments on us.f1f.yahoofs.com.url Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Office\Recent\medical centre.doc.LNK Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Office\Recent\My Documents.LNK Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Office\Recent\My Pictures.LNK Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Office\Recent\new pictures.LNK Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Office\Recent\Normal.dot.LNK Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Office\Recent\Normal.LNK Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Office\Recent\Personal Documents.LNK Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Office\Recent\Picture.LNK Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Office\Recent\pool.url Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Office\Recent\PrintKey2000.LNK Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Office\Recent\Professional Resume.dot.LNK Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Office\Recent\ReadMe.rtf.LNK Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Office\Recent\Resumee For Toni.htm.LNK Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Office\Recent\RoN.jpg.LNK Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Office\Recent\Saturday.doc.LNK Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Office\Recent\Screen Shots.LNK Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Office\Recent\SPEED.doc.LNK Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Office\Recent\stuff for baby.LNK Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Office\Recent\Temp.LNK Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Office\Recent\Templates.LNK Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Office\Recent\together.jpg.LNK Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Office\Recent\Tuomey Healthcare System.htm.LNK Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Office\Recent\Tuomey Healthcare System.mht.LNK Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Office\Recent\winword2.doc.LNK Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Office\Recent\Wizards.LNK Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Office\Recent\******.mht.LNK Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Office\Recent\******.rtf.LNK Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Office\VB10.pip Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Office\Word10.pip Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Picture It! 2002\Bitmap1.bmp Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Picture It! 2002\Bitmap2.bmp Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Picture It! 2002\Bitmap3.bmp Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Picture It! 2002\Bitmap4.bmp Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Proof\CUSTOM.DIC Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Protect\CREDHIST Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Protect\S-1-5-21-1960408961-813497703-1957994488-1004\03c49893-2fd2-46d9-a305-8b2a118582e1 Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Protect\S-1-5-21-1960408961-813497703-1957994488-1004\35fa49f3-d989-4f61-a2be-2fe4e3f3f122 Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Protect\S-1-5-21-1960408961-813497703-1957994488-1004\5df4f369-4016-4acf-b13d-9a8382c5f9b5 Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Protect\S-1-5-21-1960408961-813497703-1957994488-1004\69007814-9f8c-45ac-a04e-e7876ba34eb6 Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Protect\S-1-5-21-1960408961-813497703-1957994488-1004\70fa3a92-bb31-42ff-9276-849f3681426f Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Protect\S-1-5-21-1960408961-813497703-1957994488-1004\81e64e63-4407-4575-9348-3d3a3640f70e Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Protect\S-1-5-21-1960408961-813497703-1957994488-1004\838a52ac-76f3-4ed2-874f-8793304ed490 Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Protect\S-1-5-21-1960408961-813497703-1957994488-1004\94cd82c3-f22d-4ba2-be5a-08444ebbd01e Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Protect\S-1-5-21-1960408961-813497703-1957994488-1004\95c01def-4f07-4e36-8e1a-35ea4e4532eb Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Protect\S-1-5-21-1960408961-813497703-1957994488-1004\a3fb9f2d-1604-4416-a01d-4be1848edd18 Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Protect\S-1-5-21-1960408961-813497703-1957994488-1004\b04ff3be-7197-4a36-80a9-8e0b82931741 Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Protect\S-1-5-21-1960408961-813497703-1957994488-1004\b90bd9ea-d589-4679-a019-73514939b848 Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Protect\S-1-5-21-1960408961-813497703-1957994488-1004\bbf28218-7472-48d0-97f6-c3fb8a45a1ba Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Protect\S-1-5-21-1960408961-813497703-1957994488-1004\cf75ee9f-a0ae-4ce6-b626-66f24eaddb22 Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Protect\S-1-5-21-1960408961-813497703-1957994488-1004\e639fd59-f540-4ef5-a0b4-4d63b37cbf69 Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Protect\S-1-5-21-1960408961-813497703-1957994488-1004\e6a4f7f3-4b4e-4282-a37e-1bf4d2470775 Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Protect\S-1-5-21-1960408961-813497703-1957994488-1004\f05766cf-a1c1-4746-a67b-74fc944781fa Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Protect\S-1-5-21-1960408961-813497703-1957994488-1004\Preferred Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Shoebox\user.sbc Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Shoebox\user.SBT Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Speech\Files\UserLexicons\SP_AD19A37079F34312963020B4B8E7CBC4.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Templates\Normal.dot Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Templates\~$Normal.dot Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Templates\~WRL0168.tmp Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Templates\~WRL0829.tmp Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Windows\Themes\Custom.theme Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Word\AutoRecovery save of Document1.asd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Word\AutoRecovery save of Document2.asd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Word\AutoRecovery save of Normal.as$ Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Microsoft\Word\~WRA0801.as$ Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\MSN6\msndata.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\MSN6\msndata001.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\MSN6\msndata002.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\MSN6\msndata003.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\MSN6\msndata004.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\Msg\Category.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\Msg\Messages.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\Msg\SCategory.dat Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealMediaSDK\0.txt Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealMediaSDK\ca5986b1.txt Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealMediaSDK\cab44eb7.txt Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealMediaSDK\cab46257.txt Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealMediaSDK\cab463e7.txt Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealMediaSDK\cab46ac7.txt Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealMediaSDK\cab47cd9.txt Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealMediaSDK\cb631235.txt Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealMediaSDK\d2364f05.txt Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealMediaSDK\d2364f22.txt Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealMediaSDK\d23656e5.txt Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealMediaSDK\d23665be.txt Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealMediaSDK\d2366d0d.txt Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealMediaSDK\d2366dd9.txt Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealMediaSDK\d23751ed.txt Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealMediaSDK\d23751fc.txt Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealMediaSDK\d2377e31.txt Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealMediaSDK\d23796c7.txt Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealMediaSDK\d237977d.txt Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealMediaSDK\d237a78f.txt Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealMediaSDK\d237b227.txt Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealMediaSDK\db58213d.txt Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealMediaSDK\db582192.txt Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealMediaSDK\db582314.txt Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealMediaSDK\db5823b9.txt Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealMediaSDK\db582451.txt Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealMediaSDK\db582468.txt Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealMediaSDK\db5824ad.txt Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealMediaSDK\db5824b2.txt Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealMediaSDK\db5824c2.txt Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealMediaSDK\db5824de.txt Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealMediaSDK\db58301b.txt Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealMediaSDK\db590047.txt Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\cookies.txt Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Channels\alreadyonline.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Channels\blu_ulcorner.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Channels\channels.ini Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Channels\channels.ver Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Channels\globe_channels.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Channels\header_channels.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Channels\icn_channels.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Channels\icn_radio.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Channels\icn_search.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Channels\icn_web.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Channels\main.html Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Channels\offline.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Channels\realone_header.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Channels\space.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Channels\tvset_bot.jpg Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Channels\tvset_top.jpg Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Channels\when_connected_channels.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Devices\cdr_help.html Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Devices\devices.ver Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Devices\engine.rmp Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Devices\rjcreatr.bmp Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Devices\Rp-9.css Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Formats\C__Documents and Settings_Sharlene Hokianga.TROJANCREW_Desktop_scan.log Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Formats\C__Documents and Settings_Sharlene Hokianga.TROJANCREW_Desktop_scan2.log Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Formats\C__Documents and Settings_Sharlene Hokianga.TROJANCREW_My Documents_My Music_scan.log Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Formats\C__Documents and Settings_Sharlene Hokianga.TROJANCREW_My Documents_My Music_scan2.log Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Formats\C__My Downloads_scan.log Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Formats\C__My Downloads_scan2.log Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Formats\C__Program Files_KaZaA_My Shared Folder_scan.log Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Formats\C__Program Files_KaZaA_My Shared Folder_scan2.log Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Formats\encoders.ini Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Formats\fldrscan.ini Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Formats\fldrscan.out Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Formats\fmt_a2b.png Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Formats\fmt_aac.png Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Formats\fmt_bmt.png Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Formats\fmt_cd.png Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Formats\fmt_emms.png Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Formats\fmt_liquid.png Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Formats\fmt_mp3.png Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Formats\fmt_ra8.png Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Formats\fmt_ra8_secure.png Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Formats\fmt_real.png Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Formats\fmt_rv8.png Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Formats\fmt_rv8_secure.png Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Formats\fmt_rv9.png Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Formats\fmt_rv9_secure.png Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Formats\fmt_wav.png Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Formats\fmt_wma.png Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Formats\formats.ini Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Formats\SDLGTXT.TXT Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\GetMedia\alreadyonline.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\GetMedia\blu_ulcorner.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\GetMedia\getmedia.ini Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\GetMedia\getmedia.ver Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\GetMedia\happyduo_bot.jpg Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\GetMedia\happyduo_top.jpg Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\GetMedia\header.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\GetMedia\icn_channels.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\GetMedia\icn_radio.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\GetMedia\icn_search.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\GetMedia\icn_web.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\GetMedia\main.html Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\GetMedia\offline.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\GetMedia\organize.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\GetMedia\organize_image.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\GetMedia\play.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\GetMedia\play_image.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\GetMedia\realone_header.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\GetMedia\space.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\GetMedia\tobrowse.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\GetMedia\transfer.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\GetMedia\transfer_image.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\GetMedia\welcome.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\GPFeat\ak30.ini Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\GPFeat\cn05.ini Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\GPFeat\default.ini Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\GPFeat\devices.ini Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\GPFeat\DevicesOffline\index.html Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\GPFeat\DevicesOffline\pics\bul.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\GPFeat\DevicesOffline\pics\device_bot.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\GPFeat\DevicesOffline\pics\device_top.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\GPFeat\DevicesOffline\pics\globe_devices.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\GPFeat\DevicesOffline\pics\header_devices.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\GPFeat\DevicesOffline\pics\icn_channels.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\GPFeat\DevicesOffline\pics\icn_radio.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\GPFeat\DevicesOffline\pics\icn_search.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\GPFeat\DevicesOffline\pics\icn_web.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\GPFeat\DevicesOffline\pics\offline.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\GPFeat\DevicesOffline\pics\realone_header.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\GPFeat\DevicesOffline\pics\space.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\GPFeat\DevicesOffline\pics\ulcorner.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\GPFeat\DevicesOffline\pics\when_connected_devices.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\GPFeat\df44.ini Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\GPFeat\encoding.ini Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\GPFeat\il54.ini Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\GPFeat\importwizard.ini Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\GPFeat\index.htm Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\GPFeat\jk93.ini Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\GPFeat\medialibraryshown.ini Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\GPFeat\normalization.ini Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\GPFeat\nx61.ini Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\GPFeat\ok93.ini Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\GPFeat\playlocaltracks.ini Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\GPFeat\r1_prem.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\GPFeat\sn24.ini Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\GPFeat\space.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\GPFeat\th53.ini Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\GPFeat\uf01.ini Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\GPFeat\vk88.ini Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\GPFeat\vt99.ini Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\GPFeat\worldbg.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Help\about.ini Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Help\alreadyonline.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Help\blu_ulcorner.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Help\globe_gettingstarted.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Help\gsg.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Help\gsg.html Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Help\gsg.ini Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Help\header_gettingstarted.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Help\help.ver Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Help\icn_channels.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Help\icn_radio.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Help\icn_search.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Help\icn_web.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Help\myacct.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Help\myacct.html Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Help\myacct.ini Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Help\offline.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Help\prodsurv.ini Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Help\productsurvey.html Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Help\realonecentral.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Help\realone_header.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Help\serviceandsupport.html Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Help\servsupp.ini Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Help\space.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Help\technicalrequest.html Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Help\techreq.ini Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Help\tutorial.html Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Help\tutorial.ini Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\howto\howto.ini Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\keywords\keywords.ini Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Login\cancel.html Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Login\css\firstrun.css Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Login\data\countries.js Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Login\data\languages.js Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Login\data\pagedata.js Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Login\data\years.js Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Login\firstrun.ini Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Login\images\alert_icon.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Login\images\btns\bttn_disabled.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Login\images\btns\bttn_down.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Login\images\btns\bttn_enabled.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Login\images\btns\bttn_over.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Login\images\clear.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Login\images\conn_anim.gif Object is locked skipped

Naomi420 · 01-09-2008, 10:44 PM

C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Login\images\grayline.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Login\images\space.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Login\images\welcome.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Login\images\welcome_short.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Login\index.html Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Login\js\actions.js Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Login\js\authsubmit.js Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Login\js\buttons.js Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Login\js\etrap.js Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Login\js\objects.js Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Login\js\renderforms.js Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Login\login.html Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Login\login.ini Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Login\manage.html Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Login\manage.ini Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Login\templates\render.js Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Login\welcome.html Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Login\welcome.ini Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Radio\alreadyonline.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Radio\blu_ulcorner.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Radio\globe_radio.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Radio\header_radio.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Radio\icn_channels.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Radio\icn_radio.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Radio\icn_search.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Radio\icn_web.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Radio\main.html Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Radio\offline.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Radio\radio.ini Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Radio\radio.ver Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Radio\radio_bot.jpg Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Radio\radio_top.jpg Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Radio\realone_header.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Radio\space.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\Radio\when_connected_radio.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\search\alreadyonline.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\search\blu_ulcorner.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\search\globe_search.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\search\header_search.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\search\icn_channels.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\search\icn_radio.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\search\icn_search.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\search\icn_web.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\search\magglass_bot.jpg Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\search\magglass_top.jpg Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\search\main.html Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\search\offline.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\search\realone_header.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\search\search.ini Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\search\search.ver Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\search\space.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\DataCache\search\when_connected_search.gif Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000000.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000001.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000002.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000003.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000004.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000005.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000006.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000007.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000008.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000009.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000010.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000011.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000012.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000013.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000014.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000015.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000016.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000017.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000018.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000019.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000020.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000021.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000022.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000023.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000024.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000025.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000026.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000027.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000028.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000029.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000030.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000031.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000032.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000033.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000034.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000035.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000036.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000037.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000038.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000039.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000040.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000041.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000042.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000043.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000044.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000045.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000046.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000047.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000048.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000049.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000050.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000051.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000052.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000053.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000054.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000055.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000056.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000057.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000058.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000059.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000060.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000061.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000062.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000063.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000064.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000065.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000066.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000067.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000068.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000069.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000070.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000071.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000072.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000073.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000074.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000075.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000076.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000077.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000078.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000079.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000080.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000081.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000082.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000083.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000084.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000085.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000086.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000087.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000088.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000089.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000090.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000091.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000092.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000093.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000094.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000095.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000096.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000097.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000098.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000099.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000100.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000101.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000102.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000103.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000104.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000105.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000106.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000107.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000108.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000109.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000110.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000111.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000112.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000113.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000114.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000115.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000116.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000117.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000118.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000119.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000120.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000121.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000122.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000123.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000124.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000125.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000126.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000127.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000128.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000129.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000130.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000131.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000132.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000133.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000134.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000135.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000136.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000137.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000138.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000139.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000140.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000141.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000142.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000143.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000144.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000145.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000146.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000147.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000148.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000149.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000150.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000151.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000152.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000153.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000154.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000155.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000156.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000157.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000158.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000159.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000160.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000161.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000162.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000163.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000164.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000165.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000166.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000167.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000168.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000169.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000170.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000171.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000172.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000173.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000174.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000175.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000176.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000177.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000178.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000179.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000180.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000181.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000182.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000183.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000184.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000185.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000186.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000187.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000189.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000190.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000191.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000192.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000193.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000194.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000196.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000197.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000198.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000199.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000200.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000201.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000202.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000203.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000204.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000205.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000206.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000207.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000208.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000209.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000210.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000211.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000212.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000213.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000214.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000215.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000216.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000217.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000218.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000219.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000220.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000221.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000222.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000223.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000224.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000225.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000226.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000227.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000228.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000229.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000230.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000231.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000232.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000233.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000234.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000235.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000236.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000237.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000238.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000239.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000240.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000241.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000242.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000243.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000244.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000245.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000246.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000247.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000248.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000249.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000250.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000251.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000252.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000253.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000254.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\000\000255.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\001\000256.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\001\000257.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\001\000258.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\001\000259.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\001\000260.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\001\000261.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\001\000262.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\001\000263.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\001\000264.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\001\000265.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\001\000266.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\001\000267.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\001\000268.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\001\000269.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\001\000270.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\001\000271.tmd Object is locked skipped
C:\Documents and Settings\Sharlene Hokianga.TROJANCREW\Application Data\Real\RealOne Player\db\Backup\001\000272.tmd Object is locked skipped

01-07-2008, 02:05 AM	#1 (permalink)
Naomi420 Registered User Join Date: Jan 2008 Posts: 23 OS: xp	Help Computer Is Dying computer is running extremely slow lose internet connection had generic errors a couple times and get some yellow triangle icon with a exclamation mark in the middle saying something about needing virus scanner then i.e opens up this weird virus scan site. happens every time i open up a folder on my desktop or start menu please help in desperate need of help would really appreciate any help possible im not very familiar with computers but like i said would very much appreciate any help possible thank you very much here is my hijackthis log Logfile of HijackThis v1.98.2 Scan saved at 5:08:01 a.m., on 1/7/2008 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe C:\WINDOWS\System32\urdvxc.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe C:\HJKT\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about: R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn6\yt.dll F2 - REG:system.ini: UserInit=C:\WINDOWS\System32\Userinit.exe O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn6\yt.dll O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll O2 - BHO: (no name) - {86ABDA6E-15D2-4C0D-86F7-D2E37E3E986B} - C:\WINDOWS\System32\cryptdl.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn6\yt.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\Money Express.exe" O4 - Global Startup: Printkey2000.lnk = C:\Program Files\PrintKey2000\Printkey2000.exe O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyviewer.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra button: Poker.com - {6FDD5236-C9F0-49ef-935D-385F5E21991A} - C:\Documents and Settings\Owner\Start Menu\Programs\Poker.com\Poker.com.lnk (HKCU) O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll O16 - DPF: {29C13B62-B9F7-4CD3-8CEF-0A58A1A99441} - http://fdl.msn.com/public/chat/msnchat41.cab O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsu...?1136532715105 O16 - DPF: {6AA85413-165C-4200-8154-71166077B22E} - http://scripts.dlv4.com/binaries/IA/...vc32_EN_XP.cab O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsof...?1166267171419 O16 - DPF: {7A32634B-029C-4836-A023-528983982A49} - http://fdl.msn.com/public/chat/msnchat42.cab O16 - DPF: {87C1805D-C5AE-4455-AB39-E245BB516136} - http://us2-scripts.dlv4.com/binaries...s4_1059_XP.cab O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = BIATCH O17 - HKLM\Software\..\Telephony: DomainName = BIATCH O17 - HKLM\System\CCS\Services\Tcpip\..\{1088C928-C4C8-4876-813B-FE7E7FD176D6}: NameServer = 203.152.100.32 203.152.112.32 O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = BIATCH O17 - HKLM\System\CS1\Services\Tcpip\..\{1088C928-C4C8-4876-813B-FE7E7FD176D6}: NameServer = 203.152.100.32 203.152.112.32 O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = BIATCH O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing) O20 - AppInit_DLLs: O21 - SSODL: BzZaPo - {743505B2-DE9F-AF18-D5D6-100483B085AB} - (no file)

01-07-2008, 05:04 PM	#2 (permalink)
Naomi420 Registered User Join Date: Jan 2008 Posts: 23 OS: xp	Re: Help Computer Is Dying please help me can anyone give me some information from my log

01-07-2008, 08:26 PM	#3 (permalink)
Naomi420 Registered User Join Date: Jan 2008 Posts: 23 OS: xp	Re: Help Computer Is Dying isn't there someone who can read this log and help me please

01-07-2008, 08:35 PM	#4 (permalink)
Ried Assistant Manager, TSF Academy; Moderator/Analyst Security Team Join Date: Jan 2005 Location: Ohio Posts: 23,958 OS: WinXP and Vista	Re: Help Computer Is Dying We can't work with what you've posted. 1. Your version of HijackThis is terribly outdated. Uninstall it and download HijackThis 2.02 to your desktop. Double-click on the file you just downloaded. Click on the "Install" button to install. It will by default install to the directory - C:\Program Files\Trend Micro\HijackThis Upon install, HijackThis should open for you. Close it--do not run a scan. 2. Next, kindly follow the instructions in our sticky topic (Updated!) IMPORTANT - Read This Before Posting A Log If you have any difficulty with any of the steps, move on to the next one. Be sure to reach Step 5 and post the requested logs in your next reply. Please note this section of the forum is very busy, so please familiarize yourself with the Bumping Rules** also found in Step 5 of our sticky topic mentioned above. One of our Analysts will review your log as soon as possible. __________________ Member of ASAP since 2005 Member of UNITE since 2006 "It is one life whether we spend it laughing or weeping." "Take the time to laugh--it is the music of the soul."

01-08-2008, 02:02 AM	#5 (permalink)
Naomi420 Registered User Join Date: Jan 2008 Posts: 23 OS: xp	Re: Help Computer Is Dying oh im sorry i didnt realize it was so old thank you very much heres my new post hopefully that helps you guys out a little better thank you very much and i really do appreciate it Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 5:07:44 a.m., on 1/8/2008 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe C:\WINDOWS\System32\urdvxc.exe C:\WINDOWS\Explorer.EXE C:\Program Files\PrintKey2000\Printkey2000.exe C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about: R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn6\yt.dll F2 - REG:system.ini: UserInit=C:\WINDOWS\System32\Userinit.exe O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn6\yt.dll O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll O2 - BHO: (no name) - {86ABDA6E-15D2-4C0D-86F7-D2E37E3E986B} - C:\WINDOWS\System32\cryptdl.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn6\yt.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\Money Express.exe" O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\S-1-5-18\..\Run: [Compliant] gbloblqbw.exe (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user') O4 - Global Startup: Printkey2000.lnk = C:\Program Files\PrintKey2000\Printkey2000.exe O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyviewer.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra button: Poker.com - {6FDD5236-C9F0-49ef-935D-385F5E21991A} - C:\Documents and Settings\Owner\Start Menu\Programs\Poker.com\Poker.com.lnk (HKCU) O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll O15 - Trusted Zone: http://click.getmirar.com (HKLM) O15 - Trusted Zone: http://click.mirarsearch.com (HKLM) O15 - Trusted Zone: http://redirect.mirarsearch.com (HKLM) O16 - DPF: {29C13B62-B9F7-4CD3-8CEF-0A58A1A99441} - http://fdl.msn.com/public/chat/msnchat41.cab O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsu...?1136532715105 O16 - DPF: {6AA85413-165C-4200-8154-71166077B22E} - http://scripts.dlv4.com/binaries/IA/...vc32_EN_XP.cab O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsof...?1166267171419 O16 - DPF: {7A32634B-029C-4836-A023-528983982A49} - http://fdl.msn.com/public/chat/msnchat42.cab O16 - DPF: {87C1805D-C5AE-4455-AB39-E245BB516136} - http://us2-scripts.dlv4.com/binaries...s4_1059_XP.cab O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = BIATCH O17 - HKLM\Software\..\Telephony: DomainName = BIATCH O17 - HKLM\System\CCS\Services\Tcpip\..\{1088C928-C4C8-4876-813B-FE7E7FD176D6}: NameServer = 203.152.100.32 203.152.112.32 O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = BIATCH O17 - HKLM\System\CS1\Services\Tcpip\..\{1088C928-C4C8-4876-813B-FE7E7FD176D6}: NameServer = 203.152.100.32 203.152.112.32 O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = BIATCH O20 - AppInit_DLLs: O20 - Winlogon Notify: MS-DOS Emulation - C:\WINDOWS\ O21 - SSODL: BzZaPo - {743505B2-DE9F-AF18-D5D6-100483B085AB} - (no file) O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: Network Windows Service (MSWindows) - Unknown owner - C:\WINDOWS\System32\urdvxc.exe O24 - Desktop Component 0: Desktop Uninstall - (no file) -- End of file - 5308 bytes

01-08-2008, 04:24 AM	#6 (permalink)
Naomi420 Registered User Join Date: Jan 2008 Posts: 23 OS: xp	Re: Help Computer Is Dying i also forgot to add that system restore always fails and internet explorer wont work properly nor will it update :(

01-08-2008, 06:34 AM	#7 (permalink)
Ried Assistant Manager, TSF Academy; Moderator/Analyst Security Team Join Date: Jan 2005 Location: Ohio Posts: 23,958 OS: WinXP and Vista	Re: Help Computer Is Dying Hi Naomi420, I see quite an infected system here, and no evidence of an onboard Anti-Virus program. Before we begin, I'd like as much information as possible. While I appreciate your obtaining the latest version of HijackThis, did you follow all 5 steps that I linked you to? We prefer a more comprehensive set of logs to assist in detecting the level the malware has infiltrated a system. As noted in our sticky topic (Updated!) IMPORTANT - Read This Before Posting A Log, download Deckard's System Scanner (DSS) to your Desktop. What DSS will do: create a new System Restore point in Windows XP and Vista. clean your Temporary Files, Downloaded Program Files, and Internet Cache Files, and also empty the Recycle Bin on all drives. check some important areas of your system and produce a report for your analyst to review. DSS automatically runs HijackThis for you, but it will also install and place a shortcut to HijackThis on your desktop if you do not already have HijackThis installed. Note: You must be logged onto an account with administrator privileges. Close all applications and windows. Double-click on dss.exe to run it, and follow the prompts. When the scan is complete, two text files will open - main.txt <- this one will be maximized and extra.txt <-this one will be minimized Copy (Ctrl+A then Ctrl+C) and paste (Ctrl+V) the contents of main.txt in your next reply. Please attach extra.txt to your post. To attach a file to a new post, simply Click the[Manage Attachments] button under Additional Options > Attach Files on the post composition page, and copy and paste the following into the "Upload File from your Computer" box: C:\Deckard\System Scanner\extra.txt Click Upload. Please include the following in your next reply so we may get started: main.txt an attached extra.txt __________________ Member of ASAP since 2005 Member of UNITE since 2006 "It is one life whether we spend it laughing or weeping." "Take the time to laugh--it is the music of the soul."

01-08-2008, 10:09 AM	#9 (permalink)
Ried Assistant Manager, TSF Academy; Moderator/Analyst Security Team Join Date: Jan 2005 Location: Ohio Posts: 23,958 OS: WinXP and Vista	Re: Help Computer Is Dying Thanks, Naomi420. No worries about the online scan just yet--I understood the issue with online scans and IE from your first post. I see plenty of Anti-Malware programs onboard, which is good--but they do not take the place of an Anti Virus program. An Anti Virus program is essential to have onboard as well, and is one of the reasons your system is so infected right now. As soon as we stabilize the system a bit, I'll have instructions for a very good free AV program to use. The other reason is the use of P2P programs. Even if you are using a "safe" P2P program, it is only the program that is safe. You will be sharing files from uncertified sources, and these are often infected. The bad guys use P2P filesharing as a major conduit to spread their wares. This will require more than one round to properly eradicate. Please stay with me until given the 'all clear' even if symptoms seemingly abate. Please copy this page to Notepad and save to your desktop for reference as you will not have any browsers open while you are carrying out portions of these instructions. It's IMPORTANT to carry out the instructions in the sequence listed below. ************************************************* Download Combofix from any of the links below, and save it to your desktop. Link 1 Link 2 Link 3 Note: It is important that it is saved directly to your desktop -------------------------------------------------------------------- 1. Disconnect from the internet. 2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix. -------------------------------------------------------------------- Open HijackThis and click on 'Do a System Scan Only'. 'Check' the following entries: O15 - Trusted Zone: http://click.getmirar.com (HKLM) O15 - Trusted Zone: http://click.mirarsearch.com (HKLM) O15 - Trusted Zone: http://redirect.mirarsearch.com (HKLM) Click 'Fix Checked' and close HijackThis. -------------------------------------------------------------------- Double click on ComboFix.exe & follow the prompts. When finished, it will produce a report for you. I'll need to see that in your next reply to continue cleaning the system. Note: Do not mouseclick combofix's window while it's running. That may cause it to stall **************************************************** Please download FindAWF to your Desktop. Double-click FindAWF.exe to start the tool. Select option #1 - Scan for bak folders by typing 1 and press 'Enter' When the tool has completed, a report will open up in notepad. Please post the results of the awf.txt here. Do not run any other option unless directed to do so.** ------------------------------------------------------------------- Please include the following in your next reply: C:\ComboFix.txt awf.txt __________________ Member of ASAP since 2005 Member of UNITE since 2006 "It is one life whether we spend it laughing or weeping." "Take the time to laugh--it is the music of the soul."

01-08-2008, 11:32 AM	#11 (permalink)
Naomi420 Registered User Join Date: Jan 2008 Posts: 23 OS: xp	Re: Help Computer Is Dying i also have family members who use my computer is there anyway i can block certain sites that they may use? without them knowing how to disable it?

01-09-2008, 09:55 PM	#13 (permalink)
Naomi420 Registered User Join Date: Jan 2008 Posts: 23 OS: xp	Re: Help Computer Is Dying hey there again what a mission that was hahaha but thanks alot for that theres one thing um really unsure about though after finally being able to download the avira antivir personal edition classic scanner i did the scan right but i wasnt sure wether i should delete the infections or just quarantine them so i just on the safe side quarantined all infections found because deckard had some kind of infection and things like system volume restore were also quarantined i didnt want to go deleting all these things i wasnt sure about and have certain programs not running right because i did that.... i also saved a report on that antivir scan and i know you didnt ask for it but i thought maybe if i actually showed you you'd understand more of what im saying.....the other thing is im not sure if it suppose to be there but a folder named Qoobox has popped up in my c: drive? im so sorry if i have been such a hassle and i really do appreciate all the hard work and effort you have put toward helping me fix everything...i have noticed some changes though i.e seems to be working fine so and im not lagging as much as i was previously so thank you so much for that here is the logs you asked for i will post the avira log after ive posted the logs you asked for even if its not neccessary SDFix: Version 1.125 Run by Owner on Wed 01/09/2008 at 04:38 a.m. Microsoft Windows XP [Version 5.1.2600] Running From: C:\SDFix Safe Mode: Checking Services: Name: MSWindows Path: "C:\WINDOWS\System32\urdvxc.exe" /service MSWindows - Deleted Restoring Windows Registry Values Restoring Windows Default Hosts File Rebooting... Normal Mode: Checking Files: Trojan Files Found: C:\WINDOWS\SYSTEM32\SP1_32.EXE - Deleted C:\WINDOWS\SYSTEM32\SP1_32.DLL - Deleted C:\ANTIVI~1.EXE - Deleted C:\WINDOWS\system32\CatRoot\TMP12.tmp - Deleted C:\WINDOWS\system32\bpk.dat - Deleted C:\WINDOWS\system32\inst.dat - Deleted C:\WINDOWS\system32\pk.bin - Deleted C:\WINDOWS\system32\TFTP1360 - Deleted C:\WINDOWS\system32\TFTP1396 - Deleted C:\WINDOWS\system32\TFTP1432 - Deleted C:\WINDOWS\system32\TFTP1444 - Deleted C:\WINDOWS\system32\TFTP1652 - Deleted C:\WINDOWS\system32\TFTP1720 - Deleted C:\WINDOWS\system32\TFTP1932 - Deleted C:\WINDOWS\system32\TFTP1972 - Deleted C:\WINDOWS\system32\TFTP204 - Deleted C:\WINDOWS\system32\TFTP2096 - Deleted C:\WINDOWS\system32\TFTP2124 - Deleted C:\WINDOWS\system32\TFTP2184 - Deleted C:\WINDOWS\system32\TFTP2228 - Deleted C:\WINDOWS\system32\TFTP2548 - Deleted C:\WINDOWS\system32\TFTP256 - Deleted C:\WINDOWS\system32\TFTP2644 - Deleted C:\WINDOWS\system32\TFTP2664 - Deleted C:\WINDOWS\system32\TFTP2680 - Deleted C:\WINDOWS\system32\TFTP2692 - Deleted C:\WINDOWS\system32\TFTP2708 - Deleted C:\WINDOWS\system32\TFTP2812 - Deleted C:\WINDOWS\system32\TFTP2976 - Deleted C:\WINDOWS\system32\TFTP3104 - Deleted C:\WINDOWS\system32\TFTP3120 - Deleted C:\WINDOWS\system32\TFTP3144 - Deleted C:\WINDOWS\system32\TFTP3332 - Deleted C:\WINDOWS\system32\TFTP3444 - Deleted C:\WINDOWS\system32\TFTP3572 - Deleted C:\WINDOWS\system32\TFTP3716 - Deleted C:\WINDOWS\system32\TFTP3776 - Deleted C:\WINDOWS\system32\TFTP3820 - Deleted C:\WINDOWS\system32\TFTP388 - Deleted C:\WINDOWS\system32\TFTP3920 - Deleted C:\WINDOWS\system32\TFTP4036 - Deleted C:\WINDOWS\system32\TFTP4528 - Deleted C:\WINDOWS\system32\TFTP4700 - Deleted C:\WINDOWS\system32\TFTP4848 - Deleted C:\WINDOWS\system32\TFTP4904 - Deleted C:\WINDOWS\system32\TFTP888 - Deleted C:\WINDOWS\system32\urdvxc.exe - Deleted C:\WINDOWS\system32\web.dat - Deleted Removing Temp Files... ADS Check: C:\WINDOWS No streams found. C:\WINDOWS\system32 No streams found. C:\WINDOWS\system32\svchost.exe No streams found. C:\WINDOWS\system32\ntoskrnl.exe No streams found. Final Check: catchme 0.3.1344.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-01-09 04:50:22 Windows 5.1.2600 Service Pack 1 NTFS scanning hidden processes ... scanning hidden services & system hive ... scanning hidden registry entries ... scanning hidden files ... scan completed successfully hidden processes: 0 hidden services: 0 hidden files: 0 Remaining Services: ------------------ Authorized Application Key Export: [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] Remaining Files: --------------- File Backups: - C:\SDFix\backups\backups.zip Files with Hidden Attributes: Wed 30 Nov 2005 52,224 ..SHR --- "C:\Program Files\yahelite\Setup.exe" Sun 30 Apr 2006 602,758 ..SH. --- "C:\WINDOWS\system32\hgjjl.bak1" Tue 17 Dec 2002 602,741 ..SH. --- "C:\WINDOWS\system32\hgjjl.bak2" Fri 26 Jan 2007 700,928 ...H. --- "C:\WINDOWS\system32\wodfamoh.dll" Sun 22 Jun 2003 4,348 ..SH. --- "C:\Documents and Settings\All Users.WINDOWS\DRM\DRMv1.bak" Mon 7 Aug 2006 400 ..SH. --- "C:\Documents and Settings\All Users.WINDOWS\DRM\v2ks.bla.bak" Mon 7 Aug 2006 48 ..SH. --- "C:\Documents and Settings\All Users.WINDOWS\DRM\v2ks.sec.bak" Wed 6 Sep 2006 50,688 ..SHR --- "C:\Program Files\ZakFromAnotherPlanet\VBRunDLL\Setup.exe" Thu 19 Jan 2006 5,319,000 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\483b14dfd4304c14bae99ca9db08dab8\BIT10.tmp" Finished!

01-09-2008, 10:01 PM	#14 (permalink)
Naomi420 Registered User Join Date: Jan 2008 Posts: 23 OS: xp	Re: Help Computer Is Dying ComboFix 08-01-08.4 - Owner 2008-01-09 5:19:24.2 - NTFSx86 Microsoft Windows XP Home Edition 5.1.2600.1.1252.1.1033.18.23 [GMT -5:00] Running from: C:\Documents and Settings\Owner\Desktop\ComboFix.exe Command switches used :: C:\Documents and Settings\Owner\Desktop\CFScript.txt * Created a new restore point FILE C:\Program Files\00004.mpg C:\Program Files\00005.mpg C:\Program Files\00006.mpg C:\Program Files\0002.mpg C:\Program Files\0003.wmv C:\Program Files\001.wmv C:\Program Files\0ls.mpg C:\Program Files\157_allmypornstars.com_c.mpg C:\Program Files\4_chunk_24.wmv C:\Program Files\4a.mpeg C:\Program Files\7777.wmv C:\Program Files\a3.wmv C:\Program Files\babe-posing-and-masturbating-movies_04.mpg C:\Program Files\babe-posing-and-toying-movies_04.mpg C:\Program Files\beach-sex-05.mpg C:\Program Files\beach-sex-06.mpg C:\Program Files\blonde-lesbians-04.mpg C:\Program Files\bossbitches_02_02_straponforcefucking_06a_tagged.mpg C:\Program Files\candyhi03_chunk_3.wmv C:\Program Files\clip4.wmv C:\Program Files\fil08-02a_hi.wmv C:\Program Files\fil08-02b_hi.wmv C:\Program Files\fil08-02c_hi.wmv C:\Program Files\fil08-02d_hi.wmv C:\Program Files\fil12-01b_hi.wmv C:\Program Files\fil12-01d_hi.wmv C:\Program Files\gimp-2.2.13-i586-setup-1.zip C:\Program Files\gtk+-2.10.6-1-setup.zip C:\Program Files\hh_07092006_3.mpg C:\Program Files\ImageResizerPowertoySetup(2).exe C:\Program Files\lesbian-strapon-action_04.mpg C:\Program Files\lesbiansex01.mpg C:\Program Files\lesbiansex02.mpg C:\Program Files\lesbiansex03.mpg C:\Program Files\lesbiansex04.mpg C:\Program Files\lls.mpg C:\Program Files\ls.mpg C:\Program Files\ls2.mpg C:\Program Files\ls3.mpg C:\Program Files\lss1.mpg C:\Program Files\mcsmiclock.zip C:\Program Files\movie_4.wmv C:\Program Files\msgr8us.exe C:\Program Files\own_the_mic.zip C:\Program Files\PortraitProfessionalTrialSetup.exe C:\Program Files\reacharoundbuddiesfilm2_246.wmv C:\Program Files\red-strapon-action-hard-sex-02.mpg C:\Program Files\red-strapon-action-hard-sex-03.mpg C:\Program Files\resize.reg C:\Program Files\Rose_for_Wifey.jpg C:\Program Files\setupAIR.exe C:\Program Files\sex-with-strapon-04.mpg C:\Program Files\smile_sexy.jpg C:\Program Files\spy.wmv C:\Program Files\spy2.mpg C:\Program Files\spy4.mpg C:\Program Files\strap-on-movie-01.mpg C:\Program Files\strapon-lesbos-hard-sex-04.mpg C:\Program Files\take2.mpg C:\Program Files\V01382_big_02.mpg C:\Program Files\V01964_t6_350.mpg C:\Program Files\video3.mpg C:\Program Files\video4.mpg C:\Program Files\video4.wmv C:\Program Files\video5.mpg C:\Program Files\voy15-01b_hi.wmv C:\Program Files\voy15-01c_hi.wmv C:\Program Files\voy15-01d_hi.wmv C:\Program Files\whipped-ass4.mpg C:\WINDOWS\system32\hgjjl.bak1 C:\WINDOWS\system32\hgjjl.bak2 . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . C:\Documents and Settings\Owner\My Documents\Net Commando 2000 lite C:\Documents and Settings\Owner\My Documents\Net Commando 2000 lite\Net Commando 2000 lite\Net-Commando .exe C:\Documents and Settings\Owner\My Documents\Net Commando 2000 lite\Net Commando 2000 lite\ReadMe.txt C:\Program Files\00004.mpg C:\Program Files\00005.mpg C:\Program Files\00006.mpg C:\Program Files\0002.mpg C:\Program Files\0003.wmv C:\Program Files\001.wmv C:\Program Files\0ls.mpg C:\Program Files\157_allmypornstars.com_c.mpg C:\Program Files\4_chunk_24.wmv C:\Program Files\4a.mpeg C:\Program Files\7777.wmv C:\Program Files\a3.wmv C:\Program Files\babe-posing-and-masturbating-movies_04.mpg C:\Program Files\babe-posing-and-toying-movies_04.mpg C:\Program Files\beach-sex-05.mpg C:\Program Files\beach-sex-06.mpg C:\Program Files\blonde-lesbians-04.mpg C:\Program Files\bossbitches_02_02_straponforcefucking_06a_tagged.mpg C:\Program Files\candyhi03_chunk_3.wmv C:\Program Files\clip4.wmv C:\Program Files\cmer_uninstallers C:\Program Files\fil08-02a_hi.wmv C:\Program Files\fil08-02b_hi.wmv C:\Program Files\fil08-02c_hi.wmv C:\Program Files\fil08-02d_hi.wmv C:\Program Files\fil12-01b_hi.wmv C:\Program Files\fil12-01d_hi.wmv C:\Program Files\gimp-2.2.13-i586-setup-1.zip C:\Program Files\gtk+-2.10.6-1-setup.zip C:\Program Files\hh_07092006_3.mpg C:\Program Files\ImageResizerPowertoySetup(2).exe C:\Program Files\lesbian-strapon-action_04.mpg C:\Program Files\lesbiansex01.mpg C:\Program Files\lesbiansex02.mpg C:\Program Files\lesbiansex03.mpg C:\Program Files\lesbiansex04.mpg C:\Program Files\lls.mpg C:\Program Files\ls.mpg C:\Program Files\ls2.mpg C:\Program Files\ls3.mpg C:\Program Files\lss1.mpg C:\Program Files\mcsmiclock.zip C:\Program Files\movie_4.wmv C:\Program Files\msgr8us.exe C:\Program Files\own_the_mic.zip C:\Program Files\Plaxo\2.11.1.5\bak C:\Program Files\Plaxo\2.11.1.5\bak\PlaxoHelper.exe C:\Program Files\PortraitProfessionalTrialSetup.exe C:\Program Files\QuickTime\bak C:\Program Files\QuickTime\bak\qttask.exe C:\Program Files\reacharoundbuddiesfilm2_246.wmv C:\Program Files\red-strapon-action-hard-sex-02.mpg C:\Program Files\red-strapon-action-hard-sex-03.mpg C:\Program Files\resize.reg C:\Program Files\Rose_for_Wifey.jpg C:\Program Files\setupAIR.exe C:\Program Files\sex-with-strapon-04.mpg C:\Program Files\smile_sexy.jpg C:\Program Files\spy.wmv C:\Program Files\spy2.mpg C:\Program Files\spy4.mpg C:\Program Files\strap-on-movie-01.mpg C:\Program Files\strapon-lesbos-hard-sex-04.mpg C:\Program Files\take2.mpg C:\Program Files\V01382_big_02.mpg C:\Program Files\V01964_t6_350.mpg C:\Program Files\video3.mpg C:\Program Files\video4.mpg C:\Program Files\video4.wmv C:\Program Files\video5.mpg C:\Program Files\voy15-01b_hi.wmv C:\Program Files\voy15-01c_hi.wmv C:\Program Files\voy15-01d_hi.wmv C:\Program Files\whipped-ass4.mpg C:\Program Files\Y!Deceasedv2.0b C:\Program Files\Y!Deceasedv2.0b\Y!Deceased v2.0b.exe C:\WINDOWS\system32\bak C:\WINDOWS\system32\bak\NeroCheck.exe C:\WINDOWS\system32\hgjjl.bak1 C:\WINDOWS\system32\hgjjl.bak2 . ((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\LEGACY_ALFACLEANER -------\alfacleaner ((((((((((((((((((((((((( Files Created from 2007-12-09 to 2008-01-09 ))))))))))))))))))))))))))))))) . 2008-01-09 04:36 . 2008-01-09 04:36 <DIR> d-------- C:\WINDOWS\ERUNT 2008-01-09 02:41 . 2008-01-09 03:49 21,177,300 --a------ C:\antivir_workstation_win7u_en_h.exe.part 2008-01-08 13:54 . 2000-08-31 08:00 51,200 --a------ C:\WINDOWS\NirCmd.exe 2008-01-08 12:19 . 2008-01-08 12:19 <DIR> d-------- C:\Deckard 2008-01-08 05:04 . 2008-01-08 05:06 812,344 --a------ C:\Program Files\HJTInstall.exe . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2008-01-09 10:26 --------- d-----w C:\Program Files\QuickTime 2008-01-09 09:04 --------- d-----w C:\Program Files\Lavasoft 2008-01-09 01:08 --------- d-----w C:\Program Files\Full Tilt Poker 2008-01-08 10:06 --------- d-----w C:\Program Files\Trend Micro 2007-11-29 11:15 --------- d-----w C:\Program Files\Vodafone 2007-11-24 11:00 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\Grisoft 2007-11-17 11:10 21,216,112 ----a-w C:\Program Files\aaw2007.exe 2007-11-17 09:56 --------- d--h--w C:\Program Files\InstallShield Installation Information 2007-11-17 09:56 --------- d-----w C:\Program Files\XoftSpySE 2007-11-17 09:56 --------- d-----w C:\Program Files\SmitfraudFix 2007-11-17 09:56 --------- d-----w C:\Program Files\Poker.com 2007-11-17 09:04 3,178,952 ----a-w C:\Program Files\XoftSpySE433_263.exe 2007-11-17 08:54 --------- d-----w C:\Program Files\Enigma Software Group 2007-11-17 08:32 4,067,176 ----a-w C:\Program Files\Free-SpyHunter-Scanner-Install.exe 2007-11-16 10:41 1,043,644 ----a-w C:\Program Files\SmitfraudFix.exe 2007-09-23 16:53 1,006,207 ----a-w C:\Program Files\Poker.exe 2007-06-20 18:16 10,171,623 ----a-w C:\Program Files\FullTiltSetup.exe 2007-03-15 03:49 1,778,951 -c--a-w C:\Program Files\hotties_licking_**_204.wmv 2007-03-05 07:33 1,574,008 -c--a-w C:\Program Files\Fonts_1_1.zip 2007-03-02 07:32 12,580,696 -c--a-w C:\Program Files\mm20enu.exe 2007-02-26 09:51 81,408 -c--a-w C:\Program Files\Takanui aka Williams Whanau.doc 2007-02-26 04:18 372,224 -c--a-w C:\Program Files\Familystuff(2).wps 2007-02-26 04:07 372,224 -c--a-w C:\Program Files\Familystuff.wps 2007-02-19 03:07 11,759 -c--a-w C:\Program Files\gargoyles.zip 2007-02-19 03:06 20,262 ----a-w C:\Program Files\bulwarknf.zip 2007-02-19 03:03 100,055 -c--a-w C:\Program Files\bulletholz.zip 2007-02-19 03:02 32,644 -c--a-w C:\Program Files\bloodofdracula.zip 2007-02-19 02:59 53,096 -c--a-w C:\Program Files\batmanforever.zip 2007-02-19 02:56 10,359 -c--a-w C:\Program Files\achilles.zip 2007-02-19 02:52 84,348 -c--a-w C:\Program Files\alexis.zip 2007-02-18 10:24 32,973 -c--a-w C:\Program Files\japanese.zip 2007-02-18 10:11 13,764 -c--a-w C:\Program Files\chinese_takeaway.zip 2007-02-18 08:02 737,732 -c--a-w C:\Program Files\gifcompr.exe 2007-02-16 00:11 48,529 -c--a-w C:\Program Files\snipple.zip 2007-02-07 05:32 1,919,936 -c--a-w C:\Program Files\3521744801.zip 2007-02-06 12:26 314,336 -c--a-w C:\Program Files\lsc_lss_8677-07.wmv 2007-02-06 07:31 19,075 -c--a-w C:\Program Files\melting.zip 2007-02-03 13:04 1,800,903 ----a-w C:\Program Files\002.mpg 2007-02-03 12:57 2,068,480 -c--a-w C:\Program Files\07.mpg 2007-02-03 12:41 1,276,197 -c--a-w C:\Program Files\lsc_lss_8677-09.wmv 2007-02-03 05:07 3,606,944 -c--a-w C:\Program Files\SFTPMSI.exe 2007-02-02 10:18 5,537,187 -c--a-w C:\Program Files\backgrounds.zip 2007-02-02 09:09 824,707 -c--a-w C:\Program Files\s7.zip 2007-02-02 02:26 2,272,410 -c--a-w C:\Program Files\pix.zip 2007-02-01 09:15 1,410,680 -c--a-w C:\Program Files\install_flash_player(2).exe 2007-02-01 09:04 4,144,085 -c--a-w C:\Program Files\bv.zip 2007-01-31 11:31 1,619,972 -c--a-w C:\Program Files\06.mpg 2007-01-31 11:24 1,801,018 ----a-w C:\Program Files\05.mpg 2007-01-31 11:18 1,772,686 -c--a-w C:\Program Files\02.mpg 2007-01-31 11:10 1,802,850 -c--a-w C:\Program Files\04.mpg 2007-01-31 11:03 1,536,004 ----a-w C:\Program Files\03.mpg 2007-01-29 13:09 7,718,504 ----a-w C:\Program Files\winzip110.exe 2007-01-29 12:38 1,023,524 -c--a-w C:\Program Files\superzip.exe 2007-01-10 09:01 8,130,640 -c--a-w C:\Program Files\CoolComment.exe 2007-01-10 06:20 19,381,811 -c--a-w C:\Program Files\glanda.zip 2007-01-10 02:08 35,570 -c--a-w C:\Program Files\degrassi.zip 2007-01-10 02:08 15,014 -c--a-w C:\Program Files\delusion.zip 2007-01-10 02:06 417,431 -c--a-w C:\Program Files\black.zip 2007-01-10 02:03 29,804 -c--a-w C:\Program Files\AngloText.zip 2007-01-10 02:02 230,944 -c--a-w C:\Program Files\ACharmingFont.zip 2007-01-10 02:00 170,173 -c--a-w C:\Program Files\Abaddon.zip 2006-12-16 22:59 15,505,200 ----a-w C:\Program Files\IE7-WindowsXP-x86-enu.exe 2006-12-16 12:32 1,475,376 ----a-w C:\Program Files\GenuineCheck.exe 2006-12-16 03:51 577,612 -c--a-w C:\Program Files\printkey.exe 2006-12-10 06:14 24,265,736 ----a-w C:\Program Files\dotnetfx.exe 2006-12-08 10:09 3,599,761 -c--a-w C:\Program Files\XnView-win.zip 2006-12-08 09:55 2,184,537 ----a-w C:\Program Files\PhotobieInstaller.zip 2006-12-08 09:30 348,521 -c--a-w C:\Program Files\HarrysFilters3.zip 2006-12-07 22:32 311,696 -c--a-w C:\Program Files\VideoEggPublisher.exe 2006-12-01 00:00 532,616 ----a-w C:\Program Files\ImageResizerPowertoySetup.exe 2006-11-20 01:12 22 -c--a-w C:\Program Files\LWPro126.zip 2006-11-19 21:29 4,218,890 -c--a-w C:\Program Files\LWPro126(2).zip 2006-11-13 08:37 1,355,912 ----a-w C:\Program Files\install_flash_player.exe 2006-11-13 01:32 5,900,416 ----a-w C:\Program Files\Firefox Setup 2.0.exe 2006-11-12 23:30 6,469,352 ----a-w C:\Program Files\avgas-setup-7.5.0.50.exe 2006-11-12 21:51 5,375,056 -c--a-w C:\Program Files\SpyWareNukerXT.exe 2006-11-04 08:17 40,176 ----a-w C:\WINDOWS\Fonts\Writers.zip 2006-11-04 08:16 88,300 ----a-w C:\WINDOWS\Fonts\subway.zip 2006-11-04 08:15 3,860 ----a-w C:\WINDOWS\Fonts\tagster.zip 2006-11-04 08:15 14,416 ----a-w C:\WINDOWS\Fonts\inthacity.zip 2006-11-04 08:13 41,568 ----a-w C:\WINDOWS\Fonts\tagsxtrm.zip 2006-11-04 08:10 24,837 ----a-w C:\WINDOWS\Fonts\PuteiroAnarquista.zip 2006-10-23 06:10 182,945 -c--a-w C:\Program Files\80Proof2.0.zip 2006-10-23 05:09 47,981 -c--a-w C:\Program Files\Ownage_Proxy_Cracker.rar 2006-10-23 01:22 4,577,996 -c--a-w C:\Program Files\ytunnelhack.exe 2006-10-21 09:45 1,620,303 ----a-w C:\Program Files\Missing-OCX-FilesPart2.zip 2006-10-21 09:31 28,955 -c--a-w C:\Program Files\Y!Deceasedv2.0b.zip 2006-10-18 14:31 286,169 -c--a-w C:\Program Files\Blake-Incs-Scanner.zip 2006-10-18 09:40 41,423 -c--a-w C:\Program Files\On The Mic.zip 2006-10-18 08:31 10,493 -c--a-w C:\Program Files\again.JPG 2006-10-18 08:16 8,805 -c--a-w C:\Program Files\meandbottle.JPG 2006-10-18 06:02 426,547 ----a-w C:\Program Files\Proxy Scanner v4.06.zip 2006-10-18 05:40 125,317 -c--a-w C:\Program Files\GenesisReborn2.zip 2006-10-18 05:26 72,795 -c--a-w C:\Program Files\AniGIF2.lic.zip 2006-10-18 05:24 160,385 -c--a-w C:\Program Files\Active Scan 1.7.zip 2006-10-18 04:30 247,952 -c--a-w C:\Program Files\Bot Checker Pro.rar 2006-10-18 03:11 98,769 -c--a-w C:\Program Files\Explcit-BombBeta2.zip 2006-10-17 14:04 328,096 ----a-w C:\Program Files\eidm.zip 2006-10-15 14:23 895,554 -c--a-w C:\Program Files\lesbian_strapon_movie_04.wmv 2006-10-15 14:20 901,330 -c--a-w C:\Program Files\lesbian_strapon_movie_03.wmv . ((((((((((((((((((((((((((((( snapshot@2008-01-08_14.14.21.13 ))))))))))))))))))))))))))))))))))))))))) . + 2008-01-09 06:50:30 163,328 ----a-w C:\WINDOWS\ERUNT\SDFIX\ERDNT.EXE + 2008-01-09 09:36:45 4,546,560 ----a-w C:\WINDOWS\ERUNT\SDFIX\Users\00000001\ntuser.dat + 2008-01-09 09:36:45 126,976 ----a-w C:\WINDOWS\ERUNT\SDFIX\Users\00000002\UsrClass.dat + 2008-01-09 06:50:30 163,328 ----a-w C:\WINDOWS\ERUNT\SDFIX_First_Run\ERDNT.EXE + 2008-01-09 09:36:28 4,546,560 ----a-w C:\WINDOWS\ERUNT\SDFIX_First_Run\Users\00000001\ntuser.dat + 2008-01-09 09:36:28 126,976 ----a-w C:\WINDOWS\ERUNT\SDFIX_First_Run\Users\00000002\UsrClass.dat - 2008-01-08 18:55:46 278,528 ----a-w C:\WINDOWS\system32\config\systemprofile\ntuser.dat + 2008-01-09 10:19:09 278,528 ----a-w C:\WINDOWS\system32\config\systemprofile\ntuser.dat . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "MoneyAgent"="C:\Program Files\Microsoft Money\System\Money Express.exe" [2001-07-25 12:00 184376] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2003-03-31 07:00 13312] C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programs\Startup\ Printkey2000.lnk - C:\Program Files\PrintKey2000\Printkey2000.exe [2003-11-02 09:37:38] [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] SecurityProviders msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll, zwebauth.dll [HKLM\~\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Start Menu^Programs^Startup^Microsoft Office.lnk] backup=C:\WINDOWS\pss\Microsoft Office.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Start Menu^Programs^Startup^Microsoft Works Calendar Reminders.lnk] backup=C:\WINDOWS\pss\Microsoft Works Calendar Reminders.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Start Menu^Programs^Startup^Printkey2000.lnk] backup=C:\WINDOWS\pss\Printkey2000.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Start Menu^Programs^Startup^Real-time Monitor.lnk] backup=C:\WINDOWS\pss\Real-time Monitor.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^Sharlene Hokianga.TROJANCREW^Start Menu^Programs^Startup^Quick ShutDown.lnk] backup=C:\WINDOWS\pss\Quick ShutDown.lnkStartup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Computer Alarm Clock] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\InCD] -----c--- 2001-11-26 16:35 856064 C:\Program Files\ahead\InCD\InCD.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\InvisibleBrowsing] --a--c--- 2004-10-05 11:02 790528 C:\Program Files\Invisible Browsing\InvisibleBrowsing.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LWBMOUSE] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Microsoft Works Portfolio] --a--c--- 2001-08-23 16:52 331830 C:\Program Files\Microsoft Works\WksSb.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Microsoft Works Update Detection] --a--c--- 2001-08-16 23:41 28738 C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Perfect Keyboard PRO] --a--c--- 2001-01-22 10:54 122880 C:\Program Files\Perfect Keyboard PRO\pk32.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Pop3trap.exe] --a--c--- 2001-09-13 09:59 294982 C:\Program Files\Trend Micro\PC-cillin 2000\Pop3trap.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sygate Personal Firewall] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe] --a------ 2002-07-12 22:50 146432 C:\Program Files\Common Files\Real\Update_OB\evntsvc.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\wcmdmgr] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WebTrapNT.exe] --a--c--- 2001-09-13 09:53 235520 C:\Program Files\Trend Micro\PC-cillin 2000\WebTrapNT.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WT GameChannel] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services] "Tmntsrv"=2 (0x2) R0 BsStor;InCD Storage Helper Driver;C:\WINDOWS\System32\drivers\BsStor.sys [2001-11-08 04:00] R1 VIAPFD;VIAPFD;C:\WINDOWS\System32\Drivers\VIAPFD.SYS [2001-12-18 09:45] R2 BsUDF;InCD UDF Driver;C:\WINDOWS\System32\drivers\BsUDF.sys [2001-11-26 16:36] R2 Vcs;Vcs support;C:\WINDOWS\System32\Drivers\Vcs.sys [2002-12-10 08:11] R3 trid3d;trid3d;C:\WINDOWS\System32\DRIVERS\trid3dm.sys [2001-08-17 07:51] S3 ham50;Intel V92 HaM Data Fax Voice;C:\WINDOWS\System32\DRIVERS\IntelH51.sys [2001-10-11 21:48] . ************************************************************************ catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-01-09 05:30:57 Windows 5.1.2600 Service Pack 1 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************ . Completion time: 2008-01-09 5:35:54 - machine was rebooted ComboFix-quarantined-files.txt 2008-01-09 10:35:52 ComboFix2.txt 2008-01-08 19:14:53

01-09-2008, 10:09 PM	#15 (permalink)
Naomi420 Registered User Join Date: Jan 2008 Posts: 23 OS: xp	Re: Help Computer Is Dying ComboFix 08-01-08.4 - Owner 2008-01-09 5:19:24.2 - NTFSx86 Microsoft Windows XP Home Edition 5.1.2600.1.1252.1.1033.18.23 [GMT -5:00] Running from: C:\Documents and Settings\Owner\Desktop\ComboFix.exe Command switches used :: C:\Documents and Settings\Owner\Desktop\CFScript.txt * Created a new restore point FILE C:\Program Files\00004.mpg C:\Program Files\00005.mpg C:\Program Files\00006.mpg C:\Program Files\0002.mpg C:\Program Files\0003.wmv C:\Program Files\001.wmv C:\Program Files\0ls.mpg C:\Program Files\157_allmypornstars.com_c.mpg C:\Program Files\4_chunk_24.wmv C:\Program Files\4a.mpeg C:\Program Files\7777.wmv C:\Program Files\a3.wmv C:\Program Files\babe-posing-and-masturbating-movies_04.mpg C:\Program Files\babe-posing-and-toying-movies_04.mpg C:\Program Files\beach-sex-05.mpg C:\Program Files\beach-sex-06.mpg C:\Program Files\blonde-lesbians-04.mpg C:\Program Files\bossbitches_02_02_straponforcefucking_06a_tagged.mpg C:\Program Files\candyhi03_chunk_3.wmv C:\Program Files\clip4.wmv C:\Program Files\fil08-02a_hi.wmv C:\Program Files\fil08-02b_hi.wmv C:\Program Files\fil08-02c_hi.wmv C:\Program Files\fil08-02d_hi.wmv C:\Program Files\fil12-01b_hi.wmv C:\Program Files\fil12-01d_hi.wmv C:\Program Files\gimp-2.2.13-i586-setup-1.zip C:\Program Files\gtk+-2.10.6-1-setup.zip C:\Program Files\hh_07092006_3.mpg C:\Program Files\ImageResizerPowertoySetup(2).exe C:\Program Files\lesbian-strapon-action_04.mpg C:\Program Files\lesbiansex01.mpg C:\Program Files\lesbiansex02.mpg C:\Program Files\lesbiansex03.mpg C:\Program Files\lesbiansex04.mpg C:\Program Files\lls.mpg C:\Program Files\ls.mpg C:\Program Files\ls2.mpg C:\Program Files\ls3.mpg C:\Program Files\lss1.mpg C:\Program Files\mcsmiclock.zip C:\Program Files\movie_4.wmv C:\Program Files\msgr8us.exe C:\Program Files\own_the_mic.zip C:\Program Files\PortraitProfessionalTrialSetup.exe C:\Program Files\reacharoundbuddiesfilm2_246.wmv C:\Program Files\red-strapon-action-hard-sex-02.mpg C:\Program Files\red-strapon-action-hard-sex-03.mpg C:\Program Files\resize.reg C:\Program Files\Rose_for_Wifey.jpg C:\Program Files\setupAIR.exe C:\Program Files\sex-with-strapon-04.mpg C:\Program Files\smile_sexy.jpg C:\Program Files\spy.wmv C:\Program Files\spy2.mpg C:\Program Files\spy4.mpg C:\Program Files\strap-on-movie-01.mpg C:\Program Files\strapon-lesbos-hard-sex-04.mpg C:\Program Files\take2.mpg C:\Program Files\V01382_big_02.mpg C:\Program Files\V01964_t6_350.mpg C:\Program Files\video3.mpg C:\Program Files\video4.mpg C:\Program Files\video4.wmv C:\Program Files\video5.mpg C:\Program Files\voy15-01b_hi.wmv C:\Program Files\voy15-01c_hi.wmv C:\Program Files\voy15-01d_hi.wmv C:\Program Files\whipped-ass4.mpg C:\WINDOWS\system32\hgjjl.bak1 C:\WINDOWS\system32\hgjjl.bak2 . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . C:\Documents and Settings\Owner\My Documents\Net Commando 2000 lite C:\Documents and Settings\Owner\My Documents\Net Commando 2000 lite\Net Commando 2000 lite\Net-Commando .exe C:\Documents and Settings\Owner\My Documents\Net Commando 2000 lite\Net Commando 2000 lite\ReadMe.txt C:\Program Files\00004.mpg C:\Program Files\00005.mpg C:\Program Files\00006.mpg C:\Program Files\0002.mpg C:\Program Files\0003.wmv C:\Program Files\001.wmv C:\Program Files\0ls.mpg C:\Program Files\157_allmypornstars.com_c.mpg C:\Program Files\4_chunk_24.wmv C:\Program Files\4a.mpeg C:\Program Files\7777.wmv C:\Program Files\a3.wmv C:\Program Files\babe-posing-and-masturbating-movies_04.mpg C:\Program Files\babe-posing-and-toying-movies_04.mpg C:\Program Files\beach-sex-05.mpg C:\Program Files\beach-sex-06.mpg C:\Program Files\blonde-lesbians-04.mpg C:\Program Files\bossbitches_02_02_straponforcefucking_06a_tagged.mpg C:\Program Files\candyhi03_chunk_3.wmv C:\Program Files\clip4.wmv C:\Program Files\cmer_uninstallers C:\Program Files\fil08-02a_hi.wmv C:\Program Files\fil08-02b_hi.wmv C:\Program Files\fil08-02c_hi.wmv C:\Program Files\fil08-02d_hi.wmv C:\Program Files\fil12-01b_hi.wmv C:\Program Files\fil12-01d_hi.wmv C:\Program Files\gimp-2.2.13-i586-setup-1.zip C:\Program Files\gtk+-2.10.6-1-setup.zip C:\Program Files\hh_07092006_3.mpg C:\Program Files\ImageResizerPowertoySetup(2).exe C:\Program Files\lesbian-strapon-action_04.mpg C:\Program Files\lesbiansex01.mpg C:\Program Files\lesbiansex02.mpg C:\Program Files\lesbiansex03.mpg C:\Program Files\lesbiansex04.mpg C:\Program Files\lls.mpg C:\Program Files\ls.mpg C:\Program Files\ls2.mpg C:\Program Files\ls3.mpg C:\Program Files\lss1.mpg C:\Program Files\mcsmiclock.zip C:\Program Files\movie_4.wmv C:\Program Files\msgr8us.exe C:\Program Files\own_the_mic.zip C:\Program Files\Plaxo\2.11.1.5\bak C:\Program Files\Plaxo\2.11.1.5\bak\PlaxoHelper.exe C:\Program Files\PortraitProfessionalTrialSetup.exe C:\Program Files\QuickTime\bak C:\Program Files\QuickTime\bak\qttask.exe C:\Program Files\reacharoundbuddiesfilm2_246.wmv C:\Program Files\red-strapon-action-hard-sex-02.mpg C:\Program Files\red-strapon-action-hard-sex-03.mpg C:\Program Files\resize.reg C:\Program Files\Rose_for_Wifey.jpg C:\Program Files\setupAIR.exe C:\Program Files\sex-with-strapon-04.mpg C:\Program Files\smile_sexy.jpg C:\Program Files\spy.wmv C:\Program Files\spy2.mpg C:\Program Files\spy4.mpg C:\Program Files\strap-on-movie-01.mpg C:\Program Files\strapon-lesbos-hard-sex-04.mpg C:\Program Files\take2.mpg C:\Program Files\V01382_big_02.mpg C:\Program Files\V01964_t6_350.mpg C:\Program Files\video3.mpg C:\Program Files\video4.mpg C:\Program Files\video4.wmv C:\Program Files\video5.mpg C:\Program Files\voy15-01b_hi.wmv C:\Program Files\voy15-01c_hi.wmv C:\Program Files\voy15-01d_hi.wmv C:\Program Files\whipped-ass4.mpg C:\Program Files\Y!Deceasedv2.0b C:\Program Files\Y!Deceasedv2.0b\Y!Deceased v2.0b.exe C:\WINDOWS\system32\bak C:\WINDOWS\system32\bak\NeroCheck.exe C:\WINDOWS\system32\hgjjl.bak1 C:\WINDOWS\system32\hgjjl.bak2 . ((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\LEGACY_ALFACLEANER -------\alfacleaner ((((((((((((((((((((((((( Files Created from 2007-12-09 to 2008-01-09 ))))))))))))))))))))))))))))))) . 2008-01-09 04:36 . 2008-01-09 04:36 <DIR> d-------- C:\WINDOWS\ERUNT 2008-01-09 02:41 . 2008-01-09 03:49 21,177,300 --a------ C:\antivir_workstation_win7u_en_h.exe.part 2008-01-08 13:54 . 2000-08-31 08:00 51,200 --a------ C:\WINDOWS\NirCmd.exe 2008-01-08 12:19 . 2008-01-08 12:19 <DIR> d-------- C:\Deckard 2008-01-08 05:04 . 2008-01-08 05:06 812,344 --a------ C:\Program Files\HJTInstall.exe . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2008-01-09 10:26 --------- d-----w C:\Program Files\QuickTime 2008-01-09 09:04 --------- d-----w C:\Program Files\Lavasoft 2008-01-09 01:08 --------- d-----w C:\Program Files\Full Tilt Poker 2008-01-08 10:06 --------- d-----w C:\Program Files\Trend Micro 2007-11-29 11:15 --------- d-----w C:\Program Files\Vodafone 2007-11-24 11:00 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\Grisoft 2007-11-17 11:10 21,216,112 ----a-w C:\Program Files\aaw2007.exe 2007-11-17 09:56 --------- d--h--w C:\Program Files\InstallShield Installation Information 2007-11-17 09:56 --------- d-----w C:\Program Files\XoftSpySE 2007-11-17 09:56 --------- d-----w C:\Program Files\SmitfraudFix 2007-11-17 09:56 --------- d-----w C:\Program Files\Poker.com 2007-11-17 09:04 3,178,952 ----a-w C:\Program Files\XoftSpySE433_263.exe 2007-11-17 08:54 --------- d-----w C:\Program Files\Enigma Software Group 2007-11-17 08:32 4,067,176 ----a-w C:\Program Files\Free-SpyHunter-Scanner-Install.exe 2007-11-16 10:41 1,043,644 ----a-w C:\Program Files\SmitfraudFix.exe 2007-09-23 16:53 1,006,207 ----a-w C:\Program Files\Poker.exe 2007-06-20 18:16 10,171,623 ----a-w C:\Program Files\FullTiltSetup.exe 2007-03-15 03:49 1,778,951 -c--a-w C:\Program Files\hotties_licking_**_204.wmv 2007-03-05 07:33 1,574,008 -c--a-w C:\Program Files\Fonts_1_1.zip 2007-03-02 07:32 12,580,696 -c--a-w C:\Program Files\mm20enu.exe 2007-02-26 09:51 81,408 -c--a-w C:\Program Files\Takanui aka Williams Whanau.doc 2007-02-26 04:18 372,224 -c--a-w C:\Program Files\Familystuff(2).wps 2007-02-26 04:07 372,224 -c--a-w C:\Program Files\Familystuff.wps 2007-02-19 03:07 11,759 -c--a-w C:\Program Files\gargoyles.zip 2007-02-19 03:06 20,262 ----a-w C:\Program Files\bulwarknf.zip 2007-02-19 03:03 100,055 -c--a-w C:\Program Files\bulletholz.zip 2007-02-19 03:02 32,644 -c--a-w C:\Program Files\bloodofdracula.zip 2007-02-19 02:59 53,096 -c--a-w C:\Program Files\batmanforever.zip 2007-02-19 02:56 10,359 -c--a-w C:\Program Files\achilles.zip 2007-02-19 02:52 84,348 -c--a-w C:\Program Files\alexis.zip 2007-02-18 10:24 32,973 -c--a-w C:\Program Files\japanese.zip 2007-02-18 10:11 13,764 -c--a-w C:\Program Files\chinese_takeaway.zip 2007-02-18 08:02 737,732 -c--a-w C:\Program Files\gifcompr.exe 2007-02-16 00:11 48,529 -c--a-w C:\Program Files\snipple.zip 2007-02-07 05:32 1,919,936 -c--a-w C:\Program Files\3521744801.zip 2007-02-06 12:26 314,336 -c--a-w C:\Program Files\lsc_lss_8677-07.wmv 2007-02-06 07:31 19,075 -c--a-w C:\Program Files\melting.zip 2007-02-03 13:04 1,800,903 ----a-w C:\Program Files\002.mpg 2007-02-03 12:57 2,068,480 -c--a-w C:\Program Files\07.mpg 2007-02-03 12:41 1,276,197 -c--a-w C:\Program Files\lsc_lss_8677-09.wmv 2007-02-03 05:07 3,606,944 -c--a-w C:\Program Files\SFTPMSI.exe 2007-02-02 10:18 5,537,187 -c--a-w C:\Program Files\backgrounds.zip 2007-02-02 09:09 824,707 -c--a-w C:\Program Files\s7.zip 2007-02-02 02:26 2,272,410 -c--a-w C:\Program Files\pix.zip 2007-02-01 09:15 1,410,680 -c--a-w C:\Program Files\install_flash_player(2).exe 2007-02-01 09:04 4,144,085 -c--a-w C:\Program Files\bv.zip 2007-01-31 11:31 1,619,972 -c--a-w C:\Program Files\06.mpg 2007-01-31 11:24 1,801,018 ----a-w C:\Program Files\05.mpg 2007-01-31 11:18 1,772,686 -c--a-w C:\Program Files\02.mpg 2007-01-31 11:10 1,802,850 -c--a-w C:\Program Files\04.mpg 2007-01-31 11:03 1,536,004 ----a-w C:\Program Files\03.mpg 2007-01-29 13:09 7,718,504 ----a-w C:\Program Files\winzip110.exe 2007-01-29 12:38 1,023,524 -c--a-w C:\Program Files\superzip.exe 2007-01-10 09:01 8,130,640 -c--a-w C:\Program Files\CoolComment.exe 2007-01-10 06:20 19,381,811 -c--a-w C:\Program Files\glanda.zip 2007-01-10 02:08 35,570 -c--a-w C:\Program Files\degrassi.zip 2007-01-10 02:08 15,014 -c--a-w C:\Program Files\delusion.zip 2007-01-10 02:06 417,431 -c--a-w C:\Program Files\black.zip 2007-01-10 02:03 29,804 -c--a-w C:\Program Files\AngloText.zip 2007-01-10 02:02 230,944 -c--a-w C:\Program Files\ACharmingFont.zip 2007-01-10 02:00 170,173 -c--a-w C:\Program Files\Abaddon.zip 2006-12-16 22:59 15,505,200 ----a-w C:\Program Files\IE7-WindowsXP-x86-enu.exe 2006-12-16 12:32 1,475,376 ----a-w C:\Program Files\GenuineCheck.exe 2006-12-16 03:51 577,612 -c--a-w C:\Program Files\printkey.exe 2006-12-10 06:14 24,265,736 ----a-w C:\Program Files\dotnetfx.exe 2006-12-08 10:09 3,599,761 -c--a-w C:\Program Files\XnView-win.zip 2006-12-08 09:55 2,184,537 ----a-w C:\Program Files\PhotobieInstaller.zip 2006-12-08 09:30 348,521 -c--a-w C:\Program Files\HarrysFilters3.zip 2006-12-07 22:32 311,696 -c--a-w C:\Program Files\VideoEggPublisher.exe 2006-12-01 00:00 532,616 ----a-w C:\Program Files\ImageResizerPowertoySetup.exe 2006-11-20 01:12 22 -c--a-w C:\Program Files\LWPro126.zip 2006-11-19 21:29 4,218,890 -c--a-w C:\Program Files\LWPro126(2).zip 2006-11-13 08:37 1,355,912 ----a-w C:\Program Files\install_flash_player.exe 2006-11-13 01:32 5,900,416 ----a-w C:\Program Files\Firefox Setup 2.0.exe 2006-11-12 23:30 6,469,352 ----a-w C:\Program Files\avgas-setup-7.5.0.50.exe 2006-11-12 21:51 5,375,056 -c--a-w C:\Program Files\SpyWareNukerXT.exe 2006-11-04 08:17 40,176 ----a-w C:\WINDOWS\Fonts\Writers.zip 2006-11-04 08:16 88,300 ----a-w C:\WINDOWS\Fonts\subway.zip 2006-11-04 08:15 3,860 ----a-w C:\WINDOWS\Fonts\tagster.zip 2006-11-04 08:15 14,416 ----a-w C:\WINDOWS\Fonts\inthacity.zip 2006-11-04 08:13 41,568 ----a-w C:\WINDOWS\Fonts\tagsxtrm.zip 2006-11-04 08:10 24,837 ----a-w C:\WINDOWS\Fonts\PuteiroAnarquista.zip 2006-10-23 06:10 182,945 -c--a-w C:\Program Files\80Proof2.0.zip 2006-10-23 05:09 47,981 -c--a-w C:\Program Files\Ownage_Proxy_Cracker.rar 2006-10-23 01:22 4,577,996 -c--a-w C:\Program Files\ytunnelhack.exe 2006-10-21 09:45 1,620,303 ----a-w C:\Program Files\Missing-OCX-FilesPart2.zip 2006-10-21 09:31 28,955 -c--a-w C:\Program Files\Y!Deceasedv2.0b.zip 2006-10-18 14:31 286,169 -c--a-w C:\Program Files\Blake-Incs-Scanner.zip 2006-10-18 09:40 41,423 -c--a-w C:\Program Files\On The Mic.zip 2006-10-18 08:31 10,493 -c--a-w C:\Program Files\again.JPG 2006-10-18 08:16 8,805 -c--a-w C:\Program Files\meandbottle.JPG 2006-10-18 06:02 426,547 ----a-w C:\Program Files\Proxy Scanner v4.06.zip 2006-10-18 05:40 125,317 -c--a-w C:\Program Files\GenesisReborn2.zip 2006-10-18 05:26 72,795 -c--a-w C:\Program Files\AniGIF2.lic.zip 2006-10-18 05:24 160,385 -c--a-w C:\Program Files\Active Scan 1.7.zip 2006-10-18 04:30 247,952 -c--a-w C:\Program Files\Bot Checker Pro.rar 2006-10-18 03:11 98,769 -c--a-w C:\Program Files\Explcit-BombBeta2.zip 2006-10-17 14:04 328,096 ----a-w C:\Program Files\eidm.zip 2006-10-15 14:23 895,554 -c--a-w C:\Program Files\lesbian_strapon_movie_04.wmv 2006-10-15 14:20 901,330 -c--a-w C:\Program Files\lesbian_strapon_movie_03.wmv . ((((((((((((((((((((((((((((( snapshot@2008-01-08_14.14.21.13 ))))))))))))))))))))))))))))))))))))))))) . + 2008-01-09 06:50:30 163,328 ----a-w C:\WINDOWS\ERUNT\SDFIX\ERDNT.EXE + 2008-01-09 09:36:45 4,546,560 ----a-w C:\WINDOWS\ERUNT\SDFIX\Users\00000001\ntuser.dat + 2008-01-09 09:36:45 126,976 ----a-w C:\WINDOWS\ERUNT\SDFIX\Users\00000002\UsrClass.dat + 2008-01-09 06:50:30 163,328 ----a-w C:\WINDOWS\ERUNT\SDFIX_First_Run\ERDNT.EXE + 2008-01-09 09:36:28 4,546,560 ----a-w C:\WINDOWS\ERUNT\SDFIX_First_Run\Users\00000001\ntuser.dat + 2008-01-09 09:36:28 126,976 ----a-w C:\WINDOWS\ERUNT\SDFIX_First_Run\Users\00000002\UsrClass.dat - 2008-01-08 18:55:46 278,528 ----a-w C:\WINDOWS\system32\config\systemprofile\ntuser.dat + 2008-01-09 10:19:09 278,528 ----a-w C:\WINDOWS\system32\config\systemprofile\ntuser.dat . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "MoneyAgent"="C:\Program Files\Microsoft Money\System\Money Express.exe" [2001-07-25 12:00 184376] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2003-03-31 07:00 13312] C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programs\Startup\ Printkey2000.lnk - C:\Program Files\PrintKey2000\Printkey2000.exe [2003-11-02 09:37:38] [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] SecurityProviders msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll, zwebauth.dll [HKLM\~\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Start Menu^Programs^Startup^Microsoft Office.lnk] backup=C:\WINDOWS\pss\Microsoft Office.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Start Menu^Programs^Startup^Microsoft Works Calendar Reminders.lnk] backup=C:\WINDOWS\pss\Microsoft Works Calendar Reminders.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Start Menu^Programs^Startup^Printkey2000.lnk] backup=C:\WINDOWS\pss\Printkey2000.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Start Menu^Programs^Startup^Real-time Monitor.lnk] backup=C:\WINDOWS\pss\Real-time Monitor.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^Sharlene Hokianga.TROJANCREW^Start Menu^Programs^Startup^Quick ShutDown.lnk] backup=C:\WINDOWS\pss\Quick ShutDown.lnkStartup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Computer Alarm Clock] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\InCD] -----c--- 2001-11-26 16:35 856064 C:\Program Files\ahead\InCD\InCD.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\InvisibleBrowsing] --a--c--- 2004-10-05 11:02 790528 C:\Program Files\Invisible Browsing\InvisibleBrowsing.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LWBMOUSE] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Microsoft Works Portfolio] --a--c--- 2001-08-23 16:52 331830 C:\Program Files\Microsoft Works\WksSb.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Microsoft Works Update Detection] --a--c--- 2001-08-16 23:41 28738 C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Perfect Keyboard PRO] --a--c--- 2001-01-22 10:54 122880 C:\Program Files\Perfect Keyboard PRO\pk32.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Pop3trap.exe] --a--c--- 2001-09-13 09:59 294982 C:\Program Files\Trend Micro\PC-cillin 2000\Pop3trap.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sygate Personal Firewall] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe] --a------ 2002-07-12 22:50 146432 C:\Program Files\Common Files\Real\Update_OB\evntsvc.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\wcmdmgr] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WebTrapNT.exe] --a--c--- 2001-09-13 09:53 235520 C:\Program Files\Trend Micro\PC-cillin 2000\WebTrapNT.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WT GameChannel] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services] "Tmntsrv"=2 (0x2) R0 BsStor;InCD Storage Helper Driver;C:\WINDOWS\System32\drivers\BsStor.sys [2001-11-08 04:00] R1 VIAPFD;VIAPFD;C:\WINDOWS\System32\Drivers\VIAPFD.SYS [2001-12-18 09:45] R2 BsUDF;InCD UDF Driver;C:\WINDOWS\System32\drivers\BsUDF.sys [2001-11-26 16:36] R2 Vcs;Vcs support;C:\WINDOWS\System32\Drivers\Vcs.sys [2002-12-10 08:11] R3 trid3d;trid3d;C:\WINDOWS\System32\DRIVERS\trid3dm.sys [2001-08-17 07:51] S3 ham50;Intel V92 HaM Data Fax Voice;C:\WINDOWS\System32\DRIVERS\IntelH51.sys [2001-10-11 21:48] . ************************************************************************ catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-01-09 05:30:57 Windows 5.1.2600 Service Pack 1 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************ . Completion time: 2008-01-09 5:35:54 - machine was rebooted ComboFix-quarantined-files.txt 2008-01-09 10:35:52 ComboFix2.txt 2008-01-08 19:14:53