rond.starsdoor.com popups, extremely slow computer

Sprogy · 02-08-2008, 04:22 PM

I just cleaned my laptop of all it's virus's and now my desktop is having problems. My computer is running extremely slow and when i open internet explorer i get popups from rond.starsdoor.com along with other random popups. Also, sometimes my desktop goes blank except for the picture i now have set as a background. The icons and the start bar at the bottom of the screen disappear. And, sometimes in IE i get these little popups that have a grey box with an "x" in one of the upper corners, but i dont remember which corner.

my logs:

Deckard's System Scanner v20071014.68
Run by User on 2008-02-08 17:01:58
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

Successfully created a Deckard's System Scanner Restore Point.

-- Last 5 Restore Point(s) --
104: 2008-02-08 23:02:57 UTC - RP737 - Deckard's System Scanner Restore Point
103: 2008-02-08 22:25:38 UTC - RP736 - System Checkpoint
102: 2008-02-07 21:50:46 UTC - RP735 - System Checkpoint
101: 2008-02-06 21:01:16 UTC - RP734 - Restore Operation
100: 2008-02-06 19:43:32 UTC - RP733 - Restore Operation

-- First Restore Point --
1: 2008-02-06 15:00:14 UTC - RP634 - System Checkpoint

Backed up registry hives.
Performed disk cleanup.

Total Physical Memory: 511 MiB (512 MiB recommended).

-- HijackThis (run as User.exe) ------------------------------------------------

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 5:10:27 PM, on 2/8/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\VCOM\Fix-It\mxtask.exe
C:\Program Files\Common Files\Lanovation\PrismXL\PRISMXL.SYS
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\PROGRA~1\VCOM\Fix-It\mxtask.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\WINDOWS\system32\CTHELPER.EXE
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\system32\hphmon05.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Ahead\InCD\InCD.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\wuauclt.exe
C:\PROGRA~1\Nero\data\Xtras\mssysmgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Drmupgds\Drmupgds.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Verizon Wireless\V CAST Music Essentials Manager\V CAST Music Monitor.exe
C:\Documents and Settings\User\Desktop\dss.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Product Assistant\bin\hprblog.exe
C:\Program Files\Java\jre1.5.0_06\bin\jucheck.exe
C:\PROGRA~1\TRENDM~1\HIJACK~1\User.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gatewaybiz.com
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: TVEngine Helper - {4B18DD50-C996-44fc-AC52-0FECFF82ED58} - c:\program files\spamblockerutility\sbtv\sbtvhelper.dll (file missing)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: {ffda800e-f1aa-8668-0f54-af49db2a58d8} - {8d85a2bd-94fa-45f0-8668-aa1fe008adff} - C:\WINDOWS\system32\gtohmvjj.dll
O2 - BHO: (no name) - {8DB775D3-4B8D-4941-820C-659B78A2F54F} - C:\WINDOWS\system32\geeby.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: (no name) - {E180F496-8A4B-44E2-9FE0-0364E345DB7F} - C:\WINDOWS\system32\gebaxyx.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [Fix-It AV] C:\PROGRA~1\VCOM\Fix-It\MemCheck.exe
O4 - HKLM\..\Run: [HPHUPD05] C:\Program Files\Hewlett-Packard\\{5372B9A6-6E51-4f90-9B40-E0A3B8475C4E}\hphupd05.exe
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\system32\hphmon05.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton AntiVirus\osCheck.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [38a18e8b] rundll32.exe "C:\WINDOWS\system32\suojxvto.dll",b
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [PhotoShow Deluxe Media Manager] C:\PROGRA~1\Nero\data\Xtras\mssysmgr.exe
O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\mnyexpr.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Drmupgds] C:\Program Files\Drmupgds\Drmupgds.exe
O4 - HKUS\S-1-5-18\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [SetDefaultMidi] MIDIDEF.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [SetDefaultMidi] MIDIDEF.EXE (User 'Default user')
O4 - Startup: V CAST Music Monitor.lnk = C:\Program Files\Verizon Wireless\V CAST Music Essentials Manager\V CAST Music Monitor.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Image Zone Fast Start.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\User\Start Menu\Programs\IMVU\Run IMVU.lnk (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {05D44720-58E3-49E6-BDF6-D00330E511D3} (StagingUI Object) - http://zone.msn.com/binFrameWork/v10...I.cab53083.cab
O16 - DPF: {3BB54395-5982-4788-8AF4-B5388FFDD0D8} (ZoneBuddy Class) - http://zone.msn.com/BinFrameWork/v10...y.cab53083.cab
O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} (MySpace Uploader Control) - http://lads.myspace.com/upload/MySpaceUploader1005.cab
O16 - DPF: {5736C456-EA94-4AAC-BB08-917ABDD035B3} (ZonePAChat Object) - http://zone.msn.com/binframework/v10...t.cab53083.cab
O16 - DPF: {809A6301-7B40-4436-A02C-87B8D3D7D9E3} (ZPA_DMNO Object) - http://zone.msn.com/bingame/zpagames...o.cab53083.cab
O16 - DPF: {9B17FE0E-51F2-4692-8B32-8EFB805FC0E7} (HPObjectInstaller Class) - http://h30155.www3.hp.com/ediags/dd/...dsolutions.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://cdn2.zone.msn.com/binFramewor...o.cab53083.cab
O16 - DPF: {D77EF652-9A6B-40C8-A4B9-1C0697C6CF41} (TikGames Online Control) - http://zone.msn.com/bingame/cnma/default/ct.cab
O16 - DPF: {DA2AA6CF-5C7A-4B71-BC3B-C771BB369937} (StadiumProxy Class) - http://zone.msn.com/binframework/v10...y.cab53852.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://www.shockwave.com/content/zum...loader_v10.cab
O16 - DPF: {E473A65C-8087-49A3-AFFD-C5BC4A10669B} (Quantum Streaming IE Player Class) - http://mvnet.xlontech.net/qm/fox/061...ie06101001.cab
O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O16 - DPF: {E991BDE0-9816-4094-853E-6BDB60F0342D} (Get_ActiveX Control) - http://apps.corel.com/nos_dl_manager...etOpPlugin.ocx
O20 - Winlogon Notify: gebaxyx - C:\WINDOWS\SYSTEM32\gebaxyx.dll
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Fix-It Task Manager - Avanquest Publishing USA, Inc. - C:\PROGRA~1\VCOM\Fix-It\mxtask.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: InCD Helper (read only) (InCDsrvR) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\isPwdSvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PrismXL - Lanovation - C:\Program Files\Common Files\Lanovation\PrismXL\PRISMXL.SYS
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe

--
End of file - 11878 bytes

-- File Associations -----------------------------------------------------------

All associations okay.

-- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------

All drivers whitelisted.

-- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------

R2 Fix-It Task Manager - c:\progra~1\vcom\fix-it\mxtask.exe -service <Not Verified; Avanquest Publishing USA, Inc.; >
R2 Viewpoint Manager Service - "c:\program files\viewpoint\common\viewpointservice.exe" <Not Verified; Viewpoint Corporation; Viewpoint Manager>

S2 InCDsrvR (InCD Helper (read only)) - c:\program files\ahead\incd\incdsrv.exe -r <Not Verified; Nero AG; Nero AG incdsrv>

-- Device Manager: Disabled ----------------------------------------------------

No disabled devices found.

-- Scheduled Tasks -------------------------------------------------------------

2008-02-04 13:44:02 284 --a------ C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
2008-02-01 22:56:29 528 --a------ C:\WINDOWS\Tasks\Norton AntiVirus - Run Full System Scan - User.job

-- Files created between 2008-01-08 and 2008-02-08 -----------------------------

2008-02-08 16:48:39 0 d-------- C:\Program Files\Trend Micro
2008-02-08 12:29:09 88640 --a------ C:\WINDOWS\system32\suojxvto.dll
2008-02-08 12:28:52 94784 --a------ C:\WINDOWS\system32\gtohmvjj.dll
2008-02-08 10:51:26 0 d-------- C:\Program Files\Hotbar
2008-02-08 10:50:04 0 d-------- C:\Program Files\SpamBlockerUtility
2008-02-07 15

00 0 dr-h----- C:\Documents and Settings\User\Recent
2008-02-07 15:00:22 95808 --a------ C:\WINDOWS\system32\soajmgei.dll
2008-02-06 13:36:33 0 d-------- C:\Program Files\CCleaner
2008-02-06 09:03:07 92224 --a------ C:\WINDOWS\system32\evxenrcq.dll
2008-02-06 09:00:37 0 d-------- C:\Program Files\Drmupgds
2008-02-06 09:00:02 290230 --ahs---- C:\WINDOWS\system32\ybeeg.ini2
2008-02-06 08:59:41 336384 --a------ C:\WINDOWS\system32\geeby.dll
2008-02-06 08:59:33 0 d-------- C:\Program Files\Temporary
2008-02-06 08:55:57 36864 --a------ C:\WINDOWS\mrofinu572.exe
2008-02-06 08:54:19 40960 --a------ C:\WINDOWS\system32\gebaxyx.dll
2008-02-06 08:54:08 0 d-------- C:\WINDOWS\system32\nGpxx01
2008-02-04 10:13:36 54272 --a------ C:\WINDOWS\b122.exe
2008-02-02 17:29:45 0 d-------- C:\Documents and Settings\User\Application Data\Grisoft
2008-02-02 17:29:32 0 d-------- C:\Documents and Settings\All Users\Application Data\Grisoft

-- Find3M Report ---------------------------------------------------------------

2008-02-08 16:36:51 288 --a------ C:\WINDOWS\system32\DVCStateBkp-{00000003-00000000-00000001-00001102-00000004-10061102}.dat
2008-02-08 16:36:51 288 --a------ C:\WINDOWS\system32\DVCState-{00000003-00000000-00000001-00001102-00000004-10061102}.dat
2008-02-05 20:07:38 23586 --a------ C:\Documents and Settings\User\Application Data\wklnhst.dat
2008-01-31 16:55:44 0 d-------- C:\Documents and Settings\User\Application Data\Move Networks
2008-01-27 14:54:29 0 d-------- C:\Documents and Settings\User\Application Data\Intuit
2008-01-27 14:50:42 0 d-------- C:\Program Files\Common Files\AnswerWorks 4.0
2008-01-27 14:50:38 0 d--h----- C:\Program Files\InstallShield Installation Information
2008-01-27 14:30:30 0 d-------- C:\Program Files\TurboTax
2008-01-24 16:23:00 0 d-------- C:\Program Files\Common Files\Symantec Shared
2007-12-28 13:59:05 0 dr-h----- C:\Documents and Settings\User\Application Data\SecuROM
2007-12-28 13:37:31 0 d-------- C:\Program Files\EA GAMES
2007-12-24 22:07:10 0 d-------- C:\Program Files\Shockwave.com
2007-12-23 23:39:53 0 d-------- C:\Documents and Settings\User\Application Data\Adobe
2007-12-23 12:48:35 0 d-------- C:\Documents and Settings\User\Application Data\Home Sweet Home
2007-12-20 03:01:14 0 d-------- C:\Program Files\Microsoft CAPICOM 2.1.0.2
2007-12-19 19:14:58 0 d-------- C:\Program Files\Microsoft Works
2007-12-19 19:13:46 0 d-------- C:\Program Files\Microsoft.NET

-- Registry Dump ---------------------------------------------------------------

*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{4B18DD50-C996-44fc-AC52-0FECFF82ED58}]
c:\program files\spamblockerutility\sbtv\sbtvhelper.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{8d85a2bd-94fa-45f0-8668-aa1fe008adff}]
02/08/2008 12:28 PM 94784 --a------ C:\WINDOWS\system32\gtohmvjj.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{8DB775D3-4B8D-4941-820C-659B78A2F54F}]
02/06/2008 08:59 AM 336384 --a------ C:\WINDOWS\system32\geeby.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{E180F496-8A4B-44E2-9FE0-0364E345DB7F}]
02/06/2008 08:54 AM 40960 --a------ C:\WINDOWS\system32\gebaxyx.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTHelper"="CTHELPER.EXE" [02/06/2006 03:31 PM C:\WINDOWS\system32\cthelper.exe]
"Fix-It AV"="C:\PROGRA~1\VCOM\Fix-It\MemCheck.exe" [04/27/2006 06:46 PM]
"HPHUPD05"="C:\Program Files\Hewlett-Packard\\{5372B9A6-6E51-4f90-9B40-E0A3B8475C4E}\hphupd05.exe" [07/07/2005 10:55 PM]
"HP Component Manager"="C:\Program Files\HP\hpcoretech\hpcmpmgr.exe" [12/22/2003 08:38 AM]
"HPHmon05"="C:\WINDOWS\system32\hphmon05.exe" [07/07/2005 10:55 PM]
"HPDJ Taskbar Utility"="C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe" [07/07/2005 10:55 PM]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe" [11/10/2005 01:03 PM]
"RemoteControl"="C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" [06/28/2004 09:29 PM]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [12/28/2006 09:54 PM]
"InCD"="C:\Program Files\Ahead\InCD\InCD.exe" [01/27/2005 11:17 AM]
"ccApp"="C:\Program Files\Common Files\Symantec Shared\ccApp.exe" [01/09/2007 09:59 PM]
"osCheck"="C:\Program Files\Norton AntiVirus\osCheck.exe" [09/05/2006 07:22 PM]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [04/27/2007 08:41 AM]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [06/01/2007 03:51 PM]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [01/12/2006 04:40 PM]
"Symantec PIF AlertEng"="C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" [11/28/2007 07:51 PM]
"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [06/11/2007 03:25 AM]
"38a18e8b"="C:\WINDOWS\system32\suojxvto.dll" [02/08/2008 12:29 PM]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MsnMsgr"="C:\Program Files\MSN Messenger\MsnMsgr.exe" []
"PhotoShow Deluxe Media Manager"="C:\PROGRA~1\Nero\data\Xtras\mssysmgr.exe" [11/11/2004 07:50 PM]
"MoneyAgent"="C:\Program Files\Microsoft Money\System\mnyexpr.exe" []
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [08/04/2004 06:00 AM]
"Drmupgds"="C:\Program Files\Drmupgds\Drmupgds.exe" [02/06/2008 09:00 AM]

[HKEY_USERS\.default\software\microsoft\windows\currentversion\runonce]
"SetDefaultMidi"=MIDIDEF.EXE

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe

C:\Documents and Settings\User\Start Menu\Programs\Startup\
V CAST Music Monitor.lnk - C:\Program Files\Verizon Wireless\V CAST Music Essentials Manager\V CAST Music Monitor.exe [2/20/2007 6:57:33 PM]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [9/23/2005 10:05:26 PM]
HP Digital Imaging Monitor.lnk - C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe [5/11/2005 10:23:26 PM]
HP Image Zone Fast Start.lnk - C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqthb08.exe [5/11/2005 11:49:24 PM]
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2/13/2001 1:01:04 AM]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"DisableRegistryTools"=0 (0x0)

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{E180F496-8A4B-44E2-9FE0-0364E345DB7F}"= C:\WINDOWS\system32\gebaxyx.dll [02/06/2008 08:54 AM 40960]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\gebaxyx]
gebaxyx.dll 02/06/2008 08:54 AM 40960 C:\WINDOWS\system32\gebaxyx.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
"Authentication Packages"= msv1_0 C:\WINDOWS\system32\geeby.dll

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d99fbf9a-63a7-11db-98de-000cf179c98d}]
AutoRun\command- L:\JDSecure\Windows\JDSecure31.exe

-- End of Deckard's System Scanner: finished at 2008-02-08 17:11:42 ------------

=======================================

and for some reason the extra.txt didn't add as an attachment so here it is:

Deckard's System Scanner v20071014.68
Extra logfile - please post this as an attachment with your post.
--------------------------------------------------------------------------------

-- System Information ----------------------------------------------------------

Microsoft Windows XP Home Edition (build 2600) SP 2.0
Architecture: X86; Language: English

CPU 0: Intel(R) Pentium(R) 4 CPU 3.00GHz
CPU 1: Intel(R) Pentium(R) 4 CPU 3.00GHz
Percentage of Memory in Use: 68%
Physical Memory (total/avail): 510.73 MiB / 159.79 MiB
Pagefile Memory (total/avail): 1249.44 MiB / 744.11 MiB
Virtual Memory (total/avail): 2047.88 MiB / 1937.2 MiB

A: is Removable (No Media)
C: is Fixed (NTFS) - 74.52 GiB total, 20.73 GiB free.
D: is CDROM (No Media)
E: is CDROM (CDFS)
F: is Fixed (NTFS) - 149.04 GiB total, 121.21 GiB free.
G: is Removable (No Media)
H: is Removable (No Media)
I: is Removable (No Media)
J: is Removable (No Media)
K: is Removable (No Media)

\\.\PHYSICALDRIVE0 - ST380817AS - 74.53 GiB - 1 partition
\PARTITION0 (bootable) - Installable File System - 74.52 GiB - C:

\\.\PHYSICALDRIVE1 - WDC WD1600JD-22FYB0 - 149.05 GiB - 1 partition
\PARTITION0 (bootable) - Installable File System - 149.04 GiB - F:

\\.\PHYSICALDRIVE6 - HP Photosmart 2575 USB Device

\\.\PHYSICALDRIVE4 - IOI Media Bay MMC/SD USB Device

\\.\PHYSICALDRIVE2 - IOI Media Bay CF USB Device

\\.\PHYSICALDRIVE3 - IOI Media Bay MS USB Device

\\.\PHYSICALDRIVE5 - IOI Media Bay SM USB Device

-- Security Center -------------------------------------------------------------

AUOptions is scheduled to auto-install.
Windows Internal Firewall is disabled.

FirstRunDisabled is set.

FW: Norton AntiVirus v2007 (Symantec Corporation)
AV: Norton AntiVirus v2007 (Symantec Corporation)

[HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:MSN Messenger 7.5"
"C:\\Program Files\\AIM\\aim.exe"="C:\\Program Files\\AIM\\aim.exe:*:Enabled:AOL Instant Messenger"

[HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:MSN Messenger 7.5"
"c:\\windows\\system32\\rk.exe"="c:\\windows\\system32\\rk.exe:*:Enabled:rk.exe"
"C:\\Documents and Settings\\User\\Local Settings\\Temp\\~os79.tmp\\ossproxy.exe"="C:\\Documents and Settings\\User\\Local Settings\\Temp\\~os79.tmp\\ossproxy.exe:*:Enabled:ossproxy.exe"
"C:\\WINDOWS\\system32\\rlvknlg.exe"="C:\\WINDOWS\\system32\\rlvknlg.exe:*:Enabled:rlvknlg.exe"
"C:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\hpqtra08.exe"="C:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\hpqtra08.exe:*:Enabled:hpqtra08.exe"
"C:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\hpqste08.exe"="C:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\hpqste08.exe:*:Enabled:hpqste08.exe"
"C:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\hpofxm08.exe"="C:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\hpofxm08.exe:*:Enabled:hpofxm08.exe"
"C:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\hposfx08.exe"="C:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\hposfx08.exe:*:Enabled:hposfx08.exe"
"C:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\hposid01.exe"="C:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\hposid01.exe:*:Enabled:hposid01.exe"
"C:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\hpqscnvw.exe"="C:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\hpqscnvw.exe:*:Enabled:hpqscnvw.exe"
"C:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\hpqkygrp.exe"="C:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"C:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\hpqCopy.exe"="C:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\hpqCopy.exe:*:Enabled:hpqcopy.exe"
"C:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\hpfccopy.exe"="C:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\hpfccopy.exe:*:Enabled:hpfccopy.exe"
"C:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\hpzwiz01.exe"="C:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\hpzwiz01.exe:*:Enabled:hpzwiz01.exe"
"C:\\Program Files\\Hewlett-Packard\\Digital Imaging\\Unload\\HpqPhUnl.exe"="C:\\Program Files\\Hewlett-Packard\\Digital Imaging\\Unload\\HpqPhUnl.exe:*:Enabled:hpqphunl.exe"
"C:\\Program Files\\Hewlett-Packard\\Digital Imaging\\Unload\\HpqDIA.exe"="C:\\Program Files\\Hewlett-Packard\\Digital Imaging\\Unload\\HpqDIA.exe:*:Enabled:hpqdia.exe"
"C:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\hpoews01.exe"="C:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\hpoews01.exe:*:Enabled:hpoews01.exe"
"C:\\Program Files\\LimeWire\\LimeWire.exe"="C:\\Program Files\\LimeWire\\LimeWire.exe:*:Enabled:LimeWire"
"C:\\Program Files\\Common Files\\AOL\\Loader\\aolload.exe"="C:\\Program Files\\Common Files\\AOL\\Loader\\aolload.exe:*:Enabled:AOL Loader"
"C:\\Program Files\\Common Files\\AOL\\1158509817\\ee\\aolsoftware.exe"="C:\\Program Files\\Common Files\\AOL\\1158509817\\ee\\aolsoftware.exe:*:Enabled:AOL Services"
"C:\\Program Files\\Common Files\\AOL\\1158509817\\ee\\aim6.exe"="C:\\Program Files\\Common Files\\AOL\\1158509817\\ee\\aim6.exe:*:Enabled:AIM"
"C:\\Program Files\\AIM\\aim.exe"="C:\\Program Files\\AIM\\aim.exe:*:Enabled:AOL Instant Messenger"
"C:\\Program Files\\TurboTax\\Deluxe 2006\\32bit\\ttax.exe"="C:\\Program Files\\TurboTax\\Deluxe 2006\\32bit\\ttax.exe:LocalSubNet:Enabled:TurboTax"
"C:\\Program Files\\TurboTax\\Deluxe 2006\\32bit\\updatemgr.exe"="C:\\Program Files\\TurboTax\\Deluxe 2006\\32bit\\updatemgr.exe:LocalSubNet:Enabled:TurboTax Update Manager"
"C:\\Program Files\\iTunes\\iTunes.exe"="C:\\Program Files\\iTunes\\iTunes.exe:*:Enabled:iTunes"
"C:\\Program Files\\TurboTax\\Premier 2007\\32bit\\ttax.exe"="C:\\Program Files\\TurboTax\\Premier 2007\\32bit\\ttax.exe:LocalSubNet:Enabled:TurboTax"
"C:\\Program Files\\TurboTax\\Premier 2007\\32bit\\updatemgr.exe"="C:\\Program Files\\TurboTax\\Premier 2007\\32bit\\updatemgr.exe:LocalSubNet:Enabled:TurboTax Update Manager"

-- Environment Variables -------------------------------------------------------

ALLUSERSPROFILE=C:\Documents and Settings\All Users
APPDATA=C:\Documents and Settings\User\Application Data
CLASSPATH=.;C:\Program Files\Java\jre1.5.0_06\lib\ext\QTJava.zip
CLIENTNAME=Console
CommonProgramFiles=C:\Program Files\Common Files
COMPUTERNAME=USER-CE494803F1
ComSpec=C:\WINDOWS\system32\cmd.exe
FP_NO_HOST_CHECK=NO
HOMEDRIVE=C:
HOMEPATH=\Documents and Settings\User
LOGONSERVER=\\USER-CE494803F1
NUMBER_OF_PROCESSORS=2
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Program Files\QuickTime\QTSystem\;C:\Program Files\VCOM\Fix-It
PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
PROCESSOR_ARCHITECTURE=x86
PROCESSOR_IDENTIFIER=x86 Family 15 Model 2 Stepping 9, GenuineIntel
PROCESSOR_LEVEL=15
PROCESSOR_REVISION=0209
ProgramFiles=C:\Program Files
PROMPT=$P$G
QTJAVA=C:\Program Files\Java\jre1.5.0_06\lib\ext\QTJava.zip
SESSIONNAME=Console
SystemDrive=C:
SystemRoot=C:\WINDOWS
TEMP=C:\DOCUME~1\User\LOCALS~1\Temp
TMP=C:\DOCUME~1\User\LOCALS~1\Temp
USERDOMAIN=USER-CE494803F1
USERNAME=User
USERPROFILE=C:\Documents and Settings\User
windir=C:\WINDOWS

-- User Profiles ---------------------------------------------------------------

User (admin)
Becca (admin)

-- Add/Remove Programs ---------------------------------------------------------

--> C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
--> C:\WINDOWS\NuNInst.exe /UNINSTALL
--> C:\WINDOWS\unmrw.exe /UNINSTALL
--> C:\WINDOWS\UNNeroVision.exe /UNINSTALL
--> C:\WINDOWS\UNNVEContent.exe /UNINSTALL
--> rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Ad-Aware SE Personal --> C:\PROGRA~1\Lavasoft\AD-AWA~1\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~1\INSTALL.LOG
Adobe Download Manager 2.0 (Remove Only) --> "C:\Program Files\Common Files\Adobe\ESD\uninst.exe"
Adobe Flash Player ActiveX --> C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Reader 7.0.7 --> MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A70700000002}
Adobe Shockwave Player --> C:\WINDOWS\system32\Macromed\SHOCKW~2\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~2\Install.log
AnswerWorks 4.0 Runtime - English --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7DD9A065-2C86-4A9F-A5FF-796EC1B99DCA}\setup.exe" -l0x9 -removeonly
AOL Instant Messenger --> C:\Program Files\AIM\uninstll.exe -LOG= C:\Program Files\AIM\install.log -OEM=
AOL Uninstaller (Choose which Products to Remove) --> C:\Program Files\Common Files\AOL\uninstaller.exe
AppCore --> MsiExec.exe /I{EFB5B3B5-A280-4E25-BE1C-634EEFE32C1B}
Apple Software Update --> MsiExec.exe /I{A260B422-70E1-41E2-957D-F76FA21266D5}
Audacity 1.2.6 --> "C:\Program Files\Audacity\unins000.exe"
AV --> MsiExec.exe /I{F4DB525F-A986-4249-B98B-42A8066251CA}
AVG Anti-Spyware 7.5 --> C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\Uninstall.exe
Berlitz Before You Know It Flash Cards --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1B4B4E6B-7550-455B-8719-DAF57884C80A}\setup.exe" -l0x9
Berlitz Learning System - Spanish --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5FC72C6C-B8FC-4155-8E33-A7A8B6CBBB5E}\setup.exe" -l0x9
blink-182.org general --> C:\WINDOWS\ssunstl.exe "blink-182 - general"
ccCommon --> MsiExec.exe /I{3CCAD2EF-CFF2-4637-82AA-AABF370282D3}
CCleaner (remove only) --> "C:\Program Files\CCleaner\uninst.exe"
Creative Driver --> C:\WINDOWS\system32\ctdrvins /s /u
CSI-3 Dimensions of Murder 1.0 --> C:\Program Files\Ubisoft\Telltale Games\CSI-3 Dimensions of Murder\uninst.exe
CSI-Dark Motives --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{41C5EDB3-BE78-4C29-AE83-EDD2B1B740F1}\setup.exe" -l0x9
Digital Photo Navigator 1.5 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B7EF4BD8-CA13-11D5-AE3D-005004B8E30C}\Setup.exe" -l0x9
Drmupgds --> "C:\Program Files\Drmupgds\Drmupgds.exe" -uninstall
DVD --> "C:\Program Files\InstallShield Installation Information\{98E8A2EF-4EAE-43B8-A172-74842B764777}\setup.exe" REMOVEALL
Gateway Drivers and Applications Recovery --> C:\Program Files\Gateway\HPA\GWMenu.exe UNINSTALL
Gateway IE Customizations --> C:\Program Files\\Gateway\IECustom\IEProj.exe UNINSTALL
Google Toolbar for Internet Explorer --> MsiExec.exe /I{DBEA1034-5882-4A88-8033-81C4EF0CFA29}
Google Toolbar for Internet Explorer --> regsvr32 /u /s "c:\program files\google\googletoolbar1.dll"
Hallmark Card Studio 2005 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F033B55E-54FA-46AD-8B7E-3EF65A6E9D7A}\setup.exe" -l0x9
HijackThis 2.0.2 --> "C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall
Hotfix for Windows Media Format 11 SDK (KB929399) --> "C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
HP Document Viewer 5.3 --> C:\Program Files\Hewlett-Packard\Digital Imaging\DocumentViewer\hpzscr01.exe -datfile hpqbud04.dat
HP Extended Capabilities 5.3 --> C:\Program Files\Hewlett-Packard\Digital Imaging\ExtCapUninstall\hpzscr01.exe -datfile hpqhsc01.dat
HP Image Zone 5.3 --> C:\Program Files\Hewlett-Packard\Digital Imaging\uninstall\hpzscr01.exe -datfile hpqscr01.dat
HP Imaging Device Functions 5.3 --> C:\Program Files\Hewlett-Packard\Digital Imaging\DigitalImagingMonitor\hpzscr01.exe -datfile hpqbud01.dat
HP PSC & OfficeJet 5.3.A --> "C:\Program Files\Hewlett-Packard\Digital Imaging\{3E386744-10FA-44b2-98C9-DF7A270DECB3}\setup\hpzscr01.exe" -datfile hposcr06.dat
HP Software Update --> MsiExec.exe /X{15EE79F4-4ED1-4267-9B0F-351009325D7D}
HP Solution Center & Imaging Support Tools 5.3 --> C:\Program Files\Hewlett-Packard\Digital Imaging\eSupport\hpzscr01.exe -datfile hpqbud05.dat
Intel(R) 537EP Data Fax Modem --> rundll32 IntelCci.dll,iSMUninstallation "Intel(R) 537EP Data Fax Modem"
Intel(R) PRO Network Adapters and Drivers --> Prounstl.exe
Internet Worm Protection --> MsiExec.exe /I{2908F0CB-C1D4-447F-97A2-CFC135C9F8D4}
iPod for Windows 2006-03-23 --> C:\Program Files\Common Files\InstallShield\Driver\8\Intel 32\IDriver.exe /M{2070F79D-46BC-4EEA-8F02-9B4DCABAE7CB} /l1033
IrfanView (remove only) --> C:\Program Files\IrfanView\iv_uninstall.exe
iTunes --> MsiExec.exe /I{553E56C3-7AA1-45FE-A2FC-2C43DC27F765}
J2SE Runtime Environment 5.0 Update 3 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150030}
J2SE Runtime Environment 5.0 Update 6 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150060}
LG USB Drivers --> C:\PROGRA~1\LGDRIV~1\LGUSBD~1\UNWISE.EXE C:\PROGRA~1\LGDRIV~1\LGUSBD~1\INSTALL.LOG
LimeWire 4.12.6 --> "C:\Program Files\LimeWire\uninstall.exe"
LiveUpdate 3.1 (Symantec Corporation) --> "C:\Program Files\Symantec\LiveUpdate\LSETUP.EXE" /U
LiveUpdate Notice (Symantec Corporation) --> MsiExec.exe /X{DBA4DB9D-EE51-4944-A419-98AB1F1249C8}
lordsofdogtown_ss1 Screen Saver --> C:\WINDOWS\lordsofdogtown_ss1.scr /u
Macromedia Extension Manager --> MsiExec.exe /I{5546CDB5-2CE2-498B-B059-5B3BF81FC41F}
Macromedia Flash Player 8 Plugin --> MsiExec.exe /X{91057632-CA70-413C-B628-2D3CDBBB906B}
Microsoft Compression Client Pack 1.0 for Windows XP --> "C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Office Excel MUI (English) 2007 --> MsiExec.exe /X{90120000-0016-0409-0000-0000000FF1CE}
Microsoft Office Outlook MUI (English) 2007 --> MsiExec.exe /X{90120000-001A-0409-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (English) 2007 --> MsiExec.exe /X{90120000-0018-0409-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007 --> MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (French) 2007 --> MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
Microsoft Office Proof (Spanish) 2007 --> MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
Microsoft Office Proofing (English) 2007 --> MsiExec.exe /X{90120000-002C-0409-0000-0000000FF1CE}
Microsoft Office Shared MUI (English) 2007 --> MsiExec.exe /X{90120000-006E-0409-0000-0000000FF1CE}
Microsoft Office Shared Setup Metadata MUI (English) 2007 --> MsiExec.exe /X{90120000-0115-0409-0000-0000000FF1CE}
Microsoft Office Standard 2007 --> MsiExec.exe /X{91120000-0012-0000-0000-0000000FF1CE}
Microsoft Office Standard 2007 Trial --> "C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall STANDARDR /dll OSETUP.DLL
Microsoft Office Word MUI (English) 2007 --> MsiExec.exe /X{90120000-001B-0409-0000-0000000FF1CE}
Microsoft Picture It! Photo Premium 9 --> C:\WINDOWS\system32\msiexec.exe /i {DBA8B9E1-C6FF-4624-9598-73D3B41A0903}
Microsoft User-Mode Driver Framework Feature Pack 1.0 --> "C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Microsoft Word 2002 --> MsiExec.exe /I{911B0409-6000-11D3-8CFE-0050048383C9}
Microsoft Works --> MsiExec.exe /I{B9966F27-9678-4620-9579-925E3084647E}
Microsoft Works 2004 Setup Launcher --> C:\Program Files\Microsoft Works Suite 2004\Setup\Launcher.exe /ARP D:\
Microsoft Works Suite Add-in for Microsoft Word --> MsiExec.exe /I{33BEE6F3-9987-4F98-A069-97A64EC8321A}
Move Networks Media Player for Internet Explorer --> C:\Documents and Settings\User\Application Data\Move Networks\ie_bin\Uninst.exe
msxml4SP2 --> C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{24F009D2-7A41-4534-BA08-160E1E7E0DDB}
Nero 6 Ultra Edition --> C:\Program Files\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL
Nero PhotoShow Express --> "C:\Program Files\Nero\data\Xtras\Uninstall.exe"
Nero Suite --> C:\Program Files\Common Files\Nero\Uninstall\Setupx.exe /uninstall ExtraUninstallID=""
NeroMIX --> C:\WINDOWS\UNNMIX.exe /UNINSTALL
Norton AntiVirus --> MsiExec.exe /X{830D8CBD-C668-49e2-A969-C2C2106332E0}
Norton AntiVirus (Symantec Corporation) --> "C:\Program Files\Common Files\Symantec Shared\SymSetup\{830D8CBD-C668-49e2-A969-C2C2106332E0}_14_0_0_89\{830D8CBD-C668-49e2-A969-C2C2106332E0}.exe" /X
Norton AntiVirus Help --> MsiExec.exe /I{34EEB1F5-E939-40A1-A6BA-957282A4B2C8}
Norton AntiVirus Parent MSI --> MsiExec.exe /I{E5EE9939-259F-4DE2-8023-5C49E16A4F43}
Norton AntiVirus SYMLT MSI --> MsiExec.exe /I{D1FF75E7-DD42-4CFD-B052-20B3FFF4EDB8}
Norton Protection Center --> MsiExec.exe /I{9A129ABC-A53A-4209-A21E-D5DEDFB7CCA8}
Photosmart 140,240,7200,7600,7700,7900 Series --> C:\Program Files\Hewlett-Packard\{5372B9A6-6E51-4f90-9B40-E0A3B8475C4E}\setup\hpzscr01.exe -datfile hphscr01.dat
PowerDirector Express --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EDE721EC-870A-11D8-9D75-000129760D75}\setup.exe" -uninstall
PowerDVD --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\setup.exe" -uninstall
PowerProducer --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B7A0CE06-068E-11D6-97FD-0050BACBF861}\setup.exe" -uninstall
QuickTime --> MsiExec.exe /I{08094E03-AFE4-4853-9D31-6D0743DF5328}
RealPlayer --> C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
Security Update for CAPICOM (KB931906) --> MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906) --> MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Shockwave --> C:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~1\Install.log
SPBBC 32bit --> MsiExec.exe /I{77772678-817F-4401-9301-ED1D01A8DA56}
Spybot - Search & Destroy 1.4 --> "C:\Program Files\Spybot - Search & Destroy\unins000.exe"
Symantec --> MsiExec.exe /I{228F6876-A313-40A3-91C0-C3CBE6997D09}
SymNet --> MsiExec.exe /I{2DA85B02-13C0-4E6D-9A76-22E6B3DD0CB2}
The Movies(TM) --> C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{0556F885-2415-4666-B53E-33727E46AEA1} /l1033
The Sims 2 --> C:\Program Files\EA GAMES\The Sims 2\EAUninstall.exe
The Sims 2 Family Fun Stuff --> C:\Program Files\EA GAMES\The Sims 2 Family Fun Stuff\EAUninstall.exe
The Sims 2 Glamour Life Stuff --> C:\Program Files\EA GAMES\The Sims 2 Glamour Life Stuff\EAUninstall.exe
The Sims 2 Nightlife --> C:\Program Files\EA GAMES\The Sims 2 Nightlife\EAUninstall.exe
The Sims 2 Open For Business --> C:\Program Files\EA GAMES\The Sims 2 Open For Business\EAUninstall.exe
The Sims 2 Pets --> C:\Program Files\EA GAMES\The Sims 2 Pets\EAUninstall.exe
The Sims 2 University --> C:\Program Files\EA GAMES\The Sims 2 University\EAUninstall.exe
The Sims™ 2 Bon Voyage --> C:\Program Files\EA GAMES\The Sims 2 Bon Voyage\EAUninstall.exe
The Sims™ 2 H&M® Fashion Stuff --> C:\Program Files\EA GAMES\The Sims 2 H&M® Fashion Stuff\EAUninstall.exe
The Sims™ 2 Seasons --> C:\Program Files\EA GAMES\The Sims 2 Seasons\EAUninstall.exe
The Sims™ 2 Teen Style Stuff --> C:\Program Files\EA GAMES\The Sims 2 Teen Style Stuff\EAUninstall.exe
Theme Hospital --> C:\WINDOWS\uninst.exe -f"C:\Program Files\Bullfrog\Hospital\DeIsL1.isu"
TurboTax Deluxe Deduction Maximizer 2006 --> C:\Program Files\TurboTax\Deluxe 2006\TaxUnst.EXE "C:\Program Files\TurboTax\Deluxe 2006\Uninstall.log" -NoGui
TurboTax ItsDeductible 2005 --> MsiExec.exe /X{2E7595EC-4FB1-4E29-93D4-9083C8A9B107}
TurboTax ItsDeductible 2006 --> MsiExec.exe /X{AFF1EA96-9C23-4249-B7D4-CD4B54D4582F}
TurboTax Premier 2005 --> C:\Program Files\TurboTax\Premier 2005\TaxUnst.EXE "C:\Program Files\TurboTax\Premier 2005\Uninstall.log" -NoGui
TurboTax Premier 2007 --> C:\Program Files\TurboTax\Premier 2007\TaxUnst.EXE "C:\Program Files\TurboTax\Premier 2007\Uninstall.log" -NoGui
Update for Outlook 2007 Junk Email Filter (kb943597) --> msiexec /package {91120000-0012-0000-0000-0000000FF1CE} /uninstall {A751F0DB-8476-4207-956E-20AEBBA4B1DA}
V CAST Music --> MsiExec.exe /X{3249FD43-B24B-413F-B786-F8FEA32FA747}
V CAST Music Essentials Manager --> C:\PROGRA~1\VERIZO~1\VCASTM~2\Setup.exe /remove /q0
VCOM Fix-It Utilities Professional 6 --> MsiExec.exe /I{FBBDA4D7-5FC7-4FCF-B2C9-A94B32F774AA}
Video DVD Maker Free v2.4.0.16 --> "C:\Program Files\Video DVD Maker FREE\Uninstall.exe" "C:\Program Files\Video DVD Maker FREE\install.log" -u
Viewpoint Manager (Remove Only) --> C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgrInstaller.exe /u /k
Viewpoint Media Player --> C:\Program Files\Viewpoint\Viewpoint Media Player\mtsAxInstaller.exe /u
WexTech AnswerWorks --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EA2BEBD6-87B9-41E5-95AC-7E4C165A9475}\SETUP.EXE" -l0x9 -eliminate
Windows Media Format 11 runtime --> "C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"

-- Application Event Log -------------------------------------------------------

Event Record #/Type16236 / Error
Event Submitted/Written: 02/08/2008 04:37:55 PM
Event ID/Source: 2 / Fix-It
Event Description:
Virus Scanner:

POP3 unable to connect to port monitor.

.

Event Record #/Type16173 / Error
Event Submitted/Written: 02/07/2008 03:14:39 PM
Event ID/Source: 1000 / Application Error
Event Description:
Faulting application iexplore.exe, version 6.0.2900.2180, faulting module soajmgei.dll, version 0.0.0.0, fault address 0x00011f26.
Processing media-specific event for [iexplore.exe!ws!]

Event Record #/Type16045 / Error
Event Submitted/Written: 02/05/2008 07:04:07 PM
Event ID/Source: 2 / Fix-It
Event Description:
EasyUpdate:

AV subscription expired

.

Event Record #/Type16026 / Error
Event Submitted/Written: 02/04/2008 07:04:44 PM
Event ID/Source: 2 / Fix-It
Event Description:
EasyUpdate:

AV subscription expired

.

Event Record #/Type16007 / Error
Event Submitted/Written: 02/03/2008 07:04:50 PM
Event ID/Source: 2 / Fix-It
Event Description:
EasyUpdate:

AV subscription expired

.

-- Security Event Log ----------------------------------------------------------

No Errors/Warnings found.

-- System Event Log ------------------------------------------------------------

Event Record #/Type34643 / Error
Event Submitted/Written: 02/08/2008 04:45:14 PM
Event ID/Source: 10010 / DCOM
Event Description:
The server {03E0E6C2-363B-11D3-B536-00902771A435} did not register with DCOM within the required timeout.

Event Record #/Type34518 / Warning
Event Submitted/Written: 02/07/2008 06:38:25 AM
Event ID/Source: 36 / W32Time
Event Description:
The time service has not been able to synchronize the system time
for 49152 seconds because none of the time providers has been able to
provide a usable time stamp. The system clock is unsynchronized.

Event Record #/Type34511 / Warning
Event Submitted/Written: 02/06/2008 09:12:49 PM
Event ID/Source: 8021 / BROWSER
Event Description:
The browser was unable to retrieve a list of servers from the browser master \\DC40VY71 on the network \Device\NetBT_Tcpip_{A7AE197A-F344-4B32-9993-B71079E962F0}.
The data is the error code.

Event Record #/Type34418 / Error
Event Submitted/Written: 02/06/2008 01:41:35 PM
Event ID/Source: 7023 / Service Control Manager
Event Description:
The IPSEC Services service terminated with the following error:
%%10045

Event Record #/Type34360 / Warning
Event Submitted/Written: 02/05/2008 05:32:34 PM
Event ID/Source: 4226 / Tcpip
Event Description:
TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts.

-- End of Deckard's System Scanner: finished at 2008-02-08 17:11:42 ------------

Sprogy · 02-09-2008, 05:51 PM

update:
I now have 2 icons which were downloaded onto my desktop named: "Help and Support Center" which is a green shield with a check mark in the middle and another named "Windows Update" which is also a shield with the four colors: red, green, yellow and blue inside. When i clicked on properties it said the target type is http://storageprotector.com

forhockey · 02-09-2008, 06:04 PM

Hi Sprogy and welcome to TSF.

Please subscribe to this thread so that you are notified when you receive a reply. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Add Subscription.

--------------------------------------------------------------

Before beginning the proposed fix, read this post completely. Any questions should be kindly asked before proceeding. Ensure that there are no open browsers when carrying out the procedures below. Save the following instructions in Notepad as this webpage would not be available when you're carrying out the fix.

It is IMPORTANT that you don't miss a step & perform everything in the correct order/sequence.

--------------------------------------------------------------

Please visit this webpage for instructions for downloading and running ComboFix:

http://www.bleepingcomputer.com/comb...o-use-combofix

Reply back with the following:

C:\ComboFix.txt
New DSS Scan (main.txt)

Sprogy · 02-09-2008, 08:09 PM

I ran the scans and now there's another internet explorer icon on my desktop except this one's not a shortcut. I dont know if it means anything but yeah.

combofix log:

ComboFix 08-02.05.3 - User 2008-02-09 20:42:20.1 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.86 [GMT -6:00]
Running from: C:\Documents and Settings\User\Desktop\ComboFix.exe
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\WINDOWS\system32\geeby.dll
C:\Program Files\spamblockerutility
C:\Program Files\Temporary
C:\WINDOWS\b122.exe
C:\WINDOWS\cookies.ini
C:\WINDOWS\system32\geeby.dll
C:\WINDOWS\system32\gtohmvjj.dll
C:\WINDOWS\system32\lokqywus.dll
C:\WINDOWS\system32\otvxjous.ini
C:\WINDOWS\system32\pac.txt
C:\WINDOWS\system32\sottrqid.dll
C:\WINDOWS\system32\suwyqkol.ini
C:\WINDOWS\system32\tqlggdwc.ini
C:\WINDOWS\system32\uebbeenr.ini
C:\WINDOWS\system32\vwrpqxup.dll
C:\WINDOWS\system32\wsmsmemf.ini
C:\WINDOWS\system32\xnnhydvk.dllbox
C:\WINDOWS\system32\ybeeg.ini
C:\WINDOWS\system32\ybeeg.ini2

.
((((((((((((((((((((((((( Files Created from 2008-01-10 to 2008-02-10 )))))))))))))))))))))))))))))))
.

2008-02-09 20:41 . 2004-08-03 23:00 260,272 --a------ C:\cmldr
2008-02-09 17:25 . 2008-02-09 18:20 <DIR> d-------- C:\Program Files\Norton 360
2008-02-09 17:21 . 2008-02-09 17:38 115,000 --a------ C:\WINDOWS\system32\drivers\SYMEVENT.SYS
2008-02-09 17:21 . 2008-02-09 17:38 48,776 --a------ C:\WINDOWS\system32\S32EVNT1.DLL
2008-02-09 17:21 . 2008-02-09 17:38 8,014 --a------ C:\WINDOWS\system32\drivers\SYMEVENT.CAT
2008-02-09 17:21 . 2008-02-09 17:38 806 --a------ C:\WINDOWS\system32\drivers\SYMEVENT.INF
2008-02-09 16:36 . 2008-02-09 16:36 <DIR> d-------- C:\Documents and Settings\All Users\Symantec Temporary Files
2008-02-08 17:01 . 2008-02-08 17:01 <DIR> d-------- C:\Deckard
2008-02-08 16:48 . 2008-02-08 16:48 <DIR> d-------- C:\Program Files\Trend Micro
2008-02-06 13:36 . 2008-02-06 13:39 <DIR> d-------- C:\Program Files\CCleaner
2008-02-06 09:00 . 2008-02-06 09:00 <DIR> d-------- C:\Program Files\Drmupgds
2008-02-06 08:55 . 2008-02-06 08:55 36,864 --a------ C:\WINDOWS\mrofinu572.exe.tmp
2008-02-06 08:54 . 2008-02-06 08:54 <DIR> d-------- C:\WINDOWS\system32\nGpxx01
2008-02-06 08:54 . 2008-02-06 08:54 <DIR> d-------- C:\temp\isgTi19
2008-02-02 17:29 . 2008-02-02 17:29 <DIR> d-------- C:\Documents and Settings\User\Application Data\Grisoft
2008-02-02 17:29 . 2008-02-02 17:29 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Grisoft
2008-02-02 17:29 . 2007-05-30 06:10 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
2008-01-13 11:35 . 2008-01-22 16:40 54,156 --ah----- C:\WINDOWS\QTFont.qfn
2008-01-13 11:35 . 2008-01-13 11:35 1,409 --a------ C:\WINDOWS\QTFont.for

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-02-10 02:52 --------- d-----w C:\Program Files\Common Files\Symantec Shared
2008-02-10 02:27 --------- d-----w C:\Documents and Settings\All Users\Application Data\Symantec
2008-02-09 23:38 --------- d-----w C:\Program Files\Symantec
2008-02-09 22:55 --------- d-----w C:\Program Files\Norton AntiVirus
2008-02-09 02:06 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-02-06 02:07 23,586 ----a-w C:\Documents and Settings\User\Application Data\wklnhst.dat
2008-01-31 22:55 --------- d-----w C:\Documents and Settings\User\Application Data\Move Networks
2008-01-27 20:54 --------- d-----w C:\Documents and Settings\User\Application Data\Intuit
2008-01-27 20:50 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-01-27 20:50 --------- d-----w C:\Program Files\Common Files\AnswerWorks 4.0
2008-01-27 20:30 --------- d-----w C:\Program Files\TurboTax
2008-01-15 15:54 10,537 ----a-w C:\WINDOWS\system32\drivers\COH_Mon.cat
2008-01-15 11:28 706 ----a-w C:\WINDOWS\system32\drivers\COH_Mon.inf
2008-01-13 00:32 23,904 ----a-w C:\WINDOWS\system32\drivers\COH_Mon.sys
2007-12-28 19:59 107,888 ----a-w C:\WINDOWS\system32\CmdLineExt.dll
2007-12-28 19:59 --------- d--h--r C:\Documents and Settings\User\Application Data\SecuROM
2007-12-28 19:37 --------- d-----w C:\Program Files\EA GAMES
2007-12-25 04:07 --------- d-----w C:\Program Files\Shockwave.com
2007-12-25 04:05 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP
2007-12-25 03:02 --------- d-----w C:\Documents and Settings\All Users\Application Data\Shockwave
2007-12-23 18:48 --------- d-----w C:\Documents and Settings\User\Application Data\Home Sweet Home
2007-12-20 09:01 --------- d-----w C:\Program Files\Microsoft CAPICOM 2.1.0.2
2007-12-20 09:01 --------- d-----w C:\Documents and Settings\All Users\Application Data\Microsoft Help
2007-12-20 01:14 --------- d-----w C:\Program Files\Microsoft Works
2007-12-20 01:13 --------- d-----w C:\Program Files\Microsoft.NET
2007-09-24 22:54 112,664 ----a-w C:\Documents and Settings\User\Application Data\GDIPFONTCACHEV1.DAT
2006-03-26 21:11 774,144 ----a-w C:\Program Files\RngInterstitial.dll
2005-05-12 04:36 12,288 ----a-w C:\WINDOWS\Fonts\RandFont.dll
2007-07-30 18:30 104 --sh--r C:\WINDOWS\system32\869C478DF7.sys
2007-07-30 18:30 3,766 --sha-w C:\WINDOWS\system32\KGyGaAvL.sys
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MsnMsgr"="C:\Program Files\MSN Messenger\MsnMsgr.exe" [ ]
"PhotoShow Deluxe Media Manager"="C:\PROGRA~1\Nero\data\Xtras\mssysmgr.exe" [2004-11-11 19:50 212992]
"MoneyAgent"="C:\Program Files\Microsoft Money\System\mnyexpr.exe" [ ]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 06:00 15360]
"Drmupgds"="C:\Program Files\Drmupgds\Drmupgds.exe" [2008-02-06 09:00 61440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTHelper"="CTHELPER.EXE" [2006-02-06 15:31 28672 C:\WINDOWS\system32\cthelper.exe]
"Fix-It AV"="C:\PROGRA~1\VCOM\Fix-It\MemCheck.exe" [2006-04-27 18:46 32768]
"HPHUPD05"="C:\Program Files\Hewlett-Packard\\{5372B9A6-6E51-4f90-9B40-E0A3B8475C4E}\hphupd05.exe" [2005-07-07 22:55 49152]
"HP Component Manager"="C:\Program Files\HP\hpcoretech\hpcmpmgr.exe" [2003-12-22 08:38 241664]
"HPHmon05"="C:\WINDOWS\system32\hphmon05.exe" [2005-07-07 22:55 491520]
"HPDJ Taskbar Utility"="C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe" [2005-07-07 22:55 176128]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe" [2005-11-10 13:03 36975]
"RemoteControl"="C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" [2004-06-28 21:29 32768]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [2006-12-28 21:54 185896]
"InCD"="C:\Program Files\Ahead\InCD\InCD.exe" [2005-01-27 11:17 1381376]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-04-27 08:41 282624]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2007-06-01 15:51 257088]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2006-01-12 16:40 155648]
"Symantec PIF AlertEng"="C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" [2007-11-28 19:51 583048]
"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 03:25 6731312]
"ccApp"="C:\Program Files\Common Files\Symantec Shared\ccApp.exe" [2007-07-17 19:54 116072]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe" [2007-07-01 21:09 171448]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"SetDefaultMidi"="MIDIDEF.EXE" [2006-02-06 15:31 49152 C:\WINDOWS\mididef.exe]

C:\Documents and Settings\User\Start Menu\Programs\Startup\
V CAST Music Monitor.lnk - C:\Program Files\Verizon Wireless\V CAST Music Essentials Manager\V CAST Music Monitor.exe [2007-02-20 18:57:33 446464]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-09-23 22:05:26 29696]
HP Digital Imaging Monitor.lnk - C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe [2005-05-11 22:23:26 282624]
HP Image Zone Fast Start.lnk - C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqthb08.exe [2005-05-11 23:49:24 73728]
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 01:01:04 83360]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"DisableRegistryTools"= 0 (0x0)

R2 Fix-It Task Manager;Fix-It Task Manager;C:\PROGRA~1\VCOM\Fix-It\mxtask.exe [2006-04-27 18:46]
R2 Viewpoint Manager Service;Viewpoint Manager Service;"C:\Program Files\Viewpoint\Common\ViewpointService.exe" [2007-01-04 15:38]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d99fbf9a-63a7-11db-98de-000cf179c98d}]
\Shell\AutoRun\command - L:\JDSecure\Windows\JDSecure31.exe

*Newly Created Service* - COMHOST
.
Contents of the 'Scheduled Tasks' folder
"2008-02-04 19:44:02 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-02-09 20:53:59
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
------------------------ Other Running Processes ------------------------
.
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Common Files\Lanovation\PrismXL\PRISMXL.SYS
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Product Assistant\bin\hprblog.exe
.
**************************************************************************
.
Completion time: 2008-02-09 21:01:30 - machine was rebooted
ComboFix-quarantined-files.txt 2008-02-10 03:01:20
.
2008-01-09 09:03:40 --- E O F ---

=============++++++++++++++++++++++==============

dss log:

Deckard's System Scanner v20071014.68
Run by User on 2008-02-09 21:03:33
Computer is in Normal Mode.
--------------------------------------------------------------------------------

Percentage of Memory in Use: 79% (more than 75%).
Total Physical Memory: 511 MiB (512 MiB recommended).

-- HijackThis (run as User.exe) ------------------------------------------------

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:03:43 PM, on 2/9/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\VCOM\Fix-It\mxtask.exe
C:\Program Files\Common Files\Lanovation\PrismXL\PRISMXL.SYS
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\PROGRA~1\VCOM\Fix-It\mxtask.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\CTHELPER.EXE
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\system32\hphmon05.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Ahead\InCD\InCD.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\PROGRA~1\Nero\data\Xtras\mssysmgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Verizon Wireless\V CAST Music Essentials Manager\V CAST Music Monitor.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Product Assistant\bin\hprblog.exe
C:\Documents and Settings\User\Desktop\dss.exe
C:\PROGRA~1\TRENDM~1\HIJACK~1\User.exe
C:\Program Files\Java\jre1.5.0_06\bin\jucheck.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gatewaybiz.com
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.7\NppBho.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [Fix-It AV] C:\PROGRA~1\VCOM\Fix-It\MemCheck.exe
O4 - HKLM\..\Run: [HPHUPD05] C:\Program Files\Hewlett-Packard\\{5372B9A6-6E51-4f90-9B40-E0A3B8475C4E}\hphupd05.exe
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\system32\hphmon05.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [PhotoShow Deluxe Media Manager] C:\PROGRA~1\Nero\data\Xtras\mssysmgr.exe
O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\mnyexpr.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Drmupgds] C:\Program Files\Drmupgds\Drmupgds.exe
O4 - HKUS\S-1-5-18\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [SetDefaultMidi] MIDIDEF.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [SetDefaultMidi] MIDIDEF.EXE (User 'Default user')
O4 - Startup: V CAST Music Monitor.lnk = C:\Program Files\Verizon Wireless\V CAST Music Essentials Manager\V CAST Music Monitor.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Image Zone Fast Start.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\User\Start Menu\Programs\IMVU\Run IMVU.lnk (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {05D44720-58E3-49E6-BDF6-D00330E511D3} (StagingUI Object) - http://zone.msn.com/binFrameWork/v10...I.cab53083.cab
O16 - DPF: {3BB54395-5982-4788-8AF4-B5388FFDD0D8} (ZoneBuddy Class) - http://zone.msn.com/BinFrameWork/v10...y.cab53083.cab
O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} (MySpace Uploader Control) - http://lads.myspace.com/upload/MySpaceUploader1005.cab
O16 - DPF: {5736C456-EA94-4AAC-BB08-917ABDD035B3} (ZonePAChat Object) - http://zone.msn.com/binframework/v10...t.cab53083.cab
O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} (Symantec Download Manager) - https://webdl.symantec.com/activex/symdlmgr.cab
O16 - DPF: {809A6301-7B40-4436-A02C-87B8D3D7D9E3} (ZPA_DMNO Object) - http://zone.msn.com/bingame/zpagames...o.cab53083.cab
O16 - DPF: {9B17FE0E-51F2-4692-8B32-8EFB805FC0E7} (HPObjectInstaller Class) - http://h30155.www3.hp.com/ediags/dd/...dsolutions.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://cdn2.zone.msn.com/binFramewor...o.cab53083.cab
O16 - DPF: {D77EF652-9A6B-40C8-A4B9-1C0697C6CF41} (TikGames Online Control) - http://zone.msn.com/bingame/cnma/default/ct.cab
O16 - DPF: {DA2AA6CF-5C7A-4B71-BC3B-C771BB369937} (StadiumProxy Class) - http://zone.msn.com/binframework/v10...y.cab53852.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://www.shockwave.com/content/zum...loader_v10.cab
O16 - DPF: {E473A65C-8087-49A3-AFFD-C5BC4A10669B} (Quantum Streaming IE Player Class) - http://mvnet.xlontech.net/qm/fox/061...ie06101001.cab
O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O16 - DPF: {E991BDE0-9816-4094-853E-6BDB60F0342D} (Get_ActiveX Control) - http://apps.corel.com/nos_dl_manager...etOpPlugin.ocx
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: Fix-It Task Manager - Avanquest Publishing USA, Inc. - C:\PROGRA~1\VCOM\Fix-It\mxtask.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: InCD Helper (read only) (InCDsrvR) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PrismXL - Lanovation - C:\Program Files\Common Files\Lanovation\PrismXL\PRISMXL.SYS
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe

--
End of file - 11218 bytes

-- Files created between 2008-01-09 and 2008-02-09 -----------------------------

2008-02-09 20:40:58 0 d-------- C:\cmdcons
2008-02-09 20:38:52 68096 --a------ C:\WINDOWS\system32\zip.exe
2008-02-09 20:38:52 98816 --a------ C:\WINDOWS\system32\sed.exe
2008-02-09 20:38:52 80412 --a------ C:\WINDOWS\system32\grep.exe
2008-02-09 20:38:51 73728 --a------ C:\WINDOWS\system32\fdsv.exe <Not Verified; Smallfrogs Studio; >
2008-02-09 17:25:05 0 d-------- C:\Program Files\Norton 360
2008-02-09 16:36:56 0 d-------- C:\Documents and Settings\All Users\Symantec Temporary Files
2008-02-08 16:48:39 0 d-------- C:\Program Files\Trend Micro
2008-02-07 15

00 0 dr-h----- C:\Documents and Settings\User\Recent
2008-02-06 13:36:33 0 d-------- C:\Program Files\CCleaner
2008-02-06 09:00:37 0 d-------- C:\Program Files\Drmupgds
2008-02-06 08:54:08 0 d-------- C:\WINDOWS\system32\nGpxx01
2008-02-02 17:29:45 0 d-------- C:\Documents and Settings\User\Application Data\Grisoft
2008-02-02 17:29:32 0 d-------- C:\Documents and Settings\All Users\Application Data\Grisoft

-- Find3M Report ---------------------------------------------------------------

2008-02-09 20:52:57 0 d-------- C:\Program Files\Common Files\Symantec Shared
2008-02-09 20:51:32 288 --a------ C:\WINDOWS\system32\DVCStateBkp-{00000003-00000000-00000001-00001102-00000004-10061102}.dat
2008-02-09 20:51:32 288 --a------ C:\WINDOWS\system32\DVCState-{00000003-00000000-00000001-00001102-00000004-10061102}.dat
2008-02-09 17:38:29 0 d-------- C:\Program Files\Symantec
2008-02-09 17:24:18 0 d-a------ C:\Program Files\Common Files
2008-02-09 16:55:24 0 d-------- C:\Program Files\Norton AntiVirus
2008-02-05 20:07:38 23586 --a------ C:\Documents and Settings\User\Application Data\wklnhst.dat
2008-01-31 16:55:44 0 d-------- C:\Documents and Settings\User\Application Data\Move Networks
2008-01-27 14:54:29 0 d-------- C:\Documents and Settings\User\Application Data\Intuit
2008-01-27 14:50:42 0 d-------- C:\Program Files\Common Files\AnswerWorks 4.0
2008-01-27 14:50:38 0 d--h----- C:\Program Files\InstallShield Installation Information
2008-01-27 14:30:30 0 d-------- C:\Program Files\TurboTax
2007-12-28 13:59:05 0 dr-h----- C:\Documents and Settings\User\Application Data\SecuROM
2007-12-28 13:37:31 0 d-------- C:\Program Files\EA GAMES
2007-12-24 22:07:10 0 d-------- C:\Program Files\Shockwave.com
2007-12-23 23:39:53 0 d-------- C:\Documents and Settings\User\Application Data\Adobe
2007-12-23 12:48:35 0 d-------- C:\Documents and Settings\User\Application Data\Home Sweet Home
2007-12-20 03:01:14 0 d-------- C:\Program Files\Microsoft CAPICOM 2.1.0.2
2007-12-19 19:14:58 0 d-------- C:\Program Files\Microsoft Works
2007-12-19 19:13:46 0 d-------- C:\Program Files\Microsoft.NET

-- Registry Dump ---------------------------------------------------------------

*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTHelper"="CTHELPER.EXE" [02/06/2006 03:31 PM C:\WINDOWS\system32\cthelper.exe]
"Fix-It AV"="C:\PROGRA~1\VCOM\Fix-It\MemCheck.exe" [04/27/2006 06:46 PM]
"HPHUPD05"="C:\Program Files\Hewlett-Packard\\{5372B9A6-6E51-4f90-9B40-E0A3B8475C4E}\hphupd05.exe" [07/07/2005 10:55 PM]
"HP Component Manager"="C:\Program Files\HP\hpcoretech\hpcmpmgr.exe" [12/22/2003 08:38 AM]
"HPHmon05"="C:\WINDOWS\system32\hphmon05.exe" [07/07/2005 10:55 PM]
"HPDJ Taskbar Utility"="C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe" [07/07/2005 10:55 PM]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe" [11/10/2005 01:03 PM]
"RemoteControl"="C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" [06/28/2004 09:29 PM]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [12/28/2006 09:54 PM]
"InCD"="C:\Program Files\Ahead\InCD\InCD.exe" [01/27/2005 11:17 AM]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [04/27/2007 08:41 AM]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [06/01/2007 03:51 PM]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [01/12/2006 04:40 PM]
"Symantec PIF AlertEng"="C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" [11/28/2007 07:51 PM]
"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [06/11/2007 03:25 AM]
"ccApp"="C:\Program Files\Common Files\Symantec Shared\ccApp.exe" [07/17/2007 07:54 PM]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MsnMsgr"="C:\Program Files\MSN Messenger\MsnMsgr.exe" []
"PhotoShow Deluxe Media Manager"="C:\PROGRA~1\Nero\data\Xtras\mssysmgr.exe" [11/11/2004 07:50 PM]
"MoneyAgent"="C:\Program Files\Microsoft Money\System\mnyexpr.exe" []
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [08/04/2004 06:00 AM]
"Drmupgds"="C:\Program Files\Drmupgds\Drmupgds.exe" [02/06/2008 09:00 AM]

[HKEY_USERS\.default\software\microsoft\windows\currentversion\runonce]
"SetDefaultMidi"=MIDIDEF.EXE

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe

C:\Documents and Settings\User\Start Menu\Programs\Startup\
V CAST Music Monitor.lnk - C:\Program Files\Verizon Wireless\V CAST Music Essentials Manager\V CAST Music Monitor.exe [2/20/2007 6:57:33 PM]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [9/23/2005 10:05:26 PM]
HP Digital Imaging Monitor.lnk - C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe [5/11/2005 10:23:26 PM]
HP Image Zone Fast Start.lnk - C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqthb08.exe [5/11/2005 11:49:24 PM]
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2/13/2001 1:01:04 AM]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d99fbf9a-63a7-11db-98de-000cf179c98d}]
AutoRun\command- L:\JDSecure\Windows\JDSecure31.exe

*Newly Created Service* - COMHOST

-- End of Deckard's System Scanner: finished at 2008-02-09 21:04:04 ------------

forhockey · 02-10-2008, 12:55 AM

Hi Sprogy,

Quote:

I ran the scans and now there's another internet explorer icon on my desktop except this one's not a shortcut. I dont know if it means anything but yeah.

Typically normal with the use of this tool...

--------------------------------------------------------------

Please copy this page to Notepad and save to your desktop for reference as you will not have any browsers open while you are carrying out portions of these instructions.

Also be sure to carry out the instructions in the sequence listed below.

--------------------------------------------------------------

Click > Start > Control Panel > Add / Remove Programs and uninstall the following programs:

Viewpoint Manager (Remove Only)
Viewpoint Media Player <<<this is considered foistware instead of malware since it is installed without users approval, but doesn't spy or do anything "bad". Read this article: http://www.clickz.com/news/article.php/3561546

Additional info: http://vil.nai.com/vil/content/v_137262.htm

--------------------------------------------------------------

Open notepad and copy/paste the text in the quotebox below into it:

Quote:

KILLALL::

File::
C:\WINDOWS\mrofinu572.exe.tmp

Folder::
C:\Program Files\Drmupgds
C:\WINDOWS\system32\nGpxx01
C:\temp\isgTi19
C:\Program Files\Viewpoint

Registry::
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Drmupgds"=-

Save this as CFScript

Referring to the picture above, drag CFScript into ComboFix.exe

Follow the prompts, and post the resulting log, C:\ComboFix.txt

Warning:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall

--------------------------------------------------------------

Perform an online scan with Internet Explorer with Panda ActiveScan

Click on located at the bottom of the page.
A "pop up" window will appear. * Please ensure that your pop up blocker doesn't block it *
Enter your e-mail address, country, and state & click "Free Online Scan" *The download of the 8 MB Panda's ActiveX control will take place*

Begin the scan by selecting

If it finds any malware, it will offer you a report.
Please ignore any entry it finds and the offer to buy the program to remove the entry, as we will address this later.
Click on then click

* You needn't remain online while it's doing the scan but you have to re-connect after it has finished to see the report.
* Turn off the real time scanner of any existing antivirus program while performing the online scan

--------------------------------------------------------------

Please reply back with the following:

C:\ComboFix.txt
Panda Online Scan Results
How is your system behaving?

Sprogy · 02-10-2008, 04:25 PM

My computer is still running extremely slow but there are no more popups when i open IE. The desktop hasn't gone blank so there's definitely an improvement.

activescan log:

Incident Status Location

Adware:adware/azesearch Not disinfected Windows Registry
Adware:adware/whenusearch Not disinfected Windows Registry
Spyware:Cookie/Atwola Not disinfected C:\Deckard\System Scanner\20080209210330\backup\DOCUME~1\User\LOCALS~1\Temp\Cookies\user@atwola[1].txt
Spyware:Cookie/Cgi-bin Not disinfected C:\Deckard\System Scanner\20080209210330\backup\DOCUME~1\User\LOCALS~1\Temp\Cookies\user@cgi-bin[3].txt
Spyware:Cookie/Com.com Not disinfected C:\Deckard\System Scanner\20080209210330\backup\DOCUME~1\User\LOCALS~1\Temp\Cookies\user@com[1].txt
Spyware:Cookie/360i Not disinfected C:\Deckard\System Scanner\20080209210330\backup\DOCUME~1\User\LOCALS~1\Temp\Cookies\user@ct.360i[2].txt
Spyware:Cookie/did-it Not disinfected C:\Deckard\System Scanner\20080209210330\backup\DOCUME~1\User\LOCALS~1\Temp\Cookies\user@did-it[1].txt
Spyware:Cookie/Go Not disinfected C:\Deckard\System Scanner\20080209210330\backup\DOCUME~1\User\LOCALS~1\Temp\Cookies\user@go[1].txt
Spyware:Cookie/Target Not disinfected C:\Deckard\System Scanner\20080209210330\backup\DOCUME~1\User\LOCALS~1\Temp\Cookies\user@target[2].txt
Virus:Trj/Downloader.PLF Disinfected C:\Deckard\System Scanner\20080209210330\backup\DOCUME~1\User\LOCALS~1\Temp\snapsnet.exe
Virus:Trj/Downloader.MDW Disinfected C:\Deckard\System Scanner\20080209210330\backup\WINDOWS\Downloaded Program Files\popcaploader.dll
Spyware:Cookie/Atwola Not disinfected C:\Documents and Settings\Becca\Cookies\becca@atwola[2].txt
Spyware:Cookie/Com.com Not disinfected C:\Documents and Settings\Becca\Cookies\becca@com[2].txt
Spyware:Cookie/Adrevolver Not disinfected C:\Documents and Settings\User\Cookies\user@adrevolver[3].txt
Spyware:Cookie/AdvancedCleaner Not disinfected C:\Documents and Settings\User\Cookies\user@advancedcleaner[1].txt
Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\User\Cookies\user@atdmt[2].txt
Spyware:Cookie/Com.com Not disinfected C:\Documents and Settings\User\Cookies\user@com[1].txt
Spyware:Cookie/Doubleclick Not disinfected C:\Documents and Settings\User\Cookies\user@doubleclick[2].txt
Spyware:Cookie/Enhance Not disinfected C:\Documents and Settings\User\Cookies\user@enhance[2].txt
Spyware:Cookie/Tribalfusion Not disinfected C:\Documents and Settings\User\Cookies\user@tribalfusion[2].txt
Potentially unwanted tool:Application/NirCmd.A Not disinfected C:\Documents and Settings\User\Desktop\ComboFix.exe[327882R2FWJFW\nircmd.com]
Potentially unwanted tool:Application/NirCmd.A Not disinfected C:\Documents and Settings\User\Desktop\ComboFix.exe[327882R2FWJFW\nircmd.cfexe]
Adware:Adware/Trymedia Not disinfected C:\Downloads\ApprenticeSetup-dm[1].exe
Adware:Adware/Trymedia Not disinfected C:\Downloads\DinerDashSetup-dm[1].exe
Adware:Adware/Trymedia Not disinfected C:\Downloads\MonopolyHNSetup-dm[1].exe
Adware:Adware/Trymedia Not disinfected C:\Downloads\RiskIISetup-dm[1].exe
Adware:Adware/Trymedia Not disinfected C:\Downloads\TheGameOfLife-dm[1].exe
Potentially unwanted tool:Application/NirCmd.A Not disinfected C:\WINDOWS\Nircmd.exe
Spyware:Cookie/64.62.232 Not disinfected F:\Documents and Settings\Becca\Cookies\becca@64.62.232[5].txt
Spyware:Cookie/YieldManager Not disinfected F:\Documents and Settings\Becca\Cookies\becca@ad.yieldmanager[1].txt
Spyware:Cookie/Hbmediapro Not disinfected F:\Documents and Settings\Becca\Cookies\becca@adopt.hbmediapro[2].txt
Spyware:Cookie/Advertising Not disinfected F:\Documents and Settings\Becca\Cookies\becca@advertising[1].txt
Spyware:Cookie/Belnk Not disinfected F:\Documents and Settings\Becca\Cookies\becca@ath.belnk[1].txt
Spyware:Cookie/Atwola Not disinfected F:\Documents and Settings\Becca\Cookies\becca@atwola[2].txt
Spyware:Cookie/Banner Not disinfected F:\Documents and Settings\Becca\Cookies\becca@banner[1].txt
Spyware:Cookie/Belnk Not disinfected F:\Documents and Settings\Becca\Cookies\becca@belnk[2].txt
Spyware:Cookie/BurstNet Not disinfected F:\Documents and Settings\Becca\Cookies\becca@burstnet[1].txt
Spyware:Cookie/GoStats Not disinfected F:\Documents and Settings\Becca\Cookies\becca@c2.gostats[2].txt
Spyware:Cookie/Com.com Not disinfected F:\Documents and Settings\Becca\Cookies\becca@com[2].txt
Spyware:Cookie/360i Not disinfected F:\Documents and Settings\Becca\Cookies\becca@ct.360i[2].txt
Spyware:Cookie/Belnk Not disinfected F:\Documents and Settings\Becca\Cookies\becca@dist.belnk[1].txt
Spyware:Cookie/Go Not disinfected F:\Documents and Settings\Becca\Cookies\becca@go[2].txt
Spyware:Cookie/Screensavers Not disinfected F:\Documents and Settings\Becca\Cookies\becca@i.screensavers[1].txt
Spyware:Cookie/OfferOptimizer Not disinfected F:\Documents and Settings\Becca\Cookies\becca@offeroptimizer[1].txt
Spyware:Cookie/Paypopup Not disinfected F:\Documents and Settings\Becca\Cookies\becca@paypopup[1].txt
Spyware:Cookie/Searchportal Not disinfected F:\Documents and Settings\Becca\Cookies\becca@searchportal.information[1].txt
Spyware:Cookie/Toplist Not disinfected F:\Documents and Settings\Becca\Cookies\becca@toplist[1].txt
Spyware:Cookie/BurstBeacon Not disinfected F:\Documents and Settings\Becca\Cookies\becca@www.burstbeacon[2].txt
Spyware:Cookie/Yadro Not disinfected F:\Documents and Settings\Becca\Cookies\becca@yadro[2].txt
Adware:Adware/IST.YourSiteBar Not disinfected F:\Documents and Settings\Becca\Local Settings\Temporary Internet Files\Content.IE5\I9OJYXQ5\CAXRI8JY.HTM
Adware:Adware/IST.YourSiteBar Not disinfected F:\Documents and Settings\Becca\Local Settings\Temporary Internet Files\Content.IE5\S5UVKXAZ\CAJKKRUY.HTM
Adware:Adware/IST.YourSiteBar Not disinfected F:\Documents and Settings\Becca\Local Settings\Temporary Internet Files\Content.IE5\S5UVKXAZ\CAWNQXQN.HTM
Adware:Adware/IST.YourSiteBar Not disinfected F:\Documents and Settings\Becca\Local Settings\Temporary Internet Files\Content.IE5\WLAN0D6R\CAKD2RC9.HTM
Spyware:Cookie/Media-motor Not disinfected F:\Documents and Settings\LocalService\Cookies\system@mmm.media-motor[1].txt
Spyware:Spyware/Media-motor Not disinfected F:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\K94KUDKC\joysaver[1].cab[m67m.inf]
Spyware:Cookie/Hbmediapro Not disinfected F:\Documents and Settings\User\Cookies\user@adopt.hbmediapro[1].txt
Spyware:Cookie/Banner Not disinfected F:\Documents and Settings\User\Cookies\user@banner[1].txt
Spyware:Cookie/Com.com Not disinfected F:\Documents and Settings\User\Cookies\user@com[2].txt
Spyware:Cookie/360i Not disinfected F:\Documents and Settings\User\Cookies\user@ct.360i[1].txt
Spyware:Cookie/Go Not disinfected F:\Documents and Settings\User\Cookies\user@go[2].txt
Spyware:Cookie/Screensavers Not disinfected F:\Documents and Settings\User\Cookies\user@i.screensavers[2].txt
Spyware:Cookie/Target Not disinfected F:\Documents and Settings\User\Cookies\user@target[1].txt
Spyware:Cookie/Toplist Not disinfected F:\Documents and Settings\User\Cookies\user@toplist[2].txt
Spyware:Cookie/WinFixer Not disinfected F:\Documents and Settings\User\Cookies\user@winfixer[1].txt
Possible Virus. Not disinfected F:\Program Files\InstallShield Installation Information\{C98F2FE6-5AF5-11D6-8209-00D0B701C7B5}\Setup.exe
Virus:Trj/Lowzones.TG Disinfected F:\System Volume Information\_restore{07AC9A18-6490-490F-ADDB-07AD86663B48}\RP431\A0048603.exe
Virus:Trj/Lowzones.TG Disinfected F:\System Volume Information\_restore{07AC9A18-6490-490F-ADDB-07AD86663B48}\RP431\A0048619.exe
Virus:Trj/Lowzones.LF Disinfected F:\System Volume Information\_restore{07AC9A18-6490-490F-ADDB-07AD86663B48}\RP431\A0048621.exe
Virus:Trj/Lowzones.QY Disinfected F:\System Volume Information\_restore{07AC9A18-6490-490F-ADDB-07AD86663B48}\RP437\A0048695.exe
Virus:Trj/Lowzones.TG Disinfected F:\System Volume Information\_restore{07AC9A18-6490-490F-ADDB-07AD86663B48}\RP437\A0048696.exe
Adware:Adware/DollarRevenue Not disinfected F:\System Volume Information\_restore{07AC9A18-6490-490F-ADDB-07AD86663B48}\RP441\A0048733.exe
Virus:Trj/Lowzones.QY Disinfected F:\System Volume Information\_restore{07AC9A18-6490-490F-ADDB-07AD86663B48}\RP441\A0048734.exe
Virus:Trj/Lowzones.QY Disinfected F:\System Volume Information\_restore{07AC9A18-6490-490F-ADDB-07AD86663B48}\RP441\A0048893.exe

=======================+++++++++++++++++++++=================

combofix log:

ComboFix 08-02.05.3 - User 2008-02-10 8:15:44.2 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.197 [GMT -6:00]
Running from: C:\Documents and Settings\User\Desktop\ComboFix.exe
Command switches used :: C:\Documents and Settings\User\Desktop\CFScript.txt
* Created a new restore point

FILE
C:\WINDOWS\mrofinu572.exe.tmp
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Program Files\Drmupgds
C:\temp\isgTi19
C:\WINDOWS\mrofinu572.exe.tmp
C:\WINDOWS\system32\nGpxx01

.
((((((((((((((((((((((((( Files Created from 2008-01-10 to 2008-02-10 )))))))))))))))))))))))))))))))
.

2008-02-09 20:41 . 2004-08-03 23:00 260,272 --a------ C:\cmldr
2008-02-09 20:34 . 2004-08-04 06:00 388,608 --a------ C:\kmd.exe
2008-02-09 17:25 . 2008-02-09 22:17 <DIR> d-------- C:\Program Files\Norton 360
2008-02-09 17:21 . 2008-02-09 21:51 123,952 --a------ C:\WINDOWS\system32\drivers\SYMEVENT.SYS
2008-02-09 17:21 . 2008-02-09 21:51 60,800 --a------ C:\WINDOWS\system32\S32EVNT1.DLL
2008-02-09 17:21 . 2008-02-09 21:51 10,740 --a------ C:\WINDOWS\system32\drivers\SYMEVENT.CAT
2008-02-09 17:21 . 2008-02-09 21:51 805 --a------ C:\WINDOWS\system32\drivers\SYMEVENT.INF
2008-02-09 16:36 . 2008-02-09 16:36 <DIR> d-------- C:\Documents and Settings\All Users\Symantec Temporary Files
2008-02-08 17:01 . 2008-02-08 17:01 <DIR> d-------- C:\Deckard
2008-02-08 16:48 . 2008-02-08 16:48 <DIR> d-------- C:\Program Files\Trend Micro
2008-02-06 13:36 . 2008-02-06 13:39 <DIR> d-------- C:\Program Files\CCleaner
2008-02-02 17:29 . 2008-02-02 17:29 <DIR> d-------- C:\Documents and Settings\User\Application Data\Grisoft
2008-02-02 17:29 . 2008-02-02 17:29 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Grisoft
2008-02-02 17:29 . 2007-05-30 06:10 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
2008-01-13 11:35 . 2008-01-22 16:40 54,156 --ah----- C:\WINDOWS\QTFont.qfn
2008-01-13 11:35 . 2008-01-13 11:35 1,409 --a------ C:\WINDOWS\QTFont.for

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-02-10 14:12 --------- d-----w C:\Documents and Settings\All Users\Application Data\Viewpoint
2008-02-10 14:11 --------- d-----w C:\Program Files\Common Files\Symantec Shared
2008-02-10 14:05 --------- d-----w C:\Documents and Settings\All Users\Application Data\Symantec
2008-02-10 03:51 --------- d-----w C:\Program Files\Symantec
2008-02-10 03:22 --------- d-----w C:\Documents and Settings\User\Application Data\Symantec
2008-02-09 22:55 --------- d-----w C:\Program Files\Norton AntiVirus
2008-02-09 02:06 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-02-06 02:07 23,586 ----a-w C:\Documents and Settings\User\Application Data\wklnhst.dat
2008-01-31 22:55 --------- d-----w C:\Documents and Settings\User\Application Data\Move Networks
2008-01-27 20:54 --------- d-----w C:\Documents and Settings\User\Application Data\Intuit
2008-01-27 20:50 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-01-27 20:50 --------- d-----w C:\Program Files\Common Files\AnswerWorks 4.0
2008-01-27 20:30 --------- d-----w C:\Program Files\TurboTax
2008-01-15 15:54 10,537 ----a-w C:\WINDOWS\system32\drivers\COH_Mon.cat
2008-01-15 11:28 706 ----a-w C:\WINDOWS\system32\drivers\COH_Mon.inf
2008-01-13 00:32 23,904 ----a-w C:\WINDOWS\system32\drivers\COH_Mon.sys
2007-12-28 19:59 --------- d--h--r C:\Documents and Settings\User\Application Data\SecuROM
2007-12-28 19:37 --------- d-----w C:\Program Files\EA GAMES
2007-12-25 04:07 --------- d-----w C:\Program Files\Shockwave.com
2007-12-25 04:05 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP
2007-12-25 03:02 --------- d-----w C:\Documents and Settings\All Users\Application Data\Shockwave
2007-12-23 18:48 --------- d-----w C:\Documents and Settings\User\Application Data\Home Sweet Home
2007-12-20 09:01 --------- d-----w C:\Program Files\Microsoft CAPICOM 2.1.0.2
2007-12-20 09:01 --------- d-----w C:\Documents and Settings\All Users\Application Data\Microsoft Help
2007-12-20 01:14 --------- d-----w C:\Program Files\Microsoft Works
2007-12-20 01:13 --------- d-----w C:\Program Files\Microsoft.NET
2007-09-24 22:54 112,664 ----a-w C:\Documents and Settings\User\Application Data\GDIPFONTCACHEV1.DAT
2006-03-26 21:11 774,144 ----a-w C:\Program Files\RngInterstitial.dll
2005-05-12 04:36 12,288 ----a-w C:\WINDOWS\Fonts\RandFont.dll
2007-07-30 18:30 104 --sh--r C:\WINDOWS\system32\869C478DF7.sys
2007-07-30 18:30 3,766 --sha-w C:\WINDOWS\system32\KGyGaAvL.sys
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MsnMsgr"="C:\Program Files\MSN Messenger\MsnMsgr.exe" [ ]
"PhotoShow Deluxe Media Manager"="C:\PROGRA~1\Nero\data\Xtras\mssysmgr.exe" [2004-11-11 19:50 212992]
"MoneyAgent"="C:\Program Files\Microsoft Money\System\mnyexpr.exe" [ ]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 06:00 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTHelper"="CTHELPER.EXE" [2006-02-06 15:31 28672 C:\WINDOWS\system32\cthelper.exe]
"Fix-It AV"="C:\PROGRA~1\VCOM\Fix-It\MemCheck.exe" [2006-04-27 18:46 32768]
"HPHUPD05"="C:\Program Files\Hewlett-Packard\\{5372B9A6-6E51-4f90-9B40-E0A3B8475C4E}\hphupd05.exe" [2005-07-07 22:55 49152]
"HP Component Manager"="C:\Program Files\HP\hpcoretech\hpcmpmgr.exe" [2003-12-22 08:38 241664]
"HPHmon05"="C:\WINDOWS\system32\hphmon05.exe" [2005-07-07 22:55 491520]
"HPDJ Taskbar Utility"="C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe" [2005-07-07 22:55 176128]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe" [2005-11-10 13:03 36975]
"RemoteControl"="C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" [2004-06-28 21:29 32768]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [2006-12-28 21:54 185896]
"InCD"="C:\Program Files\Ahead\InCD\InCD.exe" [2005-01-27 11:17 1381376]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-04-27 08:41 282624]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2007-06-01 15:51 257088]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2006-01-12 16:40 155648]
"Symantec PIF AlertEng"="C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" [2007-11-28 19:51 583048]
"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 03:25 6731312]
"ccApp"="C:\Program Files\Common Files\Symantec Shared\ccApp.exe" [2007-07-17 19:54 116072]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe" [2007-07-01 21:09 171448]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"SetDefaultMidi"="MIDIDEF.EXE" [2006-02-06 15:31 49152 C:\WINDOWS\mididef.exe]

C:\Documents and Settings\User\Start Menu\Programs\Startup\
V CAST Music Monitor.lnk - C:\Program Files\Verizon Wireless\V CAST Music Essentials Manager\V CAST Music Monitor.exe [2007-02-20 18:57:33 446464]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-09-23 22:05:26 29696]
HP Digital Imaging Monitor.lnk - C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe [2005-05-11 22:23:26 282624]
HP Image Zone Fast Start.lnk - C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqthb08.exe [2005-05-11 23:49:24 73728]
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 01:01:04 83360]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"DisableRegistryTools"= 0 (0x0)

R2 Fix-It Task Manager;Fix-It Task Manager;C:\PROGRA~1\VCOM\Fix-It\mxtask.exe [2006-04-27 18:46]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d99fbf9a-63a7-11db-98de-000cf179c98d}]
\Shell\AutoRun\command - L:\JDSecure\Windows\JDSecure31.exe

*Newly Created Service* - COMHOST
.
Contents of the 'Scheduled Tasks' folder
"2008-02-04 19:44:02 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-02-10 08:35:22
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
------------------------ Other Running Processes ------------------------
.
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Common Files\Lanovation\PrismXL\PRISMXL.SYS
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Product Assistant\bin\hprblog.exe
C:\Program Files\Symantec\LiveUpdate\AUPDATE.EXE
C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
C:\Program Files\Symantec\LiveUpdate\LuCallbackProxy.exe
C:\Program Files\Java\jre1.5.0_06\bin\jucheck.exe
.
**************************************************************************
.
Completion time: 2008-02-10 8:46:36 - machine was rebooted
ComboFix-quarantined-files.txt 2008-02-10 14:46:17
ComboFix2.txt 2008-02-10 03:01:31
.
2008-01-09 09:03:40 --- E O F ---

forhockey · 02-10-2008, 09:38 PM

Hello again,

Please copy this page to Notepad and save to your desktop for reference as you will not have any browsers open while you are carrying out portions of these instructions.

Also be sure to carry out the instructions in the sequence listed below.

--------------------------------------------------------------

Update AVG Anti-Spyware

I see you have AVG Anti-Spyware already. Please update it's definitions, and run a scan where I have placed it in this fix.

Run AVG Anti-Spyware

From the main screen, click on update, then click the Start
update button.
After the update finishes (the status bar at the bottom will display "Update
successful")
select the "Settings" tab.
Once in the Settings screen click on "Recommended actions" and then select "Quarantine".
Under "Reports"
Select "Do Not Automatically generate report after every scan"
Un-Select "Only if threats were found"
Exit AVG Anti-Spyware. DO NOT scan yet.

--------------------------------------------------------------

Enter Safe Mode

Restart your computer
After hearing your computer beep once during startup, but before the Windows icon appears, press F8
Instead of Windows loading as normal, a menu should appear
Use the up arrow key to highlight Safe Mode and press Enter.
Login with your usual account
Once you have logged in, a warning message will appear regarding starting windows in Safe mode, click OK and windows will load your desktop environment

Note: Some systems, this may be the F5 key, so try that if F8 doesn't work.

--------------------------------------------------------------

Run AVG Anti-Spyware with it's updated definitions:(...it's important that all windows must be closed)

Click Scanner
Click on the Scan tab
Click Complete System Scan to begin scanning.
Once the scan is complete do the following:
If you have any infections you will prompted, then select "Apply all actions"
Once finished, click the Save report button, then click Save Report As and save it to your desktop. (make sure to remember where you saved that file, this is important).

--------------------------------------------------------------

I see you already have CCleaner.

1. Open the program and the "Cleaner" button should be active.
2. Click on "Run Cleaner"
3. Once thats done it will clean out the TEMP folder.
4. Now click on "Registry" and then "Scan for Issues"
5. Once it's done checkmark ALL it finds and click "Fix Selected Issues"
6. It will ask you if you want to back up the registry entrys it's removing so please do so. If it removes anything important..just locate the .reg file you saved...double click on it to add the entrys back.

Close the program.

--------------------------------------------------------------

Restart your computer in normal mode.

--------------------------------------------------------------

Open notepad and copy/paste the text in the quotebox below into it:

Quote:

KILLALL::

File::
C:\Downloads\ApprenticeSetup-dm[1].exe
C:\Downloads\DinerDashSetup-dm[1].exe
C:\Downloads\MonopolyHNSetup-dm[1].exe
C:\Downloads\RiskIISetup-dm[1].exe
C:\Downloads\TheGameOfLife-dm[1].exe
F:\Documents and Settings\Becca\Local Settings\Temporary Internet Files\Content.IE5\I9OJYXQ5\CAXRI8JY.HTM
F:\Documents and Settings\Becca\Local Settings\Temporary Internet Files\Content.IE5\S5UVKXAZ\CAJKKRUY.HTM
F:\Documents and Settings\Becca\Local Settings\Temporary Internet Files\Content.IE5\S5UVKXAZ\CAWNQXQN.HTM
F:\Documents and Settings\Becca\Local Settings\Temporary Internet Files\Content.IE5\WLAN0D6R\CAKD2RC9.HTM
F:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\K94KUDKC\joysaver[1].cab
F:\Program Files\InstallShield Installation Information\{C98F2FE6-5AF5-11D6-8209-00D0B701C7B5}\Setup.exe

Folder::
C:\Documents and Settings\All Users\Application Data\Viewpoint

Save this as CFScript

Referring to the picture above, drag CFScript into ComboFix.exe

Follow the prompts, and post the resulting log, C:\ComboFix.txt

Warning:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall

--------------------------------------------------------------

Please reply back with the following logs:

AVG Anti-Spyware Log
C:\ComboFix.txt
An update on your system

Sprogy · 02-11-2008, 06:21 PM

My computer is definitely faster than it was before. Other than that, its about the same as it was last time i posted.

avg log:

---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at: 6:04:14 PM 2/11/2008

+ Scan result:

C:\System Volume Information\_restore{CA1D12D3-1DDE-498D-B318-3EB58F189484}\RP737\A0048686.exe -> Adware.180Solutions : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{CA1D12D3-1DDE-498D-B318-3EB58F189484}\RP737\A0048687.exe -> Adware.180Solutions : Cleaned with backup (quarantined).
F:\System Volume Information\_restore{CA1D12D3-1DDE-498D-B318-3EB58F189484}\RP737\A0048690.ocx -> Adware.Coupons : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{CA1D12D3-1DDE-498D-B318-3EB58F189484}\RP737\A0048688.exe -> Adware.HotBar : Cleaned with backup (quarantined).
F:\System Volume Information\_restore{CA1D12D3-1DDE-498D-B318-3EB58F189484}\RP737\A0048689.inf -> Adware.WebHancer : Cleaned with backup (quarantined).
F:\System Volume Information\_restore{07AC9A18-6490-490F-ADDB-07AD86663B48}\RP441\A0048733.exe -> Downloader.Adload.j : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{CA1D12D3-1DDE-498D-B318-3EB58F189484}\RP739\A0049409.exe -> Downloader.Adload.qy : Cleaned with backup (quarantined).
C:\QooBox\Quarantine\C\WINDOWS\b122.exe.vir -> Downloader.Agent.haq : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{CA1D12D3-1DDE-498D-B318-3EB58F189484}\RP739\A0049239.exe -> Downloader.Agent.haq : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{CA1D12D3-1DDE-498D-B318-3EB58F189484}\RP731\A0047240.exe -> Downloader.Agent.idv : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{CA1D12D3-1DDE-498D-B318-3EB58F189484}\RP737\A0049177.exe -> Downloader.Agent.idv : Cleaned with backup (quarantined).
C:\Deckard\System Scanner\20080209210330\backup\DOCUME~1\User\LOCALS~1\Temp\removalfile.bat -> Not-A-Virus.Adware.Virtumonde : Cleaned with backup (quarantined).
F:\RECYCLER\S-1-5-21-1060284298-1637723038-839522115-1004\Dc21147.bat -> Not-A-Virus.Adware.Virtumonde : Cleaned with backup (quarantined).
C:\Documents and Settings\User\Cookies\user@pandasoftware.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\User\Cookies\user@advertising[2].txt -> TrackingCookie.Advertising : Cleaned.
C:\Documents and Settings\User\Cookies\user@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned.
C:\Documents and Settings\User\Cookies\user@casalemedia[2].txt -> TrackingCookie.Casalemedia : Cleaned.
C:\Documents and Settings\User\Cookies\user@doubleclick[2].txt -> TrackingCookie.Doubleclick : Cleaned.
C:\Documents and Settings\User\Cookies\user@enhance[2].txt -> TrackingCookie.Enhance : Cleaned.
C:\Documents and Settings\User\Cookies\user@mediaplex[1].txt -> TrackingCookie.Mediaplex : Cleaned.
C:\Documents and Settings\User\Cookies\user@ads.pointroll[1].txt -> TrackingCookie.Pointroll : Cleaned.
C:\Documents and Settings\User\Cookies\user@statcounter[1].txt -> TrackingCookie.Statcounter : Cleaned.
C:\Documents and Settings\User\Cookies\user@tribalfusion[2].txt -> TrackingCookie.Tribalfusion : Cleaned.
C:\Documents and Settings\User\Cookies\user@m.webtrends[1].txt -> TrackingCookie.Webtrends : Cleaned.

::Report end

===================++++++++++++++++++++=================

combofix log:

ComboFix 08-02.05.3 - User 2008-02-11 18:24:10.3 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.164 [GMT -6:00]
Running from: C:\Documents and Settings\User\Desktop\ComboFix.exe
Command switches used :: C:\Documents and Settings\User\Desktop\CFScript.txt
* Created a new restore point

FILE
C:\Downloads\ApprenticeSetup-dm[1].exe
C:\Downloads\DinerDashSetup-dm[1].exe
C:\Downloads\MonopolyHNSetup-dm[1].exe
C:\Downloads\RiskIISetup-dm[1].exe
C:\Downloads\TheGameOfLife-dm[1].exe
F:\Documents and Settings\Becca\Local Settings\Temporary Internet Files\Content.IE5\I9OJYXQ5\CAXRI8JY.HTM
F:\Documents and Settings\Becca\Local Settings\Temporary Internet Files\Content.IE5\S5UVKXAZ\CAJKKRUY.HTM
F:\Documents and Settings\Becca\Local Settings\Temporary Internet Files\Content.IE5\S5UVKXAZ\CAWNQXQN.HTM
F:\Documents and Settings\Becca\Local Settings\Temporary Internet Files\Content.IE5\WLAN0D6R\CAKD2RC9.HTM
F:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\K94KUDKC\joysaver[1].cab
F:\Program Files\InstallShield Installation Information\{C98F2FE6-5AF5-11D6-8209-00D0B701C7B5}\Setup.exe
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\All Users\Application Data\Viewpoint
C:\Downloads\ApprenticeSetup-dm[1].exe
C:\Downloads\DinerDashSetup-dm[1].exe
C:\Downloads\MonopolyHNSetup-dm[1].exe
C:\Downloads\RiskIISetup-dm[1].exe
C:\Downloads\TheGameOfLife-dm[1].exe
F:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\K94KUDKC\joysaver[1].cab
F:\Program Files\InstallShield Installation Information\{C98F2FE6-5AF5-11D6-8209-00D0B701C7B5}\Setup.exe

.
((((((((((((((((((((((((( Files Created from 2008-01-12 to 2008-02-12 )))))))))))))))))))))))))))))))
.

2008-02-11 15:26 . 2008-02-11 15:26 552 --a------ C:\WINDOWS\system32\d3d8caps.dat
2008-02-10 09:06 . 2007-06-05 10:56 44,928 --a------ C:\WINDOWS\system32\drivers\SDTHOOK.SYS
2008-02-10 08:52 . 2008-02-10 10:19 <DIR> d-------- C:\WINDOWS\system32\ActiveScan
2008-02-10 08:52 . 2008-02-10 08:52 30,590 --a------ C:\WINDOWS\system32\pavas.ico
2008-02-10 08:52 . 2008-02-10 08:52 2,550 --a------ C:\WINDOWS\system32\Uninstall.ico
2008-02-10 08:52 . 2008-02-10 08:52 1,406 --a------ C:\WINDOWS\system32\Help.ico
2008-02-10 08:13 . 2004-08-04 06:00 388,608 --a------ C:\kmd.exe
2008-02-09 20:41 . 2004-08-03 23:00 260,272 --a------ C:\cmldr
2008-02-09 17:25 . 2008-02-10 10:06 <DIR> d-------- C:\Program Files\Norton 360
2008-02-09 17:21 . 2008-02-09 21:51 123,952 --a------ C:\WINDOWS\system32\drivers\SYMEVENT.SYS
2008-02-09 17:21 . 2008-02-09 21:51 60,800 --a------ C:\WINDOWS\system32\S32EVNT1.DLL
2008-02-09 17:21 . 2008-02-09 21:51 10,740 --a------ C:\WINDOWS\system32\drivers\SYMEVENT.CAT
2008-02-09 17:21 . 2008-02-09 21:51 805 --a------ C:\WINDOWS\system32\drivers\SYMEVENT.INF
2008-02-09 16:36 . 2008-02-09 16:36 <DIR> d-------- C:\Documents and Settings\All Users\Symantec Temporary Files
2008-02-08 17:01 . 2008-02-08 17:01 <DIR> d-------- C:\Deckard
2008-02-08 16:48 . 2008-02-08 16:48 <DIR> d-------- C:\Program Files\Trend Micro
2008-02-06 13:36 . 2008-02-06 13:39 <DIR> d-------- C:\Program Files\CCleaner
2008-02-02 17:29 . 2008-02-02 17:29 <DIR> d-------- C:\Documents and Settings\User\Application Data\Grisoft
2008-02-02 17:29 . 2008-02-02 17:29 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Grisoft
2008-02-02 17:29 . 2007-05-30 06:10 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
2008-01-13 11:35 . 2008-01-22 16:40 54,156 --ah----- C:\WINDOWS\QTFont.qfn
2008-01-13 11:35 . 2008-01-13 11:35 1,409 --a------ C:\WINDOWS\QTFont.for

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-02-12 00:07 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-02-11 21:01 --------- d-----w C:\Documents and Settings\All Users\Application Data\Symantec
2008-02-11 19:44 --------- d-----w C:\Program Files\Common Files\Symantec Shared
2008-02-10 16:07 --------- d-----w C:\Program Files\Spybot - Search & Destroy
2008-02-10 16:06 --------- d-----w C:\Program Files\QuickTime
2008-02-10 15:58 --------- d-----r C:\Program Files\iTunes
2008-02-10 15:55 --------- d-----w C:\Program Files\Google
2008-02-10 03:51 --------- d-----w C:\Program Files\Symantec
2008-02-10 03:22 --------- d-----w C:\Documents and Settings\User\Application Data\Symantec
2008-02-09 22:55 --------- d-----w C:\Program Files\Norton AntiVirus
2008-02-06 02:07 23,586 ----a-w C:\Documents and Settings\User\Application Data\wklnhst.dat
2008-01-31 22:55 --------- d-----w C:\Documents and Settings\User\Application Data\Move Networks
2008-01-27 20:54 --------- d-----w C:\Documents and Settings\User\Application Data\Intuit
2008-01-27 20:50 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-01-27 20:50 --------- d-----w C:\Program Files\Common Files\AnswerWorks 4.0
2008-01-27 20:30 --------- d-----w C:\Program Files\TurboTax
2008-01-15 15:54 10,537 ----a-w C:\WINDOWS\system32\drivers\COH_Mon.cat
2008-01-15 11:28 706 ----a-w C:\WINDOWS\system32\drivers\COH_Mon.inf
2008-01-13 00:32 23,904 ----a-w C:\WINDOWS\system32\drivers\COH_Mon.sys
2007-12-28 19:59 --------- d--h--r C:\Documents and Settings\User\Application Data\SecuROM
2007-12-28 19:37 --------- d-----w C:\Program Files\EA GAMES
2007-12-25 04:07 --------- d-----w C:\Program Files\Shockwave.com
2007-12-25 04:05 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP
2007-12-25 03:02 --------- d-----w C:\Documents and Settings\All Users\Application Data\Shockwave
2007-12-23 18:48 --------- d-----w C:\Documents and Settings\User\Application Data\Home Sweet Home
2007-12-20 09:01 --------- d-----w C:\Program Files\Microsoft CAPICOM 2.1.0.2
2007-12-20 09:01 --------- d-----w C:\Documents and Settings\All Users\Application Data\Microsoft Help
2007-12-20 01:14 --------- d-----w C:\Program Files\Microsoft Works
2007-12-20 01:13 --------- d-----w C:\Program Files\Microsoft.NET
2007-09-24 22:54 112,664 ----a-w C:\Documents and Settings\User\Application Data\GDIPFONTCACHEV1.DAT
2006-03-26 21:11 774,144 ----a-w C:\Program Files\RngInterstitial.dll
2005-05-12 04:36 12,288 ----a-w C:\WINDOWS\Fonts\RandFont.dll
2007-07-30 18:30 104 --sh--r C:\WINDOWS\system32\869C478DF7.sys
2007-07-30 18:30 3,766 --sha-w C:\WINDOWS\system32\KGyGaAvL.sys
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PhotoShow Deluxe Media Manager"="C:\PROGRA~1\Nero\data\Xtras\mssysmgr.exe" [2004-11-11 19:50 212992]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 06:00 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTHelper"="CTHELPER.EXE" [2006-02-06 15:31 28672 C:\WINDOWS\system32\cthelper.exe]
"Fix-It AV"="C:\PROGRA~1\VCOM\Fix-It\MemCheck.exe" [2006-04-27 18:46 32768]
"HPHUPD05"="C:\Program Files\Hewlett-Packard\\{5372B9A6-6E51-4f90-9B40-E0A3B8475C4E}\hphupd05.exe" [2005-07-07 22:55 49152]
"HP Component Manager"="C:\Program Files\HP\hpcoretech\hpcmpmgr.exe" [2003-12-22 08:38 241664]
"HPHmon05"="C:\WINDOWS\system32\hphmon05.exe" [2005-07-07 22:55 491520]
"HPDJ Taskbar Utility"="C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe" [2005-07-07 22:55 176128]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe" [2005-11-10 13:03 36975]
"RemoteControl"="C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" [2004-06-28 21:29 32768]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [2006-12-28 21:54 185896]
"InCD"="C:\Program Files\Ahead\InCD\InCD.exe" [2005-01-27 11:17 1381376]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-04-27 08:41 282624]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2007-06-01 15:51 257088]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2006-01-12 16:40 155648]
"Symantec PIF AlertEng"="C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" [2007-11-28 19:51 583048]
"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 03:25 6731312]
"ccApp"="C:\Program Files\Common Files\Symantec Shared\ccApp.exe" [2007-07-17 19:54 116072]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe" [2007-07-01 21:09 171448]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"SetDefaultMidi"="MIDIDEF.EXE" [2006-02-06 15:31 49152 C:\WINDOWS\mididef.exe]

C:\Documents and Settings\User\Start Menu\Programs\Startup\
V CAST Music Monitor.lnk - C:\Program Files\Verizon Wireless\V CAST Music Essentials Manager\V CAST Music Monitor.exe [2007-02-20 18:57:33 446464]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-09-23 22:05:26 29696]
HP Digital Imaging Monitor.lnk - C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe [2005-05-11 22:23:26 282624]
HP Image Zone Fast Start.lnk - C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqthb08.exe [2005-05-11 23:49:24 73728]
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 01:01:04 83360]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"DisableRegistryTools"= 0 (0x0)

R2 Fix-It Task Manager;Fix-It Task Manager;C:\PROGRA~1\VCOM\Fix-It\mxtask.exe [2006-04-27 18:46]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d99fbf9a-63a7-11db-98de-000cf179c98d}]
\Shell\AutoRun\command - L:\JDSecure\Windows\JDSecure31.exe

*Newly Created Service* - COMHOST
.
Contents of the 'Scheduled Tasks' folder
"2008-02-11 19:44:02 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-02-11 18:43:47
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
------------------------ Other Running Processes ------------------------
.
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Common Files\Lanovation\PrismXL\PRISMXL.SYS
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Product Assistant\bin\hprblog.exe
C:\Program Files\Symantec\LiveUpdate\AUPDATE.EXE
C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
C:\Program Files\Java\jre1.5.0_06\bin\jucheck.exe
.
**************************************************************************
.
Completion time: 2008-02-11 18:56:57 - machine was rebooted
ComboFix-quarantined-files.txt 2008-02-12 00:56:47
ComboFix2.txt 2008-02-10 14:46:37
ComboFix3.txt 2008-02-10 03:01:31
.
2008-01-09 09:03:40 --- E O F ---

forhockey · 02-11-2008, 10:44 PM

Hi Sprogy,

This totally slipped my mind, and could also be the reason for your sluggish system performance....

Multiple Antivirus

It appears that you are running two antivirus programs:

1) Norton AntiVirus (Symantec Corporation)
2) VCOM Fix-It Utilities Professional 6

It does not provide you with any extra protection though it may seem so. On the contrary these two programs may interfere with each other creating serious problems regarding security vulnerability as well as system stability. Uninstall one of these two and keep the other of your choice.

---------------------------------------------

Once you uninstall one of those programs, then restart your computer and let me know how your system is behaving.

Sprogy · 02-13-2008, 02:02 PM

I uninstalled VCOM but my system is still pretty sluggish.

forhockey · 02-13-2008, 04:54 PM

Hi Sprogy,

Well there isn't anything else I'm seeing in your logs which could be causing this slow down. I'd like to get another online scan just incase the other scanners missed anything.

Establish an internet connection & perform an online scan with Internet Explorer at Kaspersky Online Scanner

Answer Yes, when prompted to install an ActiveX component.

The program will then begin downloading the latest definition files.
Once the files have been downloaded click on NEXT
Locate the Scan Settings button & configure to:
- Scan using the following Anti-Virus database:
  - Extended
- Scan Options:
  - Scan Archives
  - Scan Mail Bases
Click OK & have it scan My Computer
Once the scan is complete, it will display if your system has been infected. It does not provide an option to clean/disinfect. We only require a report from it.
Click the Save as Text button to save the file to your desktop so that you may post it in your next reply

* Turn off the real time scanner of any existing antivirus program while performing the online scan

--------------------------------------------------------------

Please run DSS.exe again, and post the resulting log.

--------------------------------------------------------------

Please reply back with the following logs:

Kaspersky Online Scan Results
New main.txt log (From DSS.exe)

Sprogy · 02-17-2008, 10:09 AM

heres the dss log but i couldnt post the Kaspersky log because the file size was just too big. IE would just freeze up. I tried attaching it also, and it exceeded the file size.

Deckard's System Scanner v20071014.68
Run by User on 2008-02-17 11

28
Computer is in Normal Mode.
--------------------------------------------------------------------------------

Total Physical Memory: 511 MiB (512 MiB recommended).

-- HijackThis (run as User.exe) ------------------------------------------------

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11

45 AM, on 2/17/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Common Files\Lanovation\PrismXL\PRISMXL.SYS
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\CTHELPER.EXE
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\system32\hphmon05.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Ahead\InCD\InCD.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\PROGRA~1\Nero\data\Xtras\mssysmgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Verizon Wireless\V CAST Music Essentials Manager\V CAST Music Monitor.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Product Assistant\bin\hprblog.exe
C:\Program Files\Java\jre1.5.0_06\bin\jucheck.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Documents and Settings\User\Desktop\dss.exe
C:\PROGRA~1\TRENDM~1\HIJACK~1\User.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gatewaybiz.com
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.7\NppBho.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [HPHUPD05] C:\Program Files\Hewlett-Packard\\{5372B9A6-6E51-4f90-9B40-E0A3B8475C4E}\hphupd05.exe
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\system32\hphmon05.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKCU\..\Run: [PhotoShow Deluxe Media Manager] C:\PROGRA~1\Nero\data\Xtras\mssysmgr.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [SetDefaultMidi] MIDIDEF.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [SetDefaultMidi] MIDIDEF.EXE (User 'Default user')
O4 - Startup: V CAST Music Monitor.lnk = C:\Program Files\Verizon Wireless\V CAST Music Essentials Manager\V CAST Music Monitor.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Image Zone Fast Start.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\User\Start Menu\Programs\IMVU\Run IMVU.lnk (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {05D44720-58E3-49E6-BDF6-D00330E511D3} - http://zone.msn.com/binFrameWork/v10...I.cab53083.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/par...an_unicode.cab
O16 - DPF: {3BB54395-5982-4788-8AF4-B5388FFDD0D8} - http://zone.msn.com/BinFrameWork/v10...y.cab53083.cab
O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} - http://lads.myspace.com/upload/MySpaceUploader1005.cab
O16 - DPF: {5736C456-EA94-4AAC-BB08-917ABDD035B3} - http://zone.msn.com/binframework/v10...t.cab53083.cab
O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} (Symantec Download Manager) - https://webdl.symantec.com/activex/symdlmgr.cab
O16 - DPF: {809A6301-7B40-4436-A02C-87B8D3D7D9E3} - http://zone.msn.com/bingame/zpagames...o.cab53083.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/actives...ree/asinst.cab
O16 - DPF: {9B17FE0E-51F2-4692-8B32-8EFB805FC0E7} (HPObjectInstaller Class) - http://h30155.www3.hp.com/ediags/dd/...dsolutions.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} - http://cdn2.zone.msn.com/binFramewor...o.cab53083.cab
O16 - DPF: {D77EF652-9A6B-40C8-A4B9-1C0697C6CF41} - http://zone.msn.com/bingame/cnma/default/ct.cab
O16 - DPF: {DA2AA6CF-5C7A-4B71-BC3B-C771BB369937} - http://zone.msn.com/binframework/v10...y.cab53852.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} - http://www.shockwave.com/content/zum...loader_v10.cab
O16 - DPF: {E473A65C-8087-49A3-AFFD-C5BC4A10669B} (Quantum Streaming IE Player Class) - http://mvnet.xlontech.net/qm/fox/061...ie06101001.cab
O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O16 - DPF: {E991BDE0-9816-4094-853E-6BDB60F0342D} - http://apps.corel.com/nos_dl_manager...etOpPlugin.ocx
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: InCD Helper (read only) (InCDsrvR) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PrismXL - Lanovation - C:\Program Files\Common Files\Lanovation\PrismXL\PRISMXL.SYS
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

--
End of file - 10583 bytes

-- Files created between 2008-01-17 and 2008-02-17 -----------------------------

2008-02-15 15:10:51 0 d-------- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab
2008-02-15 15:10:49 0 d-------- C:\WINDOWS\system32\Kaspersky Lab
2008-02-11 18:07:11 0 dr-h----- C:\Documents and Settings\User\Recent
2008-02-11 15:26:55 552 --a------ C:\WINDOWS\system32\d3d8caps.dat
2008-02-10 09

06 44928 --a------ C:\WINDOWS\system32\drivers\SDTHOOK.SYS <Not Verified; Panda Software; Panda® Antivirus>
2008-02-10 08:52:06 0 d-------- C:\WINDOWS\system32\ActiveScan
2008-02-09 20:40:58 0 d-------- C:\cmdcons
2008-02-09 20:38:52 68096 --a------ C:\WINDOWS\system32\zip.exe
2008-02-09 20:38:52 98816 --a------ C:\WINDOWS\system32\sed.exe
2008-02-09 20:38:52 80412 --a------ C:\WINDOWS\system32\grep.exe
2008-02-09 20:38:51 73728 --a------ C:\WINDOWS\system32\fdsv.exe <Not Verified; Smallfrogs Studio; >
2008-02-09 17:25:05 0 d-------- C:\Program Files\Norton 360
2008-02-09 16:36:56 0 d-------- C:\Documents and Settings\All Users\Symantec Temporary Files
2008-02-08 16:48:39 0 d-------- C:\Program Files\Trend Micro
2008-02-06 13:36:33 0 d-------- C:\Program Files\CCleaner
2008-02-02 17:29:45 0 d-------- C:\Documents and Settings\User\Application Data\Grisoft
2008-02-02 17:29:32 0 d-------- C:\Documents and Settings\All Users\Application Data\Grisoft

-- Find3M Report ---------------------------------------------------------------

2008-02-16 15:11:34 0 d-------- C:\Program Files\Common Files\Symantec Shared
2008-02-15 18:45:45 288 --a------ C:\WINDOWS\system32\DVCStateBkp-{00000003-00000000-00000001-00001102-00000004-10061102}.dat
2008-02-15 18:45:45 288 --a------ C:\WINDOWS\system32\DVCState-{00000003-00000000-00000001-00001102-00000004-10061102}.dat
2008-02-12 16:59:38 0 d-a------ C:\Program Files\Common Files
2008-02-12 16:52:12 23782 --a------ C:\Documents and Settings\User\Application Data\wklnhst.dat
2008-02-10 10

46 0 d-------- C:\Program Files\QuickTime
2008-02-10 09:58:54 0 dr------- C:\Program Files\iTunes
2008-02-10 09:55:32 0 d-------- C:\Program Files\Google
2008-02-09 21:51:32 0 d-------- C:\Program Files\Symantec
2008-02-09 21:22:59 0 d-------- C:\Documents and Settings\User\Application Data\Symantec
2008-02-09 16:55:24 0 d-------- C:\Program Files\Norton AntiVirus
2008-01-31 16:55:44 0 d-------- C:\Documents and Settings\User\Application Data\Move Networks
2008-01-27 14:54:29 0 d-------- C:\Documents and Settings\User\Application Data\Intuit
2008-01-27 14:50:42 0 d-------- C:\Program Files\Common Files\AnswerWorks 4.0
2008-01-27 14:50:38 0 d--h----- C:\Program Files\InstallShield Installation Information
2008-01-27 14:30:30 0 d-------- C:\Program Files\TurboTax
2007-12-28 13:59:05 0 dr-h----- C:\Documents and Settings\User\Application Data\SecuROM
2007-12-28 13:37:31 0 d-------- C:\Program Files\EA GAMES
2007-12-24 22:07:10 0 d-------- C:\Program Files\Shockwave.com
2007-12-23 23:39:53 0 d-------- C:\Documents and Settings\User\Application Data\Adobe
2007-12-23 12:48:35 0 d-------- C:\Documents and Settings\User\Application Data\Home Sweet Home
2007-12-20 03:01:14 0 d-------- C:\Program Files\Microsoft CAPICOM 2.1.0.2
2007-12-19 19:14:58 0 d-------- C:\Program Files\Microsoft Works
2007-12-19 19:13:46 0 d-------- C:\Program Files\Microsoft.NET

-- Registry Dump ---------------------------------------------------------------

*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTHelper"="CTHELPER.EXE" [02/06/2006 03:31 PM C:\WINDOWS\system32\cthelper.exe]
"HPHUPD05"="C:\Program Files\Hewlett-Packard\\{5372B9A6-6E51-4f90-9B40-E0A3B8475C4E}\hphupd05.exe" [07/07/2005 10:55 PM]
"HP Component Manager"="C:\Program Files\HP\hpcoretech\hpcmpmgr.exe" [12/22/2003 08:38 AM]
"HPHmon05"="C:\WINDOWS\system32\hphmon05.exe" [07/07/2005 10:55 PM]
"HPDJ Taskbar Utility"="C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe" [07/07/2005 10:55 PM]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe" [11/10/2005 01:03 PM]
"RemoteControl"="C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" [06/28/2004 09:29 PM]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [12/28/2006 09:54 PM]
"InCD"="C:\Program Files\Ahead\InCD\InCD.exe" [01/27/2005 11:17 AM]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [04/27/2007 08:41 AM]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [06/01/2007 03:51 PM]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [01/12/2006 04:40 PM]
"Symantec PIF AlertEng"="C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" [11/28/2007 07:51 PM]
"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [06/11/2007 03:25 AM]
"ccApp"="C:\Program Files\Common Files\Symantec Shared\ccApp.exe" [07/17/2007 07:54 PM]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PhotoShow Deluxe Media Manager"="C:\PROGRA~1\Nero\data\Xtras\mssysmgr.exe" [11/11/2004 07:50 PM]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [08/04/2004 06:00 AM]

[HKEY_USERS\.default\software\microsoft\windows\currentversion\runonce]
"SetDefaultMidi"=MIDIDEF.EXE

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe

C:\Documents and Settings\User\Start Menu\Programs\Startup\
V CAST Music Monitor.lnk - C:\Program Files\Verizon Wireless\V CAST Music Essentials Manager\V CAST Music Monitor.exe [2/20/2007 6:57:33 PM]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [9/23/2005 10:05:26 PM]
HP Digital Imaging Monitor.lnk - C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe [5/11/2005 10:23:26 PM]
HP Image Zone Fast Start.lnk - C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqthb08.exe [5/11/2005 11:49:24 PM]
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2/13/2001 1:01:04 AM]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"DisableRegistryTools"=0 (0x0)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d99fbf9a-63a7-11db-98de-000cf179c98d}]
AutoRun\command- L:\JDSecure\Windows\JDSecure31.exe

*Newly Created Service* - COMHOST

-- End of Deckard's System Scanner: finished at 2008-02-17 11:07:14 ------------

forhockey · 02-17-2008, 11:24 AM

Please submit the Kaspersky log to: http://www.bleepingcomputer.com/subm...php?channel=28

Once you've submitted the file, then please let me know.

Sprogy · 02-17-2008, 01:09 PM

When I tried to submit the Kaspersky log there it came up as an error.

forhockey · 02-17-2008, 01:31 PM

Can you post bits and pieces of the Kaspersky log here then?

Sprogy · 02-17-2008, 04:07 PM

-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Friday, February 15, 2008 6:42:53 PM
Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 15/02/2008
Kaspersky Anti-Virus database records: 567998
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
A:\
C:\
D:\
E:\
F:\
G:\
H:\
I:\
J:\
K:\

Scan Statistics:
Total number of scanned objects: 300604
Number of viruses found: 6
Number of infected objects: 32
Number of suspicious objects: 0
Duration of the scan process: 03:04:33

Infected Object Name / Virus Name / Last Action
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\895454f374c8447cf4a6ea7a9e97fe19_a7808be6-c21a-414a-8a98-cd1bd46ff532 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8e4c66f977b5845ceac0757a154d1bda_a7808be6-c21a-414a-8a98-cd1bd46ff532 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\acc95f6fed5935103656808910e6f5d2_a7808be6-c21a-414a-8a98-cd1bd46ff532 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\e04334a388d3fbf66ad9b009b50e3416_a7808be6-c21a-414a-8a98-cd1bd46ff532 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\settings.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\2008-02-15_Log.ALUSchedulerSvc.LiveUpdate Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\Shared\QBackup\index.qbs Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBConfig.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBDebug.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBDetect.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBNotify.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBRefr.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBSetCfg.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBSetCfg2.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBSetDev.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBSetLoc.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBSetUsr.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBStHash.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBValid.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\SPPolicy.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\SPStart.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\SPStop.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\SrtErEvt.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\SrtETmp\AFD44745.TMP Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\SrtETmp\C90898AA.TMP Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\SrtMoEvt.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\SrtNvEvt.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\SrtScEvt.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\SrtTxFEvt.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\SrtViEvt.log Object is locked skipped
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\MSHist012008021420080215\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\User\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\User\Local Settings\Application Data\ApplicationHistory\hpqimzone.exe.9b7949a.ini.inuse Object is locked skipped
C:\Documents and Settings\User\Local Settings\Application Data\HP\Digital Imaging\db\administrativeInfo.dbf Object is locked skipped
C:\Documents and Settings\User\Local Settings\Application Data\HP\Digital Imaging\db\albumImagesTable.cdx Object is locked skipped
C:\Documents and Settings\User\Local Settings\Application Data\HP\Digital Imaging\db\albumImagesTable.dbf Object is locked skipped
C:\Documents and Settings\User\Local Settings\Application Data\HP\Digital Imaging\db\albumTable.cdx Object is locked skipped
C:\Documents and Settings\User\Local Settings\Application Data\HP\Digital Imaging\db\albumTable.dbf Object is locked skipped
C:\Documents and Settings\User\Local Settings\Application Data\HP\Digital Imaging\db\CB_Server_Errors.txt Object is locked skipped
C:\Documents and Settings\User\Local Settings\Application Data\HP\Digital Imaging\db\EXIFTable.cdx Object is locked skipped
C:\Documents and Settings\User\Local Settings\Application Data\HP\Digital Imaging\db\EXIFTable.dbf Object is locked skipped
C:\Documents and Settings\User\Local Settings\Application Data\HP\Digital Imaging\db\imageTable.cdx Object is locked skipped
C:\Documents and Settings\User\Local Settings\Application Data\HP\Digital Imaging\db\imageTable.dbf Object is locked skipped
C:\Documents and Settings\User\Local Settings\Application Data\HP\Digital Imaging\db\imageTable.fpt Object is locked skipped
C:\Documents and Settings\User\Local Settings\Application Data\HP\Digital Imaging\db\keywordImagesTable.cdx Object is locked skipped
C:\Documents and Settings\User\Local Settings\Application Data\HP\Digital Imaging\db\keywordImagesTable.dbf Object is locked skipped
C:\Documents and Settings\User\Local Settings\Application Data\HP\Digital Imaging\db\keywordTable.cdx Object is locked skipped
C:\Documents and Settings\User\Local Settings\Application Data\HP\Digital Imaging\db\keywordTable.dbf Object is locked skipped
C:\Documents and Settings\User\Local Settings\Application Data\HP\Digital Imaging\db\managedFolderTable.dbf Object is locked skipped
C:\Documents and Settings\User\Local Settings\Application Data\HP\Digital Imaging\db\pathnameTable.cdx Object is locked skipped
C:\Documents and Settings\User\Local Settings\Application Data\HP\Digital Imaging\db\pathnameTable.dbf Object is locked skipped
C:\Documents and Settings\User\Local Settings\Application Data\HP\Digital Imaging\db\propertiesTable.cdx Object is locked skipped
C:\Documents and Settings\User\Local Settings\Application Data\HP\Digital Imaging\db\propertiesTable.dbf Object is locked skipped
C:\Documents and Settings\User\Local Settings\Application Data\HP\Digital Imaging\db\ROFImagesTable.cdx Object is locked skipped
C:\Documents and Settings\User\Local Settings\Application Data\HP\Digital Imaging\db\ROFImagesTable.dbf Object is locked skipped
C:\Documents and Settings\User\Local Settings\Application Data\HP\Digital Imaging\db\ROFTable.cdx Object is locked skipped
C:\Documents and Settings\User\Local Settings\Application Data\HP\Digital Imaging\db\ROFTable.dbf Object is locked skipped
C:\Documents and Settings\User\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\User\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\User\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\User\Local Settings\History\History.IE5\MSHist012008021320080214\index.dat Object is locked skipped
C:\Documents and Settings\User\Local Settings\Temp\ mon001.log Object is locked skipped
C:\Documents and Settings\User\Local Settings\Temp\hpodvd09.log Object is locked skipped
C:\Documents and Settings\User\Local Settings\Temp\~DFE263.tmp Object is locked skipped
C:\Documents and Settings\User\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\User\My Documents\My Music\iTunes\iTunes Library.itl Object is locked skipped
C:\Documents and Settings\User\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\User\ntuser.dat.LOG Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcrst.dll Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsys.dll Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\coShared\WA\1.7\NCOWAD.dat Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\coShared\WA\1.7\NCOWADMT.dat Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\coShared\WA\1.7\NCOWAS.dat Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\coShared\WA\1.7\NCOWAS.ldb Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\EENGINE\EPERSIST.DAT Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SNDALRT.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SNDCON.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SNDDBG.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SNDFW.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SNDIDS.log Object is locked skipped
C:\Program Files\Common Files\Symantec Shared\SNDSYS.log Object is locked skipped
C:\Program Files\HP\hpcoretech\hpcmerr.log Object is locked skipped
C:\Program Files\Norton 360\Log\AutoProtect.log Object is locked skipped
C:\Program Files\Norton 360\Log\AVContext.log Object is locked skipped
C:\Program Files\Norton 360\Log\AVManual.log Object is locked skipped
C:\Program Files\Norton 360\Log\Backup.log Object is locked skipped
C:\Program Files\Norton 360\Log\CUInternetPageViewHistory.log Object is locked skipped
C:\Program Files\Norton 360\Log\CUInternetSearchHistory.log Object is locked skipped
C:\Program Files\Norton 360\Log\CUInternetTempFiles.log Object is locked skipped
C:\Program Files\Norton 360\Log\CUWindowsTempFiles.log Object is locked skipped
C:\Program Files\Norton 360\Log\EmailScan.log Object is locked skipped
C:\Program Files\Norton 360\Log\InternetSecurity.log Object is locked skipped
C:\Program Files\Norton 360\Log\ISIntrusionPrevented.log Object is locked skipped
C:\Program Files\Norton 360\Log\ISIOTraffic.log Object is locked skipped
C:\Program Files\Norton 360\Log\ISNewNetwork.log Object is locked skipped
C:\Program Files\Norton 360\Log\LiveUpdate.log Object is locked skipped
C:\Program Files\Norton 360\Log\NCO.log Object is locked skipped
C:\Program Files\Norton 360\Log\VABrowserSettings.log Object is locked skipped
C:\Program Files\Norton 360\Log\VAIPAddresses.log Object is locked skipped
C:\Program Files\Norton 360\Log\VAWeakPasswords.log Object is locked skipped
C:\Program Files\Norton 360\Log\WDFScanner.log Object is locked skipped
C:\QooBox\Quarantine\C\Downloads\ApprenticeSetup-dm[1].exe.vir Infected: not-a-virus:AdWare.Win32.Trymedia.b skipped
C:\QooBox\Quarantine\C\Downloads\DinerDashSetup-dm[1].exe.vir Infected: not-a-virus:AdWare.Win32.Trymedia.b skipped
C:\QooBox\Quarantine\C\Downloads\MonopolyHNSetup-dm[1].exe.vir Infected: not-a-virus:AdWare.Win32.Trymedia.b skipped
C:\QooBox\Quarantine\C\Downloads\RiskIISetup-dm[1].exe.vir Infected: not-a-virus:AdWare.Win32.Trymedia.b skipped
C:\QooBox\Quarantine\C\Downloads\TheGameOfLife-dm[1].exe.vir Infected: not-a-virus:AdWare.Win32.Trymedia.b skipped
C:\QooBox\Quarantine\catchme2008-02-09_205307.54.zip/geeby.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\QooBox\Quarantine\catchme2008-02-09_205307.54.zip ZIP: infected - 1 skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
C:\System Volume Information\_restore{CA1D12D3-1DDE-498D-B318-3EB58F189484}\RP735\A0047641.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{CA1D12D3-1DDE-498D-B318-3EB58F189484}\RP736\A0047662.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{CA1D12D3-1DDE-498D-B318-3EB58F189484}\RP737\A0048692.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{CA1D12D3-1DDE-498D-B318-3EB58F189484}\RP737\A0049155.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{CA1D12D3-1DDE-498D-B318-3EB58F189484}\RP737\A0049156.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{CA1D12D3-1DDE-498D-B318-3EB58F189484}\RP737\A0049172.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{CA1D12D3-1DDE-498D-B318-3EB58F189484}\RP737\A0049174.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{CA1D12D3-1DDE-498D-B318-3EB58F189484}\RP737\A0049175.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{CA1D12D3-1DDE-498D-B318-3EB58F189484}\RP737\A0049176.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{CA1D12D3-1DDE-498D-B318-3EB58F189484}\RP737\A0049179.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{CA1D12D3-1DDE-498D-B318-3EB58F189484}\RP739\A0049240.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{CA1D12D3-1DDE-498D-B318-3EB58F189484}\RP739\A0049241.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{CA1D12D3-1DDE-498D-B318-3EB58F189484}\RP739\A0049242.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{CA1D12D3-1DDE-498D-B318-3EB58F189484}\RP739\A0049243.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{CA1D12D3-1DDE-498D-B318-3EB58F189484}\RP739\A0049251.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.gen skipped
C:\System Volume Information\_restore{CA1D12D3-1DDE-498D-B318-3EB58F189484}\RP740\A0050461.exe/data0006 Infected: Trojan-Downloader.Win32.VB.cgu skipped
C:\System Volume Information\_restore{CA1D12D3-1DDE-498D-B318-3EB58F189484}\RP740\A0050461.exe NSIS: infected - 1 skipped
C:\System Volume Information\_restore{CA1D12D3-1DDE-498D-B318-3EB58F189484}\RP740\A0050462.dll Infected: not-a-virus:Downloader.Win32.PopCap.b skipped
C:\System Volume Information\_restore{CA1D12D3-1DDE-498D-B318-3EB58F189484}\RP742\A0050560.exe Infected: not-a-virus:AdWare.Win32.Trymedia.b skipped
C:\System Volume Information\_restore{CA1D12D3-1DDE-498D-B318-3EB58F189484}\RP742\A0050561.exe Infected: not-a-virus:AdWare.Win32.Trymedia.b skipped
C:\System Volume Information\_restore{CA1D12D3-1DDE-498D-B318-3EB58F189484}\RP742\A0050562.exe Infected: not-a-virus:AdWare.Win32.Trymedia.b skipped
C:\System Volume Information\_restore{CA1D12D3-1DDE-498D-B318-3EB58F189484}\RP742\A0050563.exe Infected: not-a-virus:AdWare.Win32.Trymedia.b skipped
C:\System Volume Information\_restore{CA1D12D3-1DDE-498D-B318-3EB58F189484}\RP742\A0050564.exe Infected: not-a-virus:AdWare.Win32.Trymedia.b skipped
C:\System Volume Information\_restore{CA1D12D3-1DDE-498D-B318-3EB58F189484}\RP746\change.log Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\EventCache\{73BF3DB8-BBB7-4B5E-B0D8-715510AD4078}.bin Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\ODiag.evt Object is locked skipped
C:\WINDOWS\system32\config\OSession.evt Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\TEMP\cc62.tmp Object is locked skipped
C:\WINDOWS\TEMP\cc63.tmp Object is locked skipped
C:\WINDOWS\TEMP\cc64.tmp Object is locked skipped
C:\WINDOWS\TEMP\JET9EE2.tmp Object is locked skipped
C:\WINDOWS\TEMP\JET9FEC.tmp Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
C:\WINDOWS\{00000003-00000000-00000001-00001102-00000004-10061102}.CDF Object is locked skipped
F:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\DSS\MachineKeys\49430548d11539604df2721b8bf286b6_c3233b2b-16fa-49f5-bf49-b4b0788627df Object is locked skipped
F:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\DSS\MachineKeys\f58155b4b1d5a524ca0261c3ee99fb50_c3233b2b-16fa-49f5-bf49-b4b0788627df Object is locked skipped
F:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f8323c242b03bb497c2d69d7b9c61b28_c3233b2b-16fa-49f5-bf49-b4b0788627df Object is locked skipped
F:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp Object is locked skipped
F:\Documents and Settings\Becca\.limewire\Cookies.dat Object is locked skipped
F:\Documents and Settings\Becca\.limewire\createtimes.cache Object is locked skipped
F:\Documents and Settings\Becca\.limewire\fileurns.bak Object is locked skipped
F:\Documents and Settings\Becca\.limewire\fileurns.cache Object is locked skipped
F:\Documents and Settings\Becca\.limewire\filters.props Object is locked skipped
F:\Documents and Settings\Becca\.limewire\gnutella.net Object is locked skipped
F:\Documents and Settings\Becca\.limewire\installation.props Object is locked skipped
F:\Documents and Settings\Becca\.limewire\licenses.cache Object is locked skipped
F:\Documents and Settings\Becca\.limewire\limewire.props Object is locked skipped
F:\Documents and Settings\Becca\.limewire\META-INF\MANIFEST.MF Object is locked skipped
F:\Documents and Settings\Becca\.limewire\pub1.key Object is locked skipped
F:\Documents and Settings\Becca\.limewire\public.key Object is locked skipped
F:\Documents and Settings\Becca\.limewire\questions.props Object is locked skipped
F:\Documents and Settings\Becca\.limewire\simpp.xml Object is locked skipped
F:\Documents and Settings\Becca\.limewire\splash.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\tables.props Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\black_theme\01_star.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\black_theme\02_star.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\black_theme\03_star.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\black_theme\04_star.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\black_theme\05_star.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\black_theme\chat.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\black_theme\dir_closed.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\black_theme\dir_open.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\black_theme\forward_dn.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\black_theme\forward_up.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\black_theme\kill.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\black_theme\kill_on.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\black_theme\lime.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\black_theme\logo.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\black_theme\notsearching.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\black_theme\pause_dn.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\black_theme\pause_up.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\black_theme\play_dn.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\black_theme\play_up.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\black_theme\question.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\black_theme\rewind_dn.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\black_theme\rewind_up.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\black_theme\searching.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\black_theme\splash.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\black_theme\stop_dn.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\black_theme\stop_up.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\black_theme\theme.txt Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\black_theme\Thumbs.db Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\black_theme\warning.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\black_theme.lwtp Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\classic_theme\01_star.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\classic_theme\02_star.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\classic_theme\03_star.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\classic_theme\04_star.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\classic_theme\05_star.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\classic_theme\chat.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\classic_theme\dir_closed.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\classic_theme\dir_open.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\classic_theme\forward_dn.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\classic_theme\forward_up.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\classic_theme\kill.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\classic_theme\logo.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\classic_theme\notsearching.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\classic_theme\pause_dn.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\classic_theme\pause_up.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\classic_theme\play_dn.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\classic_theme\play_up.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\classic_theme\question.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\classic_theme\rewind_dn.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\classic_theme\rewind_up.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\classic_theme\search.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\classic_theme\searching.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\classic_theme\splash.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\classic_theme\stop_dn.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\classic_theme\stop_up.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\classic_theme\theme.txt Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\classic_theme\warning.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\classic_theme.lwtp Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\limewire_theme\01_star.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\limewire_theme\02_star.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\limewire_theme\03_star.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\limewire_theme\04_star.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\limewire_theme\05_star.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\limewire_theme\chat.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\limewire_theme\dir_closed.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\limewire_theme\dir_open.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\limewire_theme\forward_dn.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\limewire_theme\forward_up.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\limewire_theme\kill.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\limewire_theme\kill_on.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\limewire_theme\lime.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\limewire_theme\logo.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\limewire_theme\notsearching.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\limewire_theme\pause_dn.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\limewire_theme\pause_up.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\limewire_theme\play_dn.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\limewire_theme\play_up.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\limewire_theme\question.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\limewire_theme\rewind_dn.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\limewire_theme\rewind_up.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\limewire_theme\searching.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\limewire_theme\splash.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\limewire_theme\stop_dn.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\limewire_theme\stop_up.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\limewire_theme\theme.txt Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\limewire_theme\warning.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\limewire_theme.lwtp Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\windows_theme\01_star.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\windows_theme\02_star.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\windows_theme\03_star.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\windows_theme\04_star.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\windows_theme\05_star.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\windows_theme\chat.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\windows_theme\forward_dn.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\windows_theme\forward_up.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\windows_theme\kill.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\windows_theme\kill_on.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\windows_theme\logo.png Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\windows_theme\notsearching.png Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\windows_theme\pause_dn.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\windows_theme\pause_up.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\windows_theme\play_dn.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\windows_theme\play_up.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\windows_theme\question.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\windows_theme\rewind_dn.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\windows_theme\rewind_up.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\windows_theme\searching.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\windows_theme\splash.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\windows_theme\stop_dn.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\windows_theme\stop_up.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\windows_theme\theme.txt Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\windows_theme\warning.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\themes\windows_theme.lwtp Object is locked skipped
F:\Documents and Settings\Becca\.limewire\ttree.cache Object is locked skipped
F:\Documents and Settings\Becca\.limewire\update.xml Object is locked skipped
F:\Documents and Settings\Becca\.limewire\version.key Object is locked skipped
F:\Documents and Settings\Becca\.limewire\version.xml Object is locked skipped
F:\Documents and Settings\Becca\.limewire\xml\data\audio.sxml Object is locked skipped
F:\Documents and Settings\Becca\.limewire\xml\data\video.sxml Object is locked skipped
F:\Documents and Settings\Becca\.limewire\xml\misc\application.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\xml\misc\audio.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\xml\misc\image.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\xml\misc\text.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\xml\misc\video.gif Object is locked skipped
F:\Documents and Settings\Becca\.limewire\xml\schemas\audio.xsd Object is locked skipped
F:\Documents and Settings\Becca\.limewire\xml\schemas\video.xsd Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Adobe\Acrobat\6.0\AcroForm\MRUFormsList Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Adobe\Acrobat\6.0\AdobeComFnt06.lst Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Adobe\Acrobat\6.0\Collab\OfflineDocs Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Adobe\Acrobat\6.0\Collab\Reviews Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Adobe\Acrobat\6.0\JSADM.exv Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Adobe\Acrobat\6.0\Messages\ENU\read0600win_ENUadbe0042.pdf Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Adobe\Acrobat\6.0\Messages\ENU\read0600win_ENUyhoo0012.pdf Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Adobe\Acrobat\6.0\Preferences\AutoFillDefaults.dat Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Adobe\Acrobat\6.0\Preferences\defaultHeuristics.dat Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Adobe\Acrobat\6.0\TMGrpPrm.sav Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Adobe\Acrobat\6.0\Updater\udstore.js Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\AvatarOfIdiot\cert8.db Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\AvatarOfIdiot\key3.db Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\AvatarOfIdiot\Resources\CurrentSettings.xml Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\AvatarOfIdiot\secmod.db Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\AvatarOfIdiot\urlcache\aim180.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\AvatarOfIdiot\urlcache\aim1D6A.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\AvatarOfIdiot\urlcache\cookie.dat Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\AvatarOfIdiot\urlcache\urlcache.dat Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\AvatarOfIdiot\userinfo.bag Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\0\0201D20472 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\0\0201D20552 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\0\0201D20555 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\0\0201D205A1 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\0\0201D2177A Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\0\0201D2190C Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\0\0201D241B4 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\0\0201D244E8 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\0\0201D25420 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\0\0201D2608F Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\0\0201D26DB5 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\0\0201D271A9 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\0\0201D29F99 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\0\0201D2A27F Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\0\0201D2A283 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\0\0201E0116B Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\0\0201E012F9 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\0\0201E02721 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\0\0201E02EB9 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\0\0201E06069 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\0\0201E061C3 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\0\0201E068C0 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\0\0201E06E67 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\0\0201E07E4B Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\0\0201E083B2 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\0\0201E08531 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\0\0201E0856F Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\0\0201E0861A Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\0\0201E08844 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\0\2B0000058F Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\0\2B00001381 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\0\2B000013CB Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\0\2B0000192A Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\0\2B00001995 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\0\2B000019B1 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\0\2B00001B51 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\0\2B00001E3A Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\0\2B00001EC6 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\0\2B00001F1E Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\0\2B00001F23 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\0\2B00001FA2 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\0\2B00001FB4 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\00C9504358F0FA568DAF23A0D91868D2 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\00CE4AA2D1E0A5ED9D4E9709FD31EACD Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\014B752D4677A62C7266CDC8678445D1 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\01BB785D013B22CE448075E38E057ADC Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\0201D20472 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\0201D20552 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\0201D20555 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\0201D2177A Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\0201D2190C Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\0201D21C2B Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\0201D23FBE Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\0201D241B4 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\0201D244E8 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\0201D25420 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\0201D2608F Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\0201D26DB5 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\0201D271A9 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\0201D29F99 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\0201D2A27F Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\0201D2A283 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\0201E0116B Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\0201E012F9 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\0201E02721 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\0201E02EB9 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\0201E052F1 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\0201E06069 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\0201E061C3 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\0201E068C0 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\0201E06E67 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\0201E07E4B Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\0201E083B2 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\0201E08531 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\0201E0856F Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\0201E0861A Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\0201E08844 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\03326B580099B8B97DB550D872B50D90 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\04385B8C1A41528A783ADC2BEACB0329 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\056F0FDE4FDB467CC8E766E558409563 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\05C3B7EB40F0DB4F03DA87E24FF2F9C3 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\05D82E3775B3B16CF93E2B9FBA6F5A16 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\0739D1DC9EB43C95BB23ABB0914C55D0 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\07915DC074ACF9AC27B7028F9482A3E5 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\07ABD315B94C40843EFE4C451D30A8CD Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\0814D1E7B6F61541549366600AA4CC31 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\09BB76EFAFC6EF360D09F5538BC52962 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\09E0CF606C3085D38423DC5234B0A8B0 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\0A6C8B13AC6FD90AE42072BB2A0412F9 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\0CDBC2A6D8C5030A2E14C34CDD4D8E82 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\0CE3FC30DD2EF34CD576FC4252757CDC Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\0D3855ACB18B92696062D6298B3B6BDD Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\0E7F5E124838CFD273B1E8915643AD39 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\0EF1B5536F733262FE58552ED7C761A1 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\0F0FA4779CEDB900F80345F6C5CBB3F5 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\0FB9A1D116F6690430E15F161DF723AD Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\100124E7EF207669B1E8EB5E6040C716 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\1077312185F6B0AED6F63BC11AEFD399 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\10AFEE4AD66FED2B789D59AD6DA88C93 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\10DF036384F65810980DBBBE7FF08160 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\12244B16D8205C178C15C17377C19ADA Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\139EF324CAEF6D7FB38F642877F85010 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\13CC3BEB5C4076F671EE2CC4AF68DF85 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\152B43E9C457773450C1D80E166D2B4D Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\15A82A8384E21532250653D32CB6253C Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\15BBA9A72030082C663FDA83DA1F46D1 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\15FA5F97A42BF5C5D9BC2DB6B9AF284E Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\163E029FD60F6AF4389DE757F06B4BF6 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\169699F3BAF2ECA8506FC2408C26A337 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\16A0602D0A6C3A88B80D4CB6B0E5559F Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\16B021EA36C848CE4DF28BDF9D2186B5 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\17CA9CD559D9251652B5C285677C017A Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\194F5366084508B19759AC8A66CE3DC4 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\1A6F18DF30869FC48B42C6EF1633DED4 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\1AC7675542422868383171789AE14D6E Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\1AD7A21B30C15E7D2E646099B96CE6E8 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\1B81BB777F310380024394AB8EC7289C Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\1D0F2ACD4A10BED03104CF3038ABA75E Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\1E9FF16860E59D6885B73AC31F6F0C65 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\1EC25180720445B1DAB6F0486BD6672C Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\1F45C3AE7A9098A1C364BD2BEC2F6426 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\1F9095A96A8632F508A7CF8105142E69 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\209CEFEAEC88D71288D0977807931DC2 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\21A0BB69A0A3A47ED6478BBF3EEBE3DF Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\21ABECE4B103CBE15A99C8CD108D7708 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\21B34E7DF8D6459A305DFAFD0F42C78E Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\2233CCF2C37C248EDF74E02B4BCE4BA3 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\225FFEB7F4DFCF18CC218F5050BC9880 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\22F5015AA54BD1E47C9456C587623F69 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\2384A6D0A176AA86AFCF0CF065380019 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\24C09193B99863EF4832A4C883CBEF1B Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\25DCA41EBE34D54A94940BE340D034D4 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\26147106D7985055977E8AEE6EEFDE31 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\26ADFD2E1DD73708B6C9020CDF1258A3 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\277DD07F25D88AECFA7865646C12F2BD Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\27F60A54D567C5002FC3A77E6F8AC731 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\28DF2EDAC6B4E8A5C3593714734C87AB Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\29036574156F7A19A54B64EE3F56C5BF Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\290AC44928491CA2FF02414743850898 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\2949103FB3DE0192E6BC8F09C622D143 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\29BCFF9F9AE26876D02604DBC461BF9A Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\2A136AA8B05D0F68F6C647782B9B0193 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\2A3EC4EFC581DD79CA021EBE76E40884 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\2A79FEF09CE4F48BE577BBAFB1267DC4 Object is locked skipped

Sprogy · 02-17-2008, 04:08 PM

F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\2B0000058F Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\2B00001381 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\2B000013CB Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\2B0000192A Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\2B00001995 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\2B000019B1 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\2B00001B51 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\2B00001E3A Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\2B00001EC6 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\2B00001F1E Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\2B00001F23 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\2B00001FA2 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\2B00001FB4 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\2C2D0F509E6F5401AA23F830680E3247 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\2CE7E1DEA8B6F12AEDC7E29FC4BB11FE Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\2D0C2D291E3A4B3DEFD900FB2919D6A4 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\2E94F3A749DAB674990C99FF2EB9337E Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\2EF30334959EFFE59C501A9A96E74239 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\3001263453B46501E994E49704F9D5CD Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\30C229407E30A6E61C60EED368A1B0A1 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\30FFDC0A2567C693FA0ADEE6A876B03B Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\310BBD7F03EDF50DAFA8B596A8B09EFB Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\3128F8854121BE5154C0BEF8147EDBEB Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\313A9E0A76C06FAD9A8CBC632A057DE6 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\3176B6D284C57E81B461A82CAEE545BF Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\31854A87FEBC81B25B027BD759E10442 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\32270710841372FDB97239F8696CED1A Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\33174C66548E6415FCAB8D4087950C2C Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\336AC5FB1D6938666F5AFEA3D27A4B28 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\342F3F602E5A03106230E309A5A49854 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\34708A461A4555201AD8BECF73A8D0DE Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\353533071CF9BD808BFF39997F02F5B8 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\355DFAA07C98801D90C2C5A2F718DEF4 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\383292FF06E360CA1E24747D9F5B767E Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\3902CED32DB3FB95C9100FEBF2721E59 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\394A8B2CEFEA64A620D8B85ED801460B Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\3989C05F2BEF0CB68F0C1B7C5AFBEE86 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\39D5BDC7A21A751FB38EB2090184A75F Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\3A584E9AC62A5EBE8C4DF4A09DE05D2C Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\3ACD5404FBAB9FA1B9F03D41DD6C9C31 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\3B32821A1F25837B6FE1E9646D62278E Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\3C387222BB0D4F1D926520F84CD93669 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\3C9CFB838C93E698B74D649A792B288D Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\3DF3AAC9A477F5077091ECC27BD0BFD4 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\3DF4828A408835260988BECC76333DB0 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\3E569B82188A9B55203BC0B3FEB36B8D Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\3EF6ADF13606761FC0C56054907C5215 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\3F87B8A66CD0C0A6703E89124EF09E6D Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\4305390BFBCDE66E63E85E9757848F96 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\463DB95422D332FF70905B356E41C8C4 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\4711F290E96105F85A6ADFA44426E768 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\484E22AEEBA0B2E59E1CC59FAD6DA1DC Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\49467E0E0F10ED2FBFBE5DCB26B3FE54 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\4A9F4E09913BDFCA1ABC26A6A0CB669A Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\4AC1ABAD0499B2A0A43C7E77B56370C8 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\4BBDF084A480559666E53A613EA00668 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\4C9E0A5E4B1B61245A750791EDF18A8E Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\4D0E8B9365B9EF2B257A64881F86F693 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\4D4D78F0016072A7B519FDF2F1E3DBDC Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\4DB612201D59E056FCF71D70350942FE Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\4F0BE82595B80AEFF72604AE96D4E2E5 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\4F5E446BD1C48D17160861C5F54D70DC Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\4FC7B0479780DEE865DA9F594ABEDCF4 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\4FE943CFDAEBEAAC7F5DF145E926C32E Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\51635F71A03F7F9D3D6E11BE41DE4FA5 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\5168A701F1C137681722E9AB7A8CA1EA Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\52ED3C3BC6BE451AC555FE0B334F3B1F Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\53282129E8DA29EADFDC4B29C5EF8954 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\532902F42FB37065624D19B4707D248E Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\543090DC9F09FD49BE0C65A778CE7E94 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\5468F9736007305517F29AF4B21F7FD9 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\546B4F2A9B6CB2F657E79F83C92DDCC9 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\5533E3CD5C14D4E5BE38C2B2B9BC9887 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\555A2B1E74494208EE6271CE3E316870 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\56838DE5654359D9621B425AA25AA07E Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\569601FD5D62ECD4D32CCDEF4929BFE5 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\56BACD9B1A717027269219116B6A25F0 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\5709CF4088D39AD2FD581D179C57D73F Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\572AD0309E7D7E4E27ABF12A87671EDA Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\57C4383EBD250913C36018363479006C Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\58B0F5D952C5184B9F122E4E5FA6E6EE Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\59C4E9D980ADC2FB84CA8FF8E3BAE78B Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\5A07B1779A2BAD5AEE50CC3BAB7BD34A Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\5A5EA4BDD70F0EB62D0ED903481141CA Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\5A6547510DC012DA8DD1D788C31BAAF4 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\5B8D99D015DB4A7161C98CB58DD67C17 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\5B97E81246612665472733F530DDFDB4 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\5BD16EB79B916655F3A64C08972C2F24 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\5BEC9099095A92067CC82C1687D6432E Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\5C06B31388768EDBC4E7B51C9E56D825 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\5C45713C2606D4234F07D5CC11800ACA Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\5C93B027040CC1A9227F10717F59377F Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\5D9DD474F4A1B44DF07C5130BFFEB16C Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\5E2A05DF01E6E4F4B9EEDADBD8BE6A45 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\5F7F2656C90C9FB6411AB8F2E5A05933 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\601F5B31DA9B2795F02CE63B085FB3D0 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\6036B233E414B0FC5912E12921D8594E Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\613309B270CFECF9E6CECD17DED93882 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\6158B4DA8AC69CEE45F2AC91FAD17831 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\638E581FB73984C474D36B9270ED0418 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\63F2E54FE231E2BB14F9B5605A5E2F5F Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\64B5EEECEB9A8F1AF6AB90893AF47F73 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\64C6364E7370B8EEB1068F3727336D2F Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\651CB461D67DD397C4051CA82100F42A Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\65C6225140BAA68B34AFDECFAC65F7B5 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\66297474077FB3A1EEBD73C93ADFFAA6 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\668F0A1A30ACC192B2CA32E3BAB6E245 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\66A1AAD9F43F36626351B6CDEFC4DBE8 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\6842E93030B6FE7CDA1EBE71D1EAED4D Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\688C6C27BAE65F58EE1B1272427F080E Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\6A3FDEC6551AC138D772EDB6417E73FF Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\6AE3A1321C05E84EBC89F59D52DABF6E Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\6B1402B1DE5216E82C105380FD896EA0 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\6C69FAAF668F0188DF7AC081476862AE Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\6E21E1E41BE9F7563EC2AF348DDA47DE Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\6E796C03BE1D0A8407BF66795D4B4F42 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\6FE37D9A8BC994BBB36FAFD2E73DF6BA Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\7014A7FC40CFD96F192B1AED1B5B0381 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\703ACAF31DA202E8DDDAF697C164E13C Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\706A5B00A6B20C8770ED04C66A73F1BD Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\7092639B8121CD6450E2B78A33A75547 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\710CA593B7E2AE2E63CEB5A47597F61E Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\71E7F265B873666ABB247712B59F46C7 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\7242B62247B45F6BC894F611A3D7E454 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\7376E90EFD0258B7F0E160749DA077AA Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\74B50CE42AB1513BA2C09CB5F7905C3E Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\75073EA0E66371D418D16B797A020791 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\7605CF48A2D469E2D4D290302410DD31 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\7640614C8AB3DFAD8CC0306ECA969C2E Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\796168BEAFC71C5EDEF7E0B85FC4C60F Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\79814F36D7C509F701A690DE69ED0BD6 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\79A126A388C519100E8CB00A500B3AE1 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\79B711A44120C64E1B030C4AD790787C Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\79F6B39001BE3F00890D2C85ADEE9931 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\7B37594353AA033B0C0CAD096514AD0D Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\7BC635B805A6EE3831FF2D92B7B096CB Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\7BF573906BAF3150483721BF51AE4CED Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\7CDED47C1B1C2FA63B70D5A0CEC3FF42 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\7D298E6B589AE0A7B70D734A10443214 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\7D67DA9066680ECB6707D57DE80C6E10 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\7D72F17A74BDC4A63CDCB8BCF46B2296 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\7D87F8E7CF395CE9ED32CEC82FCA1262 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\7D8E912C1D2BED4ADC364C0A474EC9E4 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\7E3DFA3B757163EF48C5A1F652AFAF77 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\7EBF959CEB97097100A8803D08300A6C Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\7F277DE74596FA3CECFEDBDA863529AF Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\7F3DA6E935FAC9C5A52AF4FCA133CE09 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\810AA1D194FD2C6F0C13C0993C3DCA0A Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\81F8DF93C5C7D8D08E5ADF511C19CAD9 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\82C1788DC5B1407E0FABE4918B8B3A9F Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\834ADCF67E3D838ABF5933FE92BD5509 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\84C8995767304599F1DB39A9C3C46358 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\84DF05F024F7C35077292FE7B4399212 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\86A2D730DB4AB397932C0CEBFE7C0958 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\86B991985E17048E5346F50F24F2BB29 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\86E60AEBA341F463EEAEB83268F5883E Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\87C89A152AB7D647308816C055E09994 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\8916AD7AD52B1192A26C291EA2232678 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\892AC839C56CA39A403551FC7F8CD1CE Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\8957D471340EECE9EAA8D643C6667B8C Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\8999F37D409FDDBFE7AFDCEB7380121D Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\8A177C15E65DA047F7C33932E9DDDA43 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\8A19AD03786C13E8F7FD0B91D8F5E13A Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\8A380A8296A7C69F4C0999BA872225C9 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\8A40304E2F6A0676EF26DEDD73A93057 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\8A6EE05179E82951A977E368A4EA07DE Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\8ABB6009F8A92F8209A47E5EB3A5ADBD Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\8AD7943634B1C1DC378434D7CDA771EA Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\8B2F98342CF4FEA6299B740D36177B97 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\8B54D1E9172C89625352826AD70C3211 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\8B7A0E11EB1FAF7AB307EEEE46E3ACD7 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\8C739B1251BECD572742EAA378078911 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\8CA7F93911BF419CD3CFCAC421184692 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\8DB33CBD89B5304BCD0DA58034ECBC00 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\8DF1CD2CAED49D45ACFA7E98BE1255E3 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\8E4E4FEBBE9C2EB36B19F6FD0AD68C96 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\8EF103C9CEF8AA81F94DB535BE489920 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\8FE65C4329D111D369D9AAFE657AE6ED Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\904B9B633235701602D39A5D4B31026A Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\94627842FC7EA19B47A17740FCBE4B9A Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\94F1424DA58A2F8199E6AA6A6236EE7E Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\954872B32FFC738127885E14FF587D56 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\95B78FE1D924DC0C286E37FE2AF3326E Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\968058C73C53F7A4CA7E776107BEC8FD Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\96BE5E508F1DB4C23616BF0C48F8CFCD Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\978262FC98683FF134926B4E30637E46 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\981E006B1A6D4B5D7EAFDD2DD3BBD06A Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\982F69228E3F7DA789EEE2B9C4976E48 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\98826B4C509F3B1B827672959985B1AA Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\9886F22283E4A12412D0047CD79945F9 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\992F69C9FBBE450AC8A8D3C8CEF668F3 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\9C06178081F363DD7F2D0DD871453CF2 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\9CE3EB3EB9EC3CC7FF24D21A55B89A60 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\9CF49FFB78753457E0B1B598137BE523 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\9D107810ABFFC14253C01B005B66448D Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\9E4215DDCF0E0660C69B086CD5BFA820 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\9ECC82235E41B996D72CE8FABE7D189D Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\9F03557EF5308BBE2A6A4C3C333360A8 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\9F38B8174A893130B3824278B27114D2 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\9F73EC932F1ECF063E08A22B47EE2915 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\9FEA80A51280C9220FB50E25C84151BE Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\A149AFE6D80C229F45A9D9701C770A2E Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\A15DBF53943D456D259D66C6C38F89F5 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\A1EABE8F40B18E8C167158BC793ED76C Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\A1F9A6EA4A590FEB8854C8DA7739EC06 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\A1FF6FC6FF4B4F62200BC682FA21A977 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\A278DD558AD4A7B6760874B0F0E3AFAA Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\A2E52EF261BE936C334E419F7C6F8B8B Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\A372AA7DBE8F210C332232B01AF00DAE Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\A3A8BFB1024AC6242AEC4AD27E5AB780 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\A5A8D36972300438209774C2742B62A5 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\A623CC2F2E672FCDBE2B98E595B0A903 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\A6B823F2D1A21D5608619F7219A8A031 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\A76B01CE0BD460331B4430DCC277FC42 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\A78B637D3257225F4853B2D1FD802FBD Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\A7B1DA5761F878B52C42A51257DDE17A Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\A839D72BEB275A062435AE91215FE328 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\A8EBEE9E723D07A53247402AFE654D83 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\AA7AB8D2CA33FC913839EABA976C63D6 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\AAC4216D0F32EE08808D14CAFDEF4433 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\AB250BE45427369063CF77C053334493 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\AD8F13481026D09ED647A1EE9CB9D005 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\ADF10BA5EF17F04CB65F6D35B3923AD1 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\AE75E0CE8675950C1E9D469238F12DC6 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\AF1228E9041D5E648CF4A90677C89C39 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\AF4F4EB7EF1C6003CDAF32B5E27AC264 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\B0B3EBFE2DD2CA69C6105303988467B0 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\B15DA2C9A260D8EA7B274B4A916D4AE4 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\B1988BC70AB297B8E41FF5AF7D724268 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\B1E0CA4E32840C4A7D70296EFC313066 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\B38441A7EEB669D47BCD748F9423CA7C Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\B425B19AF6DF2D12293C9313425B6C5F Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\B634F90CF95D647F72EE340F787AF266 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\B647032EA0179B6448451D24E8B7130F Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\B64C063D8DF0AFF60E172AEB95C5740B Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\B69EDA2E0BF587E0036B8D322A2D7489 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\B726B1A2D47058DD80BA2D2FD3BECA74 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\B7D09DAD6964999D9B9F468CAC647C3C Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\B8BD1ED95E42FEBFA6678B769609277A Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\B92549E375E65C4D96B996B80C5C640A Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\B95F3372D98F81E6285EF5F1F838C96A Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\BAE464ECF35209196A4C0A079C199622 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\BB2E2A2A9787B1FBE75E3F27958F6807 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\BC8B46BEF737D940DCD223948BA5C2C1 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\BD94837678C66332D34835EDE1AFE590 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\BE8508A822EC498366B0940775DEF6EB Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\BF2C721C192D0CDA07898339D95A4D7D Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\C0246946DCB97382E490AF9134986F15 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\C174DC82897E24EBF4D5D4DD941BC44D Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\C340599050AA9053B43B6D7024FE0370 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\C3469D15BB69B333CC0C25907D23CFEA Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\C38829617B484CE23AB8F0DD093747C0 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\C3D404B4F8C40C4196A823BF1190E193 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\C4407EA2BC79BF3AE1C89433278E4EA0 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\C5AE1EC4C0D55E3873B653FE06947352 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\C7316CE7D9B2A93BE0716F5FEE925FD7 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\C82605120ADBE764C97404004E3E028D Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\C90A865ED394D59CF6A6FE9179BDAED1 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\CAA7F15FA446091D923618591508DE08 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\CB5FFE07FB3E6F001B8753C06E15478A Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\CB9B0028309EB45418B010929BC3D3D7 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\CBC7CB9347BA8B768170FB2AC8B6C1AA Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\CC0F2295F790663F7219EAA07E44CF95 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\CC21237DE1CE2EA542D6946849356DBD Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\CC8780AD5455E23BA93F4E1428F1E00E Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\CC8B8267A7DA676CD6176079EDE9FD27 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\CCBAA95DDAC5CDE02DCAA130A90E6547 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\CCD643C8459611DBA0B9AB0B04C6240F Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\CE93E6E9B136C67EEF9115B88D50606C Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\CF17BD070A2709E0CAD0E6585C13F00F Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\CFC99B7DF2D656B345A04FAAC9FFD5ED Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\D10EAC02CD188D3B97DEA4BA4691E968 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\D1A1AB824AA22CA5755CA464D364D6B0 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\D22C2C0F3B9CD82018FA1893A64099AC Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\D24FE0D069EEB2B7F4EBA743A01DAD71 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\D2D2C12352BB24158BA358F94487FE96 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\D421696026918CDC4167B07FAD4A663B Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\D58C4A95C468E79CE1AEC1A86380B44B Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\D5B0829995C19FF6304D1F4ED7340DC6 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\D7B2FC132CCA81DB0761A54B58EEA6FE Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\D97C28A0F2D8FBE64A797E43898B9B40 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\D9E5FBA05E982028F74EF0E92A67CFDA Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\DA77C68308205A6195A407FC49FB26C3 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\DA8B48762C5826FD718B1BF7EF011DD1 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\DABBE89F12019E6B42A27C9B793D53F8 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\DC2EE7FF243E67F91D2523CABB106753 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\DCBECE1D449E648041BC41856737857D Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\DE45C12025015F32C2EDF81EEA9A2781 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\DF237F95BBF1750ECCEC7E5BD23FA903 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\DFA2A5B2FFA81E0B5496427C79A61C65 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\E0D341C8A05DFBFC9F92A22BA09A544B Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\E168FD30A218EDC23F51B79209355AA0 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\E17A4C635C57F5BB68A3E95AD4D0C3F5 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\E1A0D2B65A09AFE4392DFE04390492B5 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\E2F2E6123C25661B4C8B348CDC83FD1F Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\E3805D818BCEF100032D847186C828EE Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\E3FEA5D9AA668EAB96F0D36C1883EF3B Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\E4E04B4798A0262A8665777E97F9E646 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\E5103D416B0A6782FDC9048DF0BB7D20 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\E66150BD01522D919D7605EC87A45302 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\E73E873321D74C97DC5C9DF24712A475 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\E8FEE221FAE90F83A781974B06579F86 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\EA5C131B1F1C294812F11C958BDAC1B3 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\EA692E8822E93F73B474C5C8F71C0119 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\EA76EA89A4910A9F7F80FD573281D130 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\EC2F5697C73853DA1CB414487555305B Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\ED6948B410DA42A8FBEB5403B1A3D2BE Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\ED8DF53821D92190CBA5945796214A6B Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\ED9A7BE29FA4E406BFDEF72E48191CA3 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\EEA1B5947F80DD79C86CDBD6004E053D Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\EFFF865FE61A31A218C9C4E4445251B1 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\F1B77E2E8F856A76DB55BE20CA1C7157 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\F1FCB4F9251BD9496195774507C49E2C Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\F2059314692CC5653798EE6AF92E0061 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\F24B267DFF67DCF16C01DFC278A2935F Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\F29A05FE02CE8F195C00B4B49115DC23 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\F490367788A781BB37C74F407B2B355F Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\F5E00D8E5D44949666889CB7F066231A Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\F6F07B9AD83CA68A75261A7DD03DD849 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\F79B5BEEE824F3CFA47397D709AC6324 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\F90C45DC4F16277553E3C632127EB815 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\F93C9AB1F2DAF905BDE6D88B69691DA8 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\FA43F5CE5C5D65DB2C7A011CCE80F5C8 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\FADF637A8B65F16BF5BB6EE695CBCB55 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\FBB70B6006690C1B269DA634C8944E8D Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\FBCCC5B81F3AC554D3B68E8CC64086E2 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\FC760C9A152B25ABFCB79430FF0CD6BA Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\FD7F3C67EF38180B4DDED6A87F32902E Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\FDA490E4FAFACCC87D4135C6CBA8F564 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\FE8EE838826C9AF13D0968A128C90D3D Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\FE9593BF25C490D7490B4EE3A7E3FF11 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1\FEF9A7CD3360AECDEF28975A70F66DB2 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1024\0201D205C8 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1024\0201D205D0 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1024\0201D205D8 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1024\0201D2071A Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1024\0201D2071E Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1024\0201D210C2 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1024\0201D212D2 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1024\0201D21391 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1024\0201D21E90 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1024\0201D22674 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1024\0201D243E6 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1024\0201D244E5 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1024\0201E05FCC Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1024\0201E0605E Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1024\0201E073A5 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1024\2B000001B7 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1024\2B0000024C Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1024\2B00000259 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\1024\2B00001F39 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\129\0201D20F60 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\129\0201D21081 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\129\0201D210D1 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\129\0201D21517 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\129\0201D21528 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\129\0201D215E9 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\129\0201D215F1 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\129\0201D216AC Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\129\0201D222B7 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\129\0201D22504 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\129\0201D22630 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\129\0201D22A3B Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\129\0201D23EA8 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\129\0201D2425C Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\129\0201D2530B Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\129\0201D26C55 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\129\0201D2A01A Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\129\0201E00F77 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\129\0201E0182E Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\129\0201E061F2 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\129\0201E075AB Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\129\0201E075BE Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\129\0201E075C0 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\129\0201E075C4 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\129\0201E075C5 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\129\0201E075C6 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\129\0201E075CB Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\129\0201E075CE Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\129\0201E08117 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\129\0201E0884E Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\129\0201E08855 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\129\0201E08857 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\129\2B00001226 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\129\2B000012F4 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\129\2B0000131D Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\129\2B0000158A Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\129\2B0000180C Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\129\2B00001810 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\129\2B00001819 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\129\2B0000181D Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\129\2B0000181F Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\129\2B00001B53 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\129\2B00001BF6 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\129\2B00001D43 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\129\2B00001D98 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\129\2B00001D99 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\129\2B00001EC7 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\129\2B00001F24 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\129\2B00001F56 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\129\2B00001F67 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\130\2B00001EC6 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\131\0201E07B3C Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\131\05696D73656E64 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\131\2B00000C2B Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\131\2B00001055 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\136\20686561727473 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\136\2074726F705F6265616368 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\136\2B00001BF6 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\3\0201D2073B Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\3\0201D21507 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\3\0201D2192C Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\3\0201D2196C Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\3\0201D21D7C Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\3\0201D23EE6 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\3\0201D23EE8 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\3\0201D25DB8 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\3\0201D2784E Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\3\0201D29154 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\3\0201D29BFC Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\3\0201D2A6C9 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\3\0201E010DF Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\3\0201E01103 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\3\0201E01129 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\3\0201E05571 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\3\0201E055A0 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\3\0201E06A66 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\3\0201E07B3C Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\3\05696D73656E64 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\3\056D696C6C696F6E616972653032 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\3\2B0000064D Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\3\2B000009C6 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\3\2B00000A0A Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\3\2B00000C2B Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\3\2B00000EFB Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\3\2B00001055 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\3\2B0000180B Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\3\2B00001818 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\3\2B0000181B Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\3\2B00001B52 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\3\2B00001D44 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\3\2B00001E8A Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\5\0821034D1284A8EA57971D61AE9AAA4F Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\5\206173636969 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\5\206375746562616279 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\5\2067696E676572626F79 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\5\20686F727365 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\5\206C6162646F67 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\5\206D6D626C7565 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\5\20796F6461 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\5\2B00001381 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\5\2B000013CB Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\5\990BBCCFC044864E5C7BC9920C2B21C4 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\96\0201D2073B Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\96\0201D21507 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\96\0201D2192C Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\96\0201D2196C Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\96\0201D21D7C Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\96\0201D23EE6 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\96\0201D23EE8 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\96\0201D25DB8 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\96\0201D2784E Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\96\0201D29154 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\96\0201D29BFC Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\96\0201D2A6C9 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\96\0201E010DF Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\96\0201E01103 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\96\0201E01129 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\96\0201E05571 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\96\0201E055A0 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\96\0201E06A66 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\96\0201E07B3C Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\96\05696D73656E64 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\96\2B0000064D Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\96\2B00000A0A Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\96\2B00000C2B Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\96\2B00000EFB Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\96\2B00001055 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\96\2B0000180B Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\96\2B00001818 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\96\2B0000181B Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\bartcache\96\2B00001B52 Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca12Ste\cert8.db Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca12Ste\key3.db Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca12Ste\secmod.db Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\cert8.db Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\info.htm Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\key3.db Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\Resources\CurrentSettings.xml Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\secmod.db Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim10.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim11.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim1124.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim11B.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim11D.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim12.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim123.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim13.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim137E.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim14.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim15.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim16.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim161.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim163.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim163B.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim164.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim165.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim17A.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim18.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim187.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim18D.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim18E.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim18F.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim19.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim191.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim193.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim194.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim195.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim196.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim197.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim19D8.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim1A.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim1B.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim1B5.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim1BE.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim1C.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim1C0.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim1CD.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim1CE.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim1CF.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim1D.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim1E.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim1E2.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim1E71.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim1E77.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim1E78.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim1E79.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim1E7A.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim1E7D.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim1E7F.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim1E81.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim1E83.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim1E85.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim1E86.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim1E87.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim1E88.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim1E89.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim1E8A.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim1E8B.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim1E8C.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim1E8D.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim1E8E.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim1E8F.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim1E90.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim1E91.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim1E92.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim1E93.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim1E94.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim1EC.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim1ED9.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim1EF.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim1F.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim1F4.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim2.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim20.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim202.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim21.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim219.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim22.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim23.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim24.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim24D.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim24F.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim25.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim26.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim27.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim28.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim284.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim29.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim2A.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim2B.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim2C.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim2D.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim2E.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim2F.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim3.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim30.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim31.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim32.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim33.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim34.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim35.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim36.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim37.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim38.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim39.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim3A.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim3B.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim3C.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim3D.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim3D8.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim3E.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim3F.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim4.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim40.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim41.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim42.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim43.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim46.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim461.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim48.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim483.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim4CC.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim5.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim50C.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim548.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim6.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim6C.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim6EE.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim7.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim79E.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim7CA.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim7CB.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim7CD.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim7CF.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim7D0.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim7E8.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim7E9.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim7EB.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim7EC.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim83B.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim86E.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim8B4.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim8FD.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim9E3.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim9E4.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim9E5.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim9E6.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim9E7.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim9E8.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim9E9.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim9EA.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim9EB.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim9EC.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim9ED.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim9EE.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim9EF.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim9F0.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim9F1.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim9F2.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim9F3.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim9F4.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim9F5.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim9F6.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim9F7.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim9F8.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim9F9.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim9FA.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim9FB.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim9FC.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim9FD.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim9FE.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aim9FF.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aimA00.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aimA01.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aimA02.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aimA03.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aimA04.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aimA05.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aimA06.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aimA07.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aimA08.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aimA09.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aimA3.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aimA3C.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aimA3D.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aimA3E.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aimA3F.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aimA40.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aimA41.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aimA42.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aimA43.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aimA44.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aimA45.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aimA46.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aimA47.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aimA48.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aimA49.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aimA53.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aimA54.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aimA55.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aimA56.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aimA57.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aimA58.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aimA59.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aimA5A.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aimA5B.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aimA5C.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aimA5D.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aimA5E.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aimA5F.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aimA60.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aimA61.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aimA62.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aimA63.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aimA64.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aimA65.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aimA66.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aimAB.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aimB12.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aimB73.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aimD.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aimDDB.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aimDDC.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aimDEC.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aimF.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\aimFD.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\cookie.dat Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\urlcache\urlcache.dat Object is locked skipped

Sprogy · 02-17-2008, 04:09 PM

F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Becca13Ste\userinfo.bag Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ColdNitemares12\cert8.db Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ColdNitemares12\info.htm Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ColdNitemares12\key3.db Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ColdNitemares12\Resources\CurrentSettings.xml Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ColdNitemares12\secmod.db Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ColdNitemares12\urlcache\aim10.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ColdNitemares12\urlcache\aim11.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ColdNitemares12\urlcache\aim12.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ColdNitemares12\urlcache\aim13.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ColdNitemares12\urlcache\aim14.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ColdNitemares12\urlcache\aim15.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ColdNitemares12\urlcache\aim16.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ColdNitemares12\urlcache\aim17.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ColdNitemares12\urlcache\aim18.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ColdNitemares12\urlcache\aim19.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ColdNitemares12\urlcache\aim1A.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ColdNitemares12\urlcache\aim1B.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ColdNitemares12\urlcache\aim1C.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ColdNitemares12\urlcache\aim1D.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ColdNitemares12\urlcache\aim1E.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ColdNitemares12\urlcache\aim1F.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ColdNitemares12\urlcache\aim2.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ColdNitemares12\urlcache\aim20.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ColdNitemares12\urlcache\aim21.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ColdNitemares12\urlcache\aim22.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ColdNitemares12\urlcache\aim23.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ColdNitemares12\urlcache\aim24.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ColdNitemares12\urlcache\aim25.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ColdNitemares12\urlcache\aim26.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ColdNitemares12\urlcache\aim28.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ColdNitemares12\urlcache\aim29.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ColdNitemares12\urlcache\aim2A.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ColdNitemares12\urlcache\aim2B.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ColdNitemares12\urlcache\aim2C.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ColdNitemares12\urlcache\aim2D.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ColdNitemares12\urlcache\aim2E.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ColdNitemares12\urlcache\aim2F.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ColdNitemares12\urlcache\aim3.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ColdNitemares12\urlcache\aim30.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ColdNitemares12\urlcache\aim3A.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ColdNitemares12\urlcache\aim46.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ColdNitemares12\urlcache\aim47.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ColdNitemares12\urlcache\aim48.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ColdNitemares12\urlcache\aim49.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ColdNitemares12\urlcache\aim59.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ColdNitemares12\urlcache\aim6.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ColdNitemares12\urlcache\aim6CB.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ColdNitemares12\urlcache\aim6E.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ColdNitemares12\urlcache\aim7.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ColdNitemares12\urlcache\aim8.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ColdNitemares12\urlcache\aim9.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ColdNitemares12\urlcache\aimA.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ColdNitemares12\urlcache\aimB.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ColdNitemares12\urlcache\aimC.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ColdNitemares12\urlcache\aimD.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ColdNitemares12\urlcache\aimE.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ColdNitemares12\urlcache\aimF.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ColdNitemares12\urlcache\cookie.dat Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ColdNitemares12\urlcache\urlcache.dat Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ColdNitemares12\userinfo.bag Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\GDguitarfreakBP\cert8.db Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\GDguitarfreakBP\info.htm Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\GDguitarfreakBP\key3.db Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\GDguitarfreakBP\Resources\CurrentSettings.xml Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\GDguitarfreakBP\secmod.db Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\GDguitarfreakBP\urlcache\aim11EE.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\GDguitarfreakBP\urlcache\aim1486.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\GDguitarfreakBP\urlcache\aim178.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\GDguitarfreakBP\urlcache\aim225.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\GDguitarfreakBP\urlcache\aim23F.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\GDguitarfreakBP\urlcache\aim240.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\GDguitarfreakBP\urlcache\aim241.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\GDguitarfreakBP\urlcache\aim264.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\GDguitarfreakBP\urlcache\aim266.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\GDguitarfreakBP\urlcache\aim267.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\GDguitarfreakBP\urlcache\aim268.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\GDguitarfreakBP\urlcache\aim269.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\GDguitarfreakBP\urlcache\aim26A.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\GDguitarfreakBP\urlcache\aim2B9.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\GDguitarfreakBP\urlcache\aim2BC.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\GDguitarfreakBP\urlcache\aim2BD.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\GDguitarfreakBP\urlcache\aim2BE.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\GDguitarfreakBP\urlcache\aim2D1.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\GDguitarfreakBP\urlcache\aim2EC.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\GDguitarfreakBP\urlcache\aim30B.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\GDguitarfreakBP\urlcache\aim355.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\GDguitarfreakBP\urlcache\aim368.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\GDguitarfreakBP\urlcache\aim3FE.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\GDguitarfreakBP\urlcache\aim4F4.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\GDguitarfreakBP\urlcache\aim4F5.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\GDguitarfreakBP\urlcache\aim4FA.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\GDguitarfreakBP\urlcache\aim4FB.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\GDguitarfreakBP\urlcache\aim53E.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\GDguitarfreakBP\urlcache\aim6CC.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\GDguitarfreakBP\urlcache\aim8D6.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\GDguitarfreakBP\urlcache\aim8D7.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\GDguitarfreakBP\urlcache\aim8D8.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\GDguitarfreakBP\urlcache\aimA90.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\GDguitarfreakBP\urlcache\aimB25.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\GDguitarfreakBP\urlcache\aimC.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\GDguitarfreakBP\urlcache\aimCBE.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\GDguitarfreakBP\urlcache\aimCEE.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\GDguitarfreakBP\urlcache\cookie.dat Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\GDguitarfreakBP\urlcache\urlcache.dat Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\GDguitarfreakBP\userinfo.bag Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\loserarea\cert8.db Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\loserarea\key3.db Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\loserarea\Resources\CurrentSettings.xml Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\loserarea\secmod.db Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\loserarea\urlcache\aim6CD.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\loserarea\urlcache\aim8EF.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\loserarea\urlcache\aim8F2.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\loserarea\urlcache\aim8F5.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\loserarea\urlcache\aim8F7.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\loserarea\urlcache\aim8F8.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\loserarea\urlcache\aim8F9.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\loserarea\urlcache\cookie.dat Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\loserarea\urlcache\urlcache.dat Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\loserarea\userinfo.bag Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\cert8.db Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\info.htm Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\key3.db Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\Resources\CurrentSettings.xml Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\secmod.db Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim110.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim111.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim112.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim12.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim12D.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim13.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim131.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim13F6.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim13F8.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim13FC.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim14.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim1401.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim1402.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim1403.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim1404.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim1405.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim1407.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim140A.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim140B.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim17.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim18A8.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim1BBC.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim1D3.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim1D5.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim1D6.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim1E42.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim2.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim31.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim35F.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim4.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim471.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim472.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim473.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim474.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim475.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim476.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim477.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim478.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim479.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim47A.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim47B.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim47C.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim48.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim49.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim4CC.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim4CD.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim4CE.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim4CF.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim4D.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim4D0.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim4D1.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim4D2.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim4D3.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim4D4.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim4D5.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim4D6.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim4F.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim50.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim5EE.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim6B6.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim6B7.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim6CE.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim6CF.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim6D0.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim6D1.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim6D2.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim6EA.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim7.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim7FF.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim94.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aim96C.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aimB.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aimB4.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aimB6.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aimB7.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aimB9.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aimBB.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aimBC.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aimBD.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aimC.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aimD.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\aimF.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\cookie.dat Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\urlcache\urlcache.dat Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\ParanoiaSchizo12\userinfo.bag Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\Resources\CurrentSettings.xml Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\cert8.db Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\info.htm Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\key3.db Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\Resources\CurrentSettings.xml Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\secmod.db Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim10.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim10E4.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim1143.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim12B0.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim1469.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim146B.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim181F.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim186B.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim1927.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim1930.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim1932.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim1934.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim1936.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim1937.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim1B5.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim1DFC.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim1F53.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim1F6B.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim1FC.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim1FD.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim1FD4.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim1FE.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim2447.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim2449.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim244C.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim244D.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim244E.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim244F.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim2450.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim2451.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim2452.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim2453.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim2454.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim2455.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim2456.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim2457.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim24FD.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim257.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim276.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim278.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim279.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim27C.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim27D.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim27E.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim27F.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim280.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim281.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim2810.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim282.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim283.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim284.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim285.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim28C.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim2A78.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim2A7A.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim2B90.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim2B91.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim2B92.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim2B93.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim2B94.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim2B95.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim2B96.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim2B97.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim2B98.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim2B99.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim2B9A.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim2B9B.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim2B9C.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim2ED.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim2F5D.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim2F5E.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim3090.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim313E.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim315.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim316.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim317.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim318.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim319.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim31A.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim31B.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim31C.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim31E.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim322.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim325.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim326.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim32E.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim32F.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim330.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim331.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim33E.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim360A.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim360B.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim360D.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim360F.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim3611.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim3612.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim3613.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim3615.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim3617.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim3619.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim361B.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim361C.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim361D.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim361E.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim369F.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim3C9.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim3CA.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim3CC.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim3CE.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim3CF.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim3D0.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim3D1.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim3D2.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim3DB.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim3DC.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim3DE.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim3DF.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim3E0.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim3E1.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim3EA.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim3EB.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim3EC.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim3ED.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim3EE.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim3EF.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim3F0.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim3F2.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim3F4.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim3F6.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim3F7.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim3F8.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim420D.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim420F.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim4210.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim4211.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim4212.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim434.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim4361.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim437.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim43B.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim43D.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim43E.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim43F.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim440.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim441.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim443.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim444.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim445.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim446.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim4AB7.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim4AF1.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim55EE.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim56CB.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim58C9.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim5A7.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim5A8.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim5A9.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim5E.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim5F.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim6.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim654.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim68F.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim690.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim691.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim692.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim693.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim694.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim6D.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim7.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim76B.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim771.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim773.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim8.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim8BB.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim8C.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aim9.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aimA.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aimB.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aimB07.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aimB09.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aimB0A.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aimB0C.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aimB0E.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aimB10.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aimB12.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aimB13.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aimB14.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aimB2E.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aimB3.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aimB7.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aimB7E.tmp Object is locked skipped
F:\Documents and Settings\Becca\Application Data\Aim\tdwsujee\SMAdioSkater12\urlcache\aimB8.tmp Object is locked ski

02-09-2008, 05:51 PM	#2 (permalink)
Sprogy Registered User Join Date: Jan 2008 Posts: 32 OS: XP	Re: rond.starsdoor.com popups, extremely slow computer update: I now have 2 icons which were downloaded onto my desktop named: "Help and Support Center" which is a green shield with a check mark in the middle and another named "Windows Update" which is also a shield with the four colors: red, green, yellow and blue inside. When i clicked on properties it said the target type is http://storageprotector.com

02-09-2008, 06:04 PM	#3 (permalink)
forhockey Analyst, Security Team Join Date: Sep 2006 Location: Ontario, Canada Posts: 2,948 OS: Windows 7 Ultimate	Re: rond.starsdoor.com popups, extremely slow computer Hi Sprogy and welcome to TSF. Please subscribe to this thread so that you are notified when you receive a reply. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Add Subscription. -------------------------------------------------------------- Before beginning the proposed fix, read this post completely. Any questions should be kindly asked before proceeding. Ensure that there are no open browsers when carrying out the procedures below. Save the following instructions in Notepad as this webpage would not be available when you're carrying out the fix. It is IMPORTANT that you don't miss a step & perform everything in the correct order/sequence. -------------------------------------------------------------- Please visit this webpage for instructions for downloading and running ComboFix: http://www.bleepingcomputer.com/comb...o-use-combofix Reply back with the following: C:\ComboFix.txt New DSS Scan (main.txt) __________________ Proud Member of ASAP Proud Member of UNITE Keep this forum alive - if you've been helped at this forum, please do consider a donation. Thank you for your support. Donation link for Tech Support Forum

02-10-2008, 04:25 PM	#6 (permalink)
Sprogy Registered User Join Date: Jan 2008 Posts: 32 OS: XP	Re: rond.starsdoor.com popups, extremely slow computer My computer is still running extremely slow but there are no more popups when i open IE. The desktop hasn't gone blank so there's definitely an improvement. activescan log: Incident Status Location Adware:adware/azesearch Not disinfected Windows Registry Adware:adware/whenusearch Not disinfected Windows Registry Spyware:Cookie/Atwola Not disinfected C:\Deckard\System Scanner\20080209210330\backup\DOCUME~1\User\LOCALS~1\Temp\Cookies\user@atwola[1].txt Spyware:Cookie/Cgi-bin Not disinfected C:\Deckard\System Scanner\20080209210330\backup\DOCUME~1\User\LOCALS~1\Temp\Cookies\user@cgi-bin[3].txt Spyware:Cookie/Com.com Not disinfected C:\Deckard\System Scanner\20080209210330\backup\DOCUME~1\User\LOCALS~1\Temp\Cookies\user@com[1].txt Spyware:Cookie/360i Not disinfected C:\Deckard\System Scanner\20080209210330\backup\DOCUME~1\User\LOCALS~1\Temp\Cookies\user@ct.360i[2].txt Spyware:Cookie/did-it Not disinfected C:\Deckard\System Scanner\20080209210330\backup\DOCUME~1\User\LOCALS~1\Temp\Cookies\user@did-it[1].txt Spyware:Cookie/Go Not disinfected C:\Deckard\System Scanner\20080209210330\backup\DOCUME~1\User\LOCALS~1\Temp\Cookies\user@go[1].txt Spyware:Cookie/Target Not disinfected C:\Deckard\System Scanner\20080209210330\backup\DOCUME~1\User\LOCALS~1\Temp\Cookies\user@target[2].txt Virus:Trj/Downloader.PLF Disinfected C:\Deckard\System Scanner\20080209210330\backup\DOCUME~1\User\LOCALS~1\Temp\snapsnet.exe Virus:Trj/Downloader.MDW Disinfected C:\Deckard\System Scanner\20080209210330\backup\WINDOWS\Downloaded Program Files\popcaploader.dll Spyware:Cookie/Atwola Not disinfected C:\Documents and Settings\Becca\Cookies\becca@atwola[2].txt Spyware:Cookie/Com.com Not disinfected C:\Documents and Settings\Becca\Cookies\becca@com[2].txt Spyware:Cookie/Adrevolver Not disinfected C:\Documents and Settings\User\Cookies\user@adrevolver[3].txt Spyware:Cookie/AdvancedCleaner Not disinfected C:\Documents and Settings\User\Cookies\user@advancedcleaner[1].txt Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\User\Cookies\user@atdmt[2].txt Spyware:Cookie/Com.com Not disinfected C:\Documents and Settings\User\Cookies\user@com[1].txt Spyware:Cookie/Doubleclick Not disinfected C:\Documents and Settings\User\Cookies\user@doubleclick[2].txt Spyware:Cookie/Enhance Not disinfected C:\Documents and Settings\User\Cookies\user@enhance[2].txt Spyware:Cookie/Tribalfusion Not disinfected C:\Documents and Settings\User\Cookies\user@tribalfusion[2].txt Potentially unwanted tool:Application/NirCmd.A Not disinfected C:\Documents and Settings\User\Desktop\ComboFix.exe[327882R2FWJFW\nircmd.com] Potentially unwanted tool:Application/NirCmd.A Not disinfected C:\Documents and Settings\User\Desktop\ComboFix.exe[327882R2FWJFW\nircmd.cfexe] Adware:Adware/Trymedia Not disinfected C:\Downloads\ApprenticeSetup-dm[1].exe Adware:Adware/Trymedia Not disinfected C:\Downloads\DinerDashSetup-dm[1].exe Adware:Adware/Trymedia Not disinfected C:\Downloads\MonopolyHNSetup-dm[1].exe Adware:Adware/Trymedia Not disinfected C:\Downloads\RiskIISetup-dm[1].exe Adware:Adware/Trymedia Not disinfected C:\Downloads\TheGameOfLife-dm[1].exe Potentially unwanted tool:Application/NirCmd.A Not disinfected C:\WINDOWS\Nircmd.exe Spyware:Cookie/64.62.232 Not disinfected F:\Documents and Settings\Becca\Cookies\becca@64.62.232[5].txt Spyware:Cookie/YieldManager Not disinfected F:\Documents and Settings\Becca\Cookies\becca@ad.yieldmanager[1].txt Spyware:Cookie/Hbmediapro Not disinfected F:\Documents and Settings\Becca\Cookies\becca@adopt.hbmediapro[2].txt Spyware:Cookie/Advertising Not disinfected F:\Documents and Settings\Becca\Cookies\becca@advertising[1].txt Spyware:Cookie/Belnk Not disinfected F:\Documents and Settings\Becca\Cookies\becca@ath.belnk[1].txt Spyware:Cookie/Atwola Not disinfected F:\Documents and Settings\Becca\Cookies\becca@atwola[2].txt Spyware:Cookie/Banner Not disinfected F:\Documents and Settings\Becca\Cookies\becca@banner[1].txt Spyware:Cookie/Belnk Not disinfected F:\Documents and Settings\Becca\Cookies\becca@belnk[2].txt Spyware:Cookie/BurstNet Not disinfected F:\Documents and Settings\Becca\Cookies\becca@burstnet[1].txt Spyware:Cookie/GoStats Not disinfected F:\Documents and Settings\Becca\Cookies\becca@c2.gostats[2].txt Spyware:Cookie/Com.com Not disinfected F:\Documents and Settings\Becca\Cookies\becca@com[2].txt Spyware:Cookie/360i Not disinfected F:\Documents and Settings\Becca\Cookies\becca@ct.360i[2].txt Spyware:Cookie/Belnk Not disinfected F:\Documents and Settings\Becca\Cookies\becca@dist.belnk[1].txt Spyware:Cookie/Go Not disinfected F:\Documents and Settings\Becca\Cookies\becca@go[2].txt Spyware:Cookie/Screensavers Not disinfected F:\Documents and Settings\Becca\Cookies\becca@i.screensavers[1].txt Spyware:Cookie/OfferOptimizer Not disinfected F:\Documents and Settings\Becca\Cookies\becca@offeroptimizer[1].txt Spyware:Cookie/Paypopup Not disinfected F:\Documents and Settings\Becca\Cookies\becca@paypopup[1].txt Spyware:Cookie/Searchportal Not disinfected F:\Documents and Settings\Becca\Cookies\becca@searchportal.information[1].txt Spyware:Cookie/Toplist Not disinfected F:\Documents and Settings\Becca\Cookies\becca@toplist[1].txt Spyware:Cookie/BurstBeacon Not disinfected F:\Documents and Settings\Becca\Cookies\becca@www.burstbeacon[2].txt Spyware:Cookie/Yadro Not disinfected F:\Documents and Settings\Becca\Cookies\becca@yadro[2].txt Adware:Adware/IST.YourSiteBar Not disinfected F:\Documents and Settings\Becca\Local Settings\Temporary Internet Files\Content.IE5\I9OJYXQ5\CAXRI8JY.HTM Adware:Adware/IST.YourSiteBar Not disinfected F:\Documents and Settings\Becca\Local Settings\Temporary Internet Files\Content.IE5\S5UVKXAZ\CAJKKRUY.HTM Adware:Adware/IST.YourSiteBar Not disinfected F:\Documents and Settings\Becca\Local Settings\Temporary Internet Files\Content.IE5\S5UVKXAZ\CAWNQXQN.HTM Adware:Adware/IST.YourSiteBar Not disinfected F:\Documents and Settings\Becca\Local Settings\Temporary Internet Files\Content.IE5\WLAN0D6R\CAKD2RC9.HTM Spyware:Cookie/Media-motor Not disinfected F:\Documents and Settings\LocalService\Cookies\system@mmm.media-motor[1].txt Spyware:Spyware/Media-motor Not disinfected F:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\K94KUDKC\joysaver[1].cab[m67m.inf] Spyware:Cookie/Hbmediapro Not disinfected F:\Documents and Settings\User\Cookies\user@adopt.hbmediapro[1].txt Spyware:Cookie/Banner Not disinfected F:\Documents and Settings\User\Cookies\user@banner[1].txt Spyware:Cookie/Com.com Not disinfected F:\Documents and Settings\User\Cookies\user@com[2].txt Spyware:Cookie/360i Not disinfected F:\Documents and Settings\User\Cookies\user@ct.360i[1].txt Spyware:Cookie/Go Not disinfected F:\Documents and Settings\User\Cookies\user@go[2].txt Spyware:Cookie/Screensavers Not disinfected F:\Documents and Settings\User\Cookies\user@i.screensavers[2].txt Spyware:Cookie/Target Not disinfected F:\Documents and Settings\User\Cookies\user@target[1].txt Spyware:Cookie/Toplist Not disinfected F:\Documents and Settings\User\Cookies\user@toplist[2].txt Spyware:Cookie/WinFixer Not disinfected F:\Documents and Settings\User\Cookies\user@winfixer[1].txt Possible Virus. Not disinfected F:\Program Files\InstallShield Installation Information\{C98F2FE6-5AF5-11D6-8209-00D0B701C7B5}\Setup.exe Virus:Trj/Lowzones.TG Disinfected F:\System Volume Information\_restore{07AC9A18-6490-490F-ADDB-07AD86663B48}\RP431\A0048603.exe Virus:Trj/Lowzones.TG Disinfected F:\System Volume Information\_restore{07AC9A18-6490-490F-ADDB-07AD86663B48}\RP431\A0048619.exe Virus:Trj/Lowzones.LF Disinfected F:\System Volume Information\_restore{07AC9A18-6490-490F-ADDB-07AD86663B48}\RP431\A0048621.exe Virus:Trj/Lowzones.QY Disinfected F:\System Volume Information\_restore{07AC9A18-6490-490F-ADDB-07AD86663B48}\RP437\A0048695.exe Virus:Trj/Lowzones.TG Disinfected F:\System Volume Information\_restore{07AC9A18-6490-490F-ADDB-07AD86663B48}\RP437\A0048696.exe Adware:Adware/DollarRevenue Not disinfected F:\System Volume Information\_restore{07AC9A18-6490-490F-ADDB-07AD86663B48}\RP441\A0048733.exe Virus:Trj/Lowzones.QY Disinfected F:\System Volume Information\_restore{07AC9A18-6490-490F-ADDB-07AD86663B48}\RP441\A0048734.exe Virus:Trj/Lowzones.QY Disinfected F:\System Volume Information\_restore{07AC9A18-6490-490F-ADDB-07AD86663B48}\RP441\A0048893.exe =======================+++++++++++++++++++++================= combofix log: ComboFix 08-02.05.3 - User 2008-02-10 8:15:44.2 - NTFSx86 Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.197 [GMT -6:00] Running from: C:\Documents and Settings\User\Desktop\ComboFix.exe Command switches used :: C:\Documents and Settings\User\Desktop\CFScript.txt * Created a new restore point FILE C:\WINDOWS\mrofinu572.exe.tmp . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . C:\Program Files\Drmupgds C:\temp\isgTi19 C:\WINDOWS\mrofinu572.exe.tmp C:\WINDOWS\system32\nGpxx01 . ((((((((((((((((((((((((( Files Created from 2008-01-10 to 2008-02-10 ))))))))))))))))))))))))))))))) . 2008-02-09 20:41 . 2004-08-03 23:00 260,272 --a------ C:\cmldr 2008-02-09 20:34 . 2004-08-04 06:00 388,608 --a------ C:\kmd.exe 2008-02-09 17:25 . 2008-02-09 22:17 <DIR> d-------- C:\Program Files\Norton 360 2008-02-09 17:21 . 2008-02-09 21:51 123,952 --a------ C:\WINDOWS\system32\drivers\SYMEVENT.SYS 2008-02-09 17:21 . 2008-02-09 21:51 60,800 --a------ C:\WINDOWS\system32\S32EVNT1.DLL 2008-02-09 17:21 . 2008-02-09 21:51 10,740 --a------ C:\WINDOWS\system32\drivers\SYMEVENT.CAT 2008-02-09 17:21 . 2008-02-09 21:51 805 --a------ C:\WINDOWS\system32\drivers\SYMEVENT.INF 2008-02-09 16:36 . 2008-02-09 16:36 <DIR> d-------- C:\Documents and Settings\All Users\Symantec Temporary Files 2008-02-08 17:01 . 2008-02-08 17:01 <DIR> d-------- C:\Deckard 2008-02-08 16:48 . 2008-02-08 16:48 <DIR> d-------- C:\Program Files\Trend Micro 2008-02-06 13:36 . 2008-02-06 13:39 <DIR> d-------- C:\Program Files\CCleaner 2008-02-02 17:29 . 2008-02-02 17:29 <DIR> d-------- C:\Documents and Settings\User\Application Data\Grisoft 2008-02-02 17:29 . 2008-02-02 17:29 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Grisoft 2008-02-02 17:29 . 2007-05-30 06:10 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys 2008-01-13 11:35 . 2008-01-22 16:40 54,156 --ah----- C:\WINDOWS\QTFont.qfn 2008-01-13 11:35 . 2008-01-13 11:35 1,409 --a------ C:\WINDOWS\QTFont.for . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2008-02-10 14:12 --------- d-----w C:\Documents and Settings\All Users\Application Data\Viewpoint 2008-02-10 14:11 --------- d-----w C:\Program Files\Common Files\Symantec Shared 2008-02-10 14:05 --------- d-----w C:\Documents and Settings\All Users\Application Data\Symantec 2008-02-10 03:51 --------- d-----w C:\Program Files\Symantec 2008-02-10 03:22 --------- d-----w C:\Documents and Settings\User\Application Data\Symantec 2008-02-09 22:55 --------- d-----w C:\Program Files\Norton AntiVirus 2008-02-09 02:06 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy 2008-02-06 02:07 23,586 ----a-w C:\Documents and Settings\User\Application Data\wklnhst.dat 2008-01-31 22:55 --------- d-----w C:\Documents and Settings\User\Application Data\Move Networks 2008-01-27 20:54 --------- d-----w C:\Documents and Settings\User\Application Data\Intuit 2008-01-27 20:50 --------- d--h--w C:\Program Files\InstallShield Installation Information 2008-01-27 20:50 --------- d-----w C:\Program Files\Common Files\AnswerWorks 4.0 2008-01-27 20:30 --------- d-----w C:\Program Files\TurboTax 2008-01-15 15:54 10,537 ----a-w C:\WINDOWS\system32\drivers\COH_Mon.cat 2008-01-15 11:28 706 ----a-w C:\WINDOWS\system32\drivers\COH_Mon.inf 2008-01-13 00:32 23,904 ----a-w C:\WINDOWS\system32\drivers\COH_Mon.sys 2007-12-28 19:59 --------- d--h--r C:\Documents and Settings\User\Application Data\SecuROM 2007-12-28 19:37 --------- d-----w C:\Program Files\EA GAMES 2007-12-25 04:07 --------- d-----w C:\Program Files\Shockwave.com 2007-12-25 04:05 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP 2007-12-25 03:02 --------- d-----w C:\Documents and Settings\All Users\Application Data\Shockwave 2007-12-23 18:48 --------- d-----w C:\Documents and Settings\User\Application Data\Home Sweet Home 2007-12-20 09:01 --------- d-----w C:\Program Files\Microsoft CAPICOM 2.1.0.2 2007-12-20 09:01 --------- d-----w C:\Documents and Settings\All Users\Application Data\Microsoft Help 2007-12-20 01:14 --------- d-----w C:\Program Files\Microsoft Works 2007-12-20 01:13 --------- d-----w C:\Program Files\Microsoft.NET 2007-09-24 22:54 112,664 ----a-w C:\Documents and Settings\User\Application Data\GDIPFONTCACHEV1.DAT 2006-03-26 21:11 774,144 ----a-w C:\Program Files\RngInterstitial.dll 2005-05-12 04:36 12,288 ----a-w C:\WINDOWS\Fonts\RandFont.dll 2007-07-30 18:30 104 --sh--r C:\WINDOWS\system32\869C478DF7.sys 2007-07-30 18:30 3,766 --sha-w C:\WINDOWS\system32\KGyGaAvL.sys . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . Note empty entries & legit default entries are not shown REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "MsnMsgr"="C:\Program Files\MSN Messenger\MsnMsgr.exe" [ ] "PhotoShow Deluxe Media Manager"="C:\PROGRA~1\Nero\data\Xtras\mssysmgr.exe" [2004-11-11 19:50 212992] "MoneyAgent"="C:\Program Files\Microsoft Money\System\mnyexpr.exe" [ ] "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 06:00 15360] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTHelper"="CTHELPER.EXE" [2006-02-06 15:31 28672 C:\WINDOWS\system32\cthelper.exe] "Fix-It AV"="C:\PROGRA~1\VCOM\Fix-It\MemCheck.exe" [2006-04-27 18:46 32768] "HPHUPD05"="C:\Program Files\Hewlett-Packard\\{5372B9A6-6E51-4f90-9B40-E0A3B8475C4E}\hphupd05.exe" [2005-07-07 22:55 49152] "HP Component Manager"="C:\Program Files\HP\hpcoretech\hpcmpmgr.exe" [2003-12-22 08:38 241664] "HPHmon05"="C:\WINDOWS\system32\hphmon05.exe" [2005-07-07 22:55 491520] "HPDJ Taskbar Utility"="C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe" [2005-07-07 22:55 176128] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe" [2005-11-10 13:03 36975] "RemoteControl"="C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" [2004-06-28 21:29 32768] "TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [2006-12-28 21:54 185896] "InCD"="C:\Program Files\Ahead\InCD\InCD.exe" [2005-01-27 11:17 1381376] "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-04-27 08:41 282624] "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2007-06-01 15:51 257088] "NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2006-01-12 16:40 155648] "Symantec PIF AlertEng"="C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" [2007-11-28 19:51 583048] "!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 03:25 6731312] "ccApp"="C:\Program Files\Common Files\Symantec Shared\ccApp.exe" [2007-07-17 19:54 116072] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "swg"="C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe" [2007-07-01 21:09 171448] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce] "SetDefaultMidi"="MIDIDEF.EXE" [2006-02-06 15:31 49152 C:\WINDOWS\mididef.exe] C:\Documents and Settings\User\Start Menu\Programs\Startup\ V CAST Music Monitor.lnk - C:\Program Files\Verizon Wireless\V CAST Music Essentials Manager\V CAST Music Monitor.exe [2007-02-20 18:57:33 446464] C:\Documents and Settings\All Users\Start Menu\Programs\Startup\ Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-09-23 22:05:26 29696] HP Digital Imaging Monitor.lnk - C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe [2005-05-11 22:23:26 282624] HP Image Zone Fast Start.lnk - C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqthb08.exe [2005-05-11 23:49:24 73728] Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 01:01:04 83360] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system] "DisableRegistryTools"= 0 (0x0) R2 Fix-It Task Manager;Fix-It Task Manager;C:\PROGRA~1\VCOM\Fix-It\mxtask.exe [2006-04-27 18:46] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d99fbf9a-63a7-11db-98de-000cf179c98d}] \Shell\AutoRun\command - L:\JDSecure\Windows\JDSecure31.exe Newly Created Service - COMHOST . Contents of the 'Scheduled Tasks' folder "2008-02-04 19:44:02 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job" - C:\Program Files\Apple Software Update\SoftwareUpdate.exe . ************************************************************************ catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-02-10 08:35:22 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ********************************************************************** . ------------------------ Other Running Processes ------------------------ . C:\Program Files\Ahead\InCD\InCDsrv.exe C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe C:\Program Files\Common Files\Lanovation\PrismXL\PRISMXL.SYS C:\WINDOWS\system32\HPZipm12.exe C:\Program Files\iPod\bin\iPodService.exe C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqSTE08.exe C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqimzone.exe C:\Program Files\Hewlett-Packard\Digital Imaging\Product Assistant\bin\hprblog.exe C:\Program Files\Symantec\LiveUpdate\AUPDATE.EXE C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE C:\Program Files\Symantec\LiveUpdate\LuCallbackProxy.exe C:\Program Files\Java\jre1.5.0_06\bin\jucheck.exe . ************************************************************************ . Completion time: 2008-02-10 8:46:36 - machine was rebooted ComboFix-quarantined-files.txt 2008-02-10 14:46:17 ComboFix2.txt 2008-02-10 03:01:31 . 2008-01-09 09:03:40 --- E O F ---

02-11-2008, 06:21 PM	#8 (permalink)
Sprogy Registered User Join Date: Jan 2008 Posts: 32 OS: XP	Re: rond.starsdoor.com popups, extremely slow computer My computer is definitely faster than it was before. Other than that, its about the same as it was last time i posted. avg log: --------------------------------------------------------- AVG Anti-Spyware - Scan Report --------------------------------------------------------- + Created at: 6:04:14 PM 2/11/2008 + Scan result: C:\System Volume Information\_restore{CA1D12D3-1DDE-498D-B318-3EB58F189484}\RP737\A0048686.exe -> Adware.180Solutions : Cleaned with backup (quarantined). C:\System Volume Information\_restore{CA1D12D3-1DDE-498D-B318-3EB58F189484}\RP737\A0048687.exe -> Adware.180Solutions : Cleaned with backup (quarantined). F:\System Volume Information\_restore{CA1D12D3-1DDE-498D-B318-3EB58F189484}\RP737\A0048690.ocx -> Adware.Coupons : Cleaned with backup (quarantined). C:\System Volume Information\_restore{CA1D12D3-1DDE-498D-B318-3EB58F189484}\RP737\A0048688.exe -> Adware.HotBar : Cleaned with backup (quarantined). F:\System Volume Information\_restore{CA1D12D3-1DDE-498D-B318-3EB58F189484}\RP737\A0048689.inf -> Adware.WebHancer : Cleaned with backup (quarantined). F:\System Volume Information\_restore{07AC9A18-6490-490F-ADDB-07AD86663B48}\RP441\A0048733.exe -> Downloader.Adload.j : Cleaned with backup (quarantined). C:\System Volume Information\_restore{CA1D12D3-1DDE-498D-B318-3EB58F189484}\RP739\A0049409.exe -> Downloader.Adload.qy : Cleaned with backup (quarantined). C:\QooBox\Quarantine\C\WINDOWS\b122.exe.vir -> Downloader.Agent.haq : Cleaned with backup (quarantined). C:\System Volume Information\_restore{CA1D12D3-1DDE-498D-B318-3EB58F189484}\RP739\A0049239.exe -> Downloader.Agent.haq : Cleaned with backup (quarantined). C:\System Volume Information\_restore{CA1D12D3-1DDE-498D-B318-3EB58F189484}\RP731\A0047240.exe -> Downloader.Agent.idv : Cleaned with backup (quarantined). C:\System Volume Information\_restore{CA1D12D3-1DDE-498D-B318-3EB58F189484}\RP737\A0049177.exe -> Downloader.Agent.idv : Cleaned with backup (quarantined). C:\Deckard\System Scanner\20080209210330\backup\DOCUME~1\User\LOCALS~1\Temp\removalfile.bat -> Not-A-Virus.Adware.Virtumonde : Cleaned with backup (quarantined). F:\RECYCLER\S-1-5-21-1060284298-1637723038-839522115-1004\Dc21147.bat -> Not-A-Virus.Adware.Virtumonde : Cleaned with backup (quarantined). C:\Documents and Settings\User\Cookies\user@pandasoftware.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned. C:\Documents and Settings\User\Cookies\user@advertising[2].txt -> TrackingCookie.Advertising : Cleaned. C:\Documents and Settings\User\Cookies\user@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned. C:\Documents and Settings\User\Cookies\user@casalemedia[2].txt -> TrackingCookie.Casalemedia : Cleaned. C:\Documents and Settings\User\Cookies\user@doubleclick[2].txt -> TrackingCookie.Doubleclick : Cleaned. C:\Documents and Settings\User\Cookies\user@enhance[2].txt -> TrackingCookie.Enhance : Cleaned. C:\Documents and Settings\User\Cookies\user@mediaplex[1].txt -> TrackingCookie.Mediaplex : Cleaned. C:\Documents and Settings\User\Cookies\user@ads.pointroll[1].txt -> TrackingCookie.Pointroll : Cleaned. C:\Documents and Settings\User\Cookies\user@statcounter[1].txt -> TrackingCookie.Statcounter : Cleaned. C:\Documents and Settings\User\Cookies\user@tribalfusion[2].txt -> TrackingCookie.Tribalfusion : Cleaned. C:\Documents and Settings\User\Cookies\user@m.webtrends[1].txt -> TrackingCookie.Webtrends : Cleaned. ::Report end ===================++++++++++++++++++++================= combofix log: ComboFix 08-02.05.3 - User 2008-02-11 18:24:10.3 - NTFSx86 Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.164 [GMT -6:00] Running from: C:\Documents and Settings\User\Desktop\ComboFix.exe Command switches used :: C:\Documents and Settings\User\Desktop\CFScript.txt * Created a new restore point FILE C:\Downloads\ApprenticeSetup-dm[1].exe C:\Downloads\DinerDashSetup-dm[1].exe C:\Downloads\MonopolyHNSetup-dm[1].exe C:\Downloads\RiskIISetup-dm[1].exe C:\Downloads\TheGameOfLife-dm[1].exe F:\Documents and Settings\Becca\Local Settings\Temporary Internet Files\Content.IE5\I9OJYXQ5\CAXRI8JY.HTM F:\Documents and Settings\Becca\Local Settings\Temporary Internet Files\Content.IE5\S5UVKXAZ\CAJKKRUY.HTM F:\Documents and Settings\Becca\Local Settings\Temporary Internet Files\Content.IE5\S5UVKXAZ\CAWNQXQN.HTM F:\Documents and Settings\Becca\Local Settings\Temporary Internet Files\Content.IE5\WLAN0D6R\CAKD2RC9.HTM F:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\K94KUDKC\joysaver[1].cab F:\Program Files\InstallShield Installation Information\{C98F2FE6-5AF5-11D6-8209-00D0B701C7B5}\Setup.exe . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . C:\Documents and Settings\All Users\Application Data\Viewpoint C:\Downloads\ApprenticeSetup-dm[1].exe C:\Downloads\DinerDashSetup-dm[1].exe C:\Downloads\MonopolyHNSetup-dm[1].exe C:\Downloads\RiskIISetup-dm[1].exe C:\Downloads\TheGameOfLife-dm[1].exe F:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\K94KUDKC\joysaver[1].cab F:\Program Files\InstallShield Installation Information\{C98F2FE6-5AF5-11D6-8209-00D0B701C7B5}\Setup.exe . ((((((((((((((((((((((((( Files Created from 2008-01-12 to 2008-02-12 ))))))))))))))))))))))))))))))) . 2008-02-11 15:26 . 2008-02-11 15:26 552 --a------ C:\WINDOWS\system32\d3d8caps.dat 2008-02-10 09:06 . 2007-06-05 10:56 44,928 --a------ C:\WINDOWS\system32\drivers\SDTHOOK.SYS 2008-02-10 08:52 . 2008-02-10 10:19 <DIR> d-------- C:\WINDOWS\system32\ActiveScan 2008-02-10 08:52 . 2008-02-10 08:52 30,590 --a------ C:\WINDOWS\system32\pavas.ico 2008-02-10 08:52 . 2008-02-10 08:52 2,550 --a------ C:\WINDOWS\system32\Uninstall.ico 2008-02-10 08:52 . 2008-02-10 08:52 1,406 --a------ C:\WINDOWS\system32\Help.ico 2008-02-10 08:13 . 2004-08-04 06:00 388,608 --a------ C:\kmd.exe 2008-02-09 20:41 . 2004-08-03 23:00 260,272 --a------ C:\cmldr 2008-02-09 17:25 . 2008-02-10 10:06 <DIR> d-------- C:\Program Files\Norton 360 2008-02-09 17:21 . 2008-02-09 21:51 123,952 --a------ C:\WINDOWS\system32\drivers\SYMEVENT.SYS 2008-02-09 17:21 . 2008-02-09 21:51 60,800 --a------ C:\WINDOWS\system32\S32EVNT1.DLL 2008-02-09 17:21 . 2008-02-09 21:51 10,740 --a------ C:\WINDOWS\system32\drivers\SYMEVENT.CAT 2008-02-09 17:21 . 2008-02-09 21:51 805 --a------ C:\WINDOWS\system32\drivers\SYMEVENT.INF 2008-02-09 16:36 . 2008-02-09 16:36 <DIR> d-------- C:\Documents and Settings\All Users\Symantec Temporary Files 2008-02-08 17:01 . 2008-02-08 17:01 <DIR> d-------- C:\Deckard 2008-02-08 16:48 . 2008-02-08 16:48 <DIR> d-------- C:\Program Files\Trend Micro 2008-02-06 13:36 . 2008-02-06 13:39 <DIR> d-------- C:\Program Files\CCleaner 2008-02-02 17:29 . 2008-02-02 17:29 <DIR> d-------- C:\Documents and Settings\User\Application Data\Grisoft 2008-02-02 17:29 . 2008-02-02 17:29 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Grisoft 2008-02-02 17:29 . 2007-05-30 06:10 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys 2008-01-13 11:35 . 2008-01-22 16:40 54,156 --ah----- C:\WINDOWS\QTFont.qfn 2008-01-13 11:35 . 2008-01-13 11:35 1,409 --a------ C:\WINDOWS\QTFont.for . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2008-02-12 00:07 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy 2008-02-11 21:01 --------- d-----w C:\Documents and Settings\All Users\Application Data\Symantec 2008-02-11 19:44 --------- d-----w C:\Program Files\Common Files\Symantec Shared 2008-02-10 16:07 --------- d-----w C:\Program Files\Spybot - Search & Destroy 2008-02-10 16:06 --------- d-----w C:\Program Files\QuickTime 2008-02-10 15:58 --------- d-----r C:\Program Files\iTunes 2008-02-10 15:55 --------- d-----w C:\Program Files\Google 2008-02-10 03:51 --------- d-----w C:\Program Files\Symantec 2008-02-10 03:22 --------- d-----w C:\Documents and Settings\User\Application Data\Symantec 2008-02-09 22:55 --------- d-----w C:\Program Files\Norton AntiVirus 2008-02-06 02:07 23,586 ----a-w C:\Documents and Settings\User\Application Data\wklnhst.dat 2008-01-31 22:55 --------- d-----w C:\Documents and Settings\User\Application Data\Move Networks 2008-01-27 20:54 --------- d-----w C:\Documents and Settings\User\Application Data\Intuit 2008-01-27 20:50 --------- d--h--w C:\Program Files\InstallShield Installation Information 2008-01-27 20:50 --------- d-----w C:\Program Files\Common Files\AnswerWorks 4.0 2008-01-27 20:30 --------- d-----w C:\Program Files\TurboTax 2008-01-15 15:54 10,537 ----a-w C:\WINDOWS\system32\drivers\COH_Mon.cat 2008-01-15 11:28 706 ----a-w C:\WINDOWS\system32\drivers\COH_Mon.inf 2008-01-13 00:32 23,904 ----a-w C:\WINDOWS\system32\drivers\COH_Mon.sys 2007-12-28 19:59 --------- d--h--r C:\Documents and Settings\User\Application Data\SecuROM 2007-12-28 19:37 --------- d-----w C:\Program Files\EA GAMES 2007-12-25 04:07 --------- d-----w C:\Program Files\Shockwave.com 2007-12-25 04:05 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP 2007-12-25 03:02 --------- d-----w C:\Documents and Settings\All Users\Application Data\Shockwave 2007-12-23 18:48 --------- d-----w C:\Documents and Settings\User\Application Data\Home Sweet Home 2007-12-20 09:01 --------- d-----w C:\Program Files\Microsoft CAPICOM 2.1.0.2 2007-12-20 09:01 --------- d-----w C:\Documents and Settings\All Users\Application Data\Microsoft Help 2007-12-20 01:14 --------- d-----w C:\Program Files\Microsoft Works 2007-12-20 01:13 --------- d-----w C:\Program Files\Microsoft.NET 2007-09-24 22:54 112,664 ----a-w C:\Documents and Settings\User\Application Data\GDIPFONTCACHEV1.DAT 2006-03-26 21:11 774,144 ----a-w C:\Program Files\RngInterstitial.dll 2005-05-12 04:36 12,288 ----a-w C:\WINDOWS\Fonts\RandFont.dll 2007-07-30 18:30 104 --sh--r C:\WINDOWS\system32\869C478DF7.sys 2007-07-30 18:30 3,766 --sha-w C:\WINDOWS\system32\KGyGaAvL.sys . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . Note empty entries & legit default entries are not shown REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "PhotoShow Deluxe Media Manager"="C:\PROGRA~1\Nero\data\Xtras\mssysmgr.exe" [2004-11-11 19:50 212992] "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 06:00 15360] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTHelper"="CTHELPER.EXE" [2006-02-06 15:31 28672 C:\WINDOWS\system32\cthelper.exe] "Fix-It AV"="C:\PROGRA~1\VCOM\Fix-It\MemCheck.exe" [2006-04-27 18:46 32768] "HPHUPD05"="C:\Program Files\Hewlett-Packard\\{5372B9A6-6E51-4f90-9B40-E0A3B8475C4E}\hphupd05.exe" [2005-07-07 22:55 49152] "HP Component Manager"="C:\Program Files\HP\hpcoretech\hpcmpmgr.exe" [2003-12-22 08:38 241664] "HPHmon05"="C:\WINDOWS\system32\hphmon05.exe" [2005-07-07 22:55 491520] "HPDJ Taskbar Utility"="C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe" [2005-07-07 22:55 176128] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe" [2005-11-10 13:03 36975] "RemoteControl"="C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" [2004-06-28 21:29 32768] "TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [2006-12-28 21:54 185896] "InCD"="C:\Program Files\Ahead\InCD\InCD.exe" [2005-01-27 11:17 1381376] "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-04-27 08:41 282624] "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2007-06-01 15:51 257088] "NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2006-01-12 16:40 155648] "Symantec PIF AlertEng"="C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" [2007-11-28 19:51 583048] "!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 03:25 6731312] "ccApp"="C:\Program Files\Common Files\Symantec Shared\ccApp.exe" [2007-07-17 19:54 116072] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "swg"="C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe" [2007-07-01 21:09 171448] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce] "SetDefaultMidi"="MIDIDEF.EXE" [2006-02-06 15:31 49152 C:\WINDOWS\mididef.exe] C:\Documents and Settings\User\Start Menu\Programs\Startup\ V CAST Music Monitor.lnk - C:\Program Files\Verizon Wireless\V CAST Music Essentials Manager\V CAST Music Monitor.exe [2007-02-20 18:57:33 446464] C:\Documents and Settings\All Users\Start Menu\Programs\Startup\ Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-09-23 22:05:26 29696] HP Digital Imaging Monitor.lnk - C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe [2005-05-11 22:23:26 282624] HP Image Zone Fast Start.lnk - C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqthb08.exe [2005-05-11 23:49:24 73728] Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 01:01:04 83360] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system] "DisableRegistryTools"= 0 (0x0) R2 Fix-It Task Manager;Fix-It Task Manager;C:\PROGRA~1\VCOM\Fix-It\mxtask.exe [2006-04-27 18:46] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d99fbf9a-63a7-11db-98de-000cf179c98d}] \Shell\AutoRun\command - L:\JDSecure\Windows\JDSecure31.exe Newly Created Service - COMHOST . Contents of the 'Scheduled Tasks' folder "2008-02-11 19:44:02 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job" - C:\Program Files\Apple Software Update\SoftwareUpdate.exe . ************************************************************************ catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-02-11 18:43:47 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ********************************************************************** . ------------------------ Other Running Processes ------------------------ . C:\Program Files\Ahead\InCD\InCDsrv.exe C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe C:\Program Files\Common Files\Lanovation\PrismXL\PRISMXL.SYS C:\WINDOWS\system32\HPZipm12.exe C:\Program Files\iPod\bin\iPodService.exe C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqSTE08.exe C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqimzone.exe C:\Program Files\Hewlett-Packard\Digital Imaging\Product Assistant\bin\hprblog.exe C:\Program Files\Symantec\LiveUpdate\AUPDATE.EXE C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE C:\Program Files\Java\jre1.5.0_06\bin\jucheck.exe . ************************************************************************ . Completion time: 2008-02-11 18:56:57 - machine was rebooted ComboFix-quarantined-files.txt 2008-02-12 00:56:47 ComboFix2.txt 2008-02-10 14:46:37 ComboFix3.txt 2008-02-10 03:01:31 . 2008-01-09 09:03:40 --- E O F ---

02-11-2008, 10:44 PM	#9 (permalink)
forhockey Analyst, Security Team Join Date: Sep 2006 Location: Ontario, Canada Posts: 2,948 OS: Windows 7 Ultimate	Re: rond.starsdoor.com popups, extremely slow computer Hi Sprogy, This totally slipped my mind, and could also be the reason for your sluggish system performance.... Multiple Antivirus It appears that you are running two antivirus programs: 1) Norton AntiVirus (Symantec Corporation) 2) VCOM Fix-It Utilities Professional 6 It does not provide you with any extra protection though it may seem so. On the contrary these two programs may interfere with each other creating serious problems regarding security vulnerability as well as system stability. Uninstall one of these two and keep the other of your choice. --------------------------------------------- Once you uninstall one of those programs, then restart your computer and let me know how your system is behaving. __________________ Proud Member of ASAP Proud Member of UNITE Keep this forum alive - if you've been helped at this forum, please do consider a donation. Thank you for your support. Donation link for Tech Support Forum

02-13-2008, 02:02 PM	#10 (permalink)
Sprogy Registered User Join Date: Jan 2008 Posts: 32 OS: XP	Re: rond.starsdoor.com popups, extremely slow computer I uninstalled VCOM but my system is still pretty sluggish.

02-13-2008, 04:54 PM	#11 (permalink)
forhockey Analyst, Security Team Join Date: Sep 2006 Location: Ontario, Canada Posts: 2,948 OS: Windows 7 Ultimate	Re: rond.starsdoor.com popups, extremely slow computer Hi Sprogy, Well there isn't anything else I'm seeing in your logs which could be causing this slow down. I'd like to get another online scan just incase the other scanners missed anything. Establish an internet connection & perform an online scan with Internet Explorer at Kaspersky Online Scanner Answer Yes, when prompted to install an ActiveX component. The program will then begin downloading the latest definition files. Once the files have been downloaded click on NEXT Locate the Scan Settings button & configure to: Scan using the following Anti-Virus database: Extended Scan Options: Scan Archives Scan Mail Bases Click OK & have it scan My Computer Once the scan is complete, it will display if your system has been infected. It does not provide an option to clean/disinfect. We only require a report from it. Click the Save as Text button to save the file to your desktop so that you may post it in your next reply * Turn off the real time scanner of any existing antivirus program while performing the online scan -------------------------------------------------------------- Please run DSS.exe again, and post the resulting log. -------------------------------------------------------------- Please reply back with the following logs: Kaspersky Online Scan Results New main.txt log (From DSS.exe) __________________ Proud Member of ASAP Proud Member of UNITE Keep this forum alive - if you've been helped at this forum, please do consider a donation. Thank you for your support. Donation link for Tech Support Forum

02-17-2008, 11:24 AM	#13 (permalink)
forhockey Analyst, Security Team Join Date: Sep 2006 Location: Ontario, Canada Posts: 2,948 OS: Windows 7 Ultimate	Re: rond.starsdoor.com popups, extremely slow computer Please submit the Kaspersky log to: http://www.bleepingcomputer.com/subm...php?channel=28 Once you've submitted the file, then please let me know. __________________ Proud Member of ASAP Proud Member of UNITE Keep this forum alive - if you've been helped at this forum, please do consider a donation. Thank you for your support. Donation link for Tech Support Forum

02-17-2008, 01:09 PM	#14 (permalink)
Sprogy Registered User Join Date: Jan 2008 Posts: 32 OS: XP	Re: rond.starsdoor.com popups, extremely slow computer When I tried to submit the Kaspersky log there it came up as an error.

02-17-2008, 01:31 PM	#15 (permalink)
forhockey Analyst, Security Team Join Date: Sep 2006 Location: Ontario, Canada Posts: 2,948 OS: Windows 7 Ultimate	Re: rond.starsdoor.com popups, extremely slow computer Can you post bits and pieces of the Kaspersky log here then? __________________ Proud Member of ASAP Proud Member of UNITE Keep this forum alive - if you've been helped at this forum, please do consider a donation. Thank you for your support. Donation link for Tech Support Forum