Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

Please help me remove this ...

MalwareRemoval.com provides free support for people with infected computers. Using plain language that anyone can understand, our community of volunteer experts will walk you through each step.

Please help me remove this ...

Unread postby calljane » April 4th, 2008, 4:47 am

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:36:22, on 04/04/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\wltrysvc.exe
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\program files\common files\mcafee\mna\mcnasvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
C:\Program Files\McAfee\VirusScan\McShield.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\Program Files\McAfee\MSK\MskSrver.exe
C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\SiteAdvisor\6253\SAService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\WINDOWS\Explorer.EXE
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Documents and Settings\All Users\Application Data\whybwpqt\chunsnah.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\stsystra.exe
C:\WINDOWS\system32\WLTRAY.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Dell\Media Experience\DMXLauncher.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\SiteAdvisor\6253\SiteAdv.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\NetWaiting\netWaiting.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\WINDOWS\system32\xmtapcbw.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Microsoft Office\Office\OSA.EXE
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://dellsearchedit.myway.com/samisc/ ... jhtml?p=DX
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.microsoft.com/fwlink/?LinkId=74005
R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\deSrcAs.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6253\SiteAdv.dll
O2 - BHO: McAntiPhishingBHO - {377C180E-6F0E-4D4C-980F-F45BD3D40CF4} - c:\PROGRA~1\mcafee\msk\mcapbho.dll
O2 - BHO: (no name) - {4D25F921-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\deSrcAs.dll
O2 - BHO: GNX Bingo - {5B9512A7-C919-4035-A08D-8888AA6F5F7A} - C:\WINDOWS\svpekgongrk.dll (file missing)
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6253\SiteAdv.dll
O3 - Toolbar: stfngdvw - {BE39F01C-46FB-4111-9AE9-2F11DC22AF69} - C:\WINDOWS\stfngdvw.dll (file missing)
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [Dell Wireless Manager UI] C:\WINDOWS\system32\WLTRAY
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [MSKDetectorExe] C:\Program Files\McAfee\SpamKiller\MSKDetct.exe /uninstall
O4 - HKLM\..\Run: [SiteAdvisor] C:\Program Files\SiteAdvisor\6253\SiteAdv.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe"
O4 - HKLM\..\Run: [mcagent_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey
O4 - HKLM\..\Run: [InstallMalwarrior] C:\Documents and Settings\Jane\Local Settings\Temporary Internet Files\Content.IE5\YXI4PNN8\setup504[1].exe
O4 - HKCU\..\Run: [ModemOnHold] C:\Program Files\NetWaiting\netWaiting.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [usksmdzj] C:\WINDOWS\system32\xmtapcbw.exe
O4 - HKLM\..\Policies\Explorer\Run: [cW4xDtFO9j] C:\Documents and Settings\All Users\Application Data\whybwpqt\chunsnah.exe
O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ?
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Billminder.lnk = C:\QUICKENW\billmind.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Photosmart Premier Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: Microsoft Find Fast.lnk = C:\Program Files\Microsoft Office\Office\FINDFAST.EXE
O4 - Global Startup: Office Startup.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXE
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O15 - Trusted Zone: http://*.mcafee.com
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcafee.com/molbin/share ... insctl.cab
O16 - DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} (ScorchPlugin Class) - http://www.sibelius.com/download/softwa ... Plugin.cab
O16 - DPF: {D1E7CBDA-E60E-4970-A01C-37301EF7BF98} (Measurement Services Client v.3.12) - http://gameadvisor.futuremark.com/global/msc3121.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\common files\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan\McShield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: McAfee SpamKiller Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SiteAdvisor Service - Unknown owner - C:\Program Files\SiteAdvisor\6253\SAService.exe
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\wltrysvc.exe

--
End of file - 13084 bytes
calljane
Active Member
 
Posts: 5
Joined: April 4th, 2008, 4:31 am
Advertisement
Register to Remove

Re: Please help me remove this ...

Unread postby Bio-Hazard » April 4th, 2008, 10:09 am

Welcome to the MWR forums. My name is Bio-Hazard. I would be glad to take a look at your log and help you with solving any malware problems. HijackThis logs can take a while to research. Please be patient and I'd be grateful if you would note the following:

  • I will be working on your Malware issues this may or may not solve other issues you have with your machine.
  • The fixes are specific to your problem and should only be used for this issue on this machine.
  • Please continue to review my answers until I tell you your machine appears to be clear. Absence of symptoms does not mean that everything is clear.
  • If you don't know or understand something please don't hesitate to say or ask!! It's better to be sure and safe than sorry.
  • It is important that you reply to this thread. Do not start a new topic.

Note: I am still in training here at Malware Removal, however I will be working under the direct supervision of one of our Malware Experts. Any recommendations will first be approved before being given to you. Because of this, there may be a short delay in getting our responses to you, however be assured that we will be working diligently on your problem.



Uninstall list

Make an uninstall list using HijackThis. To access the Uninstall Manager you would do the following:

  • Start HijackThis
  • Click on the Config button
  • Click on the Misc Tools button
  • Click on the Open Uninstall Manager button.
  • Click on the Save list... button and specify where you would like to save this file. When you press Save button a notepad will open with the contents of that file. Simply copy and paste the contents of that notepad here on your next reply.
User avatar
Bio-Hazard
MRU Master Emeritus
 
Posts: 4078
Joined: May 10th, 2007, 8:28 am
Location: Cornwall, UK

Re: Please help me remove this ...

Unread postby Bio-Hazard » April 4th, 2008, 2:46 pm

SmitfraudFix

Please download SmitfraudFix (by S!Ri)
Extract the content (a folder named SmitfraudFix) to your Desktop.

Open the SmitfraudFix folder and double-click smitfraudfix.cmd Select option #1 - Search by typing 1 and press Enter ; a text file will appear which lists infected files (if present).
Please copy/paste the content of that report into your next reply.

Note : process.exe is detected by some antivirus programs (AntiVir Dr.Web Kaspersky) as a RiskTool; it is not a virus but a program used to stop system processes. Antivirus programs cannot distinguish between good and malicious use of such programs therefore they may alert the user. http://www.beyondlogic.org/consulting/proc...processutil.htm

NOTE: Do not run any other options from SmitfraudFix until I tell you to do so!



Logs/Information to Post in Reply

Please post the following logs/Information in your reply

  • SmitfraudFix Report
  • A fresh HJT Log
  • HijackThis Uninstall list
User avatar
Bio-Hazard
MRU Master Emeritus
 
Posts: 4078
Joined: May 10th, 2007, 8:28 am
Location: Cornwall, UK

Re: Please help me remove this ...

Unread postby calljane » April 5th, 2008, 12:30 am

Great - thanks. I've done the three runs only on one user; we have four users here. Do I need to run it for each desktop ?

Cheers

Phil

SMITFRAUDFIX REPORT

SmitFraudFix v2.309

Scan done at 17:19:25.87, 05/04/2008
Run from C:\Documents and Settings\Jane\Desktop\SmitfraudFix
OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT
The filesystem type is NTFS
Fix run in normal mode

»»»»»»»»»»»»»»»»»»»»»»»» Process

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\wltrysvc.exe
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\program files\common files\mcafee\mna\mcnasvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
C:\Program Files\McAfee\VirusScan\McShield.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\Program Files\McAfee\MSK\MskSrver.exe
C:\WINDOWS\Explorer.EXE
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\SiteAdvisor\6253\SAService.exe
C:\WINDOWS\system32\svchost.exe
C:\Documents and Settings\All Users\Application Data\whybwpqt\chunsnah.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\stsystra.exe
C:\WINDOWS\system32\WLTRAY.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Dell\Media Experience\DMXLauncher.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\SiteAdvisor\6253\SiteAdv.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\NetWaiting\netWaiting.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\WINDOWS\system32\xmtapcbw.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Microsoft Office\Office\OSA.EXE
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\cmd.exe

»»»»»»»»»»»»»»»»»»»»»»»» hosts


»»»»»»»»»»»»»»»»»»»»»»»» C:\


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Jane


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Jane\Application Data


»»»»»»»»»»»»»»»»»»»»»»»» Start Menu


»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\Jane\FAVORI~1


»»»»»»»»»»»»»»»»»»»»»»»» Desktop


»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

C:\Program Files\akl\ FOUND !

»»»»»»»»»»»»»»»»»»»»»»»» Corrupted keys


»»»»»»»»»»»»»»»»»»»»»»»» Desktop Components



»»»»»»»»»»»»»»»»»»»»»»»» IEDFix
!!!Attention, following keys are not inevitably infected!!!

IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» VACFix
!!!Attention, following keys are not inevitably infected!!!

VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""
"LoadAppInit_DLLs"=dword:00000001


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» Rustock



»»»»»»»»»»»»»»»»»»»»»»»» DNS

Description: Dell Wireless 1470 Dual Band WLAN Mini-PCI Card - Packet Scheduler Miniport
DNS Server Search Order: 10.1.1.1

HKLM\SYSTEM\CCS\Services\Tcpip\..\{62299EC6-492B-4398-8364-A8D6B1CED449}: DhcpNameServer=10.1.1.1
HKLM\SYSTEM\CS1\Services\Tcpip\..\{62299EC6-492B-4398-8364-A8D6B1CED449}: DhcpNameServer=10.1.1.1
HKLM\SYSTEM\CS2\Services\Tcpip\..\{62299EC6-492B-4398-8364-A8D6B1CED449}: DhcpNameServer=10.1.1.1
HKLM\SYSTEM\CS3\Services\Tcpip\..\{62299EC6-492B-4398-8364-A8D6B1CED449}: DhcpNameServer=10.1.1.1
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=10.1.1.1
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=10.1.1.1
HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=10.1.1.1
HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=10.1.1.1


»»»»»»»»»»»»»»»»»»»»»»»» Scanning for wininet.dll infection


»»»»»»»»»»»»»»»»»»»»»»»» End

FRESH HJT LOG

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:23:32, on 05/04/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\wltrysvc.exe
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\program files\common files\mcafee\mna\mcnasvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
C:\Program Files\McAfee\VirusScan\McShield.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\Program Files\McAfee\MSK\MskSrver.exe
C:\WINDOWS\Explorer.EXE
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\SiteAdvisor\6253\SAService.exe
C:\WINDOWS\system32\svchost.exe
C:\Documents and Settings\All Users\Application Data\whybwpqt\chunsnah.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\stsystra.exe
C:\WINDOWS\system32\WLTRAY.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Dell\Media Experience\DMXLauncher.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\SiteAdvisor\6253\SiteAdv.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\NetWaiting\netWaiting.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\WINDOWS\system32\xmtapcbw.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Microsoft Office\Office\OSA.EXE
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://dellsearchedit.myway.com/samisc/ ... jhtml?p=DX
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.microsoft.com/fwlink/?LinkId=74005
R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\deSrcAs.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6253\SiteAdv.dll
O2 - BHO: McAntiPhishingBHO - {377C180E-6F0E-4D4C-980F-F45BD3D40CF4} - c:\PROGRA~1\mcafee\msk\mcapbho.dll
O2 - BHO: (no name) - {4D25F921-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\deSrcAs.dll
O2 - BHO: GNX Bingo - {5B9512A7-C919-4035-A08D-8888AA6F5F7A} - C:\WINDOWS\svpekgongrk.dll (file missing)
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6253\SiteAdv.dll
O3 - Toolbar: stfngdvw - {BE39F01C-46FB-4111-9AE9-2F11DC22AF69} - C:\WINDOWS\stfngdvw.dll (file missing)
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [Dell Wireless Manager UI] C:\WINDOWS\system32\WLTRAY
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [MSKDetectorExe] C:\Program Files\McAfee\SpamKiller\MSKDetct.exe /uninstall
O4 - HKLM\..\Run: [SiteAdvisor] C:\Program Files\SiteAdvisor\6253\SiteAdv.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe"
O4 - HKLM\..\Run: [mcagent_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey
O4 - HKLM\..\Run: [InstallMalwarrior] C:\Documents and Settings\Jane\Local Settings\Temporary Internet Files\Content.IE5\YXI4PNN8\setup504[1].exe
O4 - HKCU\..\Run: [ModemOnHold] C:\Program Files\NetWaiting\netWaiting.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [usksmdzj] C:\WINDOWS\system32\xmtapcbw.exe
O4 - HKLM\..\Policies\Explorer\Run: [cW4xDtFO9j] C:\Documents and Settings\All Users\Application Data\whybwpqt\chunsnah.exe
O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ?
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Billminder.lnk = C:\QUICKENW\billmind.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Photosmart Premier Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: Microsoft Find Fast.lnk = C:\Program Files\Microsoft Office\Office\FINDFAST.EXE
O4 - Global Startup: Office Startup.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXE
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O15 - Trusted Zone: http://*.mcafee.com
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcafee.com/molbin/share ... insctl.cab
O16 - DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} (ScorchPlugin Class) - http://www.sibelius.com/download/softwa ... Plugin.cab
O16 - DPF: {D1E7CBDA-E60E-4970-A01C-37301EF7BF98} (Measurement Services Client v.3.12) - http://gameadvisor.futuremark.com/global/msc3121.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\common files\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan\McShield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: McAfee SpamKiller Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SiteAdvisor Service - Unknown owner - C:\Program Files\SiteAdvisor\6253\SAService.exe
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\wltrysvc.exe

--
End of file - 13040 bytes


HJT UNINSTALL LIST

Adobe Acrobat 5.0
Adobe Acrobat 7.0 Professional
Adobe Download Manager 2.0 (Remove Only)
Adobe Flash Player 9 ActiveX
Adobe Reader 7.0.7
Age of Mythology
Apple Mobile Device Support
Apple Software Update
Broadcom Management Programs
Canon Camera Window for ZoomBrowser EX
Canon i560
Canon PhotoRecord
Canon RAW Image Task for ZoomBrowser EX
Canon RemoteCapture Task for ZoomBrowser EX
Canon Utilities 3D-PhotoPrint
Canon Utilities Easy-PhotoPrint
Canon Utilities Easy-PhotoPrint Plus
Canon Utilities PhotoStitch 3.1
Canon Utilities ZoomBrowser EX
CashManager
Conexant HDA D110 MDC V.92 Modem
Dell Media Experience
Dell Support Center
Dell Wireless WLAN Card
DellSupport
Digital Line Detect
Easy-WebPrint
Futuremark Measurement Services Client
Google Earth
Google Toolbar for Internet Explorer
GVOX Encore 32 v4.5
High Definition Audio Driver Package - KB835221
HijackThis 2.0.2
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows Media Player 11 (KB939683)
Hotfix for Windows XP (KB914440)
Hotfix for Windows XP (KB915865)
Hotfix for Windows XP (KB926239)
HP Customer Participation Program 7.0
HP Document Viewer 7.0
HP Imaging Device Functions 7.0
HP Photosmart Premier Software 6.5
HP Photosmart, Officejet and Deskjet 7.0.A
HP Software Update
HP Solution Center 7.0
Intel(R) Graphics Media Accelerator Driver for Mobile
Internal Network Card Power Management
iTunes
Java 2 Runtime Environment, SE v1.4.2_03
L&H TTS3000 British English
Macromedia Shockwave Player
McAfee SecurityCenter
McAfee Uninstaller
MCU
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Hotfix (KB928366)
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Encarta Standard 2006
Microsoft Excel 97
Microsoft Flight Simulator X
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Office Professional Edition 2003
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 Redistributable
Microsoft Word 97
Microsoft Works 7.0
Modem Helper
MSN
MSXML 4.0 SP2 (KB927978)
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 Parser and SDK
My Way Search Assistant
Native Instruments Sibelius Player
NetWaiting
Neuratron PhotoScore Lite
OCR Software by I.R.I.S 7.0
PowerDVD 5.5
Quicken Deluxe v7
QuickSet
QuickTime
Rise of Nations
Security Update for Step By Step Interactive Training (KB898458)
Security Update for Step By Step Interactive Training (KB923723)
Security Update for Windows Internet Explorer 7 (KB928090)
Security Update for Windows Internet Explorer 7 (KB931768)
Security Update for Windows Internet Explorer 7 (KB933566)
Security Update for Windows Internet Explorer 7 (KB937143)
Security Update for Windows Internet Explorer 7 (KB938127)
Security Update for Windows Internet Explorer 7 (KB939653)
Security Update for Windows Internet Explorer 7 (KB942615)
Security Update for Windows Internet Explorer 7 (KB944533)
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player 11 (KB936782)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows Media Player 9 (KB917734)
Security Update for Windows Media Player 9 (KB936782)
Security Update for Windows XP (KB890046)
Security Update for Windows XP (KB893756)
Security Update for Windows XP (KB896428)
Security Update for Windows XP (KB899587)
Security Update for Windows XP (KB900725)
Security Update for Windows XP (KB901017)
Security Update for Windows XP (KB901190)
Security Update for Windows XP (KB902400)
Security Update for Windows XP (KB905414)
Security Update for Windows XP (KB905749)
Security Update for Windows XP (KB908519)
Security Update for Windows XP (KB911562)
Security Update for Windows XP (KB911567)
Security Update for Windows XP (KB911927)
Security Update for Windows XP (KB912919)
Security Update for Windows XP (KB913580)
Security Update for Windows XP (KB914388)
Security Update for Windows XP (KB914389)
Security Update for Windows XP (KB916281)
Security Update for Windows XP (KB917159)
Security Update for Windows XP (KB917344)
Security Update for Windows XP (KB917422)
Security Update for Windows XP (KB917953)
Security Update for Windows XP (KB918118)
Security Update for Windows XP (KB918439)
Security Update for Windows XP (KB918899)
Security Update for Windows XP (KB919007)
Security Update for Windows XP (KB920213)
Security Update for Windows XP (KB920214)
Security Update for Windows XP (KB920670)
Security Update for Windows XP (KB920683)
Security Update for Windows XP (KB920685)
Security Update for Windows XP (KB921398)
Security Update for Windows XP (KB921503)
Security Update for Windows XP (KB921883)
Security Update for Windows XP (KB922616)
Security Update for Windows XP (KB922760)
Security Update for Windows XP (KB922819)
Security Update for Windows XP (KB923191)
Security Update for Windows XP (KB923414)
Security Update for Windows XP (KB923689)
Security Update for Windows XP (KB923694)
Security Update for Windows XP (KB923980)
Security Update for Windows XP (KB924191)
Security Update for Windows XP (KB924270)
Security Update for Windows XP (KB924496)
Security Update for Windows XP (KB924667)
Security Update for Windows XP (KB925454)
Security Update for Windows XP (KB925486)
Security Update for Windows XP (KB925902)
Security Update for Windows XP (KB926255)
Security Update for Windows XP (KB926436)
Security Update for Windows XP (KB927779)
Security Update for Windows XP (KB927802)
Security Update for Windows XP (KB928255)
Security Update for Windows XP (KB928843)
Security Update for Windows XP (KB929123)
Security Update for Windows XP (KB930178)
Security Update for Windows XP (KB931261)
Security Update for Windows XP (KB931784)
Security Update for Windows XP (KB932168)
Security Update for Windows XP (KB933729)
Security Update for Windows XP (KB935839)
Security Update for Windows XP (KB935840)
Security Update for Windows XP (KB936021)
Security Update for Windows XP (KB938829)
Security Update for Windows XP (KB941202)
Security Update for Windows XP (KB941568)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB941644)
Security Update for Windows XP (KB943055)
Security Update for Windows XP (KB943460)
Security Update for Windows XP (KB943485)
Security Update for Windows XP (KB944653)
Security Update for Windows XP (KB946026)
Sibelius 3
Sibelius Scorch
Sibelius Scorch (ActiveX Only)
SmartMusic 10
Sonic DLA
Sonic MyDVD LE
Sonic RecordNow Audio
Sonic RecordNow Copy
Sonic RecordNow Data
Sonic Update Manager
Synaptics Pointing Device Driver
THE HISTORY CHANNEL Great Battles of Rome
Update for Windows XP (KB894391)
Update for Windows XP (KB898461)
Update for Windows XP (KB900485)
Update for Windows XP (KB904942)
Update for Windows XP (KB908531)
Update for Windows XP (KB910437)
Update for Windows XP (KB911280)
Update for Windows XP (KB916595)
Update for Windows XP (KB920872)
Update for Windows XP (KB922582)
Update for Windows XP (KB927891)
Update for Windows XP (KB929338)
Update for Windows XP (KB930916)
Update for Windows XP (KB931836)
Update for Windows XP (KB933360)
Update for Windows XP (KB936357)
Update for Windows XP (KB938828)
Update for Windows XP (KB942763)
WebCyberCoach 3.2 Dell
Windows Internet Explorer 7
Windows Media Format 11 runtime
Windows Media Format 11 runtime
Windows Media Player 11
Windows Media Player 11
Windows XP Hotfix - KB885836
Windows XP Hotfix - KB886185
Windows XP Hotfix - KB887742
Windows XP Hotfix - KB888302
Windows XP Hotfix - KB890859
calljane
Active Member
 
Posts: 5
Joined: April 4th, 2008, 4:31 am

Re: Please help me remove this ...

Unread postby Bio-Hazard » April 5th, 2008, 4:05 am

Hello Phil

I've done the three runs only on one user; we have four users here. Do I need to run it for each desktop ?


These intructions are only for this computer. For the other computers you have to post individual HijackThis logs on seperate threads. I only deal with this computer.

========================

SmitfraudFix

You should print out these instructions or copy them to a NotePad file for reading while in Safe Mode because you will not be able to connect to the Internet to read from this site.

Nextplease reboot your computer in Safe Mode by doing the following :
  • Restart your computer
  • After hearing your computer beep once during startup but before the Windows icon appears tap the F8 key continually;
  • Instead of Windows loading as normal a menu with options should appear;
  • Select the first option to run Windows in Safe Mode then press Enter.
  • Choose your usual account.
Once in Safe Mode open the SmitfraudFix folder again and double-click smitfraudfix.cmd Select option #2 - Clean by typing 2 and pressEnter to delete infected files. You will be prompted : Registry cleaning - Do you want to clean theregistry ? ; answer Yes by typing Y and press Enter in order to remove the Desktop background and clean registry keys associated with the infection.

The tool will now check if wininet.dll is infected. You may be prompted to replace the infected file (if found); answer Yes by typing Y and press Enter.

The tool may need to restart your computer to finish the cleaning process; if it doesn't please restart it into Normal Windows.A text file will appear onscreen with results from the cleaning process; please copy/paste the content of that report into your next reply. The report can also be found at the root of the system drive usually at C:\rapport.txt

Warning : running option #2 on a non infected computer will remove yourDesktop background.


Download CCleaner Slim from >here< and save it to your Desktop. When the file has been saved, go to your Desktop and double-click on ccsetupxxx_slim.exe
Follow the prompts to install the program.

Complete the installation then
  • Make sure that ALL browser windows are closed
  • Double-click the CCleaner shortcut on the desktop to start the program.
  • Click on the Options block on the left, then choose Cookies.
    • Under Cookies to Delete, highlight any cookies you would like to retain permanently
    • Click the right arrow > to move them to the Cookies to Keep window.
  • Go into Options > Advanced deselect/uncheck 'Only delete files in Windows Temp folders older than 48 hours'
  • Click Run Cleaner to run the program.
  • Caution: It is not recommended that you use the 'Registry' feature unless you are very familiar with the registry.
  • After CCleaner has completed its process, click Exit.


Stop processes with Task Manager

Press Control+Alt+Del to enter the Task Manager. Click on the Processes tab and end the following processes (if present). To organize them alphabetically Click Image Name tab once.

    chunsnah.exe
    xmtapcbw.exe

Exit the Task Manager when finished.



Delete bad programs

  • Click Start
  • Go to Control Panel
  • Go to Add/Remove Programs
  • Find and click Remove for the following (if present):

    My Way Search Assistant

NOTE: Take care when answering any questions posed by an uninstaller. Some questions may be worded to deceive you into keeping the program.


Remove bad HijackThis entries

  • Run HijackThis
  • Click on the Scan button
  • Put a check beside all of the items listed below (if present):

    O2 - BHO: (no name) - {4D25F921-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\deSrcAs.dll
    O2 - BHO: (no name) - {4D25F921-B9FE-4682-BF72-8AB8210D6D75} - C:\Program Files\MyWaySA\SrchAsDe\deSrcAs.dll
    O2 - BHO: GNX Bingo - {5B9512A7-C919-4035-A08D-8888AA6F5F7A} - C:\WINDOWS\svpekgongrk.dll (file missing)
    O3 - Toolbar: stfngdvw - {BE39F01C-46FB-4111-9AE9-2F11DC22AF69} - C:\WINDOWS\stfngdvw.dll (file missing)
    O4 - HKCU\..\Run: [usksmdzj] C:\WINDOWS\system32\xmtapcbw.exe
    O4 - HKLM\..\Policies\Explorer\Run: [cW4xDtFO9j] C:\Documents and Settings\All Users\Application Data\whybwpqt\chunsnah.exe
    O4 - HKLM\..\Run: [InstallMalwarrior] C:\Documents and Settings\Jane\Local Settings\Temporary Internet Files\Content.IE5\YXI4PNN8\setup504[1].exe


  • Close all open windows and browsers/email etc...
  • Click on the Fix Checked button
  • When completed close the application.

REBOOT AFTER WHEN YOU HAVE COMPLETED ALL THESE STEPS


Show All Files And Folders Windows XP

  • Click Start.
  • Open My Computer.
  • Select the Tools menu and click Folder Options.
  • Select the View Tab.
  • Under the Hidden files and folders heading select Show hidden files and folders.
  • Uncheck Hide file extensions for known file types
  • Uncheck the Hide protected operating system files (recommended) option.
  • Click Apply to confirm.
  • Click OK.


Delete bad files and folders

Using Windows Explore by right-clicking the start button and left clicking Explore navigate to and find the following files and folders: if found, delete them (some may not be present after previous steps):

    Folders:C:\Documents and Settings\All Users\Application Data\whybwpqt
    C:\Documents and Settings\Jane\Local Settings\Temporary Internet Files\Content.IE5\YXI4PNN8
    C:\Program Files\MyWaySA


    Files:
    C:\WINDOWS\svpekgongrk.dll
    C:\WINDOWS\stfngdvw.dll
    C:\WINDOWS\system32\xmtapcbw.exe




Logs/Information to Post in Reply

Please post the following logs/Information in your reply

  • Smitfraud Report
  • A fresh HijackThis Log ( after all the above has been done)
User avatar
Bio-Hazard
MRU Master Emeritus
 
Posts: 4078
Joined: May 10th, 2007, 8:28 am
Location: Cornwall, UK

Re: Please help me remove this ...

Unread postby calljane » April 6th, 2008, 5:37 am

Hi - I worked my way through that, many thanks. What I meant by four users was four accounts on the same PC. Do I need to run any of these processes on the other accounts ?

SMITFRAUD REPORT

SmitFraudFix v2.309

Scan done at 20:37:56.45, 06/04/2008
Run from C:\Documents and Settings\Jane\Desktop\SmitfraudFix
OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT
The filesystem type is NTFS
Fix run in safe mode

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Before SmitFraudFix
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» Killing process


»»»»»»»»»»»»»»»»»»»»»»»» hosts


127.0.0.1 localhost

»»»»»»»»»»»»»»»»»»»»»»»» VACFix

VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Winsock2 Fix

S!Ri's WS2Fix: LSP not Found.


»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

GenericRenosFix by S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Deleting infected files

C:\Program Files\akl\ Deleted

»»»»»»»»»»»»»»»»»»»»»»»» IEDFix

IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» DNS

HKLM\SYSTEM\CCS\Services\Tcpip\..\{62299EC6-492B-4398-8364-A8D6B1CED449}: DhcpNameServer=10.1.1.1
HKLM\SYSTEM\CS1\Services\Tcpip\..\{62299EC6-492B-4398-8364-A8D6B1CED449}: DhcpNameServer=10.1.1.1
HKLM\SYSTEM\CS2\Services\Tcpip\..\{62299EC6-492B-4398-8364-A8D6B1CED449}: DhcpNameServer=10.1.1.1
HKLM\SYSTEM\CS3\Services\Tcpip\..\{62299EC6-492B-4398-8364-A8D6B1CED449}: DhcpNameServer=10.1.1.1
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=10.1.1.1
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=10.1.1.1
HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=10.1.1.1
HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=10.1.1.1


»»»»»»»»»»»»»»»»»»»»»»»» Deleting Temp Files


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» Registry Cleaning

Registry Cleaning done.

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler After SmitFraudFix
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» End

HIJACKTHIS LOG REPORT (done after all the work)


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:29:13, on 06/04/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\wltrysvc.exe
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\program files\common files\mcafee\mna\mcnasvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
C:\Program Files\McAfee\VirusScan\McShield.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\Program Files\McAfee\MSK\MskSrver.exe
C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\SiteAdvisor\6253\SAService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\Explorer.EXE
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\stsystra.exe
C:\WINDOWS\system32\WLTRAY.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Dell\Media Experience\DMXLauncher.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\SiteAdvisor\6253\SiteAdv.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\NetWaiting\netWaiting.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Adobe\Acrobat 7.0\Distillr\AcroDist.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Microsoft Office\Office\OSA.EXE
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.microsoft.com/fwlink/?LinkId=74005
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6253\SiteAdv.dll
O2 - BHO: McAntiPhishingBHO - {377C180E-6F0E-4D4C-980F-F45BD3D40CF4} - c:\PROGRA~1\mcafee\msk\mcapbho.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6253\SiteAdv.dll
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [Dell Wireless Manager UI] C:\WINDOWS\system32\WLTRAY
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [MSKDetectorExe] C:\Program Files\McAfee\SpamKiller\MSKDetct.exe /uninstall
O4 - HKLM\..\Run: [SiteAdvisor] C:\Program Files\SiteAdvisor\6253\SiteAdv.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe"
O4 - HKLM\..\Run: [mcagent_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey
O4 - HKCU\..\Run: [ModemOnHold] C:\Program Files\NetWaiting\netWaiting.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ?
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Billminder.lnk = C:\QUICKENW\billmind.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Photosmart Premier Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: Microsoft Find Fast.lnk = C:\Program Files\Microsoft Office\Office\FINDFAST.EXE
O4 - Global Startup: Office Startup.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXE
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O15 - Trusted Zone: http://*.mcafee.com
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcafee.com/molbin/share ... insctl.cab
O16 - DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} (ScorchPlugin Class) - http://www.sibelius.com/download/softwa ... Plugin.cab
O16 - DPF: {D1E7CBDA-E60E-4970-A01C-37301EF7BF98} (Measurement Services Client v.3.12) - http://gameadvisor.futuremark.com/global/msc3121.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O23 - Service: McAfee Application Installer Cleanup (0236401207471960) (0236401207471960mcinstcleanup) - Unknown owner - C:\WINDOWS\TEMP\023640~1.EXE (file missing)
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\common files\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan\McShield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: McAfee SpamKiller Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SiteAdvisor Service - Unknown owner - C:\Program Files\SiteAdvisor\6253\SAService.exe
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\wltrysvc.exe

--
End of file - 12266 bytes
calljane
Active Member
 
Posts: 5
Joined: April 4th, 2008, 4:31 am

Re: Please help me remove this ...

Unread postby Bio-Hazard » April 6th, 2008, 7:20 am

Hello Phil!

Hi - I worked my way through that, many thanks. What I meant by four users was four accounts on the same PC. Do I need to run any of these processes on the other accounts ?


We will look into that after this user account has been cleaned. I need to ask advice from my teacher. Please do not use them while we are working with this one user account if that is possible.


Malwarebytes' Anti-Malware

  • Please download Malwarebytes' Anti-Malware and save it to a convenient location.
  • Double click on mbam-setup.exe to install it.
  • Before clicking the Finish button, make sure that these 2 boxes are checked (ticked):
      Update Malwarebytes' Anti-Malware
      Launch Malwarebytes' Anti-Malware
  • Malwarebytes' Anti-Malware will now check for updates. If your firewall prompts, please allow it. If you can't update it, select the Update tab. Under Update Mirror, select one of the websites and click on Check for Updates.
  • Select the Scanner tab. Click on Perform full scan, then click on Scan.
  • Leave the default options as it is and click on Start Scan.
  • When done, you will be prompted. Click OK, then click on Show Results.
  • Checked (ticked) all items and click on Remove Selected.
  • After it has removed the items, Notepad will open. Please post this log in your next reply. You can also find the log in the Logs tab. The bottom most log is the latest.



Kaspersky Online Scan

With the exception of Internet Explorer, which must be used for this scan, keep ALL programs closed
Please do an online scan with Kaspersky Online Scanner. You will be prompted to install an ActiveX component from Kaspersky, Click Yes.
Note for Internet Explorer 7 users: If at any time you have trouble with the accept button of the licence, click on the Zoom tool located at the right bottom of the IE window and set the zoom to 75%. Once the licence accepted, reset to 100%.
  • The program will launch and then start to download the latest definition files.
  • Once the scanner is installed and the definitions downloaded, click Next.
  • Now click on Scan Settings
  • In the scan settings make sure that the following are selected:
    o Scan using the following Anti-Virus database:
    + Extended (If available otherwise Standard)
    o Scan Options:
    + Scan Archives
    + Scan Mail Bases
  • Click OK
  • Now under select a target to scan select My Computer
  • The scan will take a while so be patient and let it run.
  • Please do not use your computer while the scan is running. Once the scan is complete it will display if your system has been infected.
  • Click the Save Report As... button (see red arrow below)

    Image
  • In the Save as... prompt, select Desktop
  • In the File name box, name the file KasScan-ddmmyy (or similar)
  • In the Save as type prompt, select Text file (see below)

    Image
  • Copy and paste the report in your next post.

Note: It is recommended to disable onboard antivirus program and antispyware programs while performing scans so there are no conflicts and to speed up scan time.Please don't go surfing while your resident protection is disabled!Once scan is finished remember to re-enable resident antivirus protection along with whatever antispyware application you use.




Logs/Information to Post in Reply

Please post the following logs/Information in your reply

  • Kaspersky Log
  • Malwarebytes' Anti-Malware Log
  • A fresh HijackThis Log ( after all the above has been done)
User avatar
Bio-Hazard
MRU Master Emeritus
 
Posts: 4078
Joined: May 10th, 2007, 8:28 am
Location: Cornwall, UK

Re: Please help me remove this ...

Unread postby calljane » April 9th, 2008, 4:35 am

Sorry for the delay ...

KASPERSKY LOG

-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Wednesday, April 09, 2008 7:38:39 PM
Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 9/04/2008
Kaspersky Anti-Virus database records: 691612
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
C:\
D:\
F:\

Scan Statistics:
Total number of scanned objects: 122294
Number of viruses found: 6
Number of infected objects: 8
Number of suspicious objects: 0
Duration of the scan process: 01:59:46

Infected Object Name / Virus Name / Last Action
C:\Documents and Settings\All Users\Application Data\McAfee\MNA\NAData Object is locked skipped
C:\Documents and Settings\All Users\Application Data\McAfee\MPF\data\log.edb Object is locked skipped
C:\Documents and Settings\All Users\Application Data\McAfee\MSC\McUsers.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\McAfee\MSK\MSKWMDB.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\McAfee\MSK\settingsdb.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\McAfee\VirusScan\Data\TFR1B.tmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\McAfee\VirusScan\Logs\OAS.Log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\QSLLPSVCShare Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Adobe\Acrobat\Distiller 7\Cache\PSHFList1 Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Adobe\Acrobat\Distiller 7\messages.log Object is locked skipped
C:\Documents and Settings\Andy\Application Data\desktop.ini Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Google\Local Search History\google%2Eweb.w Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\gtny\88D7456F-2D0E-40AA-BDBC-7BC292A1FF1A_CONFIRM.cache Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch1\persist.cfg Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch2\persist.cfg Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch3\persist.cfg Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\channels.ini Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\chdata\chdata.cfg Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\chn.pk Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\1157.ucl Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\632.ucl Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\channel.cfg Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\dplugins\2.0.1.571\DiagPlugin.dll Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\config\groups.js Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\config\ocxid.js Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\faqs\10675121.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\faqs\10886371.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\faqs\122779.html Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\faqs\696.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\faqs\697.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\faqs\global.css Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\faqs\globe.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\faqs\title.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\html\blank.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\html\confirm.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\html\gtagent_events.vbs Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\html\index.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\html\moreinfo.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\html\noitems.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\html\senddata.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\html\statinfo.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\html\survey.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\html\wait.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\bg.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\but_a.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\but_b.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\close_a.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\close_b.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\close_c.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\count_bg.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\delete_a.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\delete_b.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\delete_c.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\delete_d.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\dialog_strip.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\dialog_title.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\first_a.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\first_b.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\first_c.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\first_d.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\fix_abort.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\fix_fail.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\fix_ok.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\help_a.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\help_b.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\help_c.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\last_a.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\last_b.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\last_c.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\last_d.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\left_but_a.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\left_but_b.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\min_a.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\min_b.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\min_c.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\msg_bg.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\next_a.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\next_a2.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\next_b.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\next_c.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\next_d.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\noproblems.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\prev_a.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\prev_b.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\prev_c.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\prev_d.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\right_but_a.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\right_but_b.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\settings_a.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\settings_b.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\settings_c.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\spacer.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\wait.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\index.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\agent_infolet_exe.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\common\images\items_img\noproblemdell.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\silent_update.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\localization\lang_blank.xml Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\localization\lang_closeapp.xml Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\localization\lang_delitem.xml Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\localization\lang_download.xml Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\localization\lang_infolet_cond.xml Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\localization\lang_infolet_exe.xml Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\localization\lang_infolet_exe_subscribe.xml Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\localization\lang_infolet_fixray.xml Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\localization\lang_infolet_link.xml Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\localization\lang_infolet_survey.xml Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\localization\lang_moreinfo.xml Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\localization\lang_noitems.xml Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\localization\lang_senddata.xml Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\localization\lang_statinfo.xml Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\localization\lang_survey.xml Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\localization\lang_tw.xml Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\localization\lang_wait.xml Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\MakeDesktopShortcut.EXE Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\offline\privacy_policy.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\offline\privacy_policy_files\css.css Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\offline\privacy_policy_files\extlink.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\offline\privacy_policy_files\left.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\offline\privacy_policy_files\main.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\offline\privacy_policy_files\privacyseal.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\offline\privacy_policy_files\shad.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\offline\privacy_policy_files\smextlink.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\offline\privacy_policy_files\spacer.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\PC_Recovery\1055856.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\PC_Recovery\10565005.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\PC_Recovery\10565295.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\PC_Recovery\10568785.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\PC_Recovery\10675121.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\PC_Recovery\1083341.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\PC_Recovery\1089154103.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\PC_Recovery\1089154104.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\PC_Recovery\1090152.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\PC_Recovery\1091713.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\PC_Recovery\1092188.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\PC_Recovery\global.css Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\PC_Recovery\globe.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\PC_Recovery\Help Icon.ico Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\PC_Recovery\title.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\lock.tmp Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\persist.cfg Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\chdata\chdata.cfg Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\chn.pk Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\Config\1046.ucl Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\Config\1050.ucl Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\Config\1051.ucl Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\Config\632.ucl Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\Config\channel.cfg Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\AutoMaintenance\AutoMaintenance.dll Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\AutoMaintenance\diag\bios.ini Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\AutoMaintenance\diag\DAntivirus.cfg Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\AutoMaintenance\diag\DFirewalls.cfg Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\AutoMaintenance\diag\dvd.ini Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\AutoMaintenance\diag\printers.ini Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\AutoMaintenance\diag\RemoveWare.ini Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\AutoMaintenance\diag\trojan.ini Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\AutoMaintenance\diag\unwantedapp.ini Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\AutoMaintenance\hosts Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\AutoMaintenance\Images.dll Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\AutoMaintenance\index.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\config\groups.js Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\config\ocxid.js Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\group_icon\services\icon.png Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\html\blank.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\html\confirm.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\html\gtagent_events.vbs Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\html\index.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\html\moreinfo.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\html\noitems.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\html\senddata.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\html\statinfo.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\html\survey.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\html\wait.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\images\bg.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\images\but_a.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\images\but_b.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\images\close_a.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\images\close_b.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\images\close_c.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\images\count_bg.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\images\delete_a.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\images\delete_b.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\images\delete_c.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\images\delete_d.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\images\dialog_strip.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\images\dialog_title.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\images\first_a.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\images\first_b.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\images\first_c.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\images\first_d.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\images\fix_abort.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\images\fix_fail.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\images\fix_ok.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\images\help_a.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\images\help_b.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\images\help_c.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\images\last_a.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\images\last_b.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\images\last_c.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\images\last_d.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\images\left_but_a.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\images\left_but_b.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\images\min_a.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\images\min_b.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\images\min_c.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\images\msg_bg.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\images\next_a.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\images\next_a2.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\images\next_b.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\images\next_c.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\images\next_d.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\images\noproblems.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\images\prev_a.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\images\prev_b.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\images\prev_c.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\images\prev_d.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\images\right_but_a.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\images\right_but_b.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\images\settings_a.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\images\settings_b.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\images\settings_c.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\images\spacer.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\images\wait.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\index.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\agent_infolet_exe.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\common\images\items_img\DELL_blackneedle.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\common\images\items_img\noproblemdell.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\localization\lang_blank.xml Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\localization\lang_closeapp.xml Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\localization\lang_delitem.xml Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\localization\lang_download.xml Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\localization\lang_infolet_cond.xml Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\localization\lang_infolet_exe.xml Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\localization\lang_infolet_exe_subscribe.xml Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\localization\lang_infolet_fixray.xml Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\localization\lang_infolet_link.xml Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\localization\lang_infolet_survey.xml Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\localization\lang_moreinfo.xml Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\localization\lang_noitems.xml Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\localization\lang_senddata.xml Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\localization\lang_statinfo.xml Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\localization\lang_survey.xml Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\localization\lang_tw.xml Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\localization\lang_wait.xml Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\Triggers\Am.xml Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\Triggers\trigger_defrag.xml Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\lock.tmp Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\persist.cfg Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\chdata\chdata.cfg Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\chn.pk Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\Config\632.ucl Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\Config\channel.cfg Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\config\groups.js Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\config\ocxid.js Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\diag\bios.ini Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\diag\DAntivirus.cfg Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\diag\dell_printers.ini Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\diag\dmi.ini Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\diag\DProg.ini Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\diag\dvd.ini Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\diag\printers.ini Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\diag\trojan.ini Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\diag\unwantedapp.ini Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\faqs\10675121.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\faqs\10886371.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\faqs\122779.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\faqs\696.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\faqs\global.css Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\faqs\title.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\fix\arg.ini Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\fix\DellSupportLauncher.exe Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\fix\DellSupportODBK.exe Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\html\blank.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\html\confirm.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\html\gtagent_events.vbs Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\html\index.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\html\moreinfo.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\html\noitems.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\html\senddata.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\html\statinfo.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\html\survey.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\html\wait.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\bg.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\but_a.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\but_b.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\close_a.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\close_b.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\close_c.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\count_bg.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\delete_a.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\delete_b.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\delete_c.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\delete_d.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\dialog_strip.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\dialog_title.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\first_a.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\first_b.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\first_c.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\first_d.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\fix_abort.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\fix_fail.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\fix_ok.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\help_a.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\help_b.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\help_c.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\last_a.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\last_b.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\last_c.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\last_d.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\left_but_a.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\left_but_b.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\min_a.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\min_b.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\min_c.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\msg_bg.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\next_a.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\next_a2.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\next_b.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\next_c.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\next_d.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\noproblems.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\prev_a.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\prev_b.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\prev_c.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\prev_d.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\right_but_a.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\right_but_b.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\settings_a.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\settings_b.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\settings_c.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\spacer.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\wait.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\index.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\item_templ\agent_infolet_exe.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\item_templ\common\images\items_img\noproblemdell.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\localization\lang_blank.xml Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\localization\lang_closeapp.xml Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\localization\lang_delitem.xml Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\localization\lang_download.xml Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\localization\lang_infolet_cond.xml Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\localization\lang_infolet_exe.xml Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\localization\lang_infolet_exe_subscribe.xml Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\localization\lang_infolet_fixray.xml Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\localization\lang_infolet_link.xml Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\localization\lang_infolet_survey.xml Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\localization\lang_moreinfo.xml Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\localization\lang_noitems.xml Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\localization\lang_senddata.xml Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\localization\lang_statinfo.xml Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\localization\lang_survey.xml Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\localization\lang_tw.xml Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\localization\lang_wait.xml Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\MakeDesktopShortcut.EXE Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\offline\privacy_policy.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\offline\privacy_policy_files\css.css Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\offline\privacy_policy_files\extlink.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\offline\privacy_policy_files\left.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\offline\privacy_policy_files\main.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\offline\privacy_policy_files\privacyseal.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\offline\privacy_policy_files\shad.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\offline\privacy_policy_files\smextlink.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\offline\privacy_policy_files\spacer.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\PC_Recovery\1055856.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\PC_Recovery\10565005.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\PC_Recovery\10565295.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\PC_Recovery\10568785.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\PC_Recovery\10675121.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\PC_Recovery\1083341.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\PC_Recovery\1089154103.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\PC_Recovery\1089154104.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\PC_Recovery\1090152.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\PC_Recovery\1091713.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\PC_Recovery\1092188.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\PC_Recovery\global.css Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\PC_Recovery\globe.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\PC_Recovery\Help Icon.ico Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\PC_Recovery\title.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\lock.tmp Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\persist.cfg Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\chdata\chdata.cfg Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\chn.pk Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\Config\632.ucl Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\Config\channel.cfg Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\config\groups.js Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\config\ocxid.js Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\10559742.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\10559746.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\10559747.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\10559748.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\10559749.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\10568781.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\10568785.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\10657131.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\106571310.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\10657133.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\10657134.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\10657136.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\10657138.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\10657139.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\10675121.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\10710781.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\10726052.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\107419412.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\107672626.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\10886371.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\10887993.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\108913758.jpg Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\1089706.html Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\109045314.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\109045317.jpg Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\109045319.jpg Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\109045320.jpg Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\122779.html Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\696.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\697.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\box.jpg Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\cable_modem.jpg Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\cat5.jpg Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\DRT\10675121.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\DRT\drt.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\DRT\global.css Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\DRT\title.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\enable_faxing\922_AIO.jpg Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\enable_faxing\942_AIO.jpg Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\enable_faxing\962_AIO.jpg Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\enable_faxing\A920_AIO.jpg Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\enable_faxing\A940_AIO.jpg Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\enable_faxing\A960_AIO.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\enable_faxing\Fax_Using_AIO.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\enable_faxing\globe.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\FA1018529.html Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\FA1026016.html Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\FA1055890.html Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\FA1065237.html Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\FA1073964.html Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\FA1073993.html Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\FA1074250.html Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\FA1077154.html Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\global.css Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\globe.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\hardware.jpg Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\images_Connected.jpg Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\images_Notconnected.jpg Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\modem_helper_sp2\global.css Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\modem_helper_sp2\globe.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\modem_helper_sp2\MDMhlp_SP2_1_shrunk.jpg Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\modem_helper_sp2\MDMhlp_SP2_2_Shrunk.jpg Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\modem_helper_sp2\MDMhlp_SP2_3_Shrunk.jpg Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\modem_helper_sp2\MDMhlp_SP2_Shrunk.jpg Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\modem_helper_sp2\Modem_Helper_XP_SP2.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\modem_helper_sp2\Note.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\modem_router_box_nopower.jpg Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\modem_router_nopower.jpg Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\Note.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\PA1089329.html Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\PA1090313.html Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\PA1090384.html Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\PA1090493.html Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\pc_recovery\1055856.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\pc_recovery\10565005.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\pc_recovery\10565295.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\pc_recovery\10568785.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\pc_recovery\10675121.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\pc_recovery\1083341.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\pc_recovery\1089154103.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\pc_recovery\1089154104.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\pc_recovery\1090152.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\pc_recovery\1091713.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\pc_recovery\1092188.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\pc_recovery\global.css Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\pc_recovery\globe.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\pc_recovery\Help Icon.ico Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\pc_recovery\title.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\RA1055974.html Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\router_config.jpg Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\router_config2.jpg Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\simple_wired.jpg Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\title.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\TrendManualScan.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\TrendScanScreen.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\TrendSystemScreen.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\TT1055646.html Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\TT1055856.html Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\TT1056916.html Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\TT1066822.html Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\TT1078218.html Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\TT1082421.html Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\TT1088799.html Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\TT1090151.html Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\WAP.jpg Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\Wirele1.jpg Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\Wirele4.jpg Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\wireless.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\wireless1.GIF Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\wireless1.JPG Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\faqs\WLAN_big_image_3.jpg Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\html\index.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\images\arrow.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\images\bullet.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\images\but_a.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\images\but_b.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\images\left_but_a.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\images\left_but_b.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\images\right_but_a.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\images\right_but_b.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\images\title.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\images\wait.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\index.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\item_templ\agent_infolet_exe.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\item_templ\common\images\items_img\noproblemdell.gif Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\HTML\localization\lang_main.xml Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\lock.tmp Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\persist.cfg Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\Policies\1037.ucl Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\DellSupport\AUCommon.cfg Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\DellSupport\DiagLib.log Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\DellSupport\DSAgnt.log Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\DellSupport\DSAgnt_GTActions.log Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\DellSupport\DSBrws.log Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\DellSupport\gdql_d_DSAgnt.log Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\DellSupport\glog.log Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\DellSupport\qdiagd_DSAgnt.log Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\DellSupport\qdiagd_DSBrws.log Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Gtek\GTUpdate\AUpdate\DellSupport\Settings.log Object is locked skipped
C:\Documents and Settings\Andy\Application Data\HP\CRMLogs\BrandAuthentication.htm Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Microsoft\Address Book\Andy.wab Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Microsoft\CLR Security Config\v1.1.4322\security.config Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Microsoft\CLR Security Config\v1.1.4322\security.config.cch Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Microsoft\IMJP8_1\imjp81u.dic Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Microsoft\Internet Explorer\brndlog.bak Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Microsoft\Internet Explorer\brndlog.txt Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Microsoft\Internet Explorer\Desktop.htt Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Microsoft\Internet Explorer\Quick Launch\desktop.ini Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Microsoft\Protect\CREDHIST Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Microsoft\Protect\S-1-5-21-1737837124-3010858350-1984525190-1003\ea039bef-b934-4580-92d3-83655b8e2e2d Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Microsoft\Protect\S-1-5-21-1737837124-3010858350-1984525190-1003\Preferred Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Microsoft\Protect\S-1-5-21-1737837124-3010858350-1984525190-1009\a82dcc23-b900-42fc-b914-9e5e33b50f9e Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Microsoft\Protect\S-1-5-21-1737837124-3010858350-1984525190-1009\Preferred Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Microsoft\Windows\Themes\Custom.theme Object is locked skipped
C:\Documents and Settings\Andy\Application Data\SiteAdvisor\SiteAdv.csh Object is locked skipped
C:\Documents and Settings\Andy\Application Data\Sun\Java\Deployment\deployment.properties Object is locked skipped
C:\Documents and Settings\Andy\Cookies\andy@ad.yieldmanager[1].txt Object is locked skipped
C:\Documents and Settings\Andy\Cookies\andy@adsfac[2].txt Object is locked skipped
C:\Documents and Settings\Andy\Cookies\andy@cheekymonkeygames[1].txt Object is locked skipped
C:\Documents and Settings\Andy\Cookies\andy@dell[1].txt Object is locked skipped
C:\Documents and Settings\Andy\Cookies\andy@google.co[1].txt Object is locked skipped
C:\Documents and Settings\Andy\Cookies\andy@google[1].txt Object is locked skipped
C:\Documents and Settings\Andy\Cookies\andy@m.webtrends[2].txt Object is locked skipped
C:\Documents and Settings\Andy\Cookies\andy@mcafee[1].txt Object is locked skipped
C:\Documents and Settings\Andy\Cookies\andy@miniclip[1].txt Object is locked skipped
C:\Documents and Settings\Andy\Cookies\andy@teagames[1].txt Object is locked skipped
C:\Documents and Settings\Andy\Cookies\andy@www.cheekymonkeygames[2].txt Object is locked skipped
C:\Documents and Settings\Andy\Cookies\andy@www.miniclip[1].txt Object is locked skipped
C:\Documents and Settings\Andy\Cookies\andy@www.teagames[2].txt Object is locked skipped
C:\Documents and Settings\Andy\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\Andy\Desktop\iTunes.lnk Object is locked skipped
C:\Documents and Settings\Andy\Desktop\Minesweeper.lnk Object is locked skipped
C:\Documents and Settings\Andy\Desktop\Windows Media Player.lnk Object is locked skipped
C:\Documents and Settings\Andy\Desktop\Word.lnk Object is locked skipped
C:\Documents and Settings\Andy\Desktopblackbird.jpg Object is locked skipped
C:\Documents and Settings\Andy\DesktopEditorFKWP1.5.exe Object is locked skipped
C:\Documents and Settings\Andy\DesktopEditorFKWP2.0.exe Object is locked skipped
C:\Documents and Settings\Andy\Desktopfilemanagerclient.exe Object is locked skipped
C:\Documents and Settings\Andy\Desktopfkwp1.5.exe Object is locked skipped
C:\Documents and Settings\Andy\Desktopfkwp2.0.exe Object is locked skipped
C:\Documents and Settings\Andy\Desktopfwebd.exe Object is locked skipped
C:\Documents and Settings\Andy\DesktopFWebdEditor.exe Object is locked skipped
C:\Documents and Settings\Andy\DesktopTrojan.Win32.BlackBird.exe Object is locked skipped
C:\Documents and Settings\Andy\Favorites\Dell\Dell Online Support Resources\Download.url Object is locked skipped
C:\Documents and Settings\Andy\Favorites\Dell\Dell Online Support Resources\Order Status.url Object is locked skipped
C:\Documents and Settings\Andy\Favorites\Dell\Dell Online Support Resources\Services and Warranties.url Object is locked skipped
C:\Documents and Settings\Andy\Favorites\Dell\Dell Online Support Resources\Support Website.url Object is locked skipped
C:\Documents and Settings\Andy\Favorites\Dell\Dell Online Support Resources\Troubleshooting.url Object is locked skipped
C:\Documents and Settings\Andy\Favorites\Dell\Dell Online Support Resources\User Guides.url Object is locked skipped
C:\Documents and Settings\Andy\Favorites\Dell\Dell.url Object is locked skipped
C:\Documents and Settings\Andy\Favorites\Dell\Support.Dell.Com.url Object is locked skipped
C:\Documents and Settings\Andy\Favorites\Desktop.ini Object is locked skipped
C:\Documents and Settings\Andy\Favorites\Links\Customize Links.url Object is locked skipped
C:\Documents and Settings\Andy\Favorites\Links\Free Hotmail.url Object is locked skipped
C:\Documents and Settings\Andy\Favorites\Links\Windows Marketplace.url Object is locked skipped
C:\Documents and Settings\Andy\Favorites\Links\Windows Media.url Object is locked skipped
C:\Documents and Settings\Andy\Favorites\Links\Windows.url Object is locked skipped
C:\Documents and Settings\Andy\Favorites\Microsoft Websites\IE Add-on site.url Object is locked skipped
C:\Documents and Settings\Andy\Favorites\Microsoft Websites\IE site on Microsoft.com.url Object is locked skipped
C:\Documents and Settings\Andy\Favorites\Microsoft Websites\Marketplace.url Object is locked skipped
C:\Documents and Settings\Andy\Favorites\Microsoft Websites\Microsoft At Home.url Object is locked skipped
C:\Documents and Settings\Andy\Favorites\Microsoft Websites\Microsoft At Work.url Object is locked skipped
C:\Documents and Settings\Andy\Favorites\Microsoft Websites\Welcome to IE7.url Object is locked skipped
C:\Documents and Settings\Andy\Favorites\MSN.com.url Object is locked skipped
C:\Documents and Settings\Andy\Favorites\Radio Station Guide.url Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\Adobe\Color\ACECache4.lst Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\ApplicationHistory\csc.exe.3e4ac0af.ini Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\ApplicationHistory\dsca.exe.cf6b816f.ini Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\ApplicationHistory\hpqimzone.exe.3204510e.ini Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\ApplicationHistory\hpqthb08.exe.a935d1e0.ini Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\ApplicationHistory\ngen.exe.2c05686e.ini Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\ApplicationHistory\SL30.tmp.a406a4be.ini Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\BVRP Software\NetWaiting\MoHlog.bak Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\BVRP Software\NetWaiting\MoHlog.txt Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\BVRP Software\NetWaiting\NetWait.ini Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\fusioncache.dat Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\GDIPFONTCACHEV1.DAT Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\HP\Digital Imaging\cache\LastWrite.txt Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\HP\Digital Imaging\db\administrativeInfo.dbf Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\HP\Digital Imaging\db\albumImagesTable.cdx Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\HP\Digital Imaging\db\albumImagesTable.dbf Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\HP\Digital Imaging\db\albumTable.cdx Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\HP\Digital Imaging\db\albumTable.dbf Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\HP\Digital Imaging\db\CB_Server_Errors.txt Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\HP\Digital Imaging\db\EXIFTable.cdx Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\HP\Digital Imaging\db\EXIFTable.dbf Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\HP\Digital Imaging\db\imageTable.cdx Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\HP\Digital Imaging\db\imageTable.dbf Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\HP\Digital Imaging\db\imageTable.fpt Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\HP\Digital Imaging\db\keywordImagesTable.cdx Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\HP\Digital Imaging\db\keywordImagesTable.dbf Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\HP\Digital Imaging\db\keywordTable.cdx Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\HP\Digital Imaging\db\keywordTable.dbf Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\HP\Digital Imaging\db\managedFolderTable.dbf Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\HP\Digital Imaging\db\pathnameTable.cdx Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\HP\Digital Imaging\db\pathnameTable.dbf Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\HP\Digital Imaging\db\propertiesTable.cdx Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\HP\Digital Imaging\db\propertiesTable.dbf Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\HP\Digital Imaging\db\ROFImagesTable.cdx Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\HP\Digital Imaging\db\ROFImagesTable.dbf Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\HP\Digital Imaging\db\ROFTable.cdx Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\HP\Digital Imaging\db\ROFTable.dbf Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\HP\Digital Imaging\handle.dat Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\HP\Digital Imaging\oov1_skindefV3.dat Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\IconCache.db Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\IsolatedStorage\1dlow4eb.1kf\okm0naug.wwz\StrongName.xitmqsrqvpqpovqi5kx5u3ghwej4ru23\AssemFiles\hpqedit.settings Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\IsolatedStorage\1dlow4eb.1kf\okm0naug.wwz\StrongName.xitmqsrqvpqpovqi5kx5u3ghwej4ru23\identity.dat Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\IsolatedStorage\1dlow4eb.1kf\okm0naug.wwz\StrongName.xitmqsrqvpqpovqi5kx5u3ghwej4ru23\info.dat Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\Microsoft\Feeds\FeedsStore.feedsdb-ms Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\Microsoft\Feeds\Microsoft Feeds~\Microsoft at Home~.feed-ms Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\Microsoft\Feeds\Microsoft Feeds~\Microsoft at Work~.feed-ms Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\Microsoft\Feeds Cache\5I9E8DR2\desktop.ini Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\Microsoft\Feeds Cache\5I9E8DR2\fwlink[1] Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\Microsoft\Feeds Cache\90CC1J17\desktop.ini Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\Microsoft\Feeds Cache\90CC1J17\fwlink[1] Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\Microsoft\Feeds Cache\desktop.ini Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\Microsoft\Feeds Cache\SZFMS7J4\desktop.ini Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\Microsoft\Feeds Cache\VXZG6OTR\desktop.ini Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\Microsoft\Internet Explorer\brndlog.txt Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\Microsoft\Internet Explorer\MSIMGSIZ.DAT Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\Microsoft\Media Player\CurrentDatabase_59R.wmdb Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\Microsoft\Media Player\wmdbexport.xml Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\Microsoft\Wallpaper1.bmp Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\Microsoft\Windows Media\9.0\WMSDKNS.DTD Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\Microsoft\Windows Media\9.0\WMSDKNS.XML Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\Microsoft\Works\Portfolio\Sample.wsb Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\PowerDVD\ar.cbk Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\PowerDVD\Config.xml Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\PowerDVD\UserName.xml Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\{7148F0A6-6813-11D6-A77B-00B0D0142030}\1033.MST Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Application Data\{7148F0A6-6813-11D6-A77B-00B0D0142030}\Java 2 Runtime Environment, SE v1.4.2_03.msi Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\desktop.ini Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\History\desktop.ini Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\History\History.IE5\desktop.ini Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\History\History.IE5\MSHist012008040520080406\index.dat Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temp\AUInst.log Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temp\Google Gadget Cache\{07986C34-8325-D60A-26AA-163746389479}\1033\strings.xml Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temp\Google Gadget Cache\{07986C34-8325-D60A-26AA-163746389479}\gadget.gmanifest Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temp\Google Gadget Cache\{152A2428-1F10-2637-7FD6-33E69889E11E}\1033\strings.xml Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temp\Google Gadget Cache\{152A2428-1F10-2637-7FD6-33E69889E11E}\gadget.gmanifest Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temp\Google Gadget Cache\{6626DBDA-021B-C749-EBCA-74A7599F594C}\1033\strings.xml Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temp\Google Gadget Cache\{6626DBDA-021B-C749-EBCA-74A7599F594C}\gadget.gmanifest Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temp\Google Gadget Cache\{8B21D205-5F03-5C5C-0DCF-F83BC74BCACF}\1033\strings.xml Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temp\Google Gadget Cache\{8B21D205-5F03-5C5C-0DCF-F83BC74BCACF}\gadget.gmanifest Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temp\Google Gadget Cache\{B6B175A4-44C6-0025-87C8-40A6A6E898D5}\1033\strings.xml Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temp\Google Gadget Cache\{B6B175A4-44C6-0025-87C8-40A6A6E898D5}\gadget.gmanifest Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temp\Google Gadget Cache\{D6C33382-7C05-88A5-BC3D-752C772BE1E1}\1033\strings.xml Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temp\Google Gadget Cache\{D6C33382-7C05-88A5-BC3D-752C772BE1E1}\gadget.gmanifest Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temp\Google Gadget Cache\{E8F29EC9-2661-B048-53C9-3514B3A6BDEF}\1033\strings.xml Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temp\Google Gadget Cache\{E8F29EC9-2661-B048-53C9-3514B3A6BDEF}\gadget.gmanifest Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temp\hpodvd09.log Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temp\jusched.log Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temp\MARB.tmp Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temp\MARC.tmp Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temp\STS1D.tmp Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\0db4aa42fc113db6f41834a747475a13[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\3dpool[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\413c75d88593fbbb77e670dbc7c12d5f[1].swf Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\413c75d88593fbbb77e670dbc7c12d5f[2].swf Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\4868f76ecb629356b5901d18bfe99654[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\609x75_clubpenguin[1].jpg Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\680d62fa080ef8013ff16ccfda172a8d[1].swf Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\abg-en-100c-000000[1].png Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\abg-en-100c-ffffff[1].png Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\accessories_96x120[1].png Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\AC_ActiveX[1].js Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\b1b613f881fcd92794f6be646d6397ac[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\backend[1].htm Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\basketballslam[1].swf Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\bg_listtoggle[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\bg_mainContent[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\bg_myminiclips[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\bullet_orange[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\button19[1].jpg Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\button_games2[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\c5dbb3d91d7360e938b83a1cd1b2b0bc[1].swf Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\c5dbb3d91d7360e938b83a1cd1b2b0bc[2].swf Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\chdata120[1].ucl Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\chdata54[1].ucl Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\chopper[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\clubpenguinsmallicon[1].jpg Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\commandLinkHover[1].png Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\commonPrint[1].css Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\cpwebvw[1] Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\crazygolf[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\desktop.ini Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\eagleeye2[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\eagleeye[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\enterprise_96x120[1].png Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\ErrorPageTemplate[1] Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\external[1].png Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\extremeclimbing[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\fiveaside[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\frostyflips[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\fr[1].png Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\funkytruck3[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\funkytruckarizona[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\funkytruck[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\gen_poweredge_2970_728x228[1].jpg Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\handheld[1].css Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\harpoon[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\header%20articlepos%20copy[1].jpg Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\heli3smallicon[1].jpg Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\highwayheist[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\home51[1].js Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\home52[1].js Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\homepage[1].css Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\imp[1] Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\info_48[1] Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\it[1].png Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\locres[1].auz Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\login[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\mainpage[1] Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\main[1].css Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\menubarcurrscores3[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\menubarhelp3[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\Miniclip[1].htm Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\monitor[1] Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\nav[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\nav_closetab[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\nav_logo[1].png Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\nav_more_arrow[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\notebooks_vista_96x120[1].png Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\noticetitlefeatured3[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\noticetitlemultiplayer2[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\ontherunsmallicon[1].jpg Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\oo[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\overkillapachesmallicon[1].jpg Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\popupcurs[1] Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\popup[1] Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\primary[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\pwcreate[1] Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\pw_common[1] Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\rmtag3[1].js Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\search[1].htm Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\search[1].png Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\search[1].xml Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\snowlinesmallicon[1].jpg Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\spons_7[1].htm Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\swg[1] Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\tgmotocross2[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\tools[1] Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\total[1].ucl Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\total[2].ucl Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\total[3].ucl Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\total[4].ucl Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\users32[1] Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\users[1] Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\60KG8T7T\wiki-en[1].png Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\1375816320@Middle[1] Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\2f2a6d5f8d25a44dd1cb8ce20c107c88[1].swf Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\ads[1].htm Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\ads[2].htm Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\ads[3].htm Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\ads[4].htm Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\airhockey[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\alpinefreestyle[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\bg_gamesection[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\bg_h1[1].jpg Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\bmxbackflips2[1].swf Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\bmxbackflips[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\border_5[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\bullet[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\bumperkarts[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\buttonC1[1].jpg Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\button_ecards2[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\button_ecards[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\button_games[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\button_toons2[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\chg_common[1] Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\clicktoplay[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\cn[1].png Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\commandLinkDefault[1].png Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\crazygolf2[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\custom[1] Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\DataBase[1].ref Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\dellecomicon[1].ico Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\desktop.ini Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\desktops_vista_96x120[1].png Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\de[1].png Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\dnserror[1] Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\down[1] Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\e91a464b032a1592d08fe91453a34fb6[1].swf Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\entertainment_blue_tall[1].jpg Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\en[1].png Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\evalue[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\Failure[1].png Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\favicon[1].ico Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\fireitup[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\full_games_list[1].htm Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\funkytruck4wd[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\gen_dimen_amd[1].jpg Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\golfacesmallicon[1].jpg Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\guest_disabled[1] Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\headbg[1].jpg Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\httpErrorPagesScripts[1] Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\icon_feed[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\IEFirst[1].css Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\improvement[1].png Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\imp[1] Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\lexicon50[1].js Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\lock_icon[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\locres44[1].auz Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\locres96[1].auz Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\logo3[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\mainpage[1] Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\menubarbestscores3[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\menu[1].htm Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\monstertrucksmallicon[1].jpg Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\montage43[1].js Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\nav_logo2[1].png Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\nusrmgr[1] Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\orangutwang[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\o[1].js Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\phising[1].jpg Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\pinball[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\popupblocked[1] Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\popupintro[1] Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\poxnora_12[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\printers_96x120[1].png Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\pub[1].cer Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\pub[2].cer Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\pub[3].cer Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\pub[4].cer Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\right_side[2].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\search[1].xml Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\search[2].xml Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\selectable[1] Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\show_ads[1].js Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\slingstar[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\slingstar[2].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\spons_7[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\spons_8[1].htm Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\tgmotocross3[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\tgmotocross[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\theashessmallicon[1].jpg Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\timer[1].swf Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\total121[1].ucl Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\total38[1].ucl Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\tuneups[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\user[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\wikibits[1].js Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\world[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\7JY5TPLA\wt[1].js Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\12521103854374dc644272b[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\165px-Miniclip[1].png Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\26200621944314e5b047bb[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\413c75d88593fbbb77e670dbc7c12d5f[1].swf Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\413c75d88593fbbb77e670dbc7c12d5f[2].swf Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\55846618244314d5909680[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\755ca45ec6b117f0ce8a89398b17d32c[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\AC_RunActiveContent[1].js Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\AC_RunActiveContent[2].js Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\ads[1].htm Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\ads[2].htm Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\ads[3].htm Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\ad_300x250[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\arrow_top[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\backend[1].htm Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\background_gradient[1] Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\bg_tabcontrols[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\bg_toptencontent[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\blueprint[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\bmxbackflips2[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\bmxhighlands[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\bmxstar[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\body[1] Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\bookmarks[1] Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\bubbletroublesmallicon[1].jpg Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\bullet_blue_right[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\button_playnow[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\button_toons[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\cart[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\chdata[1].ucl Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\chdata[2].ucl Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\chdata[3].ucl Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\chdata[4].ucl Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\clashandslashsmallicon[1].jpg Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\classic[1] Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\clubpenguinmedicon[1].jpg Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\commandLink[1].png Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\commandosmallicon[1].jpg Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\css[1].css Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\css[2].css Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\deepfreezesmallicon[1].jpg Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\desktop.ini Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\dlg[1] Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\en[1].htm Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\favcenter[1] Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\fd771b7a8c919ff1b65133cde60f35e9[1].swf Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\gen_monit_24[1].jpg Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\header[1].png Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\icon_web[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\imp[1] Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\imp[2] Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\imp[3] Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\imp[4] Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\imp[5] Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\index[1].php Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\jp[1].png Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\left_side[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\location[1].png Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\locres105[1].auz Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\locres45[1].auz Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\menubarmultiplayer3[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\Miniclip[1].png Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\munchymole[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\nav_more_bg[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\nineball[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\nusrmgr[2] Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\nusrmgr[4] Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\opensearch_desc[1].php Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\orderstatus[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\paintball[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\passwordpage2[1] Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\PasswordPage[1] Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\popup[1] Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\poweredby_mediawiki_88x31[1].png Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\productmenus[1].js Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\pt[1].png Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\rw[1].htm Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\search[1] Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\search[1].xml Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\search[2].htm Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\secondary_sep[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\spacer[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\streetskating[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\styles[1].css Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\success[1].png Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\support_96x120[1].png Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\tgmotocross3[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\timer[1].swf Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\topdog[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\urchin[2].js Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\version_en_win_ax[1].xml Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\wikimedia-button[1].png Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\wipeout[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\R6N771J4\xps_m1210[1].jpg Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\324x100_sudokuCrossword[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\728x228_dellcom_version2[1].jpg Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\8308eae5ec1dfd3be4717a5b967ba675[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\8f4eb6ceaf7b9585b69d6f247d86081c[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\ads[1].htm Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\ads[2].htm Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\ag[1].swf Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\ajax[1].js Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\basketballslamsmallicon[1].jpg Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\bg_animnumber[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\bg_catlist[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\bg_footer_new[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\bg_gametab2[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\blastbilly[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\bmxbackflips2[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\bmxghost[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\bookmarks2[1] Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\bookmarksintro[1] Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\border_1[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\border_3[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\bullet[1] Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\button14[1].jpg Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\button20[1].jpg Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\buttonF1[1].jpg Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\chdata141[1].ucl Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\chdata55[1].ucl Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\chopper[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\chuck[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\cleartype[2].png Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\cmdarrw_nor[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\css[1].css Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\default[1].htm Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\desktop.ini Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\email_sign[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\errorPageStrings[1] Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\es[1].png Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\favicon[1].ico Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\games-index[1].htm Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\games[1].css Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\global[1].js Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\helpdoc[1] Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\hoops[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\IE70Fixes[1].css Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\imp[1] Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\imp[2] Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\index[1].css Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\index[2].css Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\index[3].css Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\kr[1].png Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\lexicon52[1].js Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\localtext[1] Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\locres[1].auz Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\locres[2].auz Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\locres[3].auz Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\locres[4].auz Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\logo43[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\mainpage2[1] Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\menubarblank[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\menubartips3[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\menumask_96x28[1].png Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\monkeykickoffsmallicon[1].jpg Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\monkeykickoff[1].swf Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\monkeysnowfightsmallicon[1].jpg Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\Monobook-bullet[1].png Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\newgame[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\noticetitlesponsored[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\nwcorner[1].png Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\oas_home_games[1].js Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\pharaohsmallicon[1].jpg Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\pitchnputt[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\polardrift[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\poxnora_11[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\poxnora_14[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\poxnora_18[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\query[1].htm Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\rmtag3[1].js Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\runonce2[1].htm Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\secondary[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\shadow_96x3[1].png Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\skidpan[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\slingstar[1].swf Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\snowboardmadnesssmallicon[1].jpg Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\spons_8[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\spons_style[1].css Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\sudokusmallicon[1].jpg Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\tabletennis[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\taskbullet[2] Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\tb_logo[1] Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\topbuttons[2].xml Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\topdog2[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\total102[1].ucl Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\total40[1].ucl Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\viewlarger[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\Content.IE5\ZQQBBUH0\zombieromp[1].gif Object is locked skipped
C:\Documents and Settings\Andy\Local Settings\Temporary Internet Files\desktop.ini Object is locked skipped
C:\Documents and Settings\Andy\My Documents\Andy to 6 andmi.doc Object is locked skipped
C:\Documents and Settings\Andy\My Documents\desktop.ini Object is locked skipped
C:\Documents and Settings\Andy\My Documents\Doc1.doc Object is locked skipped
C:\Documents and Settings\Andy\My Documents\My Google Gadgets\Analog Clock-Google.gg Object is locked skipped
C:\Documents and Settings\Andy\My Documents\My Google Gadgets\Battery Meter-Google.gg Object is locked skipped
C:\Documents and Settings\Andy\My Documents\My Google Gadgets\Digital Clock-Google.gg Object is locked skipped
C:\Documents and Settings\Andy\My Documents\My Google Gadgets\Google Gadget Tips-Google.gg Object is locked skipped
C:\Documents and Settings\Andy\My Documents\My Google Gadgets\Google Gadgets Calendar-Google.gg Object is locked skipped
C:\Documents and Settings\Andy\My Documents\My Google Gadgets\Media Player Remote-Google.gg Object is locked skipped
C:\Documents and Settings\Andy\My Documents\My Google Gadgets\Wireless Signal Meter-Google.gg Object is locked skipped
C:\Documents and Settings\Andy\My Documents\My Music\Desktop.ini Object is locked skipped
C:\Documents and Settings\Andy\My Documents\My Music\Sample Music.lnk Object is locked skipped
C:\Documents and Settings\Andy\My Documents\My Pictures\Desktop.ini Object is locked skipped
C:\Documents and Settings\Andy\My Documents\My Pictures\Sample Pictures.lnk Object is locked skipped
C:\Documents and Settings\Andy\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\Andy\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\Andy\ntuser.ini Object is locked skipped
C:\Documents and Settings\Andy\Recent\Analog Clock-Google.lnk Object is locked skipped
C:\Documents and Settings\Andy\Recent\Andy to 6 andmi.lnk Object is locked skipped
C:\Documents and Settings\Andy\Recent\Battery Meter-Google.lnk Object is locked skipped
C:\Documents and Settings\Andy\Recent\Desktop.ini Object is locked skipped
C:\Documents and Settings\Andy\Recent\Doc1.lnk Object is locked skipped
C:\Documents and Settings\Andy\Recent\Google Gadgets Calendar-Google.lnk Object is locked skipped
C:\Documents and Settings\Andy\Recent\Media Player Remote-Google.lnk Object is locked skipped
C:\Documents and Settings\Andy\Recent\My Google Gadgets.lnk Object is locked skipped
C:\Documents and Settings\Andy\Recent\Wireless Signal Meter-Google.lnk Object is locked skipped
C:\Documents and Settings\Andy\SendTo\Compressed (zipped) Folder.ZFSendToTarget Object is locked skipped
C:\Documents and Settings\Andy\SendTo\Desktop (create shortcut).DeskLink Object is locked skipped
C:\Documents and Settings\Andy\SendTo\desktop.ini Object is locked skipped
C:\Documents and Settings\Andy\SendTo\Mail Recipient.MAPIMail Object is locked skipped
C:\Documents and Settings\Andy\SendTo\My Documents.mydocs Object is locked skipped
C:\Documents and Settings\Andy\Start Menu\desktop.ini Object is locked skipped
C:\Documents and Settings\Andy\Start Menu\Programs\Accessories\Accessibility\desktop.ini Object is locked skipped
C:\Documents and Settings\Andy\Start Menu\Programs\Accessories\Accessibility\Magnifier.lnk Object is locked skipped
C:\Documents and Settings\Andy\Start Menu\Programs\Accessories\Accessibility\Narrator.lnk Object is locked skipped
C:\Documents and Settings\Andy\Start Menu\Programs\Accessories\Accessibility\On-Screen Keyboard.lnk Object is locked skipped
C:\Documents and Settings\Andy\Start Menu\Programs\Accessories\Accessibility\Utility Manager.lnk Object is locked skipped
C:\Documents and Settings\Andy\Start Menu\Programs\Accessories\Address Book.lnk Object is locked skipped
C:\Documents and Settings\Andy\Start Menu\Programs\Accessories\Command Prompt.lnk Object is locked skipped
C:\Documents and Settings\Andy\Start Menu\Programs\Accessories\desktop.ini Object is locked skipped
C:\Documents and Settings\Andy\Start Menu\Programs\Accessories\Entertainment\desktop.ini Object is locked skipped
C:\Documents and Settings\Andy\Start Menu\Programs\Accessories\Notepad.lnk Object is locked skipped
C:\Documents and Settings\Andy\Start Menu\Programs\Accessories\Program Compatibility Wizard.lnk Object is locked skipped
C:\Documents and Settings\Andy\Start Menu\Programs\Accessories\Synchronize.lnk Object is locked skipped
C:\Documents and Settings\Andy\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk Object is locked skipped
C:\Documents and Settings\Andy\Start Menu\Programs\Accessories\Tour Windows XP.lnk Object is locked skipped
C:\Documents and Settings\Andy\Start Menu\Programs\Accessories\Windows Explorer.lnk Object is locked skipped
C:\Documents and Settings\Andy\Start Menu\Programs\Dell\Phone Support.lnk Object is locked skipped
C:\Documents and Settings\Andy\Start Menu\Programs\desktop.ini Object is locked skipped
C:\Documents and Settings\Andy\Start Menu\Programs\Internet Explorer.lnk Object is locked skipped
C:\Documents and Settings\Andy\Start Menu\Programs\Outlook Express.lnk Object is locked skipped
C:\Documents and Settings\Andy\Start Menu\Programs\Remote Assistance.lnk Object is locked skipped
C:\Documents and Settings\Andy\Start Menu\Programs\Startup\desktop.ini Object is locked skipped
C:\Documents and Settings\Andy\Start Menu\Programs\Windows Media Player.lnk Object is locked skipped
C:\Documents and Settings\Andy\Templates\amipro.sam Object is locked skipped
C:\Documents and Settings\Andy\Templates\excel.xls Object is locked skipped
C:\Documents and Settings\Andy\Templates\excel4.xls Object is locked skipped
C:\Documents and Settings\Andy\Templates\lotus.wk4 Object is locked skipped
C:\Documents and Settings\Andy\Templates\powerpnt.ppt Object is locked skipped
C:\Documents and Settings\Andy\Templates\presenta.shw Object is locked skipped
C:\Documents and Settings\Andy\Templates\quattro.wb2 Object is locked skipped
C:\Documents and Settings\Andy\Templates\sndrec.wav Object is locked skipped
C:\Documents and Settings\Andy\Templates\winword.doc Object is locked skipped
C:\Documents and Settings\Andy\Templates\winword2.doc Object is locked skipped
C:\Documents and Settings\Andy\Templates\wordpfct.wpd Object is locked skipped
C:\Documents and Settings\Andy\Templates\wordpfct.wpg Object is locked skipped
C:\Documents and Settings\Jane\Application Data\Gtek\GTUpdate\AUpdate\DellSupport\DSAgnt.log Object is locked skipped
C:\Documents and Settings\Jane\Application Data\Gtek\GTUpdate\AUpdate\DellSupport\DSAgnt_GTActions.log Object is locked skipped
C:\Documents and Settings\Jane\Application Data\Gtek\GTUpdate\AUpdate\DellSupport\gdql_d_DSAgnt.log Object is locked skipped
C:\Documents and Settings\Jane\Application Data\Gtek\GTUpdate\AUpdate\DellSupport\glog.log Object is locked skipped
C:\Documents and Settings\Jane\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\Jane\Desktop\SmitfraudFix\Reboot.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped
C:\Documents and Settings\Jane\Desktop\SmitfraudFix.zip/SmitfraudFix/Reboot.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped
C:\Documents and Settings\Jane\Desktop\SmitfraudFix.zip ZIP: infected - 1 skipped
C:\Documents and Settings\Jane\Local Settings\Application Data\ApplicationHistory\hpqimzone.exe.3204510e.ini.inuse Object is locked skipped
C:\Documents and Settings\Jane\Local Settings\Application Data\BVRP Software\NetWaiting\MoHlog.txt Object is locked skipped
C:\Documents and Settings\Jane\Local Settings\Application Data\HP\Digital Imaging\db\administrativeInfo.dbf Object is locked skipped
C:\Documents and Settings\Jane\Local Settings\Application Data\HP\Digital Imaging\db\albumImagesTable.cdx Object is locked skipped
C:\Documents and Settings\Jane\Local Settings\Application Data\HP\Digital Imaging\db\albumImagesTable.dbf Object is locked skipped
C:\Documents and Settings\Jane\Local Settings\Application Data\HP\Digital Imaging\db\albumTable.cdx Object is locked skipped
C:\Documents and Settings\Jane\Local Settings\Application Data\HP\Digital Imaging\db\albumTable.dbf Object is locked skipped
C:\Documents and Settings\Jane\Local Settings\Application Data\HP\Digital Imaging\db\CB_Server_Errors.txt Object is locked skipped
C:\Documents and Settings\Jane\Local Settings\Application Data\HP\Digital Imaging\db\EXIFTable.cdx Object is locked skipped
C:\Documents and Settings\Jane\Local Settings\Application Data\HP\Digital Imaging\db\EXIFTable.dbf Object is locked skipped
C:\Documents and Settings\Jane\Local Settings\Application Data\HP\Digital Imaging\db\imageTable.cdx Object is locked skipped
C:\Documents and Settings\Jane\Local Settings\Application Data\HP\Digital Imaging\db\imageTable.dbf Object is locked skipped
C:\Documents and Settings\Jane\Local Settings\Application Data\HP\Digital Imaging\db\imageTable.fpt Object is locked skipped
C:\Documents and Settings\Jane\Local Settings\Application Data\HP\Digital Imaging\db\keywordImagesTable.cdx Object is locked skipped
C:\Documents and Settings\Jane\Local Settings\Application Data\HP\Digital Imaging\db\keywordImagesTable.dbf Object is locked skipped
C:\Documents and Settings\Jane\Local Settings\Application Data\HP\Digital Imaging\db\keywordTable.cdx Object is locked skipped
C:\Documents and Settings\Jane\Local Settings\Application Data\HP\Digital Imaging\db\keywordTable.dbf Object is locked skipped
C:\Documents and Settings\Jane\Local Settings\Application Data\HP\Digital Imaging\db\managedFolderTable.dbf Object is locked skipped
C:\Documents and Settings\Jane\Local Settings\Application Data\HP\Digital Imaging\db\pathnameTable.cdx Object is locked skipped
C:\Documents and Settings\Jane\Local Settings\Application Data\HP\Digital Imaging\db\pathnameTable.dbf Object is locked skipped
C:\Documents and Settings\Jane\Local Settings\Application Data\HP\Digital Imaging\db\propertiesTable.cdx Object is locked skipped
C:\Documents and Settings\Jane\Local Settings\Application Data\HP\Digital Imaging\db\propertiesTable.dbf Object is locked skipped
C:\Documents and Settings\Jane\Local Settings\Application Data\HP\Digital Imaging\db\ROFImagesTable.cdx Object is locked skipped
C:\Documents and Settings\Jane\Local Settings\Application Data\HP\Digital Imaging\db\ROFImagesTable.dbf Object is locked skipped
C:\Documents and Settings\Jane\Local Settings\Application Data\HP\Digital Imaging\db\ROFTable.cdx Object is locked skipped
C:\Documents and Settings\Jane\Local Settings\Application Data\HP\Digital Imaging\db\ROFTable.dbf Object is locked skipped
C:\Documents and Settings\Jane\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat Object is locked skipped
C:\Documents and Settings\Jane\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\Jane\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\Jane\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Jane\Local Settings\History\History.IE5\MSHist012008040920080410\index.dat Object is locked skipped
C:\Documents and Settings\Jane\Local Settings\Temp\hpodvd09.log Object is locked skipped
C:\Documents and Settings\Jane\Local Settings\Temp\sqlite_zdbfM5MTngX55CK Object is locked skipped
C:\Documents and Settings\Jane\Local Settings\Temp\~DF7834.tmp Object is locked skipped
C:\Documents and Settings\Jane\Local Settings\Temp\~DFFF4C.tmp Object is locked skipped
C:\Documents and Settings\Jane\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Jane\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\Jane\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\Phil\Local Settings\Temp\ac8zt2\eogk.exe Infected: not-a-virus:AdWare.Win32.Vapsup.dfo skipped
C:\Documents and Settings\Phil\My Documents\Music\Espana\cache.dmx Object is locked skipped
C:\RECYCLER\S-1-5-21-1737837124-3010858350-1984525190-1007\Dc11\GV_v1r[1].exe Infected: Trojan-Downloader.Win32.Small.gkk skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP310\A0080512.exe Infected: not-a-virus:AdWare.Win32.Vapsup.dfq skipped
C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP312\A0082187.dll Infected: not-a-virus:AdWare.Win32.Vapsup.dhb skipped
C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP312\A0082188.dll Infected: not-a-virus:AdWare.Win32.Vapsup.dhc skipped
C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP316\change.log Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\EventCache\{AB445502-3FDE-4C93-9ADA-6A9E2CA7CC12}.bin Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\DEFAULT Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\Internet.evt Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\SOFTWARE Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SYSTEM Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\LogFiles\HTTPERR\httperr1.log Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\Temp\mcafee_hljcVSGAcLPxa9M Object is locked skipped
C:\WINDOWS\Temp\mcmsc_X7TaYt2KahfWLwQ Object is locked skipped
C:\WINDOWS\Temp\sqlite_bJZYPu2ierosiYx Object is locked skipped
C:\WINDOWS\Temp\sqlite_dEZGpRFEBhQYYhO Object is locked skipped
C:\WINDOWS\Temp\sqlite_YGLiukBtdBIxXkU Object is locked skipped
C:\WINDOWS\Temp\sqlite_zvU2sD9LaJVfoac Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped

Scan process completed.

ANTI MALWARE LOG

Malwarebytes' Anti-Malware 1.10
Database version: 598

Scan type: Full Scan (C:\|F:\|)
Objects scanned: 157687
Time elapsed: 1 hour(s), 19 minute(s), 27 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 38
Registry Values Infected: 1
Registry Data Items Infected: 0
Folders Infected: 7
Files Infected: 35

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CLASSES_ROOT\Interface\{19d8a83d-f494-4a15-a8d0-25f4f0dc3394} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{664cc145-e1a5-4002-84df-4abaee16ea68} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\stfngdvw.bleo (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\stfngdvw.toolbar.1 (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{be39f01c-46fb-4111-9ae9-2f11dc22af69} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{56621883-5d73-4fb4-9595-f290095fdafb} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{c72c7e28-1cd2-468b-8bf1-7da221e4e67a} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{28b80552-f693-48ae-92ce-132b7250de35} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{000000da-0786-4633-87c6-1aa7a4429ef1} (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{000000da-0786-4633-87c6-1aa7a4429ef1} (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{0656a137-b161-cadd-9777-e37a75727e78} (Fake.Dropped.Malware) -> Delete on reboot.
HKEY_CLASSES_ROOT\CLSID\{0b682cc1-fb40-4006-a5dd-99edd3c9095d} (Fake.Dropped.Malware) -> Delete on reboot.
HKEY_CLASSES_ROOT\CLSID\{54645654-2225-4455-44a1-9f4543d34545} (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{0e1230f8-ea50-42a9-983c-d22abc2eeb4c} (Fake.Dropped.Malware) -> Delete on reboot.
HKEY_CLASSES_ROOT\CLSID\{5c7f15e1-f31a-44fd-aa1a-2ec63aaffd3a} (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{9dd4258a-7138-49c4-8d34-587879a5c7a4} (Fake.Dropped.Malware) -> Delete on reboot.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9dd4258a-7138-49c4-8d34-587879a5c7a4} (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{b8c0220d-763d-49a4-95f4-61dfdec66ee6} (Fake.Dropped.Malware) -> Delete on reboot.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b8c0220d-763d-49a4-95f4-61dfdec66ee6} (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{c3bcc488-1ae7-11d4-ab82-0010a4ec2338} (Fake.Dropped.Malware) -> Delete on reboot.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{c3bcc488-1ae7-11d4-ab82-0010a4ec2338} (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\HOL5_VXIEWER.FULL.1 (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\Classes\HOL5_VXIEWER.FULL.1 (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\Classes\applications\accessdiver.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\fwbd (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\HolLol (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\Inet Delivery (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Inet Delivery (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\mslagent (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\Invictus (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorertoolbar (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\mwc (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\Golden Palace Casino PT (Trojan.DNSChanger) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Golden Palace Casino NEW (Trojan.DNSChanger) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Drivers (Rogue.Multiple) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Adsl Software Limited (Rogue.Multiple) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\stfngdvw.bleo (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\stfngdvw.ToolBar.1 (Trojan.FakeAlert) -> Quarantined and deleted successfully.

Registry Values Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{0656a137-b161-cadd-9777-e37a75727e78} (Fake.Dropped.Malware) -> Quarantined and deleted successfully.

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
C:\WINDOWS\mslagent (Adware.EGDAccess) -> Quarantined and deleted successfully.
C:\Program Files\PC-Cleaner (Rogue.PC-Cleaner) -> Quarantined and deleted successfully.
C:\WINDOWS\system32smp (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
C:\Program Files\Inet Delivery (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
C:\Documents and Settings\Phil\Desktopvirii (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jane\Desktopvirii (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
C:\Documents and Settings\Andy\Desktopvirii (Fake.Dropped.Malware) -> Quarantined and deleted successfully.

Files Infected:
C:\RECYCLER\S-1-5-21-1737837124-3010858350-1984525190-1007\Dc16.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\RECYCLER\S-1-5-21-1737837124-3010858350-1984525190-1007\Dc1\chunsnah.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\ivifitgp.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\qvwbyhwr.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\WINDOWS\Web\def.htm (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\WINDOWS\mslagent\2_mslagent.dll (Adware.EGDAccess) -> Quarantined and deleted successfully.
C:\WINDOWS\mslagent\mslagent.exe (Adware.EGDAccess) -> Quarantined and deleted successfully.
C:\WINDOWS\mslagent\uninstall.exe (Adware.EGDAccess) -> Quarantined and deleted successfully.
C:\WINDOWS\system32smp\msrc.exe (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
C:\Program Files\Inet Delivery\inetdl.exe (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
C:\Program Files\Inet Delivery\intdel.exe (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
C:\Documents and Settings\Phil\Desktopvirii\Trojan-Downloader.Win32.Agent.bl.exe (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
C:\Documents and Settings\Phil\Desktopvirii\Trojan-Downloader.Win32.Agent.p.exe (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
C:\Documents and Settings\Phil\Desktopvirii\Trojan-Downloader.Win32.Agent.r.exe (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
C:\Documents and Settings\Phil\Desktopvirii\Trojan-Downloader.Win32.Agent.t.exe (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
C:\Documents and Settings\Phil\Desktopvirii\Trojan-Downloader.Win32.Agent.v.exe (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jane\Desktopvirii\Trojan-Downloader.Win32.Agent.bl.exe (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jane\Desktopvirii\Trojan-Downloader.Win32.Agent.p.exe (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jane\Desktopvirii\Trojan-Downloader.Win32.Agent.r.exe (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jane\Desktopvirii\Trojan-Downloader.Win32.Agent.t.exe (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jane\Desktopvirii\Trojan-Downloader.Win32.Agent.v.exe (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
C:\Documents and Settings\Andy\Desktopvirii\Trojan-Downloader.Win32.Agent.bl.exe (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
C:\Documents and Settings\Andy\Desktopvirii\Trojan-Downloader.Win32.Agent.p.exe (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
C:\Documents and Settings\Andy\Desktopvirii\Trojan-Downloader.Win32.Agent.r.exe (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
C:\Documents and Settings\Andy\Desktopvirii\Trojan-Downloader.Win32.Agent.t.exe (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
C:\Documents and Settings\Andy\Desktopvirii\Trojan-Downloader.Win32.Agent.v.exe (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
C:\WINDOWS\bdn.com (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\iTunesMusic.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\mssecu.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Phil\Desktop\Spyware&Malware Protection.url (Rogue.Link) -> Quarantined and deleted successfully.
C:\Documents and Settings\Phil\Desktop\Privacy Protector.url (Rogue.Link) -> Quarantined and deleted successfully.
C:\Documents and Settings\Phil\Desktop\Error Cleaner.url (Rogue.Link) -> Quarantined and deleted successfully.
C:\Documents and Settings\Phil\Favorites\Error Cleaner.url (Rogue.Link) -> Quarantined and deleted successfully.
C:\Documents and Settings\Phil\Favorites\Privacy Protector.url (Rogue.Link) -> Quarantined and deleted successfully.
C:\Documents and Settings\Phil\Favorites\Spyware&Malware Protection.url (Rogue.Link) -> Quarantined and deleted successfully.


HIJACKTHIS LOG

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:20:01, on 09/04/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\wltrysvc.exe
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
C:\WINDOWS\Explorer.EXE
c:\program files\common files\mcafee\mna\mcnasvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
C:\Program Files\McAfee\VirusScan\McShield.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\Program Files\McAfee\MSK\MskSrver.exe
C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
C:\Program Files\SiteAdvisor\6253\SAService.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\stsystra.exe
C:\WINDOWS\system32\WLTRAY.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Dell\Media Experience\DMXLauncher.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\SiteAdvisor\6253\SiteAdv.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\McAfee.com\Agent\mcagent.exe
C:\Program Files\NetWaiting\netWaiting.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Microsoft Office\Office\OSA.EXE
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.microsoft.com/fwlink/?LinkId=74005
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6253\SiteAdv.dll
O2 - BHO: McAntiPhishingBHO - {377C180E-6F0E-4D4C-980F-F45BD3D40CF4} - c:\PROGRA~1\mcafee\msk\mcapbho.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6253\SiteAdv.dll
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [Dell Wireless Manager UI] C:\WINDOWS\system32\WLTRAY
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [MSKDetectorExe] C:\Program Files\McAfee\SpamKiller\MSKDetct.exe /uninstall
O4 - HKLM\..\Run: [SiteAdvisor] C:\Program Files\SiteAdvisor\6253\SiteAdv.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe"
O4 - HKLM\..\Run: [mcagent_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey
O4 - HKCU\..\Run: [ModemOnHold] C:\Program Files\NetWaiting\netWaiting.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ?
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Billminder.lnk = C:\QUICKENW\billmind.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Photosmart Premier Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: Microsoft Find Fast.lnk = C:\Program Files\Microsoft Office\Office\FINDFAST.EXE
O4 - Global Startup: Office Startup.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXE
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O15 - Trusted Zone: http://*.mcafee.com
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partne ... nicode.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcafee.com/molbin/share ... insctl.cab
O16 - DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} (ScorchPlugin Class) - http://www.sibelius.com/download/softwa ... Plugin.cab
O16 - DPF: {D1E7CBDA-E60E-4970-A01C-37301EF7BF98} (Measurement Services Client v.3.12) - http://gameadvisor.futuremark.com/global/msc3121.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\common files\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan\McShield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: McAfee SpamKiller Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SiteAdvisor Service - Unknown owner - C:\Program Files\SiteAdvisor\6253\SAService.exe
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\wltrysvc.exe

--
End of file - 12160 bytes
calljane
Active Member
 
Posts: 5
Joined: April 4th, 2008, 4:31 am

Re: Please help me remove this ...

Unread postby Bio-Hazard » April 9th, 2008, 5:13 pm

Update Java Runtime:

You are using an old version of Java. Sun's Java is sometimes updated in order to eliminate the exploitation of vulnerabilities in an existing version. For this reason it's extremely important that you keep the program up to date and also remove the older more vulnerable versions from your system. The most current version of Sun Java is: Java Runtime Environment Version 6 Update 5.
  • Go to http://java.sun.com/javase/downloads/index.jsp
  • Click on the link named Java Runtime Environment (JRE) 6 Update 5
  • Click on the radio button to Accept License Agreement
  • Click on Windows Offline Installation Multi-language and save the downloaded file to your hard disk
  • Go to Start => Control Panel => Add or Remove Programs
  • Uninstall all old versions of Java (Java 2 Runtime Environment JRE or JSE)
  • Reboot your computer
  • Delete the folder C:\Program Files\Java if present
  • Install the new version by running the newly-downloaded file and follow the on-screen instructions.
  • Reboot your computer





CCleaner

Download CCleaner Slim from >here< and save it to your Desktop. When the file has been saved, go to your Desktop and double-click on ccsetupxxx_slim.exe
Follow the prompts to install the program.

Complete the installation then
  • Make sure that ALL browser windows are closed
  • Double-click the CCleaner shortcut on the desktop to start the program.
  • Click on the Options block on the left, then choose Cookies.
    • Under Cookies to Delete, highlight any cookies you would like to retain permanently
    • Click the right arrow > to move them to the Cookies to Keep window.
  • Go into Options > Advanced deselect/uncheck 'Only delete files in Windows Temp folders older than 48 hours'
  • Click Run Cleaner to run the program.
  • Caution: It is not recommended that you use the 'Registry' feature unless you are very familiar with the registry.
  • After CCleaner has completed its process, click Exit.



Your log now appears to be clean. Congratulations!

You can get rid of the tools we used:
  • Smitfraudfix
  • Malwarebytes Antimalware (I would recommed to keep this program)
  • CCleaner (I would recommed to keep this program)


    Please take the time to tell us what you would like to be done about the people who are behind all the problems you have had. We can only get something done about this if the people that we help, like you, are prepared to complain. We have a dedicated forum for collecting these complaints >Malware Complaints<. You need to be registered to post as, unfortunately, we were hit with too many spam posts to allow guest posting to continue. Just find your country room and register your complaint.


    Protection Programs
    Don't forget to re-enable any protection programs we disabled during your fix.

    General Security and Computer Health
    Below are some steps to follow in order to dramatically lower the chances of reinfection
    You may have already implemented some of the steps below, however you should follow any steps that you have not already implemented.
    • Clear Infected System Restore Points
      • Turn System Restore off
      • On the Desktop, right click on the My Computer icon.
      • Click Properties.
      • Click the System Restore tab.
      • Check Turn off System Restore.
      • Click Apply, and then click OK.
      Restart your computer
      • Turn System Restore on
      • On the Desktop, right click on the My Computer icon.
      • Click Properties.
      • Click the System Restore tab.
      • Uncheck *Turn off System Restore*.
      • Click Apply, and then click OK.
      Note: only do this once,and not on a regular basis
    • Make sure that you keep your antivirus updated
      New viruses come out every minute, so it is essential that you have the latest signatures for your antivirus program to provide you with the best possible protection from malicious software.
      Note: You should only have one antivirus installed at a time. Having more than one antivirus program installed at once is likely to cause conflicts and may well decrease your overall protection as well as impairing the performance of your PC.

    • Security Updates for Windows, Internet Explorer & Microsoft Office
      Whenever a security problem in its software is found, Microsoft will usually create a patch so that after the patch is installed, attackers can't use the vulnerability to install malicious software on your PC. Keeping up with these patches will help to prevent malicious software being installed on your PC.
      Ensure you are registered for Windows updates via Start > right-click on My Computer > Properties > Automatic Updates tab or visit the >Microsoft Update site< on a regular basis.
      Note: The update process uses ActiveX, so you will need to use internet explorer for it and allow the ActiveX control to install.
    • Update Non-Microsoft Programs
      Microsoft isn't the only company whose products can contain security vulnerabilities. To check whether other programs running on your PC are in need of an update, you can use the >Secunia Software Inspector< - I suggest that you run it at least once a month
    • Make Internet Explorer More Secure
      • From within Internet Explorer click on the Tools menu and then click on Options.
      • Click once on the Security tab
      • Click once on the Internet icon so it becomes highlighted.
      • Click once on the Custom Level button.
      • Change the Download signed ActiveX controls to Prompt
      • Change the Download unsigned ActiveX controls to Disable
      • Change the Initialize and script ActiveX controls not marked as safe to Disable
      • Change the Installation of desktop items to Prompt
      • Change the Launching programs and files in an IFRAME to Prompt
      • Change the Navigate sub-frames across different domains to Prompt
      • When all these settings have been made, click on the OK button.
      • If it prompts you as to whether or not you want to save the settings, press the Yes button.
      • Next press the Apply button and then the OK to exit the Internet Properties page.

      Next, if they're not already present, I would recommend the download and installation of some or all of the following programs, and the updating of them on a regular basis:
    • WinPatrol
      As a robust security monitor, WinPatrol will alert you to hijackings, malware attacks and critical changes made to your computer without your permission. WinPatrol takes snapshot of your critical system resources and alerts you to any changes that may occur without your knowledge. For more information, please visit HERE
    • SpywareBlaster
      SpywareBlaster sets killbits in the registry to prevent known malicious ActiveX controls from installing on your computer.
      If you don't know what ActiveX controls are, see HERE
      You can download SpywareBlaster from HERE

    • Spybot Search & Destroy
      Instructions are located HERE. Make sure you update, reimmunize and scan regularly
    • Hosts File
      For added protection you may also like to add a host file. A simple explanation of what a Hosts file does is HERE and for more information regarding host files read HERE
    • Finally I am trying to make one point very clear. It is absolutely essential to keep all of your security programs up to date

Also please read this great article by Tony Klein So How Did I Get Infected In First Place

I'd be grateful if you could reply to this post so that I know you have read it and, if you've no other questions, the thread can be closed.

Happy surfing and stay clean!

Bio-Hazard
User avatar
Bio-Hazard
MRU Master Emeritus
 
Posts: 4078
Joined: May 10th, 2007, 8:28 am
Location: Cornwall, UK

Re: Please help me remove this ...

Unread postby calljane » April 11th, 2008, 5:41 am

Great work - thanks very much; I really appreciate your help.

Cheers from Downunder

Phil
calljane
Active Member
 
Posts: 5
Joined: April 4th, 2008, 4:31 am

Re: Please help me remove this ...

Unread postby Elrond » April 11th, 2008, 6:50 am

This topic is now closed. If you wish it reopened, please send us an email to 'admin at malwareremoval.com' with a link to your thread.

You can help support this site from this link :
Donations For Malware Removal

Do not bother contacting us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.
User avatar
Elrond
Admin/Teacher Emeritus
 
Posts: 8818
Joined: February 17th, 2005, 9:14 pm
Location: Jerusalem
Advertisement
Register to Remove


  • Similar Topics
    Replies
    Views
    Last post

Return to Infected? Virus, malware, adware, ransomware, oh my!



Who is online

Users browsing this forum: No registered users and 20 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware