Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

OneStep search - hjt log, please help!!

MalwareRemoval.com provides free support for people with infected computers. Using plain language that anyone can understand, our community of volunteer experts will walk you through each step.

Re: OneStep search - hjt log, please help!!

Unread postby ndmmxiaomayi » May 18th, 2008, 3:20 am

Mouse freezing might be due to other issues. Will take a look on that later.

Please open Notepad and copy and paste the following in the Code box into Notepad:

Code: Select all
@echo off
echo Log file can be found at C:\services.txt if Notepad doesn't open automatically.
regedit.exe /e C:\services.txt "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root"
echo End of file >> C:\services.txt
notepad C:\services.txt


Click on File > Save As....

In the File Name box, copy and paste in look.bat

In the Save As Type box, select All Files from the drop-down list.

Click Save.

Double click on look.bat to run it. Command Prompt will open, followed by Notepad shortly afterwards. Please post the contents of this Notepad file in your next reply.

The file can be too post huge to fit into one reply. If it doesn't fit into one reply, please keep posting until you are able see "End of file" for your reply. That would indicate that the file has been posted completely.
ndmmxiaomayi
MRU Emeritus
MRU Emeritus
 
Posts: 9708
Joined: July 17th, 2006, 9:22 am
Advertisement
Register to Remove

Re: OneStep search - hjt log, please help!!

Unread postby tamskinner » May 18th, 2008, 3:31 am

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\*PNP0501]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\*PNP0501\1_0_17_0_0_0]
"HardwareID"=hex(7):2a,00,50,00,4e,00,50,00,30,00,35,00,30,00,31,00,00,00,00,\
00
"FirmwareIdentified"=dword:00000001
"DeviceDesc"="COM1"
"Phantom"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\*PNP0501\1_0_17_0_0_0\Device Parameters]
"DosDeviceName"="COM1"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\*PNP0501\1_0_17_0_0_0\LogConf]
"BootConfig"=hex(8):01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,00,03,00,00,\
00,01,01,01,00,f8,03,00,00,00,00,00,00,07,00,00,00,02,00,01,00,04,00,00,00,\
04,00,00,00,ff,ff,ff,ff,05,00,00,00,08,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,20,1c,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\*PNP0501\1_0_17_0_0_0\Control]
"FirmwareMember"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\*PNP0501\1_0_17_1_0_0]
"HardwareID"=hex(7):2a,00,50,00,4e,00,50,00,30,00,35,00,30,00,31,00,00,00,00,\
00
"FirmwareIdentified"=dword:00000001
"DeviceDesc"="COM2"
"Phantom"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\*PNP0501\1_0_17_1_0_0\Device Parameters]
"DosDeviceName"="COM2"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\*PNP0501\1_0_17_1_0_0\LogConf]
"BootConfig"=hex(8):01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,00,03,00,00,\
00,01,01,01,00,f8,02,00,00,00,00,00,00,07,00,00,00,02,00,01,00,03,00,00,00,\
03,00,00,00,ff,ff,ff,ff,05,00,00,00,08,00,00,00,00,00,00,00,00,00,00,00,00,\
00,00,00,00,20,1c,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\*PNP0501\1_0_17_1_0_0\Control]
"FirmwareMember"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\ACPI_HAL]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\ACPI_HAL\0000]
"ConfigFlags"=dword:00000000
"Legacy"=dword:00000000
"DeviceReported"=dword:00000001
"Service"="\\Driver\\ACPI_HAL"
"HardwareID"=hex(7):61,00,63,00,70,00,69,00,61,00,70,00,69,00,63,00,5f,00,75,\
00,70,00,00,00,00,00
"CompatibleIDs"=hex(7):44,00,45,00,54,00,45,00,43,00,54,00,45,00,44,00,49,00,\
6e,00,74,00,65,00,72,00,6e,00,61,00,6c,00,5c,00,41,00,43,00,50,00,49,00,5f,\
00,48,00,41,00,4c,00,00,00,44,00,45,00,54,00,45,00,43,00,54,00,45,00,44,00,\
5c,00,41,00,43,00,50,00,49,00,5f,00,48,00,41,00,4c,00,00,00,00,00
"Capabilities"=dword:00000000
"ClassGUID"="{4D36E966-E325-11CE-BFC1-08002BE10318}"
"Class"="Computer"
"Driver"="{4D36E966-E325-11CE-BFC1-08002BE10318}\\0000"
"Mfg"="(Standard computers)"
"DeviceDesc"="ACPI Uniprocessor PC"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\ACPI_HAL\0000\LogConf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\ACPI_HAL\0000\Control]
"DeviceReported"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\FREETDI]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\FREETDI\0000]
"ClassGUID"="{3C9A56DA-221C-483F-A5D7-036D4FE9F4A7}"
"HardwareID"=hex(7):2a,00,7a,00,6b,00,5f,00,66,00,72,00,65,00,65,00,5f,00,74,\
00,64,00,69,00,00,00,00,00
"Driver"="{3C9A56DA-221C-483F-A5D7-036D4FE9F4A7}\\0000"
"Class"="FreeTdi"
"Mfg"="Radialpoint Inc."
"Service"="FreeTdi"
"DeviceDesc"="Radialpoint Filter (RPS-12798)"
"ConfigFlags"=dword:00000000
"Capabilities"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\FREETDI\0000\LogConf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\FREETDI\0000\Control]
"ActiveService"="FreeTdi"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\ftdisk]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\ftdisk\0000]
"NoResourceAtInitTime"=dword:00000001
"ConfigFlags"=dword:00000000
"Legacy"=dword:00000000
"DeviceReported"=dword:00000001
"Service"="ftdisk"
"HardwareID"=hex(7):52,00,4f,00,4f,00,54,00,5c,00,46,00,54,00,44,00,49,00,53,\
00,4b,00,00,00,00,00
"CompatibleIDs"=hex(7):44,00,45,00,54,00,45,00,43,00,54,00,45,00,44,00,49,00,\
6e,00,74,00,65,00,72,00,6e,00,61,00,6c,00,5c,00,66,00,74,00,64,00,69,00,73,\
00,6b,00,00,00,44,00,45,00,54,00,45,00,43,00,54,00,45,00,44,00,5c,00,66,00,\
74,00,64,00,69,00,73,00,6b,00,00,00,00,00
"Capabilities"=dword:00000060
"ParentIdPrefix"="1&30a96598&0"
"ClassGUID"="{4D36E97D-E325-11CE-BFC1-08002BE10318}"
"Class"="System"
"Driver"="{4D36E97D-E325-11CE-BFC1-08002BE10318}\\0003"
"Mfg"="(Standard system devices)"
"DeviceDesc"="Volume Manager"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\ftdisk\0000\LogConf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\ftdisk\0000\Control]
"ActiveService"="Ftdisk"
"DeviceReported"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AAWSERVICE]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AAWSERVICE\0000]
"Service"="aawservice"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Ad-Aware 2007 Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AAWSERVICE\0000\Control]
"ActiveService"="aawservice"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ABP480N5]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ADOBE_LM_SERVICE]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ADOBE_LM_SERVICE\0000]
"Service"="Adobe LM Service"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Adobe LM Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ADPU160M]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AFD]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AFD\0000]
"Service"="AFD"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000020
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="AFD"
"Capabilities"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AFD\0000\LogConf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AFD\0000\Control]
"ActiveService"="AFD"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AGP440]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AGPCPQ]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AHA154X]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AIC78U2]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AIC78XX]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ALG]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ALG\0000]
"Service"="ALG"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Application Layer Gateway Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ALG\0000\Control]
"ActiveService"="ALG"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ALIIDE]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ALIM1541]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AMDAGP]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AMSINT]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_APPLE_MOBILE_DEVICE]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_APPLE_MOBILE_DEVICE\0000]
"Service"="Apple Mobile Device"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Apple Mobile Device"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_APPLE_MOBILE_DEVICE\0000\Control]
"ActiveService"="Apple Mobile Device"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_APPMGMT]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_APPMGMT\0000]
"Service"="AppMgmt"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Application Management"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ASC]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ASC3350P]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ASC3550]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AUDIOSRV]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AUDIOSRV\0000]
"Service"="AudioSrv"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000020
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Windows Audio"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AUDIOSRV\0000\Control]
"ActiveService"="AudioSrv"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGASCLN]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGASCLN\0000]
"Service"="AvgAsCln"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="AVG Anti-Spyware Clean Driver"
"Capabilities"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGASCLN\0000\LogConf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVGASCLN\0000\Control]
"ActiveService"="AvgAsCln"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVG_ANTI-SPYWARE_DRIVER]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVG_ANTI-SPYWARE_DRIVER\0000]
"Service"="AVG Anti-Spyware Driver"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="AVG Anti-Spyware Driver"
"Capabilities"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVG_ANTI-SPYWARE_DRIVER\0000\LogConf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVG_ANTI-SPYWARE_DRIVER\0000\Control]
"ActiveService"="AVG Anti-Spyware Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVG_ANTI-SPYWARE_GUARD]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVG_ANTI-SPYWARE_GUARD\0000]
"Service"="AVG Anti-Spyware Guard"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="AVG Anti-Spyware Guard"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AVG_ANTI-SPYWARE_GUARD\0000\Control]
"ActiveService"="AVG Anti-Spyware Guard"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BEEP]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BEEP\0000]
"Service"="Beep"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000020
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Beep"
"Capabilities"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BEEP\0000\LogConf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BEEP\0000\Control]
"ActiveService"="Beep"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BITS]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BITS\0000]
"Service"="BITS"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Background Intelligent Transfer Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BITS\0000\Control]
"ActiveService"="BITS"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BONJOUR_SERVICE]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BONJOUR_SERVICE\0000]
"Service"="Bonjour Service"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Bonjour Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BONJOUR_SERVICE\0000\Control]
"ActiveService"="Bonjour Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BQRMTOLLTMYS]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BQRMTOLLTMYS\0000]
"Service"="bqrmtolltmys"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="bqrmtolltmys"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BROWSER]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BROWSER\0000]
"Service"="Browser"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Computer Browser"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BROWSER\0000\Control]
"ActiveService"="Browser"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CATCHME]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CATCHME\0000]
"Service"="catchme"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="catchme"
"Capabilities"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CATCHME\0000\LogConf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CATCHME\0000\Control]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CBIDF]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CD20XRNT]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CDFS]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CDFS\0000]
"Service"="cdfs"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000020
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="cdfs"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CDFS\0000\Control]
"ActiveService"="Cdfs"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CLR_OPTIMIZATION_V2.0.50727_32]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CLR_OPTIMIZATION_V2.0.50727_32\0000]
"Service"="clr_optimization_v2.0.50727_32"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"=".NET Runtime Optimization Service v2.0.50727_X86"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CMDIDE]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_COMSYSAPP]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_COMSYSAPP\0000]
"Service"="COMSysApp"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="COM+ System Application"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CPQARRAY]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CRYPTSVC]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CRYPTSVC\0000]
"Service"="CryptSvc"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000020
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Cryptographic Services"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CRYPTSVC\0000\Control]
"ActiveService"="CryptSvc"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CSS_DVP]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CSS_DVP\0000]
"Service"="CSS DVP"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="CSS DVP"
"Capabilities"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CSS_DVP\0000\LogConf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CSS_DVP\0000\Control]
"ActiveService"="CSS DVP"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_DAC2W2K]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_DAC960NT]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_DCOMLAUNCH]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_DCOMLAUNCH\0000]
"Service"="DcomLaunch"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000020
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="DCOM Server Process Launcher"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_DCOMLAUNCH\0000\Control]
"ActiveService"="DcomLaunch"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_DHCP]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_DHCP\0000]
"Service"="Dhcp"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="DHCP Client"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_DHCP\0000\Control]
"ActiveService"="Dhcp"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_DISKEEPER]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_DISKEEPER\0000]
"Service"="Diskeeper"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Diskeeper"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_DISKEEPER\0000\Control]
"ActiveService"="Diskeeper"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_DMBOOT]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_DMBOOT\0000]
"Service"="dmboot"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="dmboot"
"Capabilities"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_DMBOOT\0000\LogConf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_DMBOOT\0000\Control]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_DMLOAD]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_DMLOAD\0000]
"Service"="dmload"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="dmload"
"Capabilities"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_DMLOAD\0000\LogConf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_DMLOAD\0000\Control]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_DNSCACHE]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_DNSCACHE\0000]
"Service"="Dnscache"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="DNS Client"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_DNSCACHE\0000\Control]
"ActiveService"="Dnscache"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_DPTI2O]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_DVPAPI]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_DVPAPI\0000]
"Service"="dvpapi"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="DvpApi"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_DVPAPI\0000\Control]
"ActiveService"="dvpapi"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_EGATHDRV]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_EGATHDRV\0000]
"Service"="EGATHDRV"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="IBM eGatherer"
"Capabilities"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_EGATHDRV\0000\LogConf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_EGATHDRV\0000\Control]
"ActiveService"="EGATHDRV"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ERSVC]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ERSVC\0000]
"Service"="ERSvc"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000020
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Error Reporting Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ERSVC\0000\Control]
"ActiveService"="ERSvc"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_EVENTSYSTEM]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_EVENTSYSTEM\0000]
"Service"="EventSystem"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="COM+ Event System"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_EVENTSYSTEM\0000\Control]
"ActiveService"="EventSystem"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_FASTFAT]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_FASTFAT\0000]
"Service"="fastfat"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000020
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="fastfat"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_FASTFAT\0000\Control]
"ActiveService"="Fastfat"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_FASTUSERSWITCHINGCOMPATIBILITY]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_FASTUSERSWITCHINGCOMPATIBILITY\0000]
"Service"="FastUserSwitchingCompatibility"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Fast User Switching Compatibility"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_FASTUSERSWITCHINGCOMPATIBILITY\0000\Control]
"ActiveService"="FastUserSwitchingCompatibility"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_FILEOBJINFO]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_FILEOBJINFO\0000]
"Service"="FileObjInfo"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="STFileDriver"
"Capabilities"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_FILEOBJINFO\0000\LogConf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_FIPS]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_FIPS\0000]
"Service"="Fips"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000020
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Fips"
"Capabilities"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_FIPS\0000\LogConf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_FIPS\0000\Control]
"ActiveService"="Fips"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_FLTMGR]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_FLTMGR\0000]
"Service"="FltMgr"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="FltMgr"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_FLTMGR\0000\Control]
"ActiveService"="FltMgr"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_FS_REC]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_FS_REC\0000]
"Service"="Fs_Rec"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000020
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Fs_Rec"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_FS_REC\0000\Control]
"ActiveService"="Fs_Rec"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_GPC]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_GPC\0000]
"Service"="Gpc"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Generic Packet Classifier"
"Capabilities"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_GPC\0000\LogConf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_GPC\0000\Control]
"ActiveService"="Gpc"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_HELPSVC]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_HELPSVC\0000]
"Service"="helpsvc"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Help and Support"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_HELPSVC\0000\Control]
"ActiveService"="helpsvc"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_HPN]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_HTTP]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_HTTP\0000]
"Service"="HTTP"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="HTTP"
"Capabilities"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_HTTP\0000\LogConf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_HTTP\0000\Control]
"ActiveService"="HTTP"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_HTTPFILTER]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_HTTPFILTER\0000]
"Service"="HTTPFilter"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="HTTP SSL"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_HTTPFILTER\0000\Control]
"ActiveService"="HTTPFilter"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_I2OMGMT]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_I2OMGMT\0000]
"Service"="i2omgmt"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="i2omgmt"
"Capabilities"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_I2OMGMT\0000\LogConf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_I2OMGMT\0000\Control]
"ActiveService"="i2omgmt"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_I2OMP]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_IBMFILTER]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_IBMFILTER\0000]
"Service"="ibmfilter"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="ibmfilter"
"Capabilities"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_IBMFILTER\0000\LogConf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_IBMFILTER\0000\Control]
"ActiveService"="ibmfilter"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_IDRIVERT]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_IDRIVERT\0000]
"Service"="IDriverT"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="InstallDriver Table Manager"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_IMAPISERVICE]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_IMAPISERVICE\0000]
"Service"="ImapiService"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="IMAPI CD-Burning COM Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_IMAPISERVICE\0000\Control]
"ActiveService"="ImapiService"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_INI910U]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_INTELIDE]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_IPNAT]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_IPNAT\0000]
"Service"="IpNat"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="IP Network Address Translator"
"Capabilities"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_IPNAT\0000\LogConf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_IPNAT\0000\Control]
"ActiveService"="IpNat"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_IPOD_SERVICE]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_IPOD_SERVICE\0000]
"Service"="iPod Service"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="iPod Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_IPOD_SERVICE\0000\Control]
"ActiveService"="iPod Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_IPSEC]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_IPSEC\0000]
"Service"="IPSec"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="IPSEC driver"
"Capabilities"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_IPSEC\0000\LogConf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_IPSEC\0000\Control]
"ActiveService"="IPSec"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_KSECDD]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_KSECDD\0000]
"Service"="ksecdd"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="ksecdd"
"Capabilities"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_KSECDD\0000\LogConf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_KSECDD\0000\Control]
"ActiveService"="KSecDD"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_LANMANSERVER]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_LANMANSERVER\0000]
"Service"="lanmanserver"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Server"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_LANMANSERVER\0000\Control]
"ActiveService"="lanmanserver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_LANMANWORKSTATION]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_LANMANWORKSTATION\0000]
"Service"="LanmanWorkstation"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Workstation"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_LANMANWORKSTATION\0000\Control]
"ActiveService"="lanmanworkstation"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_LMHOSTS]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_LMHOSTS\0000]
"Service"="LmHosts"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="TCP/IP NetBIOS Helper"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_LMHOSTS\0000\Control]
"ActiveService"="LmHosts"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MNMDD]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MNMDD\0000]
"Service"="mnmdd"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000020
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="mnmdd"
"Capabilities"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MNMDD\0000\LogConf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MNMDD\0000\Control]
"ActiveService"="mnmdd"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MOUNTMGR]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MOUNTMGR\0000]
"Service"="mountmgr"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="mountmgr"
"Capabilities"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MOUNTMGR\0000\LogConf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MOUNTMGR\0000\Control]
"ActiveService"="MountMgr"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MRAID35X]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MRXDAV]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MRXDAV\0000]
"Service"="MRxDAV"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="WebDav Client Redirector"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MRXDAV\0000\Control]
"ActiveService"="MRxDAV"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MRXSMB]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MRXSMB\0000]
"Service"="MRxSmb"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="MRXSMB"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MRXSMB\0000\Control]
"ActiveService"="MRxSmb"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MSDTC]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MSDTC\0000]
"Service"="MSDTC"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Distributed Transaction Coordinator"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MSFS]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MSFS\0000]
"Service"="Msfs"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000020
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Msfs"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MSFS\0000\Control]
"ActiveService"="Msfs"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MSISERVER]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MSISERVER\0000]
"Service"="MSIServer"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Windows Installer"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MUP]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MUP\0000]
"Service"="Mup"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000020
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Mup"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MUP\0000\Control]
"ActiveService"="Mup"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NAVENG]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NAVEX15]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NDIS]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NDIS\0000]
"Service"="NDIS"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000020
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="NDIS System Driver"
"Capabilities"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NDIS\0000\LogConf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NDIS\0000\Control]
"ActiveService"="NDIS"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NDISTAPI]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NDISTAPI\0000]
"Service"="NdisTapi"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Remote Access NDIS TAPI Driver"
"Capabilities"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NDISTAPI\0000\LogConf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NDISTAPI\0000\Control]
"ActiveService"="NdisTapi"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NDISUIO]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NDISUIO\0000]
"Service"="Ndisuio"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="NDIS Usermode I/O Protocol"
"Capabilities"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NDISUIO\0000\LogConf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NDISUIO\0000\Control]
"ActiveService"="Ndisuio"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NDPROXY]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NDPROXY\0000]
"Service"="NDProxy"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="NDProxy"
"Capabilities"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NDPROXY\0000\LogConf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NDPROXY\0000\Control]
"ActiveService"="NDProxy"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NETBIOS]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NETBIOS\0000]
"Service"="NetBIOS"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="NetBIOS Interface"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NETBIOS\0000\Control]
"ActiveService"="NetBIOS"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NETBT]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NETBT\0000]
"Service"="NetBT"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="NetBios over Tcpip"
"Capabilities"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NETBT\0000\LogConf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NETBT\0000\Control]
"ActiveService"="NetBT"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NETMAN]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NETMAN\0000]
"Service"="Netman"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Network Connections"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NETMAN\0000\Control]
"ActiveService"="Netman"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NLA]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NLA\0000]
"Service"="Nla"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Network Location Awareness (NLA)"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NLA\0000\Control]
"ActiveService"="Nla"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NPFS]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NPFS\0000]
"Service"="Npfs"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000020
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Npfs"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NPFS\0000\Control]
"ActiveService"="Npfs"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NTFS]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NTFS\0000]
"Service"="ntfs"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000020
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="ntfs"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NTFS\0000\Control]
"ActiveService"="Ntfs"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NULL]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NULL\0000]
"Service"="Null"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000020
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Null"
"Capabilities"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NULL\0000\LogConf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NULL\0000\Control]
"ActiveService"="Null"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NVSVC]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NVSVC\0000]
"Service"="NVSvc"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="NVIDIA Display Driver Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NVSVC\0000\Control]
"ActiveService"="NVSvc"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ONESTEP_SEARCH_SERVICE]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ONESTEP_SEARCH_SERVICE\0000]
"Service"="OneStep Search Service"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="OneStep Search Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_PARTMGR]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_PARTMGR\0000]
"Service"="PartMgr"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000020
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="PartMgr"
"Capabilities"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_PARTMGR\0000\LogConf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_PARTMGR\0000\Control]
"ActiveService"="PartMgr"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_PARVDM]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_PARVDM\0000]
"Service"="ParVdm"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000020
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="ParVdm"
"Capabilities"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_PARVDM\0000\LogConf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_PARVDM\0000\Control]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_PERC2]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_PERC2HIB]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_PMEM]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_PMEM\0000]
"Service"="PMEM"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="PMEM"
"Capabilities"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_PMEM\0000\LogConf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_PMEM\0000\Control]
"ActiveService"="PMEM"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_POLICYAGENT]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_POLICYAGENT\0000]
"Service"="PolicyAgent"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="IPSEC Services"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_POLICYAGENT\0000\Control]
"ActiveService"="PolicyAgent"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_PROCEXP90]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_PROCEXP90\0000]
"Service"="PROCEXP90"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="PROCEXP90"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_PROTECTEDSTORAGE]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_PROTECTEDSTORAGE\0000]
"Service"="ProtectedStorage"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000020
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Protected Storage"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_PROTECTEDSTORAGE\0000\Control]
"ActiveService"="ProtectedStorage"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_PSADD]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_PSADD\0000]
"Service"="psadd"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="IBM PSA Access Driver"
"Capabilities"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_PSADD\0000\LogConf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_PSADD\0000\Control]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_QL1080]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_QL10WNT]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_QL12160]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_QL1240]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_QL1280]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_RASACD]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_RASACD\0000]
"Service"="RasAcd"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Remote Access Auto Connection Driver"
"Capabilities"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_RASACD\0000\LogConf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_RASACD\0000\Control]
"ActiveService"="RasAcd"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_RASMAN]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_RASMAN\0000]
"Service"="RasMan"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Remote Access Connection Manager"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_RASMAN\0000\Control]
"ActiveService"="RasMan"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_RDBSS]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_RDBSS\0000]
"Service"="Rdbss"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Rdbss"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_RDBSS\0000\Control]
"ActiveService"="Rdbss"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_RDPCDD]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_RDPCDD\0000]
"Service"="RDPCDD"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="RDPCDD"
"Capabilities"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_RDPCDD\0000\LogConf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_RDPCDD\0000\Control]
"ActiveService"="RDPCDD"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_RDPNP]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_RDPNP\0000]
"Service"="RDPNP"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="RDPNP"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_RKPAVPROC]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_RKPAVPROC\0000]
"Service"="RkPavProc"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="RkPavProc"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_RPCSS]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_RPCSS\0000]
"Service"="RpcSs"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000020
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Remote Procedure Call (RPC)"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_RPCSS\0000\Control]
"ActiveService"="RpcSs"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_RP_FWS]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_RP_FWS\0000]
"Service"="RP_FWS"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="PCguard Firewall"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_RP_FWS\0000\Control]
"ActiveService"="RP_FWS"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_RSVP]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_RSVP\0000]
"Service"="RSVP"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="QoS RSVP"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SAMSS]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SAMSS\0000]
"Service"="SamSs"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000020
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Security Accounts Manager"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SAMSS\0000\Control]
"ActiveService"="SamSs"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SAVRT]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SAVRTPEL]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SCHEDULE]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SCHEDULE\0000]
"Service"="Schedule"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Task Scheduler"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SCHEDULE\0000\Control]
"ActiveService"="Schedule"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SDTHOOK]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SDTHOOK\0000]
"Service"="SDTHOOK"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="SDTHOOK"
"Capabilities"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SDTHOOK\0000\LogConf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SDTHOOK\0000\Control]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SECDRV]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SECDRV\0000]
"Service"="Secdrv"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Secdrv"
"Capabilities"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SECDRV\0000\LogConf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SECDRV\0000\Control]
"ActiveService"="Secdrv"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SECLOGON]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SECLOGON\0000]
"Service"="seclogon"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000020
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Secondary Logon"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SECLOGON\0000\Control]
"ActiveService"="seclogon"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SENS]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SENS\0000]
"Service"="SENS"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="System Event Notification"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SENS\0000\Control]
"ActiveService"="SENS"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SHAREDACCESS]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SHAREDACCESS\0000]
"Service"="SharedAccess"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000020
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Windows Firewall/Internet Connection Sharing (ICS)"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SHAREDACCESS\0000\Control]
"ActiveService"="SharedAccess"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SHELLHWDETECTION]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SHELLHWDETECTION\0000]
"Service"="ShellHWDetection"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Shell Hardware Detection"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SHELLHWDETECTION\0000\Control]
"ActiveService"="ShellHWDetection"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SISAGP]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SMI2]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SMI2\0000]
"Service"="smi2"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="smi2"
"Capabilities"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SMI2\0000\LogConf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SMI2\0000\Control]
"ActiveService"="smi2"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SPARROW]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SPBBCDRV]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SPOOLER]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SPOOLER\0000]
"Service"="Spooler"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Print Spooler"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SPOOLER\0000\Control]
"ActiveService"="Spooler"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SP_RSSRV]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SP_RSSRV\0000]
"Service"="sp_rssrv"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Spyware Terminator Realtime Shield Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SP_RSSRV\0000\Control]
"ActiveService"="sp_rssrv"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SR]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SR\0000]
"Service"="sr"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="System Restore Filter Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SR\0000\Control]
"ActiveService"="sr"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SRSERVICE]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SRSERVICE\0000]
"Service"="srservice"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="System Restore Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SRSERVICE\0000\Control]
"ActiveService"="srservice"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SRV]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SRV\0000]
"Service"="Srv"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Srv"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SRV\0000\Control]
"ActiveService"="Srv"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SSDPSRV]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SSDPSRV\0000]
"Service"="SSDPSRV"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="SSDP Discovery Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SSDPSRV\0000\Control]
"ActiveService"="SSDPSRV"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_STISVC]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_STISVC\0000]
"Service"="stisvc"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000020
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Windows Image Acquisition (WIA)"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_STISVC\0000\Control]
"ActiveService"="stisvc"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SYMC810]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SYMC8XX]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SYMEVENT]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SYMEVENT\0000]
"Service"="SymEvent"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="SymEvent"
"Capabilities"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SYMREDRV]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SYMTDI]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SYMTDI\0000]
"Service"="SYMTDI"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="SYMTDI"
"Capabilities"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SYM_HI]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SYM_U3]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_TAPISRV]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_TAPISRV\0000]
"Service"="TapiSrv"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000020
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Telephony"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_TAPISRV\0000\Control]
"ActiveService"="TapiSrv"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_TCPIP]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_TCPIP\0000]
"Service"="Tcpip"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="TCP/IP Protocol Driver"
"Capabilities"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_TCPIP\0000\LogConf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_TCPIP\0000\Control]
"ActiveService"="Tcpip"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_TERMSERVICE]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_TERMSERVICE\0000]
"Service"="TermService"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Terminal Services"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_TERMSERVICE\0000\Control]
"ActiveService"="TermService"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_THEMES]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_THEMES\0000]
"Service"="Themes"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Themes"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_THEMES\0000\Control]
"ActiveService"="Themes"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_TOSIDE]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_TRKWKS]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_TRKWKS\0000]
"Service"="TrkWks"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000020
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Distributed Link Tracking Client"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_TRKWKS\0000\Control]
"ActiveService"="TrkWks"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_TVT_BACKUP_SERVICE]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_TVT_BACKUP_SERVICE\0000]
"Service"="TVT Backup Service"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="TVT Backup Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_TVT_BACKUP_SERVICE\0000\Control]
"ActiveService"="TVT Backup Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_TVT_SCHEDULER]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_TVT_SCHEDULER\0000]
"Service"="TVT Scheduler"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="TVT Scheduler"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_TVT_SCHEDULER\0000\Control]
"ActiveService"="TVT Scheduler"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_UDFS]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_UDFS\0000]
"Service"="Udfs"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Udfs"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ULTRA]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_UPNPHOST]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_UPNPHOST\0000]
"Service"="upnphost"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Universal Plug and Play Device Host"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_UPNPHOST\0000\Control]
"ActiveService"="upnphost"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_USNJSVC]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_USNJSVC\0000]
"Service"="usnjsvc"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Messenger Sharing Folders USN Journal Reader service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_VGA]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_VGA\0000]
"Service"="vga"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000020
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="vga"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_VGASAVE]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_VGASAVE\0000]
"Service"="VgaSave"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000020
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="VgaSave"
"Capabilities"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_VGASAVE\0000\LogConf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_VGASAVE\0000\Control]
"ActiveService"="VgaSave"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_VIAAGP]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_VOLSNAP]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_VOLSNAP\0000]
"Service"="VolSnap"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000020
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="VolSnap"
"Capabilities"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_VOLSNAP\0000\LogConf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_VOLSNAP\0000\Control]
"ActiveService"="VolSnap"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_W32TIME]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_W32TIME\0000]
"Service"="W32Time"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000020
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Windows Time"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_W32TIME\0000\Control]
"ActiveService"="W32Time"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_WANARP]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_WANARP\0000]
"Service"="Wanarp"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Remote Access IP ARP Driver"
"Capabilities"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_WANARP\0000\LogConf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_WANARP\0000\Control]
"ActiveService"="Wanarp"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_WEBCLIENT]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_WEBCLIENT\0000]
"Service"="WebClient"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="WebClient"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_WEBCLIENT\0000\Control]
"ActiveService"="WebClient"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_WINMGMT]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_WINMGMT\0000]
"Service"="winmgmt"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Windows Management Instrumentation"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_WINMGMT\0000\Control]
"ActiveService"="winmgmt"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_WMPNETWORKSVC]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_WMPNETWORKSVC\0000]
"Service"="WMPNetworkSvc"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Windows Media Player Network Sharing Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_WMPNETWORKSVC\0000\Control]
"ActiveService"="WMPNetworkSvc"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_WSCSVC]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_WSCSVC\0000]
"Service"="wscsvc"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000020
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Security Center"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_WSCSVC\0000\Control]
"ActiveService"="wscsvc"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_WUAUSERV]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_WUAUSERV\0000]
"Service"="wuauserv"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Automatic Updates"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_WUAUSERV\0000\Control]
"ActiveService"="wuauserv"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_WZCSVC]
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_WZCSVC\0000]
"Service"="WZCSVC"
"Legacy"=dword:00000001
"ConfigFlags"=dword:00000000
"Class"="LegacyDriver"
"ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
"DeviceDesc"="Wireless Zero Configuration"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_WZCSVC\0000\Control]
"ActiveService"="WZCSVC"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\MEDIA]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\MEDIA\MS_MMACM]
"ClassGUID"="{4D36E96C-E325-11CE-BFC1-08002BE10318}"
"Class"="MEDIA"
"HardwareID"=hex(7):4d,00,53,00,5f,00,4d,00,4d,00,41,00,43,00,4d,00,00,00,00,\
00
"DeviceDesc"="Audio Codecs"
"Driver"="{4D36E96C-E325-11CE-BFC1-08002BE10318}\\0003"
"Mfg"="(Standard system devices)"
"Service"="audstub"
"ConfigFlags"=dword:00000000
"Capabilities"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\MEDIA\MS_MMACM\LogConf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\MEDIA\MS_MMACM\Control]
"ActiveService"="audstub"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\MEDIA\MS_MMDRV]
"ClassGUID"="{4D36E96C-E325-11CE-BFC1-08002BE10318}"
"Class"="MEDIA"
"HardwareID"=hex(7):4d,00,53,00,5f,00,4d,00,4d,00,44,00,52,00,56,00,00,00,00,\
00
"DeviceDesc"="Legacy Audio Drivers"
"Driver"="{4D36E96C-E325-11CE-BFC1-08002BE10318}\\0005"
"Mfg"="(Standard system devices)"
"Service"="audstub"
"ConfigFlags"=dword:00000000
"Capabilities"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\MEDIA\MS_MMDRV\LogConf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\MEDIA\MS_MMDRV\Control]
"ActiveService"="audstub"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\MEDIA\MS_MMMCI]
"ClassGUID"="{4D36E96C-E325-11CE-BFC1-08002BE10318}"
"Class"="MEDIA"
"HardwareID"=hex(7):4d,00,53,00,5f,00,4d,00,4d,00,4d,00,43,00,49,00,00,00,00,\
00
"DeviceDesc"="Media Control Devices"
"Driver"="{4D36E96C-E325-11CE-BFC1-08002BE10318}\\0001"
"Mfg"="(Standard system devices)"
"Service"="audstub"
"ConfigFlags"=dword:00000000
"Capabilities"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\MEDIA\MS_MMMCI\LogConf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\MEDIA\MS_MMMCI\Control]
"ActiveService"="audstub"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\MEDIA\MS_MMVCD]
"ClassGUID"="{4D36E96C-E325-11CE-BFC1-08002BE10318}"
"Class"="MEDIA"
"HardwareID"=hex(7):4d,00,53,00,5f,00,4d,00,4d,00,56,00,43,00,44,00,00,00,00,\
00
"DeviceDesc"="Legacy Video Capture Devices"
"Driver"="{4D36E96C-E325-11CE-BFC1-08002BE10318}\\0004"
"Mfg"="(Standard system devices)"
"Service"="audstub"
"ConfigFlags"=dword:00000000
"Capabilities"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\MEDIA\MS_MMVCD\LogConf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\MEDIA\MS_MMVCD\Control]
"ActiveService"="audstub"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\MEDIA\MS_MMVID]
"ClassGUID"="{4D36E96C-E325-11CE-BFC1-08002BE10318}"
"Class"="MEDIA"
"HardwareID"=hex(7):4d,00,53,00,5f,00,4d,00,4d,00,56,00,49,00,44,00,00,00,00,\
00
"DeviceDesc"="Video Codecs"
"Driver"="{4D36E96C-E325-11CE-BFC1-08002BE10318}\\0002"
"Mfg"="(Standard system devices)"
"Service"="audstub"
"ConfigFlags"=dword:00000000
"Capabilities"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\MEDIA\MS_MMVID\LogConf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\MEDIA\MS_MMVID\Control]
"ActiveService"="audstub"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\MS_L2TPMINIPORT]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\MS_L2TPMINIPORT\0000]
"ClassGUID"="{4D36E972-E325-11CE-BFC1-08002BE10318}"
"Class"="Net"
"HardwareID"=hex(7):6d,00,73,00,5f,00,6c,00,32,00,74,00,70,00,6d,00,69,00,6e,\
00,69,00,70,00,6f,00,72,00,74,00,00,00,00,00
"Driver"="{4D36E972-E325-11CE-BFC1-08002BE10318}\\0004"
"Mfg"="Microsoft"
"Service"="Rasl2tp"
"DeviceDesc"="WAN Miniport (L2TP)"
"ConfigFlags"=dword:00000000
"Capabilities"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\MS_L2TPMINIPORT\0000\Device Parameters]
"InstanceIndex"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\MS_L2TPMINIPORT\0000\LogConf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\MS_L2TPMINIPORT\0000\Control]
"ActiveService"="Rasl2tp"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\MS_NDISWANIP]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\MS_NDISWANIP\0000]
"ClassGUID"="{4D36E972-E325-11CE-BFC1-08002BE10318}"
"Class"="Net"
"HardwareID"=hex(7):6d,00,73,00,5f,00,6e,00,64,00,69,00,73,00,77,00,61,00,6e,\
00,69,00,70,00,00,00,00,00
"Driver"="{4D36E972-E325-11CE-BFC1-08002BE10318}\\0008"
"LowerFilters"=hex(7):4e,00,64,00,69,00,73,00,54,00,61,00,70,00,69,00,00,00,00,\
00
"Mfg"="Microsoft"
"Service"="NdisWan"
"DeviceDesc"="WAN Miniport (IP)"
"ConfigFlags"=dword:00000000
"Capabilities"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\MS_NDISWANIP\0000\Device Parameters]
"InstanceIndex"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\MS_NDISWANIP\0000\LogConf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\MS_NDISWANIP\0000\Control]
"ActiveService"="NdisWan"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\MS_PPPOEMINIPORT]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\MS_PPPOEMINIPORT\0000]
"ClassGUID"="{4D36E972-E325-11CE-BFC1-08002BE10318}"
"Class"="Net"
"HardwareID"=hex(7):6d,00,73,00,5f,00,70,00,70,00,70,00,6f,00,65,00,6d,00,69,\
00,6e,00,69,00,70,00,6f,00,72,00,74,00,00,00,00,00
"Driver"="{4D36E972-E325-11CE-BFC1-08002BE10318}\\0006"
"LowerFilters"=hex(7):4e,00,64,00,69,00,73,00,54,00,61,00,70,00,69,00,00,00,00,\
00
"Mfg"="Microsoft"
"Service"="RasPppoe"
"DeviceDesc"="WAN Miniport (PPPOE)"
"ConfigFlags"=dword:00000000
"Capabilities"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\MS_PPPOEMINIPORT\0000\Device Parameters]
"InstanceIndex"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\MS_PPPOEMINIPORT\0000\LogConf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\MS_PPPOEMINIPORT\0000\Control]
"ActiveService"="RasPppoe"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\MS_PPTPMINIPORT]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\MS_PPTPMINIPORT\0000]
"ClassGUID"="{4D36E972-E325-11CE-BFC1-08002BE10318}"
"Class"="Net"
"HardwareID"=hex(7):6d,00,73,00,5f,00,70,00,70,00,74,00,70,00,6d,00,69,00,6e,\
00,69,00,70,00,6f,00,72,00,74,00,00,00,00,00
"Driver"="{4D36E972-E325-11CE-BFC1-08002BE10318}\\0005"
"LowerFilters"=hex(7):4e,00,64,00,69,00,73,00,54,00,61,00,70,00,69,00,00,00,00,\
00
"Mfg"="Microsoft"
"Service"="PptpMiniport"
"DeviceDesc"="WAN Miniport (PPTP)"
"ConfigFlags"=dword:00000000
"Capabilities"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\MS_PPTPMINIPORT\0000\Device Parameters]
"InstanceIndex"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\MS_PPTPMINIPORT\0000\LogConf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\MS_PPTPMINIPORT\0000\Control]
"ActiveService"="PptpMiniport"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\MS_PSCHEDMP]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\MS_PSCHEDMP\0000]
"ClassGUID"="{4D36E972-E325-11CE-BFC1-08002BE10318}"
"Class"="Net"
"HardwareID"=hex(7):6d,00,73,00,5f,00,70,00,73,00,63,00,68,00,65,00,64,00,6d,\
00,70,00,00,00,00,00
"Driver"="{4D36E972-E325-11CE-BFC1-08002BE10318}\\0003"
"Mfg"="Microsoft"
"Service"="PSched"
"DeviceDesc"="Packet Scheduler Miniport"
"ConfigFlags"=dword:00000000
"FriendlyName"="VIA Rhine II Fast Ethernet Adapter - Packet Scheduler Miniport"
"Capabilities"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\MS_PSCHEDMP\0000\Device Parameters]
"InstanceIndex"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\MS_PSCHEDMP\0000\LogConf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\MS_PSCHEDMP\0000\Control]
"ActiveService"="PSched"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\MS_PSCHEDMP\0001]
"ClassGUID"="{4D36E972-E325-11CE-BFC1-08002BE10318}"
"Class"="Net"
"HardwareID"=hex(7):6d,00,73,00,5f,00,70,00,73,00,63,00,68,00,65,00,64,00,6d,\
00,70,00,00,00,00,00
"Driver"="{4D36E972-E325-11CE-BFC1-08002BE10318}\\0009"
"FriendlyName"="WAN Miniport (IP) - Packet Scheduler Miniport"
"Mfg"="Microsoft"
"Service"="PSched"
"DeviceDesc"="Packet Scheduler Miniport"
"ConfigFlags"=dword:00000000
"Capabilities"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\MS_PSCHEDMP\0001\Device Parameters]
"InstanceIndex"=dword:00000002

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\MS_PSCHEDMP\0001\LogConf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\MS_PSCHEDMP\0001\Control]
"ActiveService"="PSched"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\MS_PTIMINIPORT]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\MS_PTIMINIPORT\0000]
"ClassGUID"="{4D36E972-E325-11CE-BFC1-08002BE10318}"
"Class"="Net"
"HardwareID"=hex(7):6d,00,73,00,5f,00,70,00,74,00,69,00,6d,00,69,00,6e,00,69,\
00,70,00,6f,00,72,00,74,00,00,00,00,00
"Driver"="{4D36E972-E325-11CE-BFC1-08002BE10318}\\0007"
"LowerFilters"=hex(7):50,00,74,00,69,00,4c,00,69,00,6e,00,6b,00,00,00,00,00
"Mfg"="Microsoft"
"Service"="Raspti"
"DeviceDesc"="Direct Parallel"
"ConfigFlags"=dword:00000000
"Capabilities"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\MS_PTIMINIPORT\0000\Device Parameters]
"InstanceIndex"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\MS_PTIMINIPORT\0000\LogConf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\MS_PTIMINIPORT\0000\Control]
"ActiveService"="Raspti"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\RDP_KBD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\RDP_KBD\0000]
"ClassGUID"="{4D36E97D-E325-11CE-BFC1-08002BE10318}"
"Class"="System"
"HardwareID"=hex(7):52,00,4f,00,4f,00,54,00,5c,00,52,00,44,00,50,00,5f,00,4b,\
00,42,00,44,00,00,00,00,00
"Driver"="{4D36E97D-E325-11CE-BFC1-08002BE10318}\\0028"
"UpperFilters"=hex(7):6b,00,62,00,64,00,63,00,6c,00,61,00,73,00,73,00,00,00,00,\
00
"Mfg"="(Standard system devices)"
"Service"="TermDD"
"DeviceDesc"="Terminal Server Keyboard Driver"
"ConfigFlags"=dword:00000000
"Capabilities"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\RDP_KBD\0000\Device Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\RDP_KBD\0000\LogConf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\RDP_KBD\0000\Control]
"ActiveService"="TermDD"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\RDP_MOU]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\RDP_MOU\0000]
"ClassGUID"="{4D36E97D-E325-11CE-BFC1-08002BE10318}"
"Class"="System"
"HardwareID"=hex(7):52,00,4f,00,4f,00,54,00,5c,00,52,00,44,00,50,00,5f,00,4d,\
00,4f,00,55,00,00,00,00,00
"Driver"="{4D36E97D-E325-11CE-BFC1-08002BE10318}\\0027"
"UpperFilters"=hex(7):6d,00,6f,00,75,00,63,00,6c,00,61,00,73,00,73,00,00,00,00,\
00
"Mfg"="(Standard system devices)"
"Service"="TermDD"
"DeviceDesc"="Terminal Server Mouse Driver"
"ConfigFlags"=dword:00000000
"Capabilities"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\RDP_MOU\0000\Device Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\RDP_MOU\0000\LogConf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\RDP_MOU\0000\Control]
"ActiveService"="Mouclass"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\SYSTEM]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\SYSTEM\0000]
"Class"="System"
"ClassGUID"="{4D36E97D-E325-11CE-BFC1-08002BE10318}"
"ConfigFlags"=dword:00000000
"HardwareID"=hex(7):72,00,6f,00,6f,00,74,00,5c,00,73,00,77,00,65,00,6e,00,75,\
00,6d,00,00,00,00,00
"Service"="swenum"
"Capabilities"=dword:00000000
"Driver"="{4D36E97D-E325-11CE-BFC1-08002BE10318}\\0000"
"Mfg"="(Standard system devices)"
"DeviceDesc"="Plug and Play Software Device Enumerator"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\SYSTEM\0000\LogConf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\SYSTEM\0000\Control]
"ActiveService"="swenum"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\SYSTEM\0001]
"Class"="System"
"ClassGUID"="{4D36E97D-E325-11CE-BFC1-08002BE10318}"
"ConfigFlags"=dword:00000000
"HardwareID"=hex(7):72,00,6f,00,6f,00,74,00,5c,00,75,00,70,00,64,00,61,00,74,\
00,65,00,00,00,00,00
"Service"="update"
"Capabilities"=dword:00000000
"Driver"="{4D36E97D-E325-11CE-BFC1-08002BE10318}\\0001"
"Mfg"="(Standard system devices)"
"DeviceDesc"="Microcode Update Device"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\SYSTEM\0001\LogConf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\SYSTEM\0001\Control]
"ActiveService"="Update"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\SYSTEM\0002]
"Class"="System"
"ClassGUID"="{4D36E97D-E325-11CE-BFC1-08002BE10318}"
"ConfigFlags"=dword:00000000
"HardwareID"=hex(7):72,00,6f,00,6f,00,74,00,5c,00,6d,00,73,00,73,00,6d,00,62,\
00,69,00,6f,00,73,00,00,00,00,00
"Service"="mssmbios"
"Capabilities"=dword:00000000
"Driver"="{4D36E97D-E325-11CE-BFC1-08002BE10318}\\0002"
"Mfg"="(Standard system devices)"
"DeviceDesc"="Microsoft System Management BIOS Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\SYSTEM\0002\LogConf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\SYSTEM\0002\Control]
"ActiveService"="mssmbios"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\ZK_MINIPORT]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\ZK_MINIPORT\0000]
"ClassGUID"="{4D36E972-E325-11CE-BFC1-08002BE10318}"
"Class"="Net"
"HardwareID"=hex(7):7a,00,6b,00,5f,00,6d,00,69,00,6e,00,69,00,70,00,6f,00,72,\
00,74,00,00,00,00,00
"Driver"="{4D36E972-E325-11CE-BFC1-08002BE10318}\\0010"
"Mfg"="Zero-Knowledge Systems Inc."
"Service"="FREEDOM"
"DeviceDesc"="Freedom Miniport"
"ConfigFlags"=dword:00000000
"FriendlyName"="VIA Rhine II Fast Ethernet Adapter - Freedom Miniport"
"Capabilities"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\ZK_MINIPORT\0000\Device Parameters]
"InstanceIndex"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\ZK_MINIPORT\0000\LogConf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\ZK_MINIPORT\0000\Control]
"ActiveService"="Freedom"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\ZK_MINIPORT\0001]
"ClassGUID"="{4D36E972-E325-11CE-BFC1-08002BE10318}"
"Class"="Net"
"HardwareID"=hex(7):7a,00,6b,00,5f,00,6d,00,69,00,6e,00,69,00,70,00,6f,00,72,\
00,74,00,00,00,00,00
"Driver"="{4D36E972-E325-11CE-BFC1-08002BE10318}\\0011"
"FriendlyName"="WAN Miniport (IP) - Freedom Miniport"
"Mfg"="Zero-Knowledge Systems Inc."
"Service"="FREEDOM"
"DeviceDesc"="Freedom Miniport"
"ConfigFlags"=dword:00000000
"Capabilities"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\ZK_MINIPORT\0001\Device Parameters]
"InstanceIndex"=dword:00000002

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\ZK_MINIPORT\0001\LogConf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\ZK_MINIPORT\0001\Control]
"ActiveService"="Freedom"

湅⁤景映汩⁥਍

That seems to be it, but I dont see "end of file"!! HCeers, really appreciate your help
Tam
tamskinner
Member+
 
Posts: 83
Joined: December 31st, 2007, 3:21 am

Re: OneStep search - hjt log, please help!!

Unread postby ndmmxiaomayi » May 18th, 2008, 10:47 am

Hi,

Step 1

  1. Please download RegASSASSIN and save it to your desktop. Do not run it directly from your browser.
  2. Double click on RegASSASSIN.exe to run it.
  3. Copy and paste this in: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ONESTEP_SEARCH_SERVICE

    Warning: Do not type it in to avoid typo errors.

  4. Click on Delete.
  5. Answer Yes to any prompts.

Step 2

  1. Please download Deckard's System Scanner from Tech Support Forum and save it to your desktop. Note: You must be logged onto an account with administrator privileges.
  2. Save all your work and close all opened programs.
  3. Double click on dss.exe to run it. Follow the prompts.
  4. When the scan is complete, two log files will be produced. The first one, main.txt, will be maximized, the second one, extra.txt, will be minimized.
  5. Please post the contents of the 2 log files in your next reply. 1 log per reply please.
ndmmxiaomayi
MRU Emeritus
MRU Emeritus
 
Posts: 9708
Joined: July 17th, 2006, 9:22 am

Re: OneStep search - hjt log, please help!!

Unread postby tamskinner » May 18th, 2008, 11:40 am

RegAssassin couldnt remove One Step Search. Didnt move on to the next bit! Is there something else we can try?
Tam
tamskinner
Member+
 
Posts: 83
Joined: December 31st, 2007, 3:21 am

Re: OneStep search - hjt log, please help!!

Unread postby ndmmxiaomayi » May 19th, 2008, 1:56 am

Please proceed with the rest. I will find alternative ways to remove OneStep Search.
ndmmxiaomayi
MRU Emeritus
MRU Emeritus
 
Posts: 9708
Joined: July 17th, 2006, 9:22 am

Re: OneStep search - hjt log, please help!!

Unread postby tamskinner » May 19th, 2008, 3:26 am

Deckard's System Scanner v20071014.68
Run by Mark on 2008-05-19 08:23:13
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

Successfully created a Deckard's System Scanner Restore Point.


-- Last 5 Restore Point(s) --
73: 2008-05-19 07:23:21 UTC - RP111 - Deckard's System Scanner Restore Point
72: 2008-05-18 10:35:04 UTC - RP110 - System Checkpoint
71: 2008-05-17 09:02:54 UTC - RP109 - System Checkpoint
70: 2008-05-16 07:21:52 UTC - RP108 - Software Distribution Service 3.0
69: 2008-05-15 21:28:07 UTC - RP107 - System Checkpoint


-- First Restore Point --
1: 2008-02-19 18:55:53 UTC - RP39 - System Checkpoint


Backed up registry hives.
Performed disk cleanup.



-- HijackThis (run as Mark.exe) ------------------------------------------------

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 08:24:37, on 19/05/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\blueyonder\PCguard\fws.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\ICO.EXE
C:\Program Files\ThinkVantage\AMSG\Amsg.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\PROGRA~1\Lenovo\LENOVO~2\LPMGR.exe
C:\Program Files\IBM ThinkVantage\Client Security Solution\cssauthe.exe
C:\WINDOWS\system32\FSRremoS.EXE
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\WINDOWS\system32\atwtusb.exe
C:\Program Files\blueyonder\PCguard advisor\PCguardadvisor.exe
C:\Program Files\blueyonder\PCguard\Rps.exe
C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\Pelmiced.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
I:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe
C:\PENSOFT\fquick32.exe
C:\WINDOWS\system32\TBLMOUSE.EXE
C:\Program Files\Google\Google Desktop Search\GoogleDesktopDisplay.exe
C:\PENSOFT\Quick95.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
C:\Program Files\Common Files\Command Software\dvpapi.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\IBM ThinkVantage\Rescue and Recovery\rrservice.exe
C:\Program Files\IBM ThinkVantage\Common\Scheduler\tvtsched.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\IBM ThinkVantage\Common\Logger\logmon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\IBM ThinkVantage\Client Security Solution\pwmgre.exe
C:\PROGRA~1\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Mark\Desktop\dss.exe
C:\DOCUME~1\Mark\Desktop\Mark.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/dispatche ... p=aus&qkw=%s&tbid=60287
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.broadband.blueyonder.co.uk
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60287
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_custo ... TbId=60287
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60287
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_custo ... TbId=60287
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: eBay Toolbar Helper - {22D8E815-4A5E-4DFB-845E-AAB64207F5BD} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: PopKill Class - {3C060EA2-E6A9-4E49-A530-D4657B8C449A} - C:\Program Files\blueyonder\PCguard\pkR.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: ZKBho Class - {56071E0D-C61B-11D3-B41C-00E02927A304} - C:\Program Files\blueyonder\PCguard\FBHR.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: eBay Toolbar - {92085AD4-F48A-450D-BD93-B28CC7DF67CE} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [Mouse Suite 98 Daemon] ICO.EXE
O4 - HKLM\..\Run: [AMSG] C:\Program Files\ThinkVantage\AMSG\Amsg.exe
O4 - HKLM\..\Run: [DiskeeperSystray] "C:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe"
O4 - HKLM\..\Run: [ISUSPM Startup] c:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "c:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [LPManager] C:\PROGRA~1\Lenovo\LENOVO~2\LPMGR.exe
O4 - HKLM\..\Run: [cssauthe] "C:\Program Files\IBM ThinkVantage\Client Security Solution\cssauthe.exe" silent
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [atwtusb] atwtusb.exe beta
O4 - HKLM\..\Run: [PCguardadvisor.exe] "C:\Program Files\blueyonder\PCguard advisor\PCguardadvisor.exe"
O4 - HKLM\..\Run: [PCguard] "C:\Program Files\blueyonder\PCguard\Rps.exe"
O4 - HKLM\..\Run: [eBayToolbar] C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [Uninstall_CToolbar] "C:\DOCUME~1\Mark\LOCALS~1\Temp\CUninst.exe" "/remove"
O4 - Startup: KybtecWcCaller.exe
O4 - Startup: Quick StartUp.lnk = C:\PENSOFT\fquick32.exe
O4 - Startup: Start.lnk = C:\PENSOFT\Quick95.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: WinZip Quick Pick.lnk = I:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: eBay Search - res://C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html
O8 - Extra context menu item: Open in new background tab - res://C:\Program Files\Windows Live Toolbar\Components\en-gb\msntabres.dll.mui/229?69cbbc6e23284756bd56247f9cb92666
O8 - Extra context menu item: Open in new foreground tab - res://C:\Program Files\Windows Live Toolbar\Components\en-gb\msntabres.dll.mui/230?69cbbc6e23284756bd56247f9cb92666
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [JAVA_IBM] Java (IBM)
O14 - IERESET.INF: START_PAGE_URL=http://www.broadband.blueyonder.co.uk
O16 - DPF: {1754A1BA-A1DF-4F10-B199-AA55AA1A120F} (InstallerBehaviorFactory Class) - https://signup.msn.com/pages/MsnInstC.cab
O16 - DPF: {2250C29C-C5E9-4F55-BE4E-01E45A40FCF1} (CMediaMix Object) - http://musicmix.messenger.msn.com/Medialogic.CAB
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/EN-US/a-U ... E_UNO1.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me ... b31267.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan ... asinst.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me ... b56907.cab
O16 - DPF: {CE3409C4-9E26-4F8E-83E4-778498F9E7B4} (PB_Uploader Class) - http://static.photobox.co.uk/sg/common/uploader_uni.cab
O16 - DPF: {D821DC4A-0814-435E-9820-661C543A4679} (CRLDownloadWrapper Class) - http://drmlicense.one.microsoft.com/crl ... crlocx.ocx
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} (GpcContainer Class) - https://performancesoft.webex.com/clien ... eatgpc.cab
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
O23 - Service: DvpApi (dvpapi) - Authentium, Inc. - C:\Program Files\Common Files\Command Software\dvpapi.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: IBM PSA Access Driver Control (PsaSrv) - Unknown owner - (no file)
O23 - Service: PCguard Firewall (RP_FWS) - Radialpoint Inc. - C:\Program Files\blueyonder\PCguard\fws.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: TVT Backup Service - Unknown owner - C:\Program Files\IBM ThinkVantage\Rescue and Recovery\rrservice.exe
O23 - Service: TVT Scheduler - Unknown owner - C:\Program Files\IBM ThinkVantage\Common\Scheduler\tvtsched.exe

--
End of file - 13593 bytes

-- File Associations -----------------------------------------------------------

.reg - regfile - shell\open\command - regedit.exe "%1" %*
.scr - scrfile - shell\open\command - "%1" %*


-- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------

R2 EGATHDRV (IBM eGatherer) - c:\windows\system32\egathdrv.sys <Not Verified; IBM Corporation; IBM eGatherer>
R2 ibmfilter - c:\windows\system32\drivers\ibmfilter.sys <Not Verified; IBM; RRU>
R2 PMEM - c:\windows\system32\drivers\pmemnt.sys <Not Verified; Microsoft Corporation; Microsoft(R) Windows NT(TM) Operating System>
R2 smi2 - c:\program files\smi2\smi2.sys <Not Verified; IBM Corp.; TVT SMI Bios driver>

S3 catchme - c:\docume~1\mark\locals~1\temp\catchme.sys (file missing)
S3 DCamUSBSQTECH (Dual-Mode DSC(2770)) - c:\windows\system32\drivers\sqcaptur.sys <Not Verified; Service & Quality Technology.; SQ913>
S3 psadd (IBM PSA Access Driver) - c:\windows\system32\drivers\psadd.sys <Not Verified; Lenovo; SMI Driver>
S3 SDTHOOK - c:\windows\system32\drivers\sdthook.sys <Not Verified; Panda Software; Panda® Antivirus>
S3 SQTECH905C (DualCamera) - c:\windows\system32\drivers\capt905c.sys <Not Verified; Service & Quality Technology.; SQ905c>
S3 usb2vcom (USB Data Cable) - c:\windows\system32\drivers\usb2vcom.sys <Not Verified; USB World Technology Inc. http://www.usbworld.net; USB Data Cable>
S3 USBAAPL (Apple Mobile USB Driver) - c:\windows\system32\drivers\usbaapl.sys <Not Verified; Apple, Inc.; Apple Mobile Device USB Driver>
S3 utblfilt - c:\windows\system32\drivers\utblfilt.sys <Not Verified; Aiptek; >


-- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------

R2 Apple Mobile Device - "c:\program files\common files\apple\mobile device support\bin\applemobiledeviceservice.exe" <Not Verified; Apple, Inc.; Apple Mobile Device Service>
R2 Bonjour Service - "c:\program files\bonjour\mdnsresponder.exe" <Not Verified; Apple Inc.; Bonjour>
R2 Diskeeper - c:\program files\diskeeper corporation\diskeeper\dkservice.exe <Not Verified; Diskeeper Corporation; Diskeeper (TM) Disk Defragmenter>
R2 RP_FWS (PCguard Firewall) - c:\program files\blueyonder\pcguard\fws.exe <Not Verified; Radialpoint Inc.; Radialpoint Security Services 5.5.1>
R2 sp_rssrv (Spyware Terminator Realtime Shield Service) - "c:\program files\spyware terminator\sp_rsser.exe" <Not Verified; Crawler.com; Crawler Spyware Terminator>
R2 TVT Scheduler - "c:\program files\ibm thinkvantage\common\scheduler\tvtsched.exe" <Not Verified; ; tvtsched Module>

S3 PsaSrv (IBM PSA Access Driver Control) -


-- Device Manager: Disabled ----------------------------------------------------

No disabled devices found.


-- Scheduled Tasks -------------------------------------------------------------

2008-05-19 08:03:00 256 --a------ C:\WINDOWS\Tasks\Check Updates for Windows Live Toolbar.job
2008-05-17 09:00:00 386 --a------ C:\WINDOWS\Tasks\rpc.job
2008-04-26 05:17:00 284 --a------ C:\WINDOWS\Tasks\AppleSoftwareUpdate.job


-- Files created between 2008-04-19 and 2008-05-19 -----------------------------

2008-05-19 08:20:37 0 dr-h----- C:\Documents and Settings\Mark\Recent
2008-05-16 18:21:43 0 d-------- C:\Program Files\Navilog1
2008-05-15 21:30:26 0 d-------- C:\Documents and Settings\Mark\Application Data\Malwarebytes
2008-05-15 21:30:17 0 d-------- C:\Program Files\Malwarebytes' Anti-Malware
2008-05-15 21:30:17 0 d------c- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-05-06 07:21:05 0 d-------- C:\WINDOWS\system32\GroupPolicy
2008-05-06 07:20:43 0 d-------- C:\Program Files\Hitman Pro
2008-05-04 08:22:24 0 d-------- C:\Program Files\Crawler
2008-05-04 08:22:15 141312 --a------ C:\WINDOWS\system32\drivers\sp_rsdrv2.sys
2008-05-04 08:22:15 0 d-------- C:\Documents and Settings\Mark\Application Data\Spyware Terminator
2008-05-04 08:22:15 0 d------c- C:\Documents and Settings\All Users\Application Data\Spyware Terminator
2008-05-04 08:22:13 0 d-------- C:\Program Files\Spyware Terminator
2008-04-27 07:12:45 0 d-------- C:\Program Files\Common Files\xing shared
2008-04-26 18:15:38 0 d-------- C:\Documents and Settings\Chloe\Application Data\Mozilla
2008-04-20 07:58:15 0 d------c- C:\Documents and Settings\All Users\Application Data\NVIDIA


-- Find3M Report ---------------------------------------------------------------

2008-05-18 18:57:19 664 --a------ C:\WINDOWS\system32\d3d9caps.dat
2008-05-18 05:06:15 5427 --a------ C:\WINDOWS\system32\EGATHDRV.SYS <Not Verified; IBM Corporation; IBM eGatherer>
2008-05-17 08:20:12 0 d-------- C:\Documents and Settings\Mark\Application Data\Adobe
2008-05-16 23:03:02 0 d-------- C:\Program Files\Common Files\PestPatrol
2008-05-12 22:40:24 0 d-------- C:\Documents and Settings\Mark\Application Data\AdobeUM
2008-05-09 07:39:09 2499 --a------ C:\WINDOWS\mozver.dat
2008-05-09 07:39:00 0 d-------- C:\Program Files\Mozilla Sunbird
2008-04-27 07:12:45 0 d-------- C:\Program Files\Common Files
2008-04-27 07:12:37 0 d-------- C:\Program Files\Common Files\Real
2008-04-27 07:03:50 0 d-------- C:\Program Files\iTunes
2008-04-27 07:03:49 0 d-------- C:\Program Files\Apple Software Update
2008-04-26 05:56:01 0 d-------- C:\Program Files\iArt
2008-04-26 05:22:52 0 d-------- C:\Program Files\iPod
2008-04-26 05:21:27 0 d-------- C:\Program Files\QuickTime
2008-04-23 07:14:04 0 d-------- C:\Documents and Settings\Mark\Application Data\Real
2008-04-17 20:24:50 61128 --a------ C:\Documents and Settings\Mark\Application Data\GDIPFONTCACHEV1.DAT
2008-04-13 05:04:53 0 d-------- C:\Program Files\FontPage
2008-03-31 07:17:30 0 d-------- C:\Program Files\Forex Money Map


-- Registry Dump ---------------------------------------------------------------

*Note* empty entries & legit default entries are not shown


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"VTTimer"="VTTimer.exe" [08/03/2005 11:33 C:\WINDOWS\system32\VTTimer.exe]
"VTTrayp"="VTtrayp.exe" [03/08/2005 23:32 C:\WINDOWS\system32\VTTrayp.exe]
"SoundMan"="SOUNDMAN.EXE" [11/01/2006 23:08 C:\WINDOWS\soundman.exe]
"Mouse Suite 98 Daemon"="ICO.EXE" [13/04/2005 22:34 C:\WINDOWS\system32\ico.exe]
"AMSG"="C:\Program Files\ThinkVantage\AMSG\Amsg.exe" [23/11/2005 04:36]
"DiskeeperSystray"="C:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe" [01/03/2006 19:51]
"ISUSPM Startup"="c:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [28/07/2004 00:50]
"ISUSScheduler"="c:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" [28/07/2004 00:50]
"LPManager"="C:\PROGRA~1\Lenovo\LENOVO~2\LPMGR.exe" [07/12/2005 09:00]
"cssauthe"="C:\Program Files\IBM ThinkVantage\Client Security Solution\cssauthe.exe" [01/03/2006 00:00]
"Picasa Media Detector"="C:\Program Files\Picasa2\PicasaMediaDetector.exe" [28/10/2005 19:08]
"Google Desktop Search"="C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" [10/06/2006 04:51]
"atwtusb"="atwtusb.exe" [11/03/2002 19:42 C:\WINDOWS\system32\Atwtusb.exe]
"PCguardadvisor.exe"="C:\Program Files\blueyonder\PCguard advisor\PCguardadvisor.exe" [28/04/2006 23:27]
"PCguard"="C:\Program Files\blueyonder\PCguard\Rps.exe" [01/05/2006 21:43]
"eBayToolbar"="C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe" [24/03/2008 13:42]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [19/04/2007 06:26]
"nwiz"="nwiz.exe" [19/04/2007 06:26 C:\WINDOWS\system32\nwiz.exe]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [19/04/2007 06:26]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [25/09/2007 02:11]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [28/03/2008 23:37]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [30/03/2008 10:36]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [27/04/2008 07:12]
"KernelFaultCheck"="C:\WINDOWS\system32\dumprep 0 -k" []

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [04/08/2004 13:00]
"WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [18/10/2006 21:05]
"Uninstall_CToolbar"="C:\DOCUME~1\Mark\LOCALS~1\Temp\CUninst.exe" []

C:\Documents and Settings\Mark\Start Menu\Programs\Startup\
KybtecWcCaller.exe [04/12/2006 00:59:02]
Quick StartUp.lnk - C:\PENSOFT\fquick32.exe [31/07/2006 20:11:19]
Start.lnk - C:\PENSOFT\Quick95.exe [31/07/2006 20:11:19]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [13/02/2001 09:01:04]
WinZip Quick Pick.lnk - I:\Program Files\WinZip\WZQKPICK.EXE [25/10/2005 14:59:23]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"appinit_dlls"=C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
SecurityProviders msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll,

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Gamma Loader.exe.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Gamma Loader.exe.lnk
backup=C:\WINDOWS\pss\Adobe Gamma Loader.exe.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Gamma Loader.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk
backup=C:\WINDOWS\pss\Adobe Gamma Loader.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk
backup=C:\WINDOWS\pss\Adobe Reader Speed Launch.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
"C:\Program Files\iTunes\iTunesHelper.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PenLock]


[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RegistryMechanic]


[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SightSpeed]
C:\Program Files\SightSpeed\SightSpeed.exe -minimized

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UERScw]


[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\was_check]





-- Hosts -----------------------------------------------------------------------

127.0.0.1 007guard.com
127.0.0.1 http://www.007guard.com
127.0.0.1 008i.com
127.0.0.1 008k.com
127.0.0.1 http://www.008k.com
127.0.0.1 00hq.com
127.0.0.1 http://www.00hq.com
127.0.0.1 010402.com
127.0.0.1 032439.com
127.0.0.1 http://www.032439.com

8300 more entries in hosts file.


-- End of Deckard's System Scanner: finished at 2008-05-19 08:25:25 ------------
tamskinner
Member+
 
Posts: 83
Joined: December 31st, 2007, 3:21 am

Re: OneStep search - hjt log, please help!!

Unread postby tamskinner » May 19th, 2008, 3:28 am

Many thanks - Extra file below. Tam


Deckard's System Scanner v20071014.68
Extra logfile - please post this as an attachment with your post.
--------------------------------------------------------------------------------

-- System Information ----------------------------------------------------------

Microsoft Windows XP Home Edition (build 2600) SP 2.0
Architecture: X86; Language: English

CPU 0: AMD Sempron(tm) Processor 3100+
Percentage of Memory in Use: 40%
Physical Memory (total/avail): 1535.48 MiB / 915.53 MiB
Pagefile Memory (total/avail): 2058.13 MiB / 1551.29 MiB
Virtual Memory (total/avail): 2047.88 MiB / 1920.23 MiB

C: is Fixed (NTFS) - 70.31 GiB total, 12.09 GiB free.
D: is CDROM (No Media)
E: is Removable (No Media)
F: is Removable (No Media)
G: is Removable (No Media)
H: is Removable (No Media)
I: is Fixed (NTFS) - 115.03 GiB total, 40.23 GiB free.

\\.\PHYSICALDRIVE1 - HDS722512VLAT20 - 115.04 GiB - 1 partition
\PARTITION0 (bootable) - Installable File System - 115.03 GiB - I:

\\.\PHYSICALDRIVE0 - HDS728080PLA380 40Y9028LEN - 74.54 GiB - 2 partitions
\PARTITION0 (bootable) - Installable File System - 70.31 GiB - C:
\PARTITION1 - Unknown - 4.22 GiB

\\.\PHYSICALDRIVE3 - Generic USB CF Reader USB Device

\\.\PHYSICALDRIVE5 - Generic USB MS Reader USB Device

\\.\PHYSICALDRIVE2 - Generic USB SD Reader USB Device

\\.\PHYSICALDRIVE4 - Generic USB SM Reader USB Device



-- Security Center -------------------------------------------------------------

AUOptions is scheduled to auto-install.
Windows Internal Firewall is disabled.

FirstRunDisabled is set.

FW: PCguard Firewall v5.5.1 (Telewest)
AV: PCguard Anti-Virus v5.5.1 (Telewest) Outdated

[HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"C:\\Program Files\\ThinkVantage\\SystemUpdate\\jre\\bin\\javaw.exe"="C:\\Program Files\\ThinkVantage\\SystemUpdate\\jre\\bin\\javaw.exe:*:Enabled:ThinkVantage System Update"

[HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\\Program Files\\ThinkVantage\\SystemUpdate\\jre\\bin\\javaw.exe"="C:\\Program Files\\ThinkVantage\\SystemUpdate\\jre\\bin\\javaw.exe:*:Enabled:ThinkVantage System Update"
"C:\\Program Files\\LimeWire\\LimeWire.exe"="C:\\Program Files\\LimeWire\\LimeWire.exe:*:Enabled:LimeWire"
"C:\\Program Files\\Bonjour\\mDNSResponder.exe"="C:\\Program Files\\Bonjour\\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\\Program Files\\iTunes\\iTunes.exe"="C:\\Program Files\\iTunes\\iTunes.exe:*:Enabled:iTunes"


-- Environment Variables -------------------------------------------------------

ALLUSERSPROFILE=C:\Documents and Settings\All Users
APPDATA=C:\Documents and Settings\Mark\Application Data
CLASSPATH=.;C:\Program Files\Java\jre1.6.0_03\lib\ext\QTJava.zip
CLIENTNAME=Console
CommonProgramFiles=C:\Program Files\Common Files
COMPUTERNAME=OURCOMPUTER
ComSpec=C:\WINDOWS\system32\cmd.exe
FP_NO_HOST_CHECK=NO
HOMEDRIVE=C:
HOMEPATH=\Documents and Settings\Mark
IBMSHARE=C:\IBMSHARE
LOGONSERVER=\\OURCOMPUTER
NUMBER_OF_PROCESSORS=1
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Program Files\Diskeeper Corporation\Diskeeper\;C:\Program Files\IBM ThinkVantage\Client Security Solution;C:\Program Files\ImageConverter Plus;C:\Program Files\QuickTime\QTSystem\
PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
PROCESSOR_ARCHITECTURE=x86
PROCESSOR_IDENTIFIER=x86 Family 15 Model 44 Stepping 2, AuthenticAMD
PROCESSOR_LEVEL=15
PROCESSOR_REVISION=2c02
ProgramFiles=C:\Program Files
PROMPT=$P$G
QTJAVA=C:\Program Files\Java\jre1.6.0_03\lib\ext\QTJava.zip
RR=C:\Program Files\IBM ThinkVantage\Rescue and Recovery
SESSIONNAME=Console
SonicCentral=c:\Program Files\Common Files\Sonic Shared\Sonic Central\
SystemDrive=C:
SystemRoot=C:\WINDOWS
TEMP=C:\DOCUME~1\Mark\LOCALS~1\Temp
TMP=C:\DOCUME~1\Mark\LOCALS~1\Temp
TVT=C:\Program Files\IBM ThinkVantage
TVTPYDIR=C:\Program Files\IBM ThinkVantage\Common\Python24
USERDOMAIN=OURCOMPUTER
USERNAME=Mark
USERPROFILE=C:\Documents and Settings\Mark
windir=C:\WINDOWS


-- User Profiles ---------------------------------------------------------------

Mark (admin)
Pat (admin)
Chloe (admin)
Matthew (admin)


-- Add/Remove Programs ---------------------------------------------------------

--> C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
--> C:\WINDOWS\IsUninst.exe -fC:\WINDOWS\orun32.isu
--> c:\WINDOWS\system32\\MSIEXEC.EXE /x {075473F5-846A-448B-BCB3-104AA1760205}
--> c:\WINDOWS\system32\\MSIEXEC.EXE /x {AB708C9B-97C8-4AC9-899B-DBF226AC9382}
--> c:\WINDOWS\system32\\MSIEXEC.EXE /x {B12665F4-4E93-4AB4-B7FC-37053B524629}
--> rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Able RAWer 1.3 --> "C:\Program Files\AbleRAWer\unins000.exe"
Access Help --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C6FA39A7-26B1-480A-BC74-6D17531AC222}\SETUP.EXE" -l0x9 UNINSTALL
Ad-Aware 2007 --> MsiExec.exe /I{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}
Adobe Flash Player 9 ActiveX --> C:\WINDOWS\system32\Macromed\Flash\FlashUtil9b.exe -uninstallDelete
Adobe Flash Player Plugin --> C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Photoshop 6.0 --> C:\WINDOWS\ISUNINST.EXE -f"C:\Program Files\Adobe\Photoshop 6.0\Uninst.isu" -c"C:\Program Files\Adobe\Photoshop 6.0\Uninst.dll"
Adobe Photoshop CS --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EFB21DE7-8C19-4A88-BB28-A766E16493BC}\setup.exe" -l0x9
Adobe Reader 7.0.9 --> MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A70900000002}
Adobe Shockwave Player --> C:\WINDOWS\system32\Adobe\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Adobe\SHOCKW~1\Install.log
Adobe SVG Viewer --> C:\WINDOWS\IsUninst.exe -f"C:\WINDOWS\System32\Adobe\SVG Viewer\Uninst.isu"
AirHockey 3D 1.82 --> C:\Program Files\AirHockey 3D\uninst.exe
AndreaMosaic 3.20 --> C:\WINDOWS\iun6002.exe "C:\Program Files\AndreaMosaic\irunin.ini"
Apple Mobile Device Support --> MsiExec.exe /I{44734179-8A79-4DEE-BB08-73037F065543}
Apple Software Update --> MsiExec.exe /I{02DFF6B1-1654-411C-8D7B-FD6052EF016F}
ArcSoft Software Suite --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F57D8342-E2E4-46F4-915A-F50817CBCB45}\SETUP.EXE" -l0x9
Audacity 1.2.6 --> "C:\Program Files\Audacity\unins000.exe"
AVG Anti-Spyware 7.5 --> C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\Uninstall.exe
blueyonder PCguard --> C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\8\INTEL3~1\IDriver.exe /M{83CDADBF-C060-444D-B17D-5742C425CC19}
Bonjour --> MsiExec.exe /I{47BF1BD6-DCAC-468F-A0AD-E5DECC2211C3}
CCleaner (remove only) --> "C:\Program Files\CCleaner\uninst.exe"
Crazy Golf --> C:\Program Files\IDIGICON LimitedCrazy Golf\Uninstal.exe
Crush'Em 2.0 --> C:\WINDOWS\Crush'Em 2.0\UNWISE.EXE C:\WINDOWS\Crush'Em 2.0\install.log
Diskeeper Lite --> MsiExec.exe /X{8E726115-FCBE-43B1-9FB7-06E8E25F9ABE}
eBay Toolbar --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3DB5FD00-BB93-4AF3-B925-77DAA0E4E2F4}\setup.exe" -l0x9
ebgcInfra --> MsiExec.exe /X{82ACA6FB-E81B-4C01-8D8F-B15ACD663E34}
ebgcRes --> MsiExec.exe /X{C9E6E38F-BC92-49E2-BF72-EC8612F3703D}
ebgcSDK --> MsiExec.exe /X{4D60D0AC-E1E5-44A4-8C3F-516112AEC53F}
EPSON PhotoQuicker3.5 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{65F5B7AF-3363-11D7-BB6B-00018021113F}\SETUP.EXE" -l0x9 uninst
EPSON Print CD --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FF477885-5EA8-40D0-ADF3-D4C1B86FAEA4}\SETUP.EXE" -l0x9 -SYSTEM
EPSON PRINT Image Framer Tool2.1 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{23B59ED4-C360-11D7-875B-0090CC005647}\SETUP.EXE" -l0x9 anything
EPSON Printer Software --> C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EPUPDATE.EXE /r
ESPR800 Referene Guide --> C:\Program Files\EPSON\TPMANUAL\ESPR800\REF_G\DOCUNINS.EXE
ESPR800 Software Guide --> C:\Program Files\EPSON\TPMANUAL\ESPR800\PQU_G\DOCUNINS.EXE
FontPage 3.0.0 --> "C:\Program Files\FontPage\unins000.exe"
Football Manager 2006 --> MsiExec.exe /X{49CFD5D9-0556-4037-B7D6-E13ED4BEA4C5}
Forex Money Map 1.2.04 --> "C:\Program Files\Forex Money Map\unins000.exe"
FXCM Trading Station II --> C:\Program Files\CandleWorks\FXTS2\uninstall.exe FXCM Trading Station II
Google Desktop --> C:\Program Files\Google\Google Desktop Search\GoogleDesktopSetup.exe -uninstall
Google Desktop --> MsiExec.exe /I{D0D36568-0B4C-11DA-BD3A-001185653D46}
Google Earth --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3DE5E7D4-7B88-403C-A3FD-2017A8240C5B}\setup.exe" -l0x9 -removeonly
Google SketchUp 6 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{98736A65-3C79-49EC-B7E9-A3C77774B0E6}\setup.exe" -l0x9 -removeonly
Google SketchUp 6 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B3D8B2F8-3C2C-45BC-933E-8B60E78F6684}\setup.exe" -l0x9 -removeonly
Google Toolbar for Internet Explorer --> regsvr32 /u /s "c:\program files\google\googletoolbar4.dll"
Help Center --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{986F64DC-FF15-449D-998F-EE3BCEC6666A}\SETUP.EXE" -l0x9 -AddRemove
HijackThis 2.0.2 --> "C:\hijackthis\HijackThis.exe" /uninstall
Hitman Pro --> "C:\Program Files\Hitman Pro\unins000.exe"
hotComm® CL --> C:\PROGRA~1\1stWORKS\HOTCOM~1\CFG\UNWISE.EXE C:\PROGRA~1\1stWORKS\HOTCOM~1\CFG\INSTALL.LOG
Hotfix for Windows Media Format 11 SDK (KB929399) --> "C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
iArt 3 --> "C:\Program Files\iArt\unins000.exe"
IBM 32-bit Runtime Environment for Java 2, v1.4.2 --> C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{E922961C-6DB6-41DE-9FEA-426DF3E9F81C} /l1033
InterVideo WinDVD --> "C:\Program Files\InstallShield Installation Information\{91810AFC-A4F8-4EBA-A5AA-B198BBC81144}\setup.exe" REMOVEALL
iPod for Windows 2005-10-12 --> C:\Program Files\Common Files\InstallShield\Driver\8\Intel 32\IDriver.exe /M{D9F4A9F8-92C5-4289-9D04-F0F8F02D580A} /l1033
iPod for Windows 2006-06-28 --> C:\Program Files\Common Files\InstallShield\Driver\8\Intel 32\IDriver.exe /M{BD57EA4D-026E-4F08-9B93-080E282B81FE} /l1033
iTunes --> MsiExec.exe /I{585776BC-4BD6-4BD2-A19A-1D6CB44A403B}
Java(TM) 6 Update 3 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160030}
Lenovo Care --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CF52099A-3BEA-4C41-AEA8-1E190F04D737}\SETUP.EXE" -l0x9 -AddRemove
Lenovo Care Supplement --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6280149E-EFF3-4F1B-BD43-5B7EDD6F620A}\SETUP.EXE" -l0x9 -AddRemove
Mahjong Deluxe --> C:\Program Files\Mahjong Deluxe\Uninstal.exe
Malwarebytes' Anti-Malware --> "C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Memory-Map OS Edition 2004 --> MsiExec.exe /X{8F22B1DB-3B10-407D-AE0F-7D7BEE7D7C5A}
Message Center --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E7E836B8-4BDD-454F-82E6-5FEA17C83AD4}\SETUP.EXE" -l0x9 -AddRemove
MetaTrader 4.00 --> "C:\Program Files\MetaTrader 4\Uninstall.exe" "C:\Program Files\MetaTrader 4\install.log"
Microsoft Compression Client Pack 1.0 for Windows XP --> "C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Midtown Madness 2 --> "C:\Program Files\Microsoft Games\Midtown Madness 2\UNINSTAL.EXE" /runtemp /addremove
Microsoft Office XP Professional --> MsiExec.exe /I{90110409-6000-11D3-8CFE-0050048383C9}
Microsoft User-Mode Driver Framework Feature Pack 1.0 --> "C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
MixMeister BPM Analyzer 1.0 --> "C:\Program Files\MixMeister BPM Analyzer\unins000.exe"
Mouse Suite --> PMUninst.exe MouseSuite98
Mozilla Firefox (2.0.0.14) --> C:\PROGRA~1\Mozilla Firefox\uninstall\helper.exe
Mozilla Sunbird (0.7) --> C:\Program Files\Mozilla Sunbird\uninstall\uninst.exe
MSN --> C:\Program Files\MSN\MsnInstaller\msninst.exe /Action:ARP
My DSC --> C:\Program Files\InstallShield Installation Information\{225af9a1-b556-88d5-94aa-0010b5426419}\setup.exe
MyDSC2 --> C:\Program Files\InstallShield Installation Information\{83d96ed0-98aa-4515-8ddc-816f3efdd104}\setup.exe
MyDSC2 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B65313CB-1612-4F64-A244-8BF3E5147C90}\Setup.exe" -l0x9
Navilog1 3.5.7 --> "C:\Program Files\Navilog1\unins000.exe"
NVIDIA Drivers --> C:\WINDOWS\system32\nvudisp.exe UninstallGUI
OpD2d --> C:\WINDOWS\unvise32.exe C:\Program Files\OpD2d\uninstal.log
Packard Bell Diamond 1200Plus v1.0 --> C:\PROGRA~1\PACKAR~1\Driver\UNINST.EXE
Panda ActiveScan --> C:\WINDOWS\system32\ASUninst.exe Panda ActiveScan
Panda TotalScan --> C:\Program Files\Panda Security\TotalScan\ascuninst.exe
PC-Doctor 5 for Windows --> C:\Program Files\PCDR5\uninst.exe
PCguard advisor 1.3.22 --> "C:\Program Files\blueyonder\PCguard advisor\unins000.exe"
PenSoft --> C:\PenSoft\Uninst.exe
Picasa 2 --> "C:\Program Files\Picasa2\Uninstall.exe"
PIF DESIGNER2.1 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{23B59B9F-C360-11D7-875B-0090CC005647}\SETUP.EXE" -l0x9 anything
PodUtil 3.0.3 --> "C:\Program Files\PodUtil\unins000.exe"
Puzzl'Em 1.0 Beta2 --> C:\WINDOWS\Puzzl'Em1.0Beta2\UNWISE.EXE C:\WINDOWS\Puzzl'Em1.0Beta2\install.log
QuickTime --> MsiExec.exe /I{1838C5A2-AB32-4145-85C1-BB9B8DFA24CD}
RealPlayer --> C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
Realtek AC'97 Audio --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FB08F381-6533-4108-B7DD-039E11FBC27E}\SETUP.exe" -l0x9 -removeonly
Registry Mechanic 7.0 --> "C:\Program Files\Registry Mechanic\unins000.exe"
Rescue and Recovery --> MsiExec.exe /I{1A07F627-0F8F-43EE-B667-38908DF85911}
Rhapsody Player Engine --> MsiExec.exe /I{8A62A068-3FD6-495A-9F66-26FE94F32EC9}
Roxio Digital Media LE --> C:\ibmtools\apps\digmedle\sequencer.exe -fc:\ibmtools\apps\digmedle\uninst.seq
Roxio Express Labeler --> MsiExec.exe /I{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}
Roxio RecordNow Audio --> MsiExec.exe /I{AB708C9B-97C8-4AC9-899B-DBF226AC9382}
Roxio RecordNow Copy --> MsiExec.exe /I{B12665F4-4E93-4AB4-B7FC-37053B524629}
Roxio RecordNow Data --> MsiExec.exe /I{075473F5-846A-448B-BCB3-104AA1760205}
Saints & Sinners Bowling --> "C:\Program Files\Sky Games\Saints & Sinners Bowling\Uninstall.exe" "C:\Program Files\Sky Games\Saints & Sinners Bowling\install.log"
Security Update for CAPICOM (KB931906) --> MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for CAPICOM (KB931906) --> MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
Security Update for Step By Step Interactive Training (KB898458) -->
Security Update for Step By Step Interactive Training (KB923723) --> "C:\WINDOWS\$NtUninstallKB923723$\spuninst\spuninst.exe"
Shape Shifter --> C:\PROGRA~1\GAMEHO~1\SHAPES~1\UNWISE.EXE /U C:\PROGRA~1\GAMEHO~1\SHAPES~1\INSTALL.LOG
SightSpeed (remove only) --> "C:\Program Files\SightSpeed\uninst.exe"
Smart Menus (Windows Live Toolbar) --> MsiExec.exe /X{F084395C-40FB-4DB3-981C-B51E74E1E83D}
Sonic Update Manager --> MsiExec.exe /I{30465B6C-B53F-49A1-9EBA-A3F187AD502E}
Spybot - Search & Destroy --> "C:\Program Files\Spybot - Search & Destroy\unins000.exe"
Spyware Terminator --> "C:\Program Files\Spyware Terminator\unins000.exe"
Super Pool --> C:\PROGRA~1\GAMEHO~1\Pool\UNWISE.EXE /U C:\PROGRA~1\GAMEHO~1\Pool\INSTALL.LOG
Tabbed Browsing (Windows Live Toolbar) --> MsiExec.exe /X{47FBF7F9-FBD3-43EF-823B-7684D56C1962}
Tennis Titans --> C:\PROGRA~1\MINICL~1\TENNIS~1\UNWISE.EXE /U C:\PROGRA~1\MINICL~1\TENNIS~1\INSTALL.LOG
ThinkVantage Technologies Welcome Message --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1007F41F-7D69-468E-8017-3849A5A973C2}\SETUP.EXE" -l0x9 anything
Toontown Online --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{90EBFD15-7356-4C0B-9305-31E41392C521}\Setup.exe" -l0x9
Translation Services Provided by WorldLingo for Microsoft Word --> RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\INF\mtwlingo.inf, Uninstall
TrojanHunter 5.0 --> "C:\Program Files\TrojanHunter 5.0\unins000.exe"
VIA Rhine-Family Fast Ethernet Adapter --> Rundll32.exe vuins32.dll,vuins32Ex $Rhine $VIA
VIA/S3G Display Driver --> C:\PROGRA~1\S3\UChromeP\S3MINSET.EXE /u UChromeP.uns
VideoEgg Publisher --> C:\Program Files\VideoEgg\Uninstall.exe
Wallpapers --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{DB71210F-8314-4AE3-B7A7-EBAF85BD30E9}\SETUP.EXE" -l0x9 UNINSTALL
WebEx --> C:\WINDOWS\DOWNLO~1\atcliun.exe
Windows Live Messenger --> MsiExec.exe /I{571700F0-DB9D-4B3A-B03D-35A14BB5939F}
Windows Live Sign-in Assistant --> MsiExec.exe /I{22B3CC30-77B8-419C-AA4B-F571FDF5D66D}
Windows Live Toolbar --> "C:\Program Files\Windows Live Toolbar\UnInstall.exe" {D5A145FC-D00C-4F1A-9119-EB4D9D659750}
Windows Live Toolbar --> MsiExec.exe /X{D5A145FC-D00C-4F1A-9119-EB4D9D659750}
Windows Live Toolbar Extension (Windows Live Toolbar) --> MsiExec.exe /X{341201D4-4F61-4ADB-987E-9CCE4D83A58D}
Windows Live Toolbar Feed Detector (Windows Live Toolbar) --> MsiExec.exe /X{68108E66-D13A-4EE8-A6F4-40E4B90C2A26}
Windows Media Format 11 runtime --> "C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
WinPatrol 2007 --> C:\PROGRA~1\BILLPS~1\WINPAT~1\Setup.exe /remove /q0
WIRELESS DESIGN & WORK TABLET 100/200/400/1200 --> C:\WINDOWS\IsUninst.exe -f"C:\Program Files\A_Tablet\USB Tablet Driver\Uninst.isu"
XP Themes --> MsiExec.exe /I{C54ED2B6-1AF2-416F-BBA8-5E2B8CDCB5C4}
Yahoo! Toolbar --> C:\PROGRA~1\Yahoo!\Common\unyt.exe
Yetisports Deluxe --> MsiExec.exe /X{8CA485E6-570B-489C-AA75-FCD726223B88}


-- Application Event Log -------------------------------------------------------

Event Record #/Type10245 / Warning
Event Submitted/Written: 05/19/2008 07:20:25 AM
Event ID/Source: 4354 / EventSystem
Event Description:
The COM+ Event System failed to fire the ConnectionMadeNoQOCInfo method on subscription {A82F0E80-1305-400C-BA56-375AE04264A1}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000}. The subscriber returned HRESULT 80004001.

Event Record #/Type10234 / Warning
Event Submitted/Written: 05/19/2008 07:09:56 AM
Event ID/Source: 4354 / EventSystem
Event Description:
The COM+ Event System failed to fire the ConnectionMadeNoQOCInfo method on subscription {A82F0E80-1305-400C-BA56-375AE04264A1}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000}. The subscriber returned HRESULT 80004001.

Event Record #/Type10228 / Warning
Event Submitted/Written: 05/19/2008 06:00:59 AM
Event ID/Source: 4354 / EventSystem
Event Description:
The COM+ Event System failed to fire the ConnectionMadeNoQOCInfo method on subscription {A82F0E80-1305-400C-BA56-375AE04264A1}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000}. The subscriber returned HRESULT 80004001.

Event Record #/Type10215 / Success
Event Submitted/Written: 05/18/2008 10:26:01 AM
Event ID/Source: 12001 / usnjsvc
Event Description:
The Messenger Sharing USN Journal Reader service started successfully.

Event Record #/Type10213 / Warning
Event Submitted/Written: 05/18/2008 05:09:41 AM
Event ID/Source: 4354 / EventSystem
Event Description:
The COM+ Event System failed to fire the ConnectionMadeNoQOCInfo method on subscription {A82F0E80-1305-400C-BA56-375AE04264A1}-{00000000-0000-0000-0000-000000000000}-{00000000-0000-0000-0000-000000000000}. The subscriber returned HRESULT 80004001.



-- Security Event Log ----------------------------------------------------------

No Errors/Warnings found.


-- System Event Log ------------------------------------------------------------

Event Record #/Type48079 / Error
Event Submitted/Written: 05/19/2008 07:08:30 AM
Event ID/Source: 108 / nv
Event Description:
The driver nv4_disp for the display device \Device\Video0 got stuck in an infinite loop. This
usually indicates a problem with the device itself or with the device
driver programming the hardware incorrectly. Please check with your
hardware device vendor for any driver updates.

Event Record #/Type48038 / Warning
Event Submitted/Written: 05/18/2008 06:48:45 PM
Event ID/Source: 36 / W32Time
Event Description:
The time service has not been able to synchronize the system time
for 49152 seconds because none of the time providers has been able to
provide a usable time stamp. The system clock is unsynchronized.

Event Record #/Type48035 / Warning
Event Submitted/Written: 05/18/2008 10:26:00 AM
Event ID/Source: 4226 / Tcpip
Event Description:
TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts.

Event Record #/Type47793 / Warning
Event Submitted/Written: 05/15/2008 08:44:45 PM
Event ID/Source: 36 / W32Time
Event Description:
The time service has not been able to synchronize the system time
for 49152 seconds because none of the time providers has been able to
provide a usable time stamp. The system clock is unsynchronized.

Event Record #/Type47709 / Warning
Event Submitted/Written: 05/13/2008 10:30:07 AM
Event ID/Source: 256 / PlugPlayManager
Event Description:
Timed out sending notification of device interface change to window of "DeviceMsgListenerWnd"



-- End of Deckard's System Scanner: finished at 2008-05-19 08:25:25 ------------
tamskinner
Member+
 
Posts: 83
Joined: December 31st, 2007, 3:21 am

Re: OneStep search - hjt log, please help!!

Unread postby ndmmxiaomayi » May 19th, 2008, 3:59 am

Hi,

Please make sure that dss.exe is on the desktop.

  1. Click Start > Run and copy and paste in "%userprofile%\desktop\dss.exe" /daft
  2. Click OK.
  3. Click on Scan.
  4. When the scanning is done, check (tick) all the boxes (or the list of extensions below) and click on Fix.
      list of extensions
  5. After the fixing is done, click on Save Log. By default, it's named daft.txt. Please post this log in your next reply.

AV: PCguard Anti-Virus v5.5.1 (Telewest) Outdated


Why isn't your antivirus up-to-date?
ndmmxiaomayi
MRU Emeritus
MRU Emeritus
 
Posts: 9708
Joined: July 17th, 2006, 9:22 am

Re: OneStep search - hjt log, please help!!

Unread postby tamskinner » May 19th, 2008, 4:16 am

Hi. there were a couple of files that the DSS scan found, which I fised, but didnt seem to get the option to save a log. WHen I scanned again, it has said "all associations ok". one of the files had an .scr extension. Sorry! obviously done something wrong.

Dont know why my anti virus was out of date, I noticed that. I have turned it back on!
tamskinner
Member+
 
Posts: 83
Joined: December 31st, 2007, 3:21 am

Re: OneStep search - hjt log, please help!!

Unread postby ndmmxiaomayi » May 19th, 2008, 6:39 am

Hi,

there were a couple of files that the DSS scan found, which I fised, but didnt seem to get the option to save a log. WHen I scanned again, it has said "all associations ok".


This is fine. A re-scan should give this message to let us know that the fix went OK. If it didn't, we would need another log to see what went wrong.

While we wait for an expert to look at why the OneStep Search fix failed, please perform an antivirus scan:

Please go to Kaspersky website and perform an online antivirus scan. Please use Internet Explorer as it uses ActiveX.

  1. Read through the requirements and privacy statement and click on Accept button.
  2. It will start downloading and installing the scanner and virus definitions. You will be prompted to install an ActiveX from Kaspersky. Click Yes.
  3. When the downloads have finished, click on Next button.
  4. Click on Scan Settings button.
  5. Select extended under Scan using the following antivirus database:
  6. Check (tick) these boxes under Scan options:
    • Scan Archives
    • Scan Mail Bases
  7. Click OK
  8. Click on My Computer under Please select a target to scan:
  9. Once the scan is complete it will display if your system has been infected. Click on Save as text button and save it to your desktop.
  10. Copy and paste this log in your next reply.

In your next reply, please post:

  1. Kaspersky Antivirus scan report
  2. A new HijackThis log
ndmmxiaomayi
MRU Emeritus
MRU Emeritus
 
Posts: 9708
Joined: July 17th, 2006, 9:22 am

Re: OneStep search - hjt log, please help!!

Unread postby tamskinner » May 19th, 2008, 5:53 pm

-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Monday, May 19, 2008 10:50:53 PM
Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 19/05/2008
Kaspersky Anti-Virus database records: 784370
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
C:\
D:\
E:\
F:\
G:\
H:\
I:\

Scan Statistics:
Total number of scanned objects: 151753
Number of viruses found: 3
Number of infected objects: 8
Number of suspicious objects: 2
Duration of the scan process: 01:43:39

Infected Object Name / Virus Name / Last Action
C:\Documents and Settings\All Users\Application Data\blueyonder\PCguard\logs\FirewallService05-19-2008--09-20-17.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\blueyonder\PCguard\logs\Fw_Session.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\blueyonder\PCguard\logs\SafetyConsoleLog05-19-2008--09-20-52.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\blueyonder\PCguard\logs\ServiceModel05-19-2008--09-20-51.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Lenovo\messages\logs\lf000.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\Mark\Application Data\Microsoft\Outlook\Outlook.NK2 Object is locked skipped
C:\Documents and Settings\Mark\Application Data\Microsoft\Outlook\Outlook.srs Object is locked skipped
C:\Documents and Settings\Mark\Application Data\Mozilla\Firefox\Profiles\ky48t48i.default\cert8.db Object is locked skipped
C:\Documents and Settings\Mark\Application Data\Mozilla\Firefox\Profiles\ky48t48i.default\GoogleToolbarData\googlesafebrowsing.db Object is locked skipped
C:\Documents and Settings\Mark\Application Data\Mozilla\Firefox\Profiles\ky48t48i.default\history.dat Object is locked skipped
C:\Documents and Settings\Mark\Application Data\Mozilla\Firefox\Profiles\ky48t48i.default\key3.db Object is locked skipped
C:\Documents and Settings\Mark\Application Data\Mozilla\Firefox\Profiles\ky48t48i.default\parent.lock Object is locked skipped
C:\Documents and Settings\Mark\Application Data\Mozilla\Firefox\Profiles\ky48t48i.default\search.sqlite Object is locked skipped
C:\Documents and Settings\Mark\Application Data\Mozilla\Firefox\Profiles\ky48t48i.default\urlclassifier2.sqlite Object is locked skipped
C:\Documents and Settings\Mark\Application Data\Telewest\PCguard advisor\client_gateway.log Object is locked skipped
C:\Documents and Settings\Mark\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\Mark\Desktop\Navilog1.exe/file11 Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped
C:\Documents and Settings\Mark\Desktop\Navilog1.exe Inno: infected - 1 skipped
C:\Documents and Settings\Mark\Desktop\Navilog1.zip/Navilog1.exe/file11 Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped
C:\Documents and Settings\Mark\Desktop\Navilog1.zip/Navilog1.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped
C:\Documents and Settings\Mark\Desktop\Navilog1.zip ZIP: infected - 2 skipped
C:\Documents and Settings\Mark\Local Settings\Application Data\Microsoft\Outlook\archive.pst Object is locked skipped
C:\Documents and Settings\Mark\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst Object is locked skipped
C:\Documents and Settings\Mark\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\Mark\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\Mark\Local Settings\Application Data\Mozilla\Firefox\Profiles\ky48t48i.default\Cache\_CACHE_001_ Object is locked skipped
C:\Documents and Settings\Mark\Local Settings\Application Data\Mozilla\Firefox\Profiles\ky48t48i.default\Cache\_CACHE_002_ Object is locked skipped
C:\Documents and Settings\Mark\Local Settings\Application Data\Mozilla\Firefox\Profiles\ky48t48i.default\Cache\_CACHE_003_ Object is locked skipped
C:\Documents and Settings\Mark\Local Settings\Application Data\Mozilla\Firefox\Profiles\ky48t48i.default\Cache\_CACHE_MAP_ Object is locked skipped
C:\Documents and Settings\Mark\Local Settings\Application Data\Mozilla\Firefox\Profiles\ky48t48i.default\XUL.mfl Object is locked skipped
C:\Documents and Settings\Mark\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Mark\Local Settings\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat Object is locked skipped
C:\Documents and Settings\Mark\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Mark\My Documents\My Received Files\foto879h1.zip/img_838.JPG_spotsndots@hotmail.co.uk.com Infected: Trojan.Win32.Agent.kks skipped
C:\Documents and Settings\Mark\My Documents\My Received Files\foto879h1.zip ZIP: infected - 1 skipped
C:\Documents and Settings\Mark\ntuser.dat Object is locked skipped
C:\Documents and Settings\Mark\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Apple Computer\iTunes\iTunesPrefs.xml Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\blueyonder\PCguard\AdBlocker.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\blueyonder\PCguard\AdBlocker.dat.backup Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\blueyonder\PCguard\admanager.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\blueyonder\PCguard\Privacy.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\blueyonder\PCguard\Privacy.dat.backup Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\desktop.ini Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\eBay\eBay Toolbar2\User_tamskinner.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\GDIPFONTCACHEV1.DAT Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Google\GoogleEarth\myplaces.backup.kml Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Google\GoogleEarth\myplaces.kml Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Google\GoogleEarth\myplaces.kml.tmp Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Google\Local Search History\google%2Efroogle.w Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Google\Local Search History\google%2Eimages.w Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Google\Local Search History\google%2Enews.w Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Google\Local Search History\google%2Eweb.w Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\0.gif-59861b18-29ec13f7.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\0.gif-59861b18-29ec13f7.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\1.gif-59943299-12356685.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\1.gif-59943299-12356685.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\10.gif-5014c3b9-54935ee2.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\10.gif-5014c3b9-54935ee2.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\11.gif-5022db3a-24bb1d2e.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\11.gif-5022db3a-24bb1d2e.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\12.gif-5030f2bb-3cb700e4.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\12.gif-5030f2bb-3cb700e4.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\13.gif-503f0a3c-38bb47c2.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\13.gif-503f0a3c-38bb47c2.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\14.gif-504d21bd-58c91f55.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\14.gif-504d21bd-58c91f55.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\15.gif-505b393e-7dd74129.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\15.gif-505b393e-7dd74129.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\2.gif-59a24a1a-4ba4d971.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\2.gif-59a24a1a-4ba4d971.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\3.gif-59b0619b-21a0e52b.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\3.gif-59b0619b-21a0e52b.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\4.gif-59be791c-5fc3b8b1.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\4.gif-59be791c-5fc3b8b1.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\5.gif-59cc909d-28845e1b.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\5.gif-59cc909d-28845e1b.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\6.gif-59daa81e-1352ef65.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\6.gif-59daa81e-1352ef65.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\7.gif-59e8bf9f-5f418b71.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\7.gif-59e8bf9f-5f418b71.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\8.gif-59f6d720-4a90bd76.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\8.gif-59f6d720-4a90bd76.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\9.gif-5a04eea1-1b060fcc.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\9.gif-5a04eea1-1b060fcc.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\a3o.au-6b3f35a0-1c089617.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\a3o.au-6b3f35a0-1c089617.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\adds.gif-17afb9cc-789ad8c2.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\adds.gif-17afb9cc-789ad8c2.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\b.gif-58d536f5-44eccf4d.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\b.gif-58d536f5-44eccf4d.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\ball1.gif-4d59107a-597aad08.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\ball1.gif-4d59107a-597aad08.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\ball2.gif-4d6727fb-1f0b0a9e.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\ball2.gif-4d6727fb-1f0b0a9e.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\bg.au-290d0558-3882c306.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\bg.au-290d0558-3882c306.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\bg2.au-6fb519d0-1614f6f3.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\bg2.au-6fb519d0-1614f6f3.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\c0.gif-3aa9237c-17cf0137.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\c0.gif-3aa9237c-17cf0137.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\c1.gif-3ab73afd-127b4407.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\c1.gif-3ab73afd-127b4407.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\c2.gif-3ac5527e-631f43db.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\c2.gif-3ac5527e-631f43db.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\c3.gif-3ad369ff-11912999.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\c3.gif-3ad369ff-11912999.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\controls.gif-18ef0b05-19331a9f.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\controls.gif-18ef0b05-19331a9f.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\controls2.gif-7c3127cf-4e01e21b.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\controls2.gif-7c3127cf-4e01e21b.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\d.gif-58f165f7-20444f5c.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\d.gif-58f165f7-20444f5c.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\dest.gif-1de0447c-28504a52.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\dest.gif-1de0447c-28504a52.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\eclips.au-177e311f-6c2a8e4b.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\eclips.au-177e311f-6c2a8e4b.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\ef.gif-410bc9f0-1fd0c2e4.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\ef.gif-410bc9f0-1fd0c2e4.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\excited.au-5840c223-3c27fb9e.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\excited.au-5840c223-3c27fb9e.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\focus0.gif-679cd2f2-5c048040.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\focus0.gif-679cd2f2-5c048040.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\focus1.gif-67aaea73-2cd008cc.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\focus1.gif-67aaea73-2cd008cc.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\fulltime.gif-35f6572b-22ebfd63.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\fulltime.gif-35f6572b-22ebfd63.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\g0.gif-2c3a7543-11afda41.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\g0.gif-2c3a7543-11afda41.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\g1.gif-2c488cc4-77bf1aed.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\g1.gif-2c488cc4-77bf1aed.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\g2.gif-2c56a445-3b7667ba.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\g2.gif-2c56a445-3b7667ba.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\g3.gif-2c64bbc6-79051dbd.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\g3.gif-2c64bbc6-79051dbd.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\g4.gif-2c72d347-45400209.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\g4.gif-2c72d347-45400209.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\g5.gif-2c80eac8-301e7bed.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\g5.gif-2c80eac8-301e7bed.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\g6.gif-2c8f0249-71c34cbc.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\g6.gif-2c8f0249-71c34cbc.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\g7.gif-2c9d19ca-5fc27ae7.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\g7.gif-2c9d19ca-5fc27ae7.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\g8.gif-2cab314b-506b8a25.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\g8.gif-2cab314b-506b8a25.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\goal.au-16e62fca-3ac27696.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\goal.au-16e62fca-3ac27696.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\goal.gif-145adbe2-639fdb58.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\goal.gif-145adbe2-639fdb58.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\gol.gif-4105a7ac-17c326d1.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\gol.gif-4105a7ac-17c326d1.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\goldengoal.gif-2762716b-658b8656.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\goldengoal.gif-2762716b-658b8656.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\halftime.gif-29e110cf-2f01ac01.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\halftime.gif-29e110cf-2f01ac01.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\head.au-3ab851dd-58ab96a4.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\head.au-3ab851dd-58ab96a4.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\kick.au-605dc3b7-68f8a6bf.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\kick.au-605dc3b7-68f8a6bf.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\l.gif-596221ff-5794cca5.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\l.gif-596221ff-5794cca5.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\login.gif-1f9d883e-1ba92e38.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\login.gif-1f9d883e-1ba92e38.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\main.au-56f273b2-38600a1e.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\main.au-56f273b2-38600a1e.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\miniclip2.gif-148668fe-260a50a7.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\miniclip2.gif-148668fe-260a50a7.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\p.gif-599a8003-6372c1ee.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\p.gif-599a8003-6372c1ee.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\pass.au-5c1b420c-7c32fd48.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\pass.au-5c1b420c-7c32fd48.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\r.gif-59b6af05-4b457bbe.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\r.gif-59b6af05-4b457bbe.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\ref1.au-4be5e8ff-4ae4d315.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\ref1.au-4be5e8ff-4ae4d315.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\ref2.au-4be65d5e-555d39a0.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\ref2.au-4be65d5e-555d39a0.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\replay.au-3ec63744-4e0ade04.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\replay.au-3ec63744-4e0ade04.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\RSProxy.class-9fe5204-43b971be.class Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\RSProxy.class-9fe5204-43b971be.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\shad.gif-332be412-43d93963.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\shad.gif-332be412-43d93963.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\sky.jpg-35b449e6-526013d6.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\sky.jpg-35b449e6-526013d6.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\stad.gif-2df6ab1e-5fed69c1.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\stad.gif-2df6ab1e-5fed69c1.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\sws.gif-5cd9de22-35e52c65.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\sws.gif-5cd9de22-35e52c65.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\theme.au-41270486-6e3f623a.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\theme.au-41270486-6e3f623a.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\u.gif-59e0f588-62da8875.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\u.gif-59e0f588-62da8875.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\worldcup.gif-5f656f2f-36f9753f.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\worldcup.gif-5f656f2f-36f9753f.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\jar\boom.zip-9cdf889-7caa38d8.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\jar\boom.zip-9cdf889-7caa38d8.zip Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\jar\loader-1921061343.jar-6d028c5b-6eba2928.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\jar\loader-1921061343.jar-6d028c5b-6eba2928.zip Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\jar\okchat270.jar-5457c483-72409692.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\jar\okchat270.jar-5457c483-72409692.zip Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\jar\socca.jar-3fc469e5-21dab0f3.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\jar\socca.jar-3fc469e5-21dab0f3.zip Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\deployment.properties Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\log\plugin142.trace Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Joy Long Test\0 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Joy Long Test\bciukvzd.exe Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Joy Long Test\Itchburnproxy.exe Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Joy Long Test\ofonhnrk.exe Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Joy Long Test\style base setup load.exe Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Joy Long Test\user less.exe Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Joy Long Test\wsgvhxwb.exe Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Director MX 2004\Tennis Titans\Prefs\TEN1k_curr1.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Director MX 2004\Tennis Titans\Prefs\TEN1k_hardware.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Director MX 2004\Tennis Titans\Prefs\TEN1k_match.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Director MX 2004\Tennis Titans\Prefs\TEN1k_options.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Director MX 2004\Tennis Titans\Prefs\TEN1k_players.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#Security\FlashPlayerTrust\FreezeProducts.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\adidas.uk.tangozebra.com\00005986\uk\main.swf\user_data.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\clubpenguin.com\SaveGame.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\ebaystatic.com\ft1693-1.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\flashtalking.com\ft523-2.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\flashtalking.com\ft523-5.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\flashtalking.com\ft523-8.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\mediaplex.com\ft575-1.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\miniclip.com\ads\homepagefillerad300x250.swf\MiniclipGlobal300x250.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\miniclip.com\games\alien-attack\en\alienattack_HS.swf\MiniclipHighscores.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\miniclip.com\games\disc-golf\en\discgolf.swf\MiniclipLoaderAd.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\miniclip.com\games\elastic-soccer\en\elasticsoccer.swf\MiniclipHighscores.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\miniclip.com\games\electro-air-hockey\en\airhockey.swf\eah.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\miniclip.com\games\gyroball\en\gyroball.swf\MiniclipHighscores.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\miniclip.com\games\monster-truck\en\swf\mt_gameSounds.swf\MiniclipHighscores.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\miniclip.com\games\skidoo-tt\en\skidoott.swf\MiniclipLoaderAd.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\miniclip.com\games\world-cup-soccer\en\world-cup-soccer.dcr\MiniclipHighscores.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\miniclip.com\swfcontent\highscore.swf\MiniclipHighscores.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\mochibot.com\com.mochibot.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\pagead2.googlesyndication.com\pagead\googleadplayer.swf\mediaPlayerUserSettings.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\www.adidas.com\campaigns\verticalsfootball\content\logon\logon.swf\adidasFootball.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\www.miniclip.com\games\motocross-fever\en\motocross_x.dcr\motocross.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\www.miniclip.com\games\ping-pong\en\pingpong.swf\so.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\www.miniclip.com\games\scribble\en\scribble.swf\scribble_1.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\www.miniclip.com\games\scribble\en\scribble.swf\scribble_gdf.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\www.miniclip.com\games\stunt-driver\en\stunt_driver.dcr\stunt_driver.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\www.miniclip.com\games\world-cup-soccer\en\world-cup-soccer.dcr\world_cup_soccer.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\www.miniclip.com\swfcontent\lobby.swf\MonkeySnowfight.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\www.ugotgames.com\11.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\www.youtube.com\soundData.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\www.youtube.com\videostats.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\zedo.com\tram040406.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#adidas.uk.tangozebra.com\settings.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#clubpenguin.com\settings.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#ebaystatic.com\settings.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#flashtalking.com\settings.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#mediaplex.com\settings.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#miniclip.com\settings.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#mochibot.com\settings.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#pagead2.googlesyndication.com\settings.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.adidas.com\settings.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.miniclip.com\settings.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.ugotgames.com\settings.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.youtube.com\settings.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#zedo.com\settings.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\dirapi.mch Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\Prefs\A5ABYSJ3\kbox_g124.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\Prefs\A5ABYSJ3\kbox_g124b.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\Prefs\A5ABYSJ3\kbox_g124c.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\Prefs\A5ABYSJ3\pingisminidemo.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\Prefs\A5ABYSJ3\rd_curmotd.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\Prefs\A5ABYSJ3\rd_membericon.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\Prefs\A5ABYSJ3\rd_snowfight_keys.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\Prefs\A5ABYSJ3\rd_snowfight_settings.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\Prefs\A5ABYSJ3\TENw1k_curr1.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\Prefs\A5ABYSJ3\TENw1k_hardware.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\Prefs\A5ABYSJ3\TENw1k_match.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\Prefs\A5ABYSJ3\TENw1k_options.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\Prefs\A5ABYSJ3\TENw1k_players.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\Prefs\A5ABYSJ3\_RD_.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\Prefs\A5ABYSJ3\_RD_Global.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\Prefs\A5ABYSJ3\_RD_sbwaterslide-miniclip.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\Prefs\A5ABYSJ3\__preftest.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\Prefs\A5ABYSJ3\__skive_global_data.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\Prefs\A5ABYSJ3\__skive_totefreekick_mc_data.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\Shockwave Log Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\xtras\download\AndradeArts\MoveCursorw32\MoveCursor.x32 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\xtras\download\MacromediaInc\AnimatedGIFAsset\Animated GIF Asset.X32 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\xtras\download\MacromediaInc\DirectSound\DirectSound.x32 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\xtras\download\MacromediaInc\FlashAsset\Flash Asset.x32 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\xtras\download\MacromediaInc\FontAsset\Font Asset.x32 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\xtras\download\MacromediaInc\FontXtra\Font Xtra.x32 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\xtras\download\MacromediaInc\Havok\Havok.x32 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\xtras\download\MacromediaInc\MacroMix\MacroMix.x32 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\xtras\download\MacromediaInc\Shockwave3dAsset\Shockwave 3d Asset.x32 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\xtras\download\MacromediaInc\SoundControl\Sound Control.x32 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\xtras\download\MacromediaInc\SWA\swadcmpr.x32 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\xtras\download\MacromediaInc\SWA\SWASTRM.X32 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\xtras\download\MacromediaInc\TextAsset\Text Asset.x32 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\xtras\download\MacromediaInc\TextXtra\TextXtra.x32 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\xtras\download\MacromediaInc\XMLParser\XMLParser.X32 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\Content\2BF68F4714092295550497DD56F57004 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\Content\486CC6AFD08942336C61FCD401C4A1D1 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\Content\5C8DDA36D60247082B142836039F4636 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\Content\60E31627FDA0A46932B0E5948949F2A5 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\Content\696F3DE637E6DE85B458996D49D759AD Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\Content\71644221AC231DBD2359C18EBB2118DC Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\Content\74BFD122C0875EC75DBE5C6DB4C59019 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\Content\7C8A03C4580C6B04FDF34357F3474EDC Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\Content\A44F4E7CB3133FF765C39A53AD8FCFDD Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\Content\A8FABA189DB7D25FBA7CAC806625FD30 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\Content\B2F4B1D39F0694C6CDB433BC3CCF1418 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\Content\B82262A5D5DA4DDACE9EDA7F787D0DEB Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\Content\C571B417AAF1F617555A0486AB3F5361 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\Content\DC2135CED98D8A4D7C0CEE202BB0B810 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\Content\F482C95F83F1B59228F1B1E720F2EDF1 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\Content\F5A17C00E427F919C4A49EEF5AD0EE53 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\MetaData\2BF68F4714092295550497DD56F57004 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\MetaData\486CC6AFD08942336C61FCD401C4A1D1 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\MetaData\5C8DDA36D60247082B142836039F4636 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\MetaData\60E31627FDA0A46932B0E5948949F2A5 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\MetaData\696F3DE637E6DE85B458996D49D759AD Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\MetaData\71644221AC231DBD2359C18EBB2118DC Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\MetaData\74BFD122C0875EC75DBE5C6DB4C59019 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\MetaData\7C8A03C4580C6B04FDF34357F3474EDC Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\MetaData\A44F4E7CB3133FF765C39A53AD8FCFDD Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\MetaData\A8FABA189DB7D25FBA7CAC806625FD30 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\MetaData\B2F4B1D39F0694C6CDB433BC3CCF1418 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\MetaData\B82262A5D5DA4DDACE9EDA7F787D0DEB Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\MetaData\C571B417AAF1F617555A0486AB3F5361 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\MetaData\DC2135CED98D8A4D7C0CEE202BB0B810 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\MetaData\F482C95F83F1B59228F1B1E720F2EDF1 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\MetaData\F5A17C00E427F919C4A49EEF5AD0EE53 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Crypto\RSA\S-1-5-21-1381385058-3852577522-4169218411-1009\533145ef011ddf5ca3983e2545a902b4_d92f6388-d58d-40cf-83bf-6aaa833ec81c Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Crypto\RSA\S-1-5-21-1381385058-3852577522-4169218411-1009\e346aa0582ed1e833c77f4ad46188426_d92f6388-d58d-40cf-83bf-6aaa833ec81c Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Internet Explorer\brndlog.bak Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Internet Explorer\brndlog.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Internet Explorer\Desktop.htt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Internet Explorer\Internet Explorer Wallpaper.bmp Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Internet Explorer\Quick Launch\desktop.ini Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Internet Explorer\Quick Launch\iTunes.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Microsoft Outlook.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Internet Explorer\Quick Launch\Winferno Registry Power Cleaner.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Media Player\00445B83.wpl Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2256670353\sqmnoopt00.sqm Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Backgrounds\map.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Backgrounds\TFR10.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Backgrounds\TFR11.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Backgrounds\TFR12.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Backgrounds\TFR13.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Backgrounds\TFRF.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\DynamicBackgrounds\map.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\DynamicBackgrounds\TFR1B.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\DynamicBackgrounds\TFR26.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\DynamicBackgrounds\TFR31.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\DynamicBackgrounds\TFR3C.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\MapFile\TFR44.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\MapFile\TFR45.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\MapFile\TFR64.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\MapFile\TFRE.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\sqmnoopt00.sqm Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\sqmnoopt01.sqm Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\sqmnoopt02.sqm Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\sqmnoopt03.sqm Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\sqmnoopt04.sqm Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\sqmnoopt05.sqm Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\sqmnoopt06.sqm Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\sqmnoopt07.sqm Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\sqmnoopt08.sqm Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\UserTile\map.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\UserTile\TFR3.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\UserTile\TFR4.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\UserTile\TFR5.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\UserTile\TFR6.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\UserTile\TFR7.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\UserTile\TFR8.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\UserTile\TFR9.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\UserTile\TFRA.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\UserTile\TFRB.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\UserTile\TFRC.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\UserTile\TFRD.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Winks3\map.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Winks3\TFR47.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Winks3\TFR49.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Winks3\TFR4B.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Winks3\TFR4D.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Winks3\TFR4F.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Winks3\TFR51.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Winks3\TFR53.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Winks3\TFR55.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Winks3\TFR57.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Winks3\TFR59.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Winks3\TFR5B.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Winks3\TFR5D.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Winks3\TFR5F.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Winks3\TFR61.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Winks3\TFR63.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Backgrounds\map.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Backgrounds\TFR35.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Backgrounds\TFR36.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Backgrounds\TFR37.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Backgrounds\TFR38.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Backgrounds\TFR39.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Backgrounds\TFR396.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Backgrounds\TFR397.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Backgrounds\TFR398.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Backgrounds\TFR399.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Backgrounds\TFR39A.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\DynamicBackgrounds\map.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\DynamicBackgrounds\TFR3D.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\DynamicBackgrounds\TFR48.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\DynamicBackgrounds\TFR53.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\DynamicBackgrounds\TFR5E.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\MapFile\TFR395.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\MapFile\TFR66.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\MapFile\TFR67.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\MapFile\TFR86.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\sqmnoopt00.sqm Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\sqmnoopt01.sqm Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\sqmnoopt02.sqm Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\sqmnoopt03.sqm Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\UserTile\map.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\UserTile\TFR38A.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\UserTile\TFR38B.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\UserTile\TFR38C.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\UserTile\TFR38D.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\UserTile\TFR38E.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\UserTile\TFR38F.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\UserTile\TFR390.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\UserTile\TFR391.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\UserTile\TFR392.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\UserTile\TFR393.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\UserTile\TFR394.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Winks3\map.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Winks3\TFR69.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Winks3\TFR6B.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Winks3\TFR6D.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Winks3\TFR6F.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Winks3\TFR71.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Winks3\TFR73.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Winks3\TFR75.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Winks3\TFR77.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Winks3\TFR79.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Winks3\TFR7B.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Winks3\TFR7D.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Winks3\TFR7F.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Winks3\TFR81.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Winks3\TFR83.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Winks3\TFR85.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3072885681\sqmnoopt00.sqm Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Office\MSO1033.acl Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Office\MSOut10.pip Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Office\Recent\06.09.27. Daily Bulletin.doc.url Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Office\Recent\Art.LNK Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Office\Recent\cool pics 4 me!!.LNK Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Office\Recent\Doc1.LNK Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Office\Recent\index.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Office\Recent\msg_attachments on http://www.sct1.net.url Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Office\Recent\Templates.LNK Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Office\Word10.pip Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Outlook\outcmd.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Outlook\Outlook.srs Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Outlook\VIEWS.DAT Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Proof\CUSTOM.DIC Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Protect\CREDHIST Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Protect\S-1-5-21-1381385058-3852577522-4169218411-1009\25e13c7d-ec52-4b27-867d-3d2bf6582691 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Protect\S-1-5-21-1381385058-3852577522-4169218411-1009\2e53e226-9a6f-4f3a-937f-ac8d09197a37 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Protect\S-1-5-21-1381385058-3852577522-4169218411-1009\4401bb5b-673f-44b2-8c94-e1c75a010ef8 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Protect\S-1-5-21-1381385058-3852577522-4169218411-1009\463740d1-5f21-4495-9d47-88b2ba9b47bc Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Protect\S-1-5-21-1381385058-3852577522-4169218411-1009\b1afc900-082d-483f-b97a-e3c0032564f3 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Protect\S-1-5-21-1381385058-3852577522-4169218411-1009\ced00369-224a-465e-956c-dd42852b3912 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Protect\S-1-5-21-1381385058-3852577522-4169218411-1009\d1847f5a-0cd8-49db-a4d6-b2fe45dd316e Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Protect\S-1-5-21-1381385058-3852577522-4169218411-1009\f9e3c824-f053-49e4-9448-915fc3fae2d1 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Protect\S-1-5-21-1381385058-3852577522-4169218411-1009\Preferred Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Protect\S-1-5-21-3589872248-1821354942-904758527-1003\fafb8e3f-9c21-471f-bf23-e4fde1890e36 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Protect\S-1-5-21-3589872248-1821354942-904758527-1003\Preferred Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Protect\S-1-5-21-3972929438-621129394-426773285-1003\9b8808bf-0636-4772-88ce-67cb1643b290 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Protect\S-1-5-21-3972929438-621129394-426773285-1003\Preferred Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Templates\Normal.dot Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Templates\~$Normal.dot Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Windows\Themes\Custom.theme Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Word\AutoRecovery save of Document1.asd Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Real\Msg\Category.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Real\Msg\Messages.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Real\Msg\SCategory.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Real\RealMediaSDK\3e1f2700.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Real\RealMediaSDK\52263000.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Real\RealMediaSDK\cookies.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Real\RealPlayer\ErrorLogs\DownloadMgr.log Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Real\RealPlayer\History\KS2 ReviseWise Mental Maths.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Real\RealPlayer\History\ks2maths.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Real\RealPlayer\lclkdb.son Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Real\RealPlayer\realplayer.ste Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Real\RealPlayer\skins\data\normal\imgcache.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Real\RealPlayer\skins\data\normal\state.ini Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Real\RealPlayer\viz.ini Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Real\rnadmin\rnsystem.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\0.gif-54093bde-2617c8d7.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\0.gif-54093bde-2617c8d7.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\1.gif-5417535f-5660cb28.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\1.gif-5417535f-5660cb28.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\10.gif-4a97e47f-355a0b9a.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\10.gif-4a97e47f-355a0b9a.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\11.gif-4aa5fc00-11376b59.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\11.gif-4aa5fc00-11376b59.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\12.gif-4ab41381-47bcae31.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\12.gif-4ab41381-47bcae31.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\13.gif-4ac22b02-1e6f020e.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\13.gif-4ac22b02-1e6f020e.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\14.gif-4ad04283-6c6406fa.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\14.gif-4ad04283-6c6406fa.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\15.gif-4ade5a04-3498de7a.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\15.gif-4ade5a04-3498de7a.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\2.gif-54256ae0-5e106903.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\2.gif-54256ae0-5e106903.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\3.gif-54338261-77319d6a.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\3.gif-54338261-77319d6a.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\4.gif-544199e2-14fa9cd0.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\4.gif-544199e2-14fa9cd0.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\5.gif-544fb163-55574ccb.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\5.gif-544fb163-55574ccb.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\6.gif-545dc8e4-4abb923b.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\6.gif-545dc8e4-4abb923b.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\7.gif-546be065-6969a484.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\7.gif-546be065-6969a484.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\8.gif-5479f7e6-50e4bead.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\8.gif-5479f7e6-50e4bead.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\9.gif-54880f67-43fbf9ca.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\9.gif-54880f67-43fbf9ca.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\a3o.au-65c25666-342eed13.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\a3o.au-65c25666-342eed13.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\adds.gif-1232da92-4055ddae.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\adds.gif-1232da92-4055ddae.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\b.gif-535857bb-21b6af59.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\b.gif-535857bb-21b6af59.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\ball1.gif-47dc3140-6b7a95e1.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\ball1.gif-47dc3140-6b7a95e1.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\ball2.gif-47ea48c1-14a3da13.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\ball2.gif-47ea48c1-14a3da13.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\bg.au-2390261e-54be38df.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\bg.au-2390261e-54be38df.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\bg2.au-6a383a96-69e7579c.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\bg2.au-6a383a96-69e7579c.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\c0.gif-352c4442-680d5bc0.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\c0.gif-352c4442-680d5bc0.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\c1.gif-353a5bc3-56c342f0.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\c1.gif-353a5bc3-56c342f0.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\c2.gif-35487344-6f892c8b.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\c2.gif-35487344-6f892c8b.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\c3.gif-35568ac5-267cea78.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\c3.gif-35568ac5-267cea78.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\controls.gif-13722bcb-4c32a956.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\controls.gif-13722bcb-4c32a956.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\controls2.gif-76b44895-2a56abff.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\controls2.gif-76b44895-2a56abff.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\d.gif-537486bd-7950180f.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\d.gif-537486bd-7950180f.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\dest.gif-18636542-463d50ea.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\dest.gif-18636542-463d50ea.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\eclips.au-120151e5-51dbc531.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\eclips.au-120151e5-51dbc531.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\ef.gif-3b8eeab6-77bc2219.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\ef.gif-3b8eeab6-77bc2219.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\europeancup.jpg-7104011-7b4855b6.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\europeancup.jpg-7104011-7b4855b6.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\excited.au-52c3e2e9-16893ab5.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\excited.au-52c3e2e9-16893ab5.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\focus0.gif-621ff3b8-22cbc358.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\focus0.gif-621ff3b8-22cbc358.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\focus1.gif-622e0b39-5f26cbf0.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\focus1.gif-622e0b39-5f26cbf0.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\fulltime.gif-307977f1-123cc30e.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\fulltime.gif-307977f1-123cc30e.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\g0.gif-26bd9609-48b109de.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\g0.gif-26bd9609-48b109de.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\g1.gif-26cbad8a-6bb81506.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\g1.gif-26cbad8a-6bb81506.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\g2.gif-26d9c50b-536fe3b4.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\g2.gif-26d9c50b-536fe3b4.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\g3.gif-26e7dc8c-4897cd77.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\g3.gif-26e7dc8c-4897cd77.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\g4.gif-26f5f40d-43b8e744.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\g4.gif-26f5f40d-43b8e744.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\g5.gif-27040b8e-67f6a2af.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\g5.gif-27040b8e-67f6a2af.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\g6.gif-2712230f-31e5d6fb.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\g6.gif-2712230f-31e5d6fb.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\g7.gif-27203a90-4b875154.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\g7.gif-27203a90-4b875154.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\g8.gif-272e5211-410e00a3.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\g8.gif-272e5211-410e00a3.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\goal.au-11695090-3d41298f.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\goal.au-11695090-3d41298f.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\goal.gif-eddfca8-535399d0.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\goal.gif-eddfca8-535399d0.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\gol.gif-3b88c872-62d4dd90.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\gol.gif-3b88c872-62d4dd90.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\goldengoal.gif-21e59231-24d2c5ee.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\goldengoal.gif-21e59231-24d2c5ee.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\halftime.gif-24643195-34c8670b.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\halftime.gif-24643195-34c8670b.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\head.au-353b72a3-2a4c4886.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\head.au-353b72a3-2a4c4886.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\kick.au-5ae0e47d-6a12f0c4.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\kick.au-5ae0e47d-6a12f0c4.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\l.gif-53e542c5-25189ee3.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\l.gif-53e542c5-25189ee3.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\main.au-51759478-673ed345.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\main.au-51759478-673ed345.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\miniclip2.gif-f0989c4-26aa86e6.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\miniclip2.gif-f0989c4-26aa86e6.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\p.gif-541da0c9-58fe858e.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\p.gif-541da0c9-58fe858e.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\pass.au-569e62d2-102f44c0.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\pass.au-569e62d2-102f44c0.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\r.gif-5439cfcb-7cb7a366.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\r.gif-5439cfcb-7cb7a366.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\ref1.au-466909c5-38693171.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\ref1.au-466909c5-38693171.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\ref2.au-46697e24-3877aff2.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\ref2.au-46697e24-3877aff2.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\replay.au-3949580a-21b81129.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\replay.au-3949580a-21b81129.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\replay.gif-6a3a43fc-46ff7a04.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\replay.gif-6a3a43fc-46ff7a04.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\shad.gif-2daf04d8-600e0a71.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\shad.gif-2daf04d8-600e0a71.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\sky.jpg-30376aac-3870d645.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\sky.jpg-30376aac-3870d645.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\stad.gif-2879cbe4-418de68f.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\stad.gif-2879cbe4-418de68f.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\sws.gif-575cfee8-486cd896.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\sws.gif-575cfee8-486cd896.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\theme.au-3baa254c-472fdcfe.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\theme.au-3baa254c-472fdcfe.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\u.gif-5464164e-34dc6249.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\u.gif-5464164e-34dc6249.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\worldcup.gif-59e88ff5-519fc17d.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\worldcup.gif-59e88ff5-519fc17d.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\socca.jar-3a478aab-3979708e.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\socca.jar-3a478aab-3979708e.zip Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\deployment.properties Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\log\plugin150_10.trace Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\log\plugin150_11.trace Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Telewest\PCguard advisor\CampaignStore.xml Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Telewest\PCguard advisor\client_gateway.log Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Telewest\PCguard advisor\client_gateway.log.1 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Telewest\PCguard advisor\downloads\spa13-football-200712.41.zip.dir\en\broadband-advisor.css Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Telewest\PCguard advisor\downloads\spa13-football-200712.41.zip.dir\en\images\vm-arrow-hover.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Telewest\PCguard advisor\downloads\spa13-football-200712.41.zip.dir\en\images\vm-coca-cola.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Telewest\PCguard advisor\downloads\spa13-football-200712.41.zip.dir\en\images\vm-mr-sheepskin-bg.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Telewest\PCguard advisor\downloads\spa13-football-200712.41.zip.dir\en\images\vm-mr-sheepskin.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Telewest\PCguard advisor\downloads\spa13-football-200712.41.zip.dir\en\images\vm-premier.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Telewest\PCguard advisor\downloads\spa13-football-200712.41.zip.dir\en\images\vm-sport-url.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Telewest\PCguard advisor\downloads\spa13-football-200712.41.zip.dir\en\images\vm-strapline.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Telewest\PCguard advisor\downloads\spa13-football-200712.41.zip.dir\en\index.html Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Telewest\PCguard advisor\downloads\Telewest-Vista_message-06022007.41.zip.dir\en\index.html Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Telewest\PCguard advisor\EventStore.xml Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Telewest\PCguard advisor\SoftwarePackageStore.xml Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Telewest\PCguard advisor\UpdateStore.xml Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\ThinkVantage\Client Security\encobject.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\ThinkVantage\Client Security\hibernation.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\ThinkVantage\Client Security\swkeys.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\ThinkVantage\Client Security\symkeys.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\WholeSecurity\wcid0.log Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\WholeSecurity\wsasc.zip Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\Desktop.ini Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\dotsnspots@hotmail.co.uk\contactcoll.cache Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharp@hotmail.co.uk\contactcoll.cache Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\02c8b6f1-ade1-4539-b988-262a10f0c9b4.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\060b64d8-40e4-4ddc-b0e7-7c0d093c5e77.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\076528bc-e654-4edd-9448-56187148b72a.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\08533e4f-18ea-4a8d-a8bb-fff3d66e0f0c.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\09519f2e-58c2-4b38-bed9-8caafd242ab4.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\0b7f8510-9825-4c59-88b4-7b7b9c683d8b.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\0ba0d637-16d0-497e-8dff-a15d03db3c6a.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\0f05e43e-ec16-4db2-8d75-c2302ca3680d.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\157176da-0f5d-4c6a-9859-fb155a197474.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\1b6e4dd8-27a3-444c-a005-512d5e71701f.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\1bf786c3-16bd-47d4-8f17-f48994fab8b2.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\1ce61a5a-1389-40d5-bcd2-c8074e8ad339.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\1dd6935b-1279-4842-a9a0-09af6b42b82c.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\219e4d94-bb21-4bde-afe8-3f40d40174ea.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\227aa116-d9ea-4c9f-835f-5d23a280ee70.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\248451ba-517e-4195-8430-205a6fca7b67.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\2603f6f8-55bd-4e92-8127-c21870c98d9c.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\2a68f7d0-c02c-482e-8ec2-54f334b7156b.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\2f37f1ee-e6bc-4c40-afbf-168362225345.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\30257d21-9a7c-4bf9-8fca-02d43f6fe390.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\32549664-a961-4b40-84cc-07d8968d2f9b.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\335d347a-cb4e-4c17-b110-96227805a746.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\39cce79c-5dd6-4de6-a847-3f92b1260bb1.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\3a3f6685-7a46-4eb2-90c6-6e547fae6b82.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\3d031795-848e-4ead-b700-108ca41bf7db.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\3f466fa6-7f17-485e-9601-6f22cb9c7669.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\3fd47cd9-ffc0-4a95-a555-557caa5ba408.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\471baf50-ee77-491c-9433-c7419e85a695.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\4d970cfe-114f-4a91-b1d2-467be418fbca.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\4fadb838-0541-4a74-bf26-443295006d59.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\50813dfd-49de-4c61-97e0-bda2bd6be087.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\559aa0db-0a58-4274-8f30-ef405f37b565.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\582e7157-5159-4eb2-be79-be600e9e7dc5.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\5a830386-b552-4169-9d01-36995c935358.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\5b5567bf-7e5d-4938-a8a1-6ba9b0c0f8c1.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\62053c39-a0e1-4ca3-b40b-370a4d396a95.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\6425d1af-8180-4ad6-89d7-e6dd71c16af1.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\6696c3a2-8ecc-4a8c-a3a7-3700245ce2a0.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\6a691a08-15f1-4c1f-ac8c-fab96b5b344b.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\6ad33b0b-e53a-4b1c-a403-23f5ccb494ae.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\6c9bc1bf-0489-4376-b642-eceb58276839.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\6cd75d78-0c21-4706-b6f3-4b777ad4a0af.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\6f0176fa-a652-423d-9588-ea4ebdb6ea1c.WindowsLiveGroup Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\6f32b30c-ae2b-4c57-b07d-7204cefefbe9.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\70a4e9ab-d2b1-4bae-be2a-c6f3e1188a0b.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\73854001-2f53-4ae4-86fe-bf933496441c.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\7b701a9f-dd44-4ad0-ac81-441265fec836.WindowsLiveGroup Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\7cc21c2a-0ec8-4fe6-a0ff-f5a806eef6fe.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\7df8e134-1c1b-4de8-9b71-c97322391e53.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\7e176b87-d83a-4bd7-b578-2e64933813a9.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\802e7f72-e16a-462b-a576-c76abc5325c1.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\8170bbd4-12b1-4a10-8d11-c2e4ad7fb5ad.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\8602f36c-d970-4907-97e8-6d75ada3b502.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\88022c26-ce94-4dbd-9b40-0ec9ede1f0f5.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\891729ec-0125-4da5-8947-4fd5154309b9.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\8c2e4b1c-6049-442c-8953-ae525a928fa9.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\8d673a33-5154-441f-9bf6-1ad227002c6c.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\8d6ac43c-87d3-4ae6-8e4a-a4528d5da017.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\8e412a1f-20ab-4163-b766-d953e40cccc1.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\9017167e-f718-40ba-b8f9-4a8ca4679f62.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\925aa01c-ba0e-438f-9511-f3d79bf7dcc6.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\926314b7-8120-4f5e-8ec3-cb07f321bed4.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\9386b974-14ce-4658-9d2e-ee45714367f7.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\96c6e2fb-b0b1-483c-a8bf-9ac155c112b0.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\9d93d652-5856-40b5-a1fa-42c4002c44ea.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\a3fa1516-afcc-4a7c-80c3-5ccccc25134b.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\a43316d7-7cff-431e-be05-5d754f3d8a17.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\a463259a-ac59-4911-b55d-afedf24c5bcd.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\a506b0ab-9a60-427c-a22e-e28d9b7787bf.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\a69ac453-4fc7-4d2e-a79b-713fc9fd10e0.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\a86e1871-2712-4ece-8176-9253da582d4f.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\a8d71fde-391e-41de-9d37-dadd685ef8ec.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\ac9a2bd2-9d7a-44d3-80c6-431e88ea1d6e.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\b083b588-7113-464e-8982-0966be94a541.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\ba9ea89e-f63e-4ee1-8c45-55001096ecee.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\bcc11ff1-3eeb-4c11-883c-9616aaa547c0.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\bdd4194b-fd4b-4890-85c2-c47bddadf835.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\c160edad-49a5-45a6-b05e-d771d242e3ed.WindowsLiveGroup Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\c337ce21-1feb-47f9-b5a4-2da469620b49.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\ce663e8b-0023-4da6-af57-b800d4c1b76a.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\cf1992bb-2ead-43f2-ac29-7a02c758679a.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\contactcoll.cache Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\d0fb169e-0334-47f8-af28-ff03f8228efe.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\d2645b66-f881-4aa2-afd0-eaad0a6a5c56.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\d3092cab-36ee-48a6-b931-a80e33fab766.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\d8f83c6a-a623-4922-a2b3-6a781ff01c79.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\dba46517-68e9-482a-af30-3bc62a0122d6.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\e1011385-297d-46dd-8b73-93ca87fb9253.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\e2af41e9-46e8-4ff1-8e33-11f5e4b51ca5.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\e33246cb-5621-448c-866c-3b96974ad77f.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\e43276a9-ced3-4bce-a0e7-9807bbd75b7c.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\e5021855-9431-43d8-82cd-c5ae827e6208.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\e9347906-3aa1-420d-8a9c-487e88eb8f0a.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\e93d4df0-bc3f-4209-bcb6-d0fec1837477.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\ea395214-1d75-4b1e-98ac-1b9b6551cb91.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\f25f3fa5-bbf5-4e57-be45-6a8c115b24e6.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\f2af446f-e756-4bd3-a991-087f3c857ffd.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\f3147605-fddf-4914-8b98-3bb1d2b61d26.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\f3e82864-a0ca-48c5-ad24-b765037548c0.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\fb84e6a0-1e7d-46be-861f-f02e29d71532.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\ffb3bfd1-0962-48f7-b1b5-d66a117f2caa.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\spotsndots@hotmail.co.uk\002815dc-2a67-4d31-ab68-15ce15edf7f5.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\spotsndots@hotmail.co.uk\08ae5733-6920-453c-9c6c-4a0dc7450e03.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\spotsndots@hotmail.co.uk\18f9a6e4-e5db-43d1-aa23-9a46ec382121.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\spotsndots@hotmail.co.uk\2ae1ab84-64bc-4d4a-96f1-65de1969dc19.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\spotsndots@hotmail.co.uk\31b980af-2e40-4a8e-a135-b911896aae8d.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\spotsndots@hotmail.co.uk\35b6298a-2cfb-4e06-b983-be1a0513ff35.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\spotsndots@hotmail.co.uk\502e8b8d-f3d9-41e2-bd7f-9f87668c6af7.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\spotsndots@hotmail.co.uk\51029bce-282b-44cf-9a60-bae2df1277ca.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\spotsndots@hotmail.co.uk\6062d513-13e3-4556-8d6b-3e92149b5b1f.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\spotsndots@hotmail.co.uk\62dbb110-247a-4ee2-b5fb-8c75cf54a46a.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\spotsndots@hotmail.co.uk\69ae915f-5ddf-4829-a27d-a5658257fbe0.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\spotsndots@hotmail.co.uk\7986323e-de99-4137-b01c-830c5b574626.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\spotsndots@hotmail.co.uk\7c5c567e-26ea-4912-83fb-61180d80181c.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\spotsndots@hotmail.co.uk\85669a7c-5987-4758-bd0c-8b6b24349d16.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\spotsndots@hotmail.co.uk\86f63c93-f445-431c-b712-f6ff29c24893.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\spotsndots@hotmail.co.uk\8706f040-d93b-4446-a570-853d4deb95c4.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\spotsndots@hotmail.co.uk\98155310-1950-4bde-b3d1-06e431858e59.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\spotsndots@hotmail.co.uk\a2e99f26-55c5-4d6b-bef7-b93acefe3cbc.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\spotsndots@hotmail.co.uk\ab292340-7b57-438e-b156-5787835507c7.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\spotsndots@hotmail.co.uk\b9c6d2ce-81eb-4cff-ae4d-07293c4719fb.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\spotsndots@hotmail.co.uk\bf125fc4-7f9d-4662-9feb-63ca7fdf66cc.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\spotsndots@hotmail.co.uk\cd581e24-7955-44ea-bfb2-dc81f15ee5f5.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\spotsndots@hotmail.co.uk\contactcoll.cache Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\spotsndots@hotmail.co.uk\da43c344-87e9-4e50-b43f-a1b1865197ce.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\spotsndots@hotmail.co.uk\da5c93d6-1593-4880-8f15-ca2f89ada764.WindowsLiveGroup Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@216.239.59[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@422[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@422[4].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@ad.uk.tangozebra[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@ad1.emediate[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@addictinggames[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@adidas[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@ads.ak.facebook[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@ayb.netbios-wait[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@banner.carnavalcasino[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@bbc.co[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@blairendersby.co[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@businessinternetdirectory[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@canadiancrc[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@carnavalcasino[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@channel-ai[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@connextra[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@connextra[3].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@connextra[4].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@connextra[5].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@core.mochibot[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@crazymonkeygames[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@cs.shopperreports[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@datingforparents[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@dialaphone.co[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@disney.go[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@doubleclick[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@e-2dj6wakyshc5alo.stats.esomniture[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@e-2dj6whmyejdpsbo.stats.esomniture[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@e-2dj6wjl4epazegp.stats.esomniture[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@e-2dj6wjmiwidzccp.stats.esomniture[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@ebay.co[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@ebayexpress.co[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@ebayobjects[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@ebayrtm[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@ebay[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@em.gad-network[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@em.pc-on-internet[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@errorsafe[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@facebook[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@familyfun.go[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@flipcorp[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@gamesheep[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@geocities[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@go.errorsafe[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@go.systemdoctor[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@google.co[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@google[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@google[3].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@go[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@home.skysports[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@hotmail.msn[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@ign[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@int.sitestat[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@int.sitestat[3].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@int.sitestat[4].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@int.sitestat[5].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@jsp[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@live[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@login.facebook[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@login.live[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@login[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@m.webtrends[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@m3[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@mb[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@messenger.msn[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@metacafe[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@metrics.adobe[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@miniclip[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@msn[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@my.freeze[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@mydebtplan.co[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@myoffers.co[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@network.adsmarket-finance.co[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@network.adsmarket[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@nytdigital[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@nytimes[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@o.nytimes[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@onlinestores.metaservices.microsoft[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@overture[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@parentalcontrolcentre.virginmedia[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@partners.dialaphone.co[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@paydayuk.co[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@peach.bskyb[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@peach.bskyb[3].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@pkrcasino[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@play.toontown[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@pogo[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@pokemon-games[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@rad.msn[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@realarcadebundles.real[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@register.free-games-online[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@register.wallpapers[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@report.legalandgeneral[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@reviewcentre[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@s2d6[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@sdc.brightcove[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@sdc.shockwave[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@search.live[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@shelter.org[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@sky.uk.intellitxt[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@snap[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@stats1.reliablestats[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@streaming.skysports[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@systemdoctor[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@toontown[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@tp.msn[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@travelblog[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@tv.arsenal[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@uk.celldorado[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@uk.cheats.ign[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@uk.ebayrtm[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@uk.ign[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@uk.sitestat[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@ukprizedraw.co[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@VictorChandler[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@wallpapers[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@websiteceo[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@wentworthdirect.co[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@wowpapers[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@wowpapers[3].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@wt.o.nytimes[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@www.addictinggames[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@www.adidas-shop.co[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@www.adidas[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@www.adserver5[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@www.amaena[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@www.arsenal[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@www.channel-ai[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@www.channel-ai[3].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@www.clash-media[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@www.dialaphone.co[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@www.disney.co[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@www.errorsafe[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@www.hotbar[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@www.miniclip[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@www.mobilemarketplace[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@www.msn[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@www.myoffers.co[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@www.pkrcasino[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@www.racingfrogsstumpycreek[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@www.realarcade[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@www.reviewcentre[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@www.screensavers[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@www.skysports[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@www.systemdoctor[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@www.ukprizedraw.co[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@www.utarget.co[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@www.wallpapers[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@www.wentworthdirect.co[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@www.wowpapers[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@yahoo[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@youtube[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\AirHockey 3D.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\cool things\pics\Arsenal.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\cool things\pics\Bulbasaur with trainers.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\cool things\pics\Charizard.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\cool things\pics\Galactik footie.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\cool things\pics\girls.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\cool things\pics\Gotta catch them all.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\cool things\pics\Latias.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\cool things\pics\Latios.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\cool things\pics\Mew.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\cool things\pics\Pokèmon- Mew + Mew2.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\cool things\pics\Pokèmon- Pigitu with Ash.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\cool things\pics\Power rangers mf 1.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\cool things\pics\Power rangers mf 2.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\cool things\pics\Squirtle2.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\cool things\pics\Thierry Henry.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\cool things\pics\Thumbs.db Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\cool things\pics\Torchic.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\Crazy Golf.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\Free Dolphins Screensaver.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\Free Whales ScreenSaver.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\More Games at GameHouse.com.url Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\Unused Desktop Shortcuts\Adobe Reader 7.0.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\Unused Desktop Shortcuts\AOL Double-Click to Start.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\Unused Desktop Shortcuts\AvRack.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\Unused Desktop Shortcuts\blueyonder PCguard.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\Unused Desktop Shortcuts\EarthLink Internet 30 Days Free.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\Unused Desktop Shortcuts\ESPR800 Referene Guide.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\Unused Desktop Shortcuts\ESPR800 Software Guide.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\Unused Desktop Shortcuts\iRiverManager.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\Unused Desktop Shortcuts\iTunes.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\Unused Desktop Shortcuts\Lenovo Care.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\Unused Desktop Shortcuts\Memory-Map OS2004.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\Unused Desktop Shortcuts\QuickTime Player.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\Unused Desktop Shortcuts\RealPlayer.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\Unused Desktop Shortcuts\Shortcut to blueyonder Roaming Access.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\Unused Desktop Shortcuts\ZoomBrowser EX.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\Upgrade Living 3D Dolphins!.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\Windows Media Player.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\BBC - Schools - Dance Mat Typing - Level 4 - Stage 10.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Bingley Juniors Football Club.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Desktop.ini Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\eBay UK - The UK's Online Marketplace.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Free Online Games, Flash Games and Fun Games at MostFunGames.com.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Free Online Games.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\gameSheep.com - Free Online Games.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Google.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Lenovo Recommended Sites\Lenovo Home.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Lenovo Recommended Sites\News.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Lenovo Recommended Sites\Products.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Lenovo Recommended Sites\Support and Downloads.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Lenovo Recommended Sites\Upgrades, Accessories, and Parts.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Links\Customize Links.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Links\Free Hotmail.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Links\Self Care.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Links\Service Status.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Links\Support.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Links\Telewest Broadband.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Links\Webmail.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Links\Windows Marketplace.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Links\Windows Media.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Links\Windows.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\matthew football.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Merlin Stickers Online.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Microsoft Websites\IE Add-on site.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Microsoft Websites\IE site on Microsoft.com.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Microsoft Websites\Marketplace.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Microsoft Websites\Microsoft At Home.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Microsoft Websites\Microsoft At Work.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Microsoft Websites\Welcome to IE7.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Miniclip Games - Play Free Games.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\MSN.com.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\OneMoreLevel.com - 10 Second Challenge.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Play Arcade Games - Action Games - Shooting Games.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Play Online Games and Download Games at GameHouse.com.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Pokemon-Games.com.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Racing Frogs - the crazy frog racing game!.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Radio Station Guide.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\robotduck.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Sky Sports - The Best Sport Coverage From Around The World.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\TheGameBlazer.com Your Online Gaming Portal.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Vampire Boy [from robotduck.com shockwave games].url Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Apple Computer\iTunes\iPodDevices.xml Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Apple Computer\iTunes\iTunesPrefs.xml Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\ApplicationHistory\CreateRegFile.exe.28a53a86.ini Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\ApplicationHistory\MsiExec.exe.8cb23528.ini.inuse Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\ApplicationHistory\ngen.exe.2c05686e.ini Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\ApplicationHistory\SL9.tmp.82733c4a.ini Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\fusioncache.dat Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\GDIPFONTCACHEV1.DAT Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\dbCache.dat Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\dbCache.dat.index Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\icons\kh.google.com_icons_1027_nh.png Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\icons\kh.google.com_icons_773_l.png Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\icons\kh.google.com_icons_773_nh.png Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\icons\kh.google.com_icons_bbs_32_nh.png Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\icons\kh.google.com_icons_blue_star_l.png Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\icons\kh.google.com_icons_buildings_stagger_16e_l.png Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\icons\kh.google.com_icons_dining_new_l.png Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\icons\kh.google.com_icons_flag64_l.png Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\icons\kh.google.com_icons_flag_new_l.png Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\icons\kh.google.com_icons_green_star_l.png Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\icons\kh.google.com_icons_lil_earth_l.png Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\icons\kh.google.com_icons_lodging_new_l.png Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\icons\kh.google.com_icons_panoramio_32_nh.png Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\icons\kh.google.com_icons_shield1_l.png Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\icons\kh.google.com_icons_wikipedia_32_nh.png Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\images\khimg0.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\images\khimg1.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\images\khimg2.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\images\khimg3.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\images\khimg4.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\images\khimg5.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\images\khimg6.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\IconCache.db Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Feeds\FeedsStore.feedsdb-ms Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Feeds\Microsoft Feeds~\Microsoft at Home~.feed-ms Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Feeds\Microsoft Feeds~\Microsoft at Work~.feed-ms Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Feeds Cache\74883FMS\desktop.ini Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Feeds Cache\7QTXENFW\desktop.ini Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Feeds Cache\7QTXENFW\fwlink[1] Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Feeds Cache\9N02QKVO\desktop.ini Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Feeds Cache\desktop.ini Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Feeds Cache\JKUB55GE\desktop.ini Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Feeds Cache\JKUB55GE\fwlink[1] Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\FORMS\FRMCACHE.DAT Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Internet Explorer\brndlog.txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Internet Explorer\MSIMGSIZ.DAT Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Media Player\CurrentDatabase_219.wmdb Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Media Player\CurrentDatabase_360.wmdb Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Media Player\CurrentDatabase_59R.wmdb Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Media Player\LocalMLS_3.wmdb Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Media Player\wmdbexport.xml Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\activesharingfolder.dat Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\josh_sharpie@hotmail.co.uk\SharingMetadata\Logs\Dfsr.log Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\josh_sharpie@hotmail.co.uk\SharingMetadata\pending.dat Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\josh_sharpie@hotmail.co.uk\SharingMetadata\volume.xml Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\josh_sharpie@hotmail.co.uk\SharingMetadata\volume.xml~ Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\josh_sharpie@hotmail.co.uk\SharingMetadata\Working\$db_normal$ Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\josh_sharpie@hotmail.co.uk\SharingMetadata\Working\database_1AA4_13BD_A413_99F9\$db_clean$ Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\josh_sharpie@hotmail.co.uk\SharingMetadata\Working\database_1AA4_13BD_A413_99F9\dfsr.db Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\josh_sharpie@hotmail.co.uk\SharingMetadata\Working\database_1AA4_13BD_A413_99F9\fsr.chk Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\josh_sharpie@hotmail.co.uk\SharingMetadata\Working\database_1AA4_13BD_A413_99F9\fsr.log Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\josh_sharpie@hotmail.co.uk\SharingMetadata\Working\database_1AA4_13BD_A413_99F9\fsr0001E.log Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\josh_sharpie@hotmail.co.uk\SharingMetadata\Working\database_1AA4_13BD_A413_99F9\fsr0001F.log Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\josh_sharpie@hotmail.co.uk\SharingMetadata\Working\database_1AA4_13BD_A413_99F9\fsr00020.log Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\josh_sharpie@hotmail.co.uk\SharingMetadata\Working\database_1AA4_13BD_A413_99F9\fsr00021.log Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\josh_sharpie@hotmail.co.uk\SharingMetadata\Working\database_1AA4_13BD_A413_99F9\fsr00022.log Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\josh_sharpie@hotmail.co.uk\SharingMetadata\Working\database_1AA4_13BD_A413_99F9\res1.log Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\josh_sharpie@hotmail.co.uk\SharingMetadata\Working\database_1AA4_13BD_A413_99F9\res2.log Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\spotsndots@hotmail.co.uk\SharingMetadata\Logs\Dfsr.log Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\spotsndots@hotmail.co.uk\SharingMetadata\pending.dat Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\spotsndots@hotmail.co.uk\SharingMetadata\volume.xml Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\spotsndots@hotmail.co.uk\SharingMetadata\volume.xml~ Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\spotsndots@hotmail.co.uk\SharingMetadata\Working\$db_normal$ Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\spotsndots@hotmail.co.uk\SharingMetadata\Working\database_1AA4_13BD_A413_99F9\$db_clean$ Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\spotsndots@hotmail.co.uk\SharingMetadata\Working\database_1AA4_13BD_A413_99F9\dfsr.db Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\spotsndots@hotmail.co.uk\SharingMetadata\Working\database_1AA4_13BD_A413_99F9\fsr.chk Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\spotsndots@hotmail.co.uk\SharingMetadata\Working\database_1AA4_13BD_A413_99F9\fsr.log Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\spotsndots@hotmail.co.uk\SharingMetadata\Working\database_1AA4_13BD_A413_99F9\res1.log Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\spotsndots@hotmail.co.uk\SharingMetadata\Working\database_1AA4_13BD_A413_99F9\res2.log Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Wallpaper1.bmp Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\Desktop.ini Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\dotsnspots@hotmail.co.uk\real\contactcoll.cache Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharp@hotmail.co.uk\real\contactcoll.cache Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\real\b8d57abf-67ba-4b7f-9cdf-c38ba65189dd.MeContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\real\contactcoll.cache Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\real\f687d741-d75c-40c2-9c76-68f5697a13f4.AddressBook Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\real\members.stg Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\000ff706-9c09-4a06-8ce4-124f4258caac.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\0270d6cc-bfe7-4122-bc7e-4d7a39c8837f.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\0339a584-5c38-476f-9f81-87e2f7971c41.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\039347c6-539c-4d89-97c5-7e3631d9754e.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\0b49e348-5084-4486-90d6-d556a0c97653.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\10461e06-c18b-4375-9553-744930cb27e3.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\104e44f5-1512-42b0-9974-0d5c15106e61.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\1080dbcb-20b3-4c23-839e-9b34ba493aa0.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\14ebe7d3-e038-4c6c-910d-165a65e75218.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\15f84ecc-eab1-496b-b60e-5c831c05b71a.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\1816734c-ff1c-45c8-9513-66e10f804509.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\1c80c2e6-4a59-44b8-9d28-e42704ac19a3.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\1e0a0de0-102f-4bb1-b24a-117653d8351a.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\20406cb4-bb95-4826-a62e-4acfe184fb91.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\207a2210-14f1-4d47-9a76-a9e049e70a75.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\2155225e-465c-4e27-8f17-8150002a1c9d.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\24f2a54f-113d-4c48-93fb-71e101bc2003.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\2700dabe-ab2b-43b6-bb35-c7996d16dadd.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\290e3253-9ae5-42db-b259-ab35e6b92c8e.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\2984df6b-0c4f-490a-8b23-65bc2d1d223b.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\29e7b844-842a-4224-b29a-3248176eb3fc.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\29ef8822-2968-427a-97f6-c25cf2c1fc39.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\2d137698-3d68-479e-8042-1737adb1800f.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\3529f5b6-5329-4025-a8cd-427d96e0a99d.MeContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\3c17b634-66f4-4c4c-a51d-19ad96fee6bb.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\40d9a20b-3b2d-4bb9-9b95-2c2d95245a3c.WindowsLiveGroup Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\427c3735-bf07-4867-a668-bc2439d57be6.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\45ac2f52-ad1b-41af-ae1a-02f2cf7a4229.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\4e070d73-2a1a-438e-8a3b-a6058d3d93dc.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\4eb780b5-588c-4052-b801-88dd44425f0b.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\50a56df8-2763-4f71-98f1-3bcc2e9ae2f9.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\50f2fa60-33e1-4eb5-bbef-21a019986a0d.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\525fb5e6-e247-4bd3-aa88-5d59c9b81ee5.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\53a7641b-9bc7-4c82-b065-086557771072.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\56fb0d29-2a37-42c9-8d6d-6f15d7f98d5e.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\583a0233-234a-4846-a5c6-055bfb0aaf95.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\5858cbea-a3fb-4363-8efc-a6bc59034efd.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\5969777b-9c61-4c2e-94b5-9706176c5edd.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\59e12d0a-d827-4917-ae66-667651ba20fe.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\59fef1be-f31b-459b-ab65-08e897978788.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\5b17c323-a21a-462c-b939-c49887def9ac.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\60904886-6798-4fa6-9318-15ec37ac74e5.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\64b2d487-f926-48e9-b3f8-c9e9ba85d62f.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\6b117016-dd73-4150-b36b-41ed859d4216.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\6d18f2f9-5e22-4a9d-b4cd-5b4ba8b791bc.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\6dbde505-d4aa-444c-b7da-f67c6d7f4649.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\6f1526c7-810c-411f-95c2-3cd196333455.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\6f969b4b-f5fb-4cfa-97cc-8bc4aeed872b.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\70cdc380-4717-4886-b226-275c24955ac1.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\716fbdf9-4e3a-44c5-b944-8951f6d979a4.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\727570a3-db9d-4958-b59b-cafbe5ae62ee.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\746193c9-2c8e-485f-9eb1-6c4d0d6c82d5.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\778d53c6-55a2-4c6d-83a9-60099a9457b9.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\7c786d6c-cc5c-4722-b255-a3ef2b7746d2.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\7d961124-9f4c-469d-b352-6b07569c8a04.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\7fb06a2a-8c7e-4f1a-8992-31014657fb3b.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\813a5c81-7845-43e1-bd0f-69428cdb4b9c.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\816d5dc5-de9e-4605-a441-4954aa65b97b.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\831276f2-432e-454e-b85f-e7d68ee42cc2.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\8321572b-6431-48b9-897c-aaf1bcbafd08.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\94b5a8ea-7b16-48b3-8655-9b4af723838d.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\960812dd-5363-4af2-90b2-fed2c8ef861a.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\99f44b22-d583-4ed3-8ace-62b984db81da.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\9ddced10-9ed4-4656-8693-c3668a72c853.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\9ee58618-e76d-4d02-bd3a-8a49660fbdb9.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\a04303e5-5966-4d9d-8998-5bb5007a9d5a.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\a17769c1-015a-4119-b720-46639cd21df7.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\a223f8d5-c819-4c10-85a3-fcb82db2ad6d.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\a352c9b9-ba3c-44d1-bf57-04be246a190b.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\a39d1758-5806-4910-a16a-3b0481b52ade.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\a8db1983-a65c-4d43-bd0f-a2603dace975.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\acbcae1c-52d1-4490-b7b5-57b890ae5e3c.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\adb8e47c-0b81-4393-a068-b323e1137aa9.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\aed7ce92-3ff7-4f72-bf19-b328521604ee.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\af3c019a-9d38-467f-85ef-b349eccd7bc0.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\affe5c3b-789f-4449-be68-3cdba16dc30c.WindowsLiveGroup Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\b1de1b81-3428-4093-997d-a000f9d010b2.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\bc0948f8-05a7-4ff9-a7cc-011e03ce2b9c.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\c06aa86c-da32-473d-85e4-129fbb790c09.WindowsLiveGroup Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\c3129417-7e6b-4fd2-bc1f-ec3557ddd8e2.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\ca73d2a0-8a2c-42af-9136-a7af8b5dec27.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\cc2a0080-580c-4a3f-a2a8-5193f2d29d86.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\cd354f78-ec49-410f-9153-25baedb89d9e.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\ce9f5ab1-0279-41cb-bdb6-321526f73c55.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\ceaf0676-48b8-490f-a4ae-80175ad9ea4f.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\cf4dd25a-fc4c-48ef-b808-76520ae05410.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\contactcoll.cache Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\d5d34cac-61d5-4721-9a6a-604a3fa5d2d4.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\d8457ff9-fc51-4773-a328-f9771943b97f.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\ddc97259-1071-4607-94e3-217ff7abb37e.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\ddd1fff4-fd74-4feb-a193-b4671c5f362c.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\def650e6-ad4d-4597-a548-846fcecd16a2.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\e74f7cbf-9701-4890-993b-0f8b994124d3.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\e8e57eda-3848-48ff-8944-aad7132a108b.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\f167d78a-ec90-4d35-9991-a89332fc5c4a.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\f25fc84f-2f37-44f0-a7d1-d205b3063398.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\f2725dd9-923c-428c-802d-e1060bb09769.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\f696b8be-8ac0-4235-8647-d005077795f5.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\f6f02260-d336-4383-8cb1-b57f65b273a6.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\f755de72-56fa-4f61-9702-8ae501baf66f.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\fa360030-c9b4-42ae-9f2c-bfa5212e5d72.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\fc92da8e-1912-44e1-87a3-9bae108baf65.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\members.stg Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\spotsndots@hotmail.co.uk\real\080a5cc6-e16d-4993-ae31-db9b8667e36d.MeContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\spotsndots@hotmail.co.uk\real\contactcoll.cache Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\spotsndots@hotmail.co.uk\real\f13049e0-bd1b-48a3-905d-5f0755247c41.AddressBook Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\spotsndots@hotmail.co.uk\real\members.stg Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\spotsndots@hotmail.co.uk\shadow\1407f01b-40e6-4c40-8470-adafaf18462e.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\spotsndots@hotmail.co.uk\shadow\1f2b1e43-2b8b-4d0a-a41c-c69d099ada45.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\spotsndots@hotmail.co.uk\shadow\29389a62-3acf-43f7-9090-44fcede8adf8.WindowsLiveGroup Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\spotsndots@hotmail.co.uk\shadow\45b9cd5c-5dd9-42ae-aa12-f91691cdeb27.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\spotsndots@hotmail.co.uk\shadow\46b34ad8-4f9a-43c9-b990-869a34d30276.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\spotsndots@hotmail.co.uk\shadow\473df5df-09f4-4b29-9e66-9429201d8677.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\spotsndots@hotmail.co.uk\shadow\59e33971-3ab2-4d0c-9a16-c42f0a01e7e2.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\spotsndots@hotmail.co.uk\shadow\6052f2d5-eb94-4c50-af4e-ed650489fa3b.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\spotsndots@hotmail.co.uk\shadow\6a83d6b4-7db1-460b-b534-cc2214c7c08d.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\spotsndots@hotmail.co.uk\shadow\73dec0bc-9dcd-4e29-ae91-67a465d0c677.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\spotsndots@hotmail.co.uk\shadow\78419fe8-9d54-44b4-a91d-a92b25d7cb7c.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\spotsndots@hotmail.co.uk\shadow\7d082e72-9125-4297-b1cc-54b4a75a7900.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\spotsndots@hotmail.co.uk\shadow\949a6759-e195-40db-873e-cfb5bd6d63dc.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\spotsndots@hotmail.co.uk\shadow\b1764345-aa21-4c4e-a104-ec7acf06fbc7.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\spotsndots@hotmail.co.uk\shadow\bfb38eed-2c88-4d5b-bf76-bb5da16c99c5.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\spotsndots@hotmail.co.uk\shadow\c4bf7480-3e28-49aa-b4b7-8f74ff64d81b.MeContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\spotsndots@hotmail.co.uk\shadow\ce2c2dd3-7c74-4c82-8d5c-b0d4883234ff.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\spotsndots@hotmail.co.uk\shadow\contactcoll.cache Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\spotsndots@hotmail.co.uk\shadow\d2dab083-d782-49fa-8666-85341be4622d.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\spotsndots@hotmail.co.uk\shadow\d5727837-f98b-4fff-9fdf-0d7be5a2a64d.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\spotsndots@hotmail.co.uk\shadow\d6da8e0c-bbaf-4d1e-961e-803280b85503.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\spotsndots@hotmail.co.uk\shadow\e47ac0df-37e1-4653-b48f-eb070bf72ae4.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\spotsndots@hotmail.co.uk\shadow\f123958d-6d64-40e4-a96c-265fe9f45a0d.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\spotsndots@hotmail.co.uk\shadow\f225a7e2-d16e-4ae2-8c71-5f96f07380c2.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\spotsndots@hotmail.co.uk\shadow\fc36ce1c-8319-445c-92c3-17c6a2bef3af.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\spotsndots@hotmail.co.uk\shadow\ff50fb20-5074-450b-8631-59577895ccb1.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\spotsndots@hotmail.co.uk\shadow\members.stg Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Media\10.0\WMSDKNS.DTD Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Media\10.0\WMSDKNS.XML Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Media\11.0\WMSDKNS.DTD Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Media\11.0\WMSDKNS.XML Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Media\9.0\WMSDKNS.DTD Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Media\9.0\WMSDKNS.XML Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\desktop.ini Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\History\desktop.ini Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\History\History.IE5\desktop.ini Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\History\History.IE5\MSHist012007120320071210\index.dat Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\History\History.IE5\MSHist012007122320071224\index.dat Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@1072294680[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@422[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@422[3].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@422[4].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@422[5].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@422[6].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@ad.yieldmanager[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@ads.pointroll[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@adtech[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@advertising[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@adviva[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@apmebf[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@atdmt[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@a[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@bbc.co[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@bs.serving-sys[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@connextra[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@doubleclick[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@drivecleaner[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@e-2dj6wglockazkgp.stats.esomniture[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@e-2dj6wgmyahczsco.stats.esomniture[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@ebay.co[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@ebayobjects[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@ebay[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@em.gad-network[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@emjcd[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@errorsafe[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@fastclick[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@flashkit[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@football[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@gallery.live[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@gamesheep[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@go.drivecleaner[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@go.errorsafe[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@go.systemdoctor[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@go.winantispyware[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@go.winantivirus[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@google.co[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@google[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@home.skysports[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@indexstats[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@js.forrestersurveys[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@kpremium[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@Ladbrokes[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@media.fastclick[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@mediaplex[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@merlin[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@metrixlab58.customers.luna[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@miniclip[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@mobilemarketplace[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@mywebsearch[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@overture[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@partners.gallery.live[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@peach.bskyb[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@questionmarket[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@report.legalandgeneral[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@reporting.tvlicensing.co[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@reviews.ebay.co[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@rotator.adjuggler[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@rtm[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@sdc.brightcove[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@serving-sys[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@sky.uk.intellitxt[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@SkyBet[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@stats.drivecleaner[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@stats1.reliablestats[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@s[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@testandvote.co[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@traceics[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@tradedoubler[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@tribalfusion[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@valueclick[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@watchmojo[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@winantivirus[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@www.amaena[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@www.drivecleaner[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@www.errorsafe[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@www.merlinonline.co[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@www.miniclip[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@www.mobilemarketplace[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@www.ugotgames[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@www.winantivirus[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@xiti[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@yahoo[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@zedo[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\History\History.IE5\desktop.ini Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\++vafooJLGKfQ72HhQ5cLiIn23U= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\0xL8U7T4dvKoxZg0tCgPavhwDXU= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\2VdOiRn8R6vgyAo1OuWk82FGrO9g= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\7GP2FsjPXuA5lyMxLQ4pMry9+dX4= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\8K2F2FxPZPkqvB0RmUpzl6XxhN1J0= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\8yZRi1UNwPujZzAtPraR2FasdDbs= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\BbcG7CqlSDk7M0MwJht7ju3PhWo= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\byjelJU1HOOr33HSk7fxudZzQUk= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\c2xPMZhQq9cg5IWNH3HjPOBZQ+I= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\Ezy8B2F7w8DnQO0KHqWjncA9NnM4= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\f9c2F0WHwYWW2Fm+cyow2jUEuexjw= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\fptKw22FhToyjauGzolcqHhN5oaI= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\GVmfWXXBiwmT2THKvpKtbuzv2iY= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\HstWaRrKOWzImT0BvbDwQzjrozk= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\m2bWZXAnazDBGoufImBw7Lnwqp4= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\mRw+WitVdQoGkEUyHBFHQqo0Kcs= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\oO6bo4nRi7goym+6g1Ytno1R7QQ= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\OzdErbSKuvki99B014CByLCdxrk= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\SQQLXZRn0n+7gyCs7yNro6g8BfQ= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\uPdMa8kL2txPhWWkfIrkxUvnVR0= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\uU1d4738FuC3eu52F0QFabDF+dww= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\wfhoO57Z30FjlVObS2ktpUMgNFs= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\y+9lR2+PWy7pazS1NuDd8C7DZ1I= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\zWg2VBCLOjjJOPq0BcIdNF18Qqs= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\NI.UERS_9999_N91S2507\settings.ini Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\NI.UERS_9999_N91S2507\setup.len Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\NI.UWA6P_0001_N91M1807\settings.ini Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\Program Files\Navilog1\reboot.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP111\change.log Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\DEFAULT Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\Internet.evt Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\SOFTWARE Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SYSTEM Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\Temp\Perflib_Perfdata_788.dat Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
I:\Documents and Settings\Morrison\Local Settings\Application Data\Identities\{8BCE63DC-3FDC-422F-A0FF-4E6B64F2BB72}\Microsoft\Outlook Express\Deleted Items.dbx/[From <Barclays@ibank.co.uk>][Date Fri, 21 Apr 2006 19:13:01 +0200]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
I:\Documents and Settings\Morrison\Local Settings\Application Data\Identities\{8BCE63DC-3FDC-422F-A0FF-4E6B64F2BB72}\Microsoft\Outlook Express\Deleted Items.dbx MailMSOutlook5: suspicious - 1 skipped
I:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
I:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP111\change.log Object is locked skipped

Scan process completed.





Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:51:25, on 19/05/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\blueyonder\PCguard\fws.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\ICO.EXE
C:\Program Files\ThinkVantage\AMSG\Amsg.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\PROGRA~1\Lenovo\LENOVO~2\LPMGR.exe
C:\Program Files\IBM ThinkVantage\Client Security Solution\cssauthe.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\WINDOWS\system32\atwtusb.exe
C:\Program Files\blueyonder\PCguard advisor\PCguardadvisor.exe
C:\Program Files\blueyonder\PCguard\Rps.exe
C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\FSRremoS.EXE
C:\Program Files\Windows Media Player\WMPNSCFG.exe
I:\Program Files\WinZip\WZQKPICK.EXE
C:\PENSOFT\fquick32.exe
C:\PENSOFT\Quick95.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe
C:\WINDOWS\system32\Pelmiced.exe
C:\WINDOWS\system32\TBLMOUSE.EXE
C:\Program Files\Google\Google Desktop Search\GoogleDesktopDisplay.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
C:\Program Files\Common Files\Command Software\dvpapi.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\IBM ThinkVantage\Rescue and Recovery\rrservice.exe
C:\Program Files\IBM ThinkVantage\Common\Scheduler\tvtsched.exe
C:\Program Files\IBM ThinkVantage\Common\Logger\logmon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\IBM ThinkVantage\Client Security Solution\pwmgre.exe
C:\PROGRA~1\MICROS~2\Office10\OUTLOOK.EXE
c:\program files\common files\installshield\updateservice\isuspm.exe
c:\Program Files\Common Files\InstallShield\UpdateService\agent.exe
C:\Program Files\iTunes\iTunes.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceHelper.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\distnoted.exe
C:\PROGRA~1\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Mark\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/dispatche ... p=aus&qkw=%s&tbid=60287
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.broadband.blueyonder.co.uk
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60287
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_custo ... TbId=60287
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60287
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_custo ... TbId=60287
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: eBay Toolbar Helper - {22D8E815-4A5E-4DFB-845E-AAB64207F5BD} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: PopKill Class - {3C060EA2-E6A9-4E49-A530-D4657B8C449A} - C:\Program Files\blueyonder\PCguard\pkR.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: ZKBho Class - {56071E0D-C61B-11D3-B41C-00E02927A304} - C:\Program Files\blueyonder\PCguard\FBHR.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: eBay Toolbar - {92085AD4-F48A-450D-BD93-B28CC7DF67CE} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [Mouse Suite 98 Daemon] ICO.EXE
O4 - HKLM\..\Run: [AMSG] C:\Program Files\ThinkVantage\AMSG\Amsg.exe
O4 - HKLM\..\Run: [DiskeeperSystray] "C:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe"
O4 - HKLM\..\Run: [ISUSPM Startup] c:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "c:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [LPManager] C:\PROGRA~1\Lenovo\LENOVO~2\LPMGR.exe
O4 - HKLM\..\Run: [cssauthe] "C:\Program Files\IBM ThinkVantage\Client Security Solution\cssauthe.exe" silent
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [atwtusb] atwtusb.exe beta
O4 - HKLM\..\Run: [PCguardadvisor.exe] "C:\Program Files\blueyonder\PCguard advisor\PCguardadvisor.exe"
O4 - HKLM\..\Run: [PCguard] "C:\Program Files\blueyonder\PCguard\Rps.exe"
O4 - HKLM\..\Run: [eBayToolbar] C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [Uninstall_CToolbar] "C:\DOCUME~1\Mark\LOCALS~1\Temp\CUninst.exe" "/remove"
O4 - Startup: KybtecWcCaller.exe
O4 - Startup: Quick StartUp.lnk = C:\PENSOFT\fquick32.exe
O4 - Startup: Start.lnk = C:\PENSOFT\Quick95.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: WinZip Quick Pick.lnk = I:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: eBay Search - res://C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html
O8 - Extra context menu item: Open in new background tab - res://C:\Program Files\Windows Live Toolbar\Components\en-gb\msntabres.dll.mui/229?69cbbc6e23284756bd56247f9cb92666
O8 - Extra context menu item: Open in new foreground tab - res://C:\Program Files\Windows Live Toolbar\Components\en-gb\msntabres.dll.mui/230?69cbbc6e23284756bd56247f9cb92666
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [JAVA_IBM] Java (IBM)
O14 - IERESET.INF: START_PAGE_URL=http://www.broadband.blueyonder.co.uk
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partne ... nicode.cab
O16 - DPF: {1754A1BA-A1DF-4F10-B199-AA55AA1A120F} (InstallerBehaviorFactory Class) - https://signup.msn.com/pages/MsnInstC.cab
O16 - DPF: {2250C29C-C5E9-4F55-BE4E-01E45A40FCF1} (CMediaMix Object) - http://musicmix.messenger.msn.com/Medialogic.CAB
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/EN-US/a-U ... E_UNO1.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me ... b31267.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan ... asinst.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me ... b56907.cab
O16 - DPF: {CE3409C4-9E26-4F8E-83E4-778498F9E7B4} (PB_Uploader Class) - http://static.photobox.co.uk/sg/common/uploader_uni.cab
O16 - DPF: {D821DC4A-0814-435E-9820-661C543A4679} (CRLDownloadWrapper Class) - http://drmlicense.one.microsoft.com/crl ... crlocx.ocx
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} (GpcContainer Class) - https://performancesoft.webex.com/clien ... eatgpc.cab
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
O23 - Service: DvpApi (dvpapi) - Authentium, Inc. - C:\Program Files\Common Files\Command Software\dvpapi.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: IBM PSA Access Driver Control (PsaSrv) - Unknown owner - (no file)
O23 - Service: PCguard Firewall (RP_FWS) - Radialpoint Inc. - C:\Program Files\blueyonder\PCguard\fws.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: TVT Backup Service - Unknown owner - C:\Program Files\IBM ThinkVantage\Rescue and Recovery\rrservice.exe
O23 - Service: TVT Scheduler - Unknown owner - C:\Program Files\IBM ThinkVantage\Common\Scheduler\tvtsched.exe

--
End of file - 14064 bytes
tamskinner
Member+
 
Posts: 83
Joined: December 31st, 2007, 3:21 am

Re: OneStep search - hjt log, please help!!

Unread postby ndmmxiaomayi » May 19th, 2008, 11:42 pm

Hi,

Kaspersky showed some infections.

If you already have MSNCleaner, please delete this copy and download it again as it's being updated regularly.

  1. Right click here and select Save Target As. Save it to your desktop.
  2. Right click on MsnCleaner.zip and select Extract All....
  3. Click Next on seeing the Welcome to the Compressed (zipped) Folders Extraction Wizard.
  4. Click on the Browse button. Click on Desktop. Then click OK.
  5. Click Next. It will start extracting.
  6. Once done, check (tick) the Show extracted files box and click Finish.
  7. Double click on MSNCleaner.exe to run it. Click on the Analyze button to find a list of files. Once done, click on the Report button. This will open Notepad, please post the contents of this log file in your next reply.

In your next reply, please post:

  1. MSNCleaner report (C:\MSNCleaner\MSNCleaner_date_time.txt, where date_time are numbers)
  2. A new HijackThis log
ndmmxiaomayi
MRU Emeritus
MRU Emeritus
 
Posts: 9708
Joined: July 17th, 2006, 9:22 am

Re: OneStep search - hjt log, please help!!

Unread postby tamskinner » May 20th, 2008, 2:30 am

Hi
Ive installed Microsoft SP3 thismorning.
Log files:


- Logfile MSNCleaner 1.6.3 by http://www.forospyware.com
- Created Logfile: 20/05/2008 on 07:28:20
- Operative System: Windows XP
- Boot mode: Normal
_________________________________________

Detected files: 0
Deleted file: 0
Undeleted Files: 0

<<<<<<< No file found >>>>>>>

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 07:29:27, on 20/05/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\blueyonder\PCguard\fws.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
C:\Program Files\Common Files\Command Software\dvpapi.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\IBM ThinkVantage\Rescue and Recovery\rrservice.exe
C:\Program Files\IBM ThinkVantage\Common\Scheduler\tvtsched.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\IBM ThinkVantage\Common\Logger\logmon.exe
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\ICO.EXE
C:\Program Files\ThinkVantage\AMSG\Amsg.exe
C:\WINDOWS\system32\FSRremoS.EXE
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\PROGRA~1\Lenovo\LENOVO~2\LPMGR.exe
C:\Program Files\IBM ThinkVantage\Client Security Solution\cssauthe.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\WINDOWS\system32\Pelmiced.exe
C:\WINDOWS\system32\atwtusb.exe
C:\Program Files\blueyonder\PCguard advisor\PCguardadvisor.exe
C:\Program Files\blueyonder\PCguard\Rps.exe
C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe
C:\WINDOWS\system32\TBLMOUSE.EXE
C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopDisplay.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
I:\Program Files\WinZip\WZQKPICK.EXE
C:\PENSOFT\fquick32.exe
C:\PENSOFT\Quick95.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\IBM ThinkVantage\Client Security Solution\pwmgre.exe
C:\PROGRA~1\MICROS~2\Office10\OUTLOOK.EXE
C:\PROGRA~1\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Mark\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/dispatche ... p=aus&qkw=%s&tbid=60287
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.broadband.blueyonder.co.uk
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60287
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_custo ... TbId=60287
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60287
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_custo ... TbId=60287
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: eBay Toolbar Helper - {22D8E815-4A5E-4DFB-845E-AAB64207F5BD} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: PopKill Class - {3C060EA2-E6A9-4E49-A530-D4657B8C449A} - C:\Program Files\blueyonder\PCguard\pkR.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: ZKBho Class - {56071E0D-C61B-11D3-B41C-00E02927A304} - C:\Program Files\blueyonder\PCguard\FBHR.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: eBay Toolbar - {92085AD4-F48A-450D-BD93-B28CC7DF67CE} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [Mouse Suite 98 Daemon] ICO.EXE
O4 - HKLM\..\Run: [AMSG] C:\Program Files\ThinkVantage\AMSG\Amsg.exe
O4 - HKLM\..\Run: [DiskeeperSystray] "C:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe"
O4 - HKLM\..\Run: [ISUSPM Startup] c:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "c:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [LPManager] C:\PROGRA~1\Lenovo\LENOVO~2\LPMGR.exe
O4 - HKLM\..\Run: [cssauthe] "C:\Program Files\IBM ThinkVantage\Client Security Solution\cssauthe.exe" silent
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [atwtusb] atwtusb.exe beta
O4 - HKLM\..\Run: [PCguardadvisor.exe] "C:\Program Files\blueyonder\PCguard advisor\PCguardadvisor.exe"
O4 - HKLM\..\Run: [PCguard] "C:\Program Files\blueyonder\PCguard\Rps.exe"
O4 - HKLM\..\Run: [eBayToolbar] C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [Uninstall_CToolbar] "C:\DOCUME~1\Mark\LOCALS~1\Temp\CUninst.exe" "/remove"
O4 - Startup: KybtecWcCaller.exe
O4 - Startup: Quick StartUp.lnk = C:\PENSOFT\fquick32.exe
O4 - Startup: Start.lnk = C:\PENSOFT\Quick95.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: WinZip Quick Pick.lnk = I:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: eBay Search - res://C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html
O8 - Extra context menu item: Open in new background tab - res://C:\Program Files\Windows Live Toolbar\Components\en-gb\msntabres.dll.mui/229?69cbbc6e23284756bd56247f9cb92666
O8 - Extra context menu item: Open in new foreground tab - res://C:\Program Files\Windows Live Toolbar\Components\en-gb\msntabres.dll.mui/230?69cbbc6e23284756bd56247f9cb92666
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [JAVA_IBM] Java (IBM)
O14 - IERESET.INF: START_PAGE_URL=http://www.broadband.blueyonder.co.uk
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partne ... nicode.cab
O16 - DPF: {1754A1BA-A1DF-4F10-B199-AA55AA1A120F} (InstallerBehaviorFactory Class) - https://signup.msn.com/pages/MsnInstC.cab
O16 - DPF: {2250C29C-C5E9-4F55-BE4E-01E45A40FCF1} (CMediaMix Object) - http://musicmix.messenger.msn.com/Medialogic.CAB
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/EN-US/a-U ... E_UNO1.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me ... b31267.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan ... asinst.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me ... b56907.cab
O16 - DPF: {CE3409C4-9E26-4F8E-83E4-778498F9E7B4} (PB_Uploader Class) - http://static.photobox.co.uk/sg/common/uploader_uni.cab
O16 - DPF: {D821DC4A-0814-435E-9820-661C543A4679} (CRLDownloadWrapper Class) - http://drmlicense.one.microsoft.com/crl ... crlocx.ocx
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} (GpcContainer Class) - https://performancesoft.webex.com/clien ... eatgpc.cab
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
O23 - Service: DvpApi (dvpapi) - Authentium, Inc. - C:\Program Files\Common Files\Command Software\dvpapi.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: IBM PSA Access Driver Control (PsaSrv) - Unknown owner - (no file)
O23 - Service: PCguard Firewall (RP_FWS) - Radialpoint Inc. - C:\Program Files\blueyonder\PCguard\fws.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: TVT Backup Service - Unknown owner - C:\Program Files\IBM ThinkVantage\Rescue and Recovery\rrservice.exe
O23 - Service: TVT Scheduler - Unknown owner - C:\Program Files\IBM ThinkVantage\Common\Scheduler\tvtsched.exe

--
End of file - 13681 bytes
tamskinner
Member+
 
Posts: 83
Joined: December 31st, 2007, 3:21 am

Re: OneStep search - hjt log, please help!!

Unread postby tamskinner » May 20th, 2008, 3:32 am

I am away from this computer till friday again, so see you then!
tamskinner
Member+
 
Posts: 83
Joined: December 31st, 2007, 3:21 am

Re: OneStep search - hjt log, please help!!

Unread postby ndmmxiaomayi » May 20th, 2008, 6:52 am

No problems. See you around again. :)

When you return, please do the Kaspersky scan again and post back the results. I want to make certain that the file names aren't the changing type, which can make removal harder.
ndmmxiaomayi
MRU Emeritus
MRU Emeritus
 
Posts: 9708
Joined: July 17th, 2006, 9:22 am
Advertisement
Register to Remove

PreviousNext

  • Similar Topics
    Replies
    Views
    Last post

Return to Infected? Virus, malware, adware, ransomware, oh my!



Who is online

Users browsing this forum: No registered users and 21 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware