Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

MSIE browser (only) hijacked

MalwareRemoval.com provides free support for people with infected computers. Using plain language that anyone can understand, our community of volunteer experts will walk you through each step.

Re: MSIE browser (only) hijacked

Unread postby 'KotaGuy » January 13th, 2008, 1:27 am

Need to do a bit of research into this one. You have 5 system files that have been patched by malware that need to be restored. Do you have your original XP Disc?
User avatar
'KotaGuy
Admin/Teacher Emeritus
 
Posts: 12472
Joined: April 7th, 2005, 7:06 pm
Location: Alberta, Canada
Advertisement
Register to Remove

Re: MSIE browser (only) hijacked

Unread postby 'KotaGuy » January 13th, 2008, 4:18 am

Can you try this for me. Copy/paste the following code box into a new Notepad document.

Code: Select all
@ECHO OFF

copy /y "C:\Windows\System32\dllcache\lsass.exe" "C:\WINDOWS\system32\lsass.exe"
copy /y "C:\Windows\System32\dllcache\services.exe" "C:\WINDOWS\system32\services.exe"
copy /y "C:\Windows\System32\dllcache\spoolsv.exe" "C:\WINDOWS\system32\spoolsv.exe"
copy /y "C:\Windows\System32\dllcache\svchost.exe" "C:\WINDOWS\system32\svchost.exe"
copy /y "C:\Windows\System32\dllcache\winlogon.exe" "C:\WINDOWS\system32\winlogon.exe"


Save it to your Desktop as fixme.bat. Save it as File Type:All Files.

Double click fixme.bat to run it.

Windows may complain a bit about it but let it do what it needs to.

Reboot and do another Kaspersky scan and post the resulting log please.
User avatar
'KotaGuy
Admin/Teacher Emeritus
 
Posts: 12472
Joined: April 7th, 2005, 7:06 pm
Location: Alberta, Canada

Re: MSIE browser (only) hijacked

Unread postby miguelvillafana » January 13th, 2008, 10:19 am

Um, I don't think my folks have the original install disk...

Oh boy, this malware is a b----.

Miguel V.
miguelvillafana
Regular Member
 
Posts: 126
Joined: January 5th, 2008, 8:01 pm

Re: MSIE browser (only) hijacked

Unread postby miguelvillafana » January 13th, 2008, 10:41 am

I created and saved the fixme.bat file, double-clicked it, but nothing happened... Is that supposed to happen?

Did you want me to rebook/redo the online kaspersky scan?

Miguel V.
miguelvillafana
Regular Member
 
Posts: 126
Joined: January 5th, 2008, 8:01 pm

Re: MSIE browser (only) hijacked

Unread postby 'KotaGuy » January 13th, 2008, 5:07 pm

Yes please... do another Kaspersky scan. The batch would have run very quickly so it may seem like it didn't do anything.
User avatar
'KotaGuy
Admin/Teacher Emeritus
 
Posts: 12472
Joined: April 7th, 2005, 7:06 pm
Location: Alberta, Canada

Re: MSIE browser (only) hijacked

Unread postby miguelvillafana » January 13th, 2008, 5:21 pm

by the way, did you want me to keep the fixme.bat file?

Miguel V.
miguelvillafana
Regular Member
 
Posts: 126
Joined: January 5th, 2008, 8:01 pm

Re: MSIE browser (only) hijacked

Unread postby miguelvillafana » January 13th, 2008, 9:01 pm

Kotaguy,

If I can't find the winxp cd for this computer (and you're suggesting that I might need it to replace certain system files), is there anywhere online where I could download clean versions of said files? If not, do you have any other suggestions?

Thanks a lot,

Miguel V.
miguelvillafana
Regular Member
 
Posts: 126
Joined: January 5th, 2008, 8:01 pm

Re: MSIE browser (only) hijacked

Unread postby miguelvillafana » January 13th, 2008, 11:09 pm

Ok, here's the latest Kaspersky report.

Let me know what I should do from here,

Miguel V.

-----

-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Sunday, January 13, 2008 9:41
Operating System: Microsoft Windows XP Home Edition, (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 13/01/2008
Kaspersky Anti-Virus database records: 510223
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
A:\
C:\
D:\
E:\
F:\
G:\

Scan Statistics:
Total number of scanned objects: 57253
Number of viruses found: 2
Number of infected objects: 9
Number of suspicious objects: 0
Duration of the scan process: 01:16:04

Infected Object Name / Virus Name / Last Action
C:\Documents and Settings\All Users\Application Data\Sony Corporation\SonicStage\Packages\MtData.ldb Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Sony Corporation\SonicStage\Packages\MtData.mdb Object is locked skipped
C:\Documents and Settings\BELLA\Application Data\Mozilla\Firefox\Profiles\ienyhy91.default\cert8.db Object is locked skipped
C:\Documents and Settings\BELLA\Application Data\Mozilla\Firefox\Profiles\ienyhy91.default\history.dat Object is locked skipped
C:\Documents and Settings\BELLA\Application Data\Mozilla\Firefox\Profiles\ienyhy91.default\key3.db Object is locked skipped
C:\Documents and Settings\BELLA\Application Data\Mozilla\Firefox\Profiles\ienyhy91.default\parent.lock Object is locked skipped
C:\Documents and Settings\BELLA\Application Data\Mozilla\Firefox\Profiles\ienyhy91.default\search.sqlite Object is locked skipped
C:\Documents and Settings\BELLA\Application Data\Mozilla\Firefox\Profiles\ienyhy91.default\urlclassifier2.sqlite Object is locked skipped
C:\Documents and Settings\BELLA\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\BELLA\Desktop\SmitfraudFix\Reboot.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped
C:\Documents and Settings\BELLA\Desktop\SmitfraudFix.exe/data.rar/SmitfraudFix/Reboot.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped
C:\Documents and Settings\BELLA\Desktop\SmitfraudFix.exe/data.rar Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped
C:\Documents and Settings\BELLA\Desktop\SmitfraudFix.exe RarSFX: infected - 2 skipped
C:\Documents and Settings\BELLA\Local Settings\Application Data\ApplicationHistory\hpqgalry.exe.cf8dd223.ini.inuse Object is locked skipped
C:\Documents and Settings\BELLA\Local Settings\Application Data\HP\Digital Imaging\db\administrativeInfo.dbf Object is locked skipped
C:\Documents and Settings\BELLA\Local Settings\Application Data\HP\Digital Imaging\db\albumImagesTable.cdx Object is locked skipped
C:\Documents and Settings\BELLA\Local Settings\Application Data\HP\Digital Imaging\db\albumImagesTable.dbf Object is locked skipped
C:\Documents and Settings\BELLA\Local Settings\Application Data\HP\Digital Imaging\db\albumTable.cdx Object is locked skipped
C:\Documents and Settings\BELLA\Local Settings\Application Data\HP\Digital Imaging\db\albumTable.dbf Object is locked skipped
C:\Documents and Settings\BELLA\Local Settings\Application Data\HP\Digital Imaging\db\CB_Server_Errors.txt Object is locked skipped
C:\Documents and Settings\BELLA\Local Settings\Application Data\HP\Digital Imaging\db\EXIFTable.cdx Object is locked skipped
C:\Documents and Settings\BELLA\Local Settings\Application Data\HP\Digital Imaging\db\EXIFTable.dbf Object is locked skipped
C:\Documents and Settings\BELLA\Local Settings\Application Data\HP\Digital Imaging\db\imageTable.cdx Object is locked skipped
C:\Documents and Settings\BELLA\Local Settings\Application Data\HP\Digital Imaging\db\imageTable.dbf Object is locked skipped
C:\Documents and Settings\BELLA\Local Settings\Application Data\HP\Digital Imaging\db\imageTable.fpt Object is locked skipped
C:\Documents and Settings\BELLA\Local Settings\Application Data\HP\Digital Imaging\db\keywordImagesTable.cdx Object is locked skipped
C:\Documents and Settings\BELLA\Local Settings\Application Data\HP\Digital Imaging\db\keywordImagesTable.dbf Object is locked skipped
C:\Documents and Settings\BELLA\Local Settings\Application Data\HP\Digital Imaging\db\keywordTable.cdx Object is locked skipped
C:\Documents and Settings\BELLA\Local Settings\Application Data\HP\Digital Imaging\db\keywordTable.dbf Object is locked skipped
C:\Documents and Settings\BELLA\Local Settings\Application Data\HP\Digital Imaging\db\managedFolderTable.dbf Object is locked skipped
C:\Documents and Settings\BELLA\Local Settings\Application Data\HP\Digital Imaging\db\pathnameTable.cdx Object is locked skipped
C:\Documents and Settings\BELLA\Local Settings\Application Data\HP\Digital Imaging\db\pathnameTable.dbf Object is locked skipped
C:\Documents and Settings\BELLA\Local Settings\Application Data\HP\Digital Imaging\db\ROFImagesTable.cdx Object is locked skipped
C:\Documents and Settings\BELLA\Local Settings\Application Data\HP\Digital Imaging\db\ROFImagesTable.dbf Object is locked skipped
C:\Documents and Settings\BELLA\Local Settings\Application Data\HP\Digital Imaging\db\ROFTable.cdx Object is locked skipped
C:\Documents and Settings\BELLA\Local Settings\Application Data\HP\Digital Imaging\db\ROFTable.dbf Object is locked skipped
C:\Documents and Settings\BELLA\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\BELLA\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\BELLA\Local Settings\Application Data\Mozilla\Firefox\Profiles\ienyhy91.default\Cache\_CACHE_001_ Object is locked skipped
C:\Documents and Settings\BELLA\Local Settings\Application Data\Mozilla\Firefox\Profiles\ienyhy91.default\Cache\_CACHE_002_ Object is locked skipped
C:\Documents and Settings\BELLA\Local Settings\Application Data\Mozilla\Firefox\Profiles\ienyhy91.default\Cache\_CACHE_003_ Object is locked skipped
C:\Documents and Settings\BELLA\Local Settings\Application Data\Mozilla\Firefox\Profiles\ienyhy91.default\Cache\_CACHE_MAP_ Object is locked skipped
C:\Documents and Settings\BELLA\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\BELLA\Local Settings\History\History.IE5\MSHist012008011320080114\index.dat Object is locked skipped
C:\Documents and Settings\BELLA\Local Settings\Temp\hpodvd09.log Object is locked skipped
C:\Documents and Settings\BELLA\Local Settings\Temp\~DF718F.tmp Object is locked skipped
C:\Documents and Settings\BELLA\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\BELLA\ntuser.dat Object is locked skipped
C:\Documents and Settings\BELLA\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\System Volume Information\_restore{58E30938-66A1-4D08-9DCD-360CE25B3A88}\RP19\change.log Object is locked skipped
C:\WINDOWS\Debug\oakley.log Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\drivers\fidbox.dat Object is locked skipped
C:\WINDOWS\system32\drivers\fidbox.idx Object is locked skipped
C:\WINDOWS\system32\drivers\fidbox2.dat Object is locked skipped
C:\WINDOWS\system32\drivers\fidbox2.idx Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\lsass.exe Infected: Trojan.Win32.Patched.aa skipped
C:\WINDOWS\system32\services.exe Infected: Trojan.Win32.Patched.aa skipped
C:\WINDOWS\system32\spoolsv.exe Infected: Trojan.Win32.Patched.aa skipped
C:\WINDOWS\system32\svchost.exe Infected: Trojan.Win32.Patched.aa skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\system32\winlogon.exe Infected: Trojan.Win32.Patched.aa skipped
C:\WINDOWS\Temp\JETFA9C.tmp Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\1394bus.sys Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\61883.sys Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\6to4svc.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ac97ali.sys Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ac97via.sys Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\acgenral.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\aclayers.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\aclua.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\acpi.sys Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\acspecfc.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\activ.htm Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\activsvc.htm Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\actlan.htm Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\actshell.htm Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\acverfyr.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\acxtrnal.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\adeskerr.htm Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\admin.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\admin.exe Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\admjoy.sys Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\adsldp.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\adsldpc.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\adsmsext.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\adsnt.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\advapi32.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\advpack.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\aec.sys Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\afd.sys Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ahui.exe Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\alg.exe Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\amdk6.sys Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\amdk7.sys Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\an983.sys Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\apphelp.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\apphelp.sdb Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\apps.chm Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\appwiz.cpl Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\arial.ttf Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\arp1394.sys Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\asctrls.ocx Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\asferror.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\asfsipc.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\asms\10100\msft\windows\gdiplus\gdiplus.cat Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\asms\10100\msft\windows\gdiplus\gdiplus.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\asms\10100\msft\windows\gdiplus\gdiplus.man Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\asms\10100\policy\msft\windows\gdiplus\gdiplus.cat Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\asms\10100\policy\msft\windows\gdiplus\gdiplus.man Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\asms\60100\msft\windows\common\controls\comctl32.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\asms\60100\msft\windows\common\controls\controls.cat Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\asms\60100\msft\windows\common\controls\controls.man Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\asms\60100\policy\60100\comctl\comctl.cat Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\asms\60100\policy\60100\comctl\comctl.man Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\asms\70100\msft\windows\mswincrt\msvcirt.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\asms\70100\msft\windows\mswincrt\msvcrt.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\asms\70100\msft\windows\mswincrt\mswincrt.cat Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\asms\70100\msft\windows\mswincrt\mswincrt.man Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\asms\70100\policy\msft\mswincrt\mswincrt.cat Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\asms\70100\policy\msft\mswincrt\mswincrt.man Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\at.exe Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\atapi.sys Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ati2dvaa.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ati2dvag.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ati2mtaa.sys Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ati2mtag.sys Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ati3d1ag.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ati3d2ag.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\atinbtxx.sys Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\atinmdxx.sys Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\atinpdxx.sys Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\atinraxx.sys Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\atinrvxx.sys Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\atinsnxx.sys Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\atinttxx.sys Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\atintuxx.sys Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\atinxbxx.sys Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\atinxsxx.sys Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\atiradn1.inf Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ativdaxx.ax Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ativmvxx.ax Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\atl.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\atmlane.sys Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\audiosrv.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\author.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\author.exe Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\autochk.exe Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\autolfn.exe Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\auupdate.exe Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\avc.sys Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\avifil32.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\basesrv.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\batt.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\bridge.sys Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\browselc.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\browser.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\browseui.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\browsewm.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\cabinet.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\callcont.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\catsrvut.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ccdecode.sys Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\cdfs.sys Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\cdm.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\cdrom.sys Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\certcli.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\cewmdm.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\cfgbkend.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\cfgwiz.exe Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\cimwin32.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ciodm.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\classpnp.sys Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\clipbrd.exe Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\clusapi.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\cmbatt.sys Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\cmdial32.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\cmdl32.exe Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\comadmin.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\comctl32.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\comdlg32.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\compatui.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\comsvcs.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\conf.exe Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\conime.exe Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\copymar.exe Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\courtney.acs Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\credui.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\crusoe.sys Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\crypt32.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\cryptdlg.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\cryptsvc.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\cryptui.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\cscui.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\csrsrv.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ctfmon.exe Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\custdial.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\d3d8.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\danim.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\dbghelp.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\dbmsadsn.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\dbmsrpcn.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\dbmsvinn.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\dbnetlib.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\dbnmpntw.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\dcache.bin Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\dcap32.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ddraw.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\defrag.exe Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\desk.cpl Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\devmgr.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\dfrgfat.exe Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\dfrgntfs.exe Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\dfrgsnap.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\dfrgui.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\dfsshlex.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\dgnet.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\dhcpcsvc.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\dhtmled.ocx Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\digest.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\dinput.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\dinput8.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\disk.sys Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\diskdump.sys Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\dlimport.exe Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\dmband.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\dmcompos.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\dmime.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\dmloader.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\dmscript.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\dmstyle.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\dmusic.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\dnsapi.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\docprop2.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\download\lang\imjp81.ime._p Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\dpnet.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\dpnhpast.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\dpnhupnp.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\dpvoice.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\dpvsetup.exe Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\dpwsockx.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\drmclien.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\drmk.sys Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\drmkaud.sys Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\drmstor.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\drmv2clt.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\drvmain.sdb Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ds32gt.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\dshowext.ax Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\dsprop.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\dsquery.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\dssenh.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\dumprep.exe Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\duser.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\dw.exe Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\dwwin.exe Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\dxdiag.exe Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\dxg.sys Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\dxmasf.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\dxmrtp.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\dxtmsft.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\dxtrans.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\earl.acs Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\els.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ersvc.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\es.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\esscli.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\essm2e.sys Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\eudcedit.exe Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\eventlog.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\evntrprv.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\explorer.exe Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\expsrv.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\fastfat.sys Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\fastprox.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\faultrep.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\filelist.xml Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\fldrclnr.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\flpydisk.sys Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\fontview.exe Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\fp4.cat Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\fp40ext.cab Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\fp40ext.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\fp40ext.inf Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\fp4amsft.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\fp4anscp.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\fp4apws.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\fp4areg.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\fp4atxt.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\fp4avnb.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\fp4avss.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\fp4awebs.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\fp4awel.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\fp98sadm.exe Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\fp98swin.exe Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\fpadmcgi.exe Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\fpadmdll.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\fpcount.exe Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\fpencode.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\fpexedll.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\fpmmc.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\fpmmcsat.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\fpremadm.exe Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\fpsrvadm.exe Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\framebuf.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ftp.exe Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\fxsapi.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\fxsclnt.exe Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\fxscomex.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\fxscover.exe Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\fxsdrv.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\fxsext32.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\fxsocm.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\fxsocm.inf Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\fxsperf.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\fxsres.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\fxsst.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\fxssvc.exe Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\fxst30.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\fxstiff.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\fxsui.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\fxswzrd.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\fxsxp32.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\g400.inf Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\gameenum.sys Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\gckernel.sys Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\gdi32.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\georgia.ttf Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\guitrn.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\guitrn_a.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\h323cc.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\hal.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\halaacpi.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\halacpi.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\halapic.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\halmacpi.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\halmps.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\hccoin.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\helpctr.exe Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\helpsvc.exe Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\hhctrl.ocx Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\hhsetup.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\hidclass.sys Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\hidir.sys Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\hidserv.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\highcont.mar Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\hmmapi.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\hnetcfg.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\homepage.inf Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\i8042prt.sys Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ic\acpi.inf Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ic\au.inf Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ic\battery.inf Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ic\bda.inf Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ic\cdrom.inf Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ic\cpu.inf Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ic\disk.inf Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ic\dpcdll.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ic\dpup.inf Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ic\drvindex.inf Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ic\hiddigi.inf Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ic\hidserv.inf Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ic\ie.inf Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ic\ieaccess.inf Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ic\iis.inf Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ic\ims.inf Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ic\input.inf Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ic\intl.inf Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ic\keyboard.inf Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ic\kscaptur.inf Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ic\layout.inf Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ic\miscp.chm Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ic\mshdc.inf Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ic\msoe50.inf Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ic\netip6.inf Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ic\netoc.inf Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ic\netrass.inf Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ic\nt5inf.cat Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ic\ntprint.inf Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ic\pchealth.inf Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ic\pidgen.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ic\pnpscsi.inf Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ic\scsi.inf Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ic\swflash.inf Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ic\sysoc.inf Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ic\syssetup.inf Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ic\tape.inf Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ic\tsoc.inf Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ic\usbport.inf Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ic\whatnewp.chm Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\icaapi.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\icm32.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\icsmgr.js Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\icwconn1.exe Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\idq.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ie4uinit.exe Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ieakeng.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ieaksie.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\iedkcs32.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\iepeers.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\iesetup.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ieuinit.inf Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\iexplore.exe Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\iis.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ils.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\imaadp32.acm Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\imagehlp.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\imapi.exe Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\imapi.sys Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\imeshare.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\imgutil.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\imm32.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\inetcomm.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\inetcpl.cpl Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\input.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\inseng.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\instcat.sql Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\intelide.sys Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\intl.cpl Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ipconfig.exe Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\iphlpapi.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ipnat.sys Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ipnathlp.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ippromon.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ipp_0001.asp Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ipp_0002.asp Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ipp_0004.asp Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ipp_0006.asp Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ipp_0013.asp Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ipp_0014.asp Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ipp_util.inc Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ipsec.sys Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ipsecsvc.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ipv6.exe Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ipv6mon.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\irbus.sys Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\irmon.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\itircl.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\itss.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\iuctl.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\iuengine.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ixsso.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\joy.cpl Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\kbdclass.sys Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\kd1394.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\kerberos.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\kernel32.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\keyboard.sys Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\kmixer.sys Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ks.sys Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\ksxbar.ax Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\l3codeca.acm Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\lang\chajei.ime Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\lang\chtmbx.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\lang\chtskdic.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\lang\chtskf.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\lang\cintime.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\lang\cintlgnt.ime Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\lang\cintsetp.exe Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\lang\cplexe.exe Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\lang\dayi.ime Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\lang\imekr61.ime Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\lang\imekrcic.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\lang\pintlgl.imd Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\licdll.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\licwmi.mfl Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\lvback.gif Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\mailtmpl.txt Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\msdtctr.mof Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\mstsc.chm Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\new\logo.gif Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\new\logowin.gif Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\new\rtcimsp.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\new\secupd.dat Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\new\secupd.sig Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\new\wuauhelp.chm Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\newalert.wav Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\newemail.wav Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\online.wav Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\readmesp.htm Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\secdrv.sys Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\spmsg.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\spuninst.exe Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\tagfile.1 Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\type.wav Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\update\eula.txt Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\update\sp1.cat Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\update\spcustom.dll Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\update\update.exe Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\update\update.inf Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\update\update.url Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\update\update.ver Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\winxp_logo_horiz_sm.gif Object is locked skipped
D:\a89e4fc942557cdc3fccf195648ef061\xenroll.dll Object is locked skipped
D:\c3a337362af89d526c3112d8\msxml4-KB927978-enu.log Object is locked skipped
D:\System Volume Information\_restore{58E30938-66A1-4D08-9DCD-360CE25B3A88}\RP19\change.log Object is locked skipped

Scan process completed.
miguelvillafana
Regular Member
 
Posts: 126
Joined: January 5th, 2008, 8:01 pm

Re: MSIE browser (only) hijacked

Unread postby 'KotaGuy » January 14th, 2008, 10:24 am

Hmmm.... they are still being flagged. Will get back to you as soon as I can. I'm at work right no so it may not be till later today.
User avatar
'KotaGuy
Admin/Teacher Emeritus
 
Posts: 12472
Joined: April 7th, 2005, 7:06 pm
Location: Alberta, Canada

Re: MSIE browser (only) hijacked

Unread postby 'KotaGuy » January 15th, 2008, 9:40 am

Still looking into this. I apologize for not being able to get back to you last night. My Wife is sick so I needed to take care of our 3mo old twins.

Will get back to you on this as soon as I can.
User avatar
'KotaGuy
Admin/Teacher Emeritus
 
Posts: 12472
Joined: April 7th, 2005, 7:06 pm
Location: Alberta, Canada

Re: MSIE browser (only) hijacked

Unread postby miguelvillafana » January 15th, 2008, 11:02 am

My parents' computer will live. Take care of your family first, Kotaguy!

Miguel V.
miguelvillafana
Regular Member
 
Posts: 126
Joined: January 5th, 2008, 8:01 pm

Re: MSIE browser (only) hijacked

Unread postby 'KotaGuy » January 17th, 2008, 9:59 am

Is there an I386 folder present on the C:\ Drive?
User avatar
'KotaGuy
Admin/Teacher Emeritus
 
Posts: 12472
Joined: April 7th, 2005, 7:06 pm
Location: Alberta, Canada

Re: MSIE browser (only) hijacked

Unread postby miguelvillafana » January 17th, 2008, 10:38 am

Hi Kotaguy,

I hope your wife is better--

By the way, I just got the SP2 cd, and finished doing about 5 hours' worth of updating to this computer.

And yes, I searched for "I386", and came up with 8 hits:

c:\windows
c:\windows\drivers cache
c:\windows\service pack files
C:\Program Files\Java\jre1.6.0_03\lib
C:\WINDOWS\system32\ReinstallBackups\0002\DriverFiles
C:\WINDOWS\system32\ReinstallBackups\0004\DriverFiles
C:\WINDOWS\SoftwareDistribution\Download\16b2c96a0c41f4dfdb4d3cc228a4f819\root\cmpnents\tabletpc
lib/ (?)

Let me know what's up, it's good to hear from you!

Miguel V.
miguelvillafana
Regular Member
 
Posts: 126
Joined: January 5th, 2008, 8:01 pm

Re: MSIE browser (only) hijacked

Unread postby 'KotaGuy » January 17th, 2008, 10:59 am

Wife is feeling a bit better... but she's lost her voice now. Thats not such a bad thing though :D

When you did your search... did you use an L or an I... the folder is i386. Not L386. If you open up My Computer... and double click on the C:\ drive... the folder should be there with the other folders.

Let me know if you can see it.

Good to hear you got the SP2 CD and did the updates. That may help us a bit.
User avatar
'KotaGuy
Admin/Teacher Emeritus
 
Posts: 12472
Joined: April 7th, 2005, 7:06 pm
Location: Alberta, Canada

Re: MSIE browser (only) hijacked

Unread postby miguelvillafana » January 17th, 2008, 2:11 pm

Hi Kotaguy,

Yes, it took FOREVER to update this computer, and it seems to be running a little better...

I did search for "i386", the first place I saw it, as noted in the search window was C:\Windows

Miguel V.
miguelvillafana
Regular Member
 
Posts: 126
Joined: January 5th, 2008, 8:01 pm
Advertisement
Register to Remove

PreviousNext

  • Similar Topics
    Replies
    Views
    Last post

Return to Infected? Virus, malware, adware, ransomware, oh my!



Who is online

Users browsing this forum: No registered users and 328 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware