Malware Removal Forums

Log file

113 min read

tamskinner

December 31, 2007, 10:22 AM UTC

Hi
registered this morning. Have got sick of pop ups, multiple copies of IE opening up etc. I use the automated blueyonder security system, but have run your recommmended scans. Adaware crashed a couple of times, sio havent managed to complete that. Below is the log for the HJT scan. What doI need to do next?
Many thanks, and compliments of the season!

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:17:48, on 31/12/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\blueyonder\PCguard\fws.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\ICO.EXE
C:\Program Files\ThinkVantage\AMSG\Amsg.exe
C:\WINDOWS\system32\FSRremoS.EXE
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\PROGRA~1\Lenovo\LENOVO~2\LPMGR.exe
C:\Program Files\IBM ThinkVantage\Client Security Solution\cssauthe.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\WINDOWS\system32\atwtusb.exe
C:\Program Files\blueyonder\PCguard advisor\PCguardadvisor.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\Pelmiced.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\SightSpeed\SightSpeed.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopDisplay.exe
C:\WINDOWS\system32\TBLMOUSE.EXE
I:\Program Files\WinZip\WZQKPICK.EXE
C:\PENSOFT\fquick32.exe
C:\PENSOFT\Quick95.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
C:\Program Files\Common Files\Command Software\dvpapi.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\IBM ThinkVantage\Rescue and Recovery\rrservice.exe
C:\Program Files\IBM ThinkVantage\Common\Scheduler\tvtsched.exe
C:\Program Files\ThinkVantage\SystemUpdate\UCLauncherService.exe
C:\Program Files\IBM ThinkVantage\Common\Logger\logmon.exe
C:\Program Files\IBM ThinkVantage\Client Security Solution\pwmgre.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Java\jre1.5.0_11\bin\jucheck.exe
C:\hijackthis\HijackThis.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\blueyonder\PCguard\Rps.exe
C:\PROGRA~1\MICROS~2\Office10\OUTLOOK.EXE
C:\Program Files\TrojanHunter 5.0\THGuard.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.broadband.blueyonder.co.uk
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by blueyonder
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: eBay Toolbar Helper - {22D8E815-4A5E-4DFB-845E-AAB64207F5BD} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll
O2 - BHO: PopKill Class - {3C060EA2-E6A9-4E49-A530-D4657B8C449A} - C:\Program Files\blueyonder\PCguard\pkR.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: ZKBho Class - {56071E0D-C61B-11D3-B41C-00E02927A304} - C:\Program Files\blueyonder\PCguard\FBHR.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: eBay Toolbar - {92085AD4-F48A-450D-BD93-B28CC7DF67CE} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [Mixersel] C:\WINDOWS\temp\mixersel.exe
O4 - HKLM\..\Run: [Mouse Suite 98 Daemon] ICO.EXE
O4 - HKLM\..\Run: [AMSG] C:\Program Files\ThinkVantage\AMSG\Amsg.exe
O4 - HKLM\..\Run: [suScheduler] C:\Program Files\ThinkVantage\SystemUpdate\UCLauncher.exe /SCHEDULER
O4 - HKLM\..\Run: [DiskeeperSystray] "C:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe"
O4 - HKLM\..\Run: [ISUSPM Startup] c:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "c:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [LPManager] C:\PROGRA~1\Lenovo\LENOVO~2\LPMGR.exe
O4 - HKLM\..\Run: [cssauthe] "C:\Program Files\IBM ThinkVantage\Client Security Solution\cssauthe.exe" silent
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [atwtusb] atwtusb.exe beta
O4 - HKLM\..\Run: [PCguardadvisor.exe] "C:\Program Files\blueyonder\PCguard advisor\PCguardadvisor.exe"
O4 - HKLM\..\Run: [PCguard] "C:\Program Files\blueyonder\PCguard\Rps.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
O4 - HKLM\..\Run: [eBayToolbar] C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe
O4 - HKLM\..\Run: [Part browse safe hold] C:\Documents and Settings\All Users\Application Data\Audio 4 part browse\Seek kind.exe
O4 - HKLM\..\Run: [HotbarOE] C:\Program Files\Hotbar\bin\10.0.368.0\OEAddOn.exe
O4 - HKLM\..\Run: [HotbarSA] "C:\Program Files\Hotbar\bin\10.0.368.0\HotbarSA.exe"
O4 - HKLM\..\Run: [trioService] "C:\PROGRA~1\Freeze.com\Living 3D Dolphins\trioService.exe "
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKLM\..\RunOnce: [Spybot - Search & Destroy] "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" /autocheck
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Startup: KybtecWcCaller.exe
O4 - Startup: Quick StartUp.lnk = C:\PENSOFT\fquick32.exe
O4 - Startup: Start.lnk = C:\PENSOFT\Quick95.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: WinZip Quick Pick.lnk = I:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: &Search - ?p=ZCxdm491KOGB
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: eBay Search - res://C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html
O8 - Extra context menu item: Open in new background tab - res://C:\Program Files\Windows Live Toolbar\Components\en-gb\msntabres.dll.mui/229?69cbbc6e23284756bd56247f9cb92666
O8 - Extra context menu item: Open in new foreground tab - res://C:\Program Files\Windows Live Toolbar\Components\en-gb\msntabres.dll.mui/230?69cbbc6e23284756bd56247f9cb92666
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [JAVA_IBM] Java (IBM)
O14 - IERESET.INF: START_PAGE_URL=http://www.broadband.blueyonder.co.uk
O16 - DPF: {1754A1BA-A1DF-4F10-B199-AA55AA1A120F} (InstallerBehaviorFactory Class) - https://signup.msn.com/pages/MsnInstC.cab
O16 - DPF: {2250C29C-C5E9-4F55-BE4E-01E45A40FCF1} (CMediaMix Object) - http://musicmix.messenger.msn.com/Medialogic.CAB
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/EN-US/a-UNO1/GAME_UNO1.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan ... asinst.cab
O16 - DPF: {AF2E62B6-F9E1-4D4F-A10A-9DC8E6DCBCC0} (VideoEgg ActiveX Loader) - http://update.videoegg.com/Install/Windows/Initial/VideoEggPublisher.exe
O16 - DPF: {B64F4A7C-97C9-11DA-8BDE-F66BAD1E3F3A} - http://locator1.cdn.imagesrvr.com/sites ... nstall.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {CE3409C4-9E26-4F8E-83E4-778498F9E7B4} (PB_Uploader Class) - http://static.photobox.co.uk/sg/common/uploader_uni.cab
O16 - DPF: {D821DC4A-0814-435E-9820-661C543A4679} (CRLDownloadWrapper Class) - http://drmlicense.one.microsoft.com/crlupdate/en/crlocx.ocx
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} (GpcContainer Class) - https://performancesoft.webex.com/client/T25L/webex/ieatgpc.cab
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
O23 - Service: DvpApi (dvpapi) - Authentium, Inc. - C:\Program Files\Common Files\Command Software\dvpapi.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: IBM PSA Access Driver Control (PsaSrv) - Unknown owner - (no file)
O23 - Service: PCguard Firewall (RP_FWS) - Radialpoint Inc. - C:\Program Files\blueyonder\PCguard\fws.exe
O23 - Service: TVT Backup Service - Unknown owner - C:\Program Files\IBM ThinkVantage\Rescue and Recovery\rrservice.exe
O23 - Service: TVT Scheduler - Unknown owner - C:\Program Files\IBM ThinkVantage\Common\Scheduler\tvtsched.exe
O23 - Service: ThinkVantage System Update (UCLauncherService) - Unknown owner - C:\Program Files\ThinkVantage\SystemUpdate\UCLauncherService.exe

--
End of file - 13719 bytes

Katana

January 4, 2008, 2:36 AM UTC

Hello and welcome to the forums

My name is Katana and I will be helping you to remove any infection(s) that you may have.

Please observe these rules while we work:
1. If you don't know, stop and ask! Don't keep going on.
2. Please reply to this thread. Do not start a new topic.
3. Please continue to respond until I give you the "All Clear"
(Just because you can't see a problem doesn't mean it isn't there)

If you can do those three things, everything should go smoothly

Disable Teatimer
First step:

Right-click the Spybot Icon in the System Tray (looks like a blue/white calendar with a padlock symbol)
If you have the new version 1.5, Click once on Resident Protection, then Right click the Spybot icon again and make sure Resident Protection is now Unchecked. The Spybot icon in the System tray should now be now colorless.
If you have Version 1.4, Click on Exit Spybot S&D Resident

Second step, For Either Version :

Open Spybot S&D
Click Mode, choose Advanced Mode
Go To the bottom of the Vertical Panel on the Left, Click Tools
then, also in left panel, click Resident shows a red/white shield.
If your firewall raises a question, say OK
In the Resident protection status frame, Uncheck the box labeled Resident "Tea-Timer"(Protection of over-all system settings) active
OK any prompts.
Use File, Exit to terminate Spybot
Reboot your machine for the changes to take effect.

Download and Run ComboFix

Download Combofix from one of the links below :

ComboFix.exe 1
ComboFix.exe 2
ComboFix.exe 3
You must download it to and run it from your Desktop
Now STOP all your monitoring programs (Antivirus/Antispyware, Guards and Shields) as they could easily interfere with ComboFix.
Double click combofix.exe & follow the prompts.
When finished, it will produce a log. Please save that log to post in your next reply along with a fresh HJT log
Re-enable all the programs that were disabled during the running of ComboFix..

Note:
Do not mouse-click combofix's window while it is running. That may cause it to stall.

CF disconnects your machine from the internet. The connection is automatically restored before CF completes its run. If CF runs into difficulty and terminates prematurely, the connection can be manually restored by restarting your machine.
ComboFix SHOULD NOT be used unless requested by a forum helper

tamskinner

January 4, 2008, 7:48 AM UTC

Many thanks Katana: Combifix file:

ComboFix 08-01-04.1 - Mark 2008-01-04 7:30:19.2 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.899 [GMT 0:00]
Running from: C:\Documents and Settings\[removed]\Desktop\ComboFix.exe
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
---- Previous Run -------
.
C:\Documents and Settings\All Users\Application Data\HotbarSA
C:\Documents and Settings\All Users\Application Data\HotbarSA\HotbarSA.dat
C:\Documents and Settings\All Users\Application Data\HotbarSA\HotbarSAAbout.mht
C:\Documents and Settings\All Users\Application Data\HotbarSA\HotbarSAEULA.mht
C:\Documents and Settings\Chloe\Application Data\FunWebProducts
C:\Documents and Settings\Chloe\Application Data\FunWebProducts\Data\Chloe\avatar.dat
C:\Documents and Settings\Chloe\Application Data\FunWebProducts\Data\Chloe\zbucks.dat
C:\Documents and Settings\Mark\Application Data\macromedia\Flash Player\#SharedObjects\2S25NUXU\iforex.com
C:\Documents and Settings\Mark\Application Data\macromedia\Flash Player\#SharedObjects\2S25NUXU\iforex.com\Emerp\Events\flash_object.swf\user_data.sol
C:\Documents and Settings\Mark\Application Data\macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#iforex.com
C:\Documents and Settings\Mark\Application Data\macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#iforex.com\settings.sol
C:\Documents and Settings\Mark\Application Data\setup_en[1].exe
C:\Documents and Settings\Mark\err.log
C:\Documents and Settings\Matthew\err.log
C:\Documents and Settings\Matthew\Start Menu\Programs\InternetGameBox
C:\Documents and Settings\Matthew\Start Menu\Programs\InternetGameBox\InternetGameBox.lnk
C:\Documents and Settings\Matthew\Start Menu\Programs\InternetGameBox\Website.lnk
C:\Program Files\internetgamebox
C:\Program Files\internetgamebox\InternetGameBox.exe
C:\Program Files\internetgamebox\InternetGameBox.url
C:\Program Files\internetgamebox\ressources\AttenteOff.html
C:\Program Files\internetgamebox\ressources\AttenteOn.html
C:\Program Files\internetgamebox\ressources\config_en.xml
C:\Program Files\internetgamebox\ressources\config_fr.xml
C:\Program Files\internetgamebox\ressources\favoris\default.swf
C:\Program Files\internetgamebox\skins\default.skn
C:\WINDOWS\system32\unxjmopt_navtmp.dat
c:\WINDOWS\system32\xebyhnu.dat
c:\windows\system32\xebyhnu.exe
C:\WINDOWS\system32\xebyhnu_nav.dat
c:\WINDOWS\system32\xebyhnu_navps.dat

.
((((((((((((((((((((((((( Files Created from 2007-12-04 to 2008-01-04 )))))))))))))))))))))))))))))))
.

2008-01-04 07:13 . 2000-08-31 08:00 51,200 --a------ C:\WINDOWS\NirCmd.exe
2007-12-31 15:44 . 2008-01-02 15:35 54,156 --ah----- C:\WINDOWS\QTFont.qfn
2007-12-31 15:44 . 2007-12-31 15:44 1,409 --a------ C:\WINDOWS\QTFont.for
2007-12-31 11:17 . 2007-12-31 11:17 1,158 --a------ C:\WINDOWS\mozver.dat
2007-12-31 10:17 . 2007-12-31 10:17 <DIR> d-------- C:\Documents and Settings\Mark\Application Data\TrojanHunter
2007-12-31 09:09 . 2007-12-31 09:09 <DIR> d-------- C:\Program Files\TrojanHunter 5.0
2007-12-31 08:24 . 2007-12-31 08:24 <DIR> d-------- C:\Program Files\Lavasoft
2007-12-31 08:24 . 2007-12-31 08:24 <DIR> d----c--- C:\Documents and Settings\All Users\Application Data\Lavasoft
2007-12-31 08:23 . 2007-12-31 08:23 <DIR> d-------- C:\Program Files\Common Files\Wise Installation Wizard
2007-12-31 07:46 . 2007-12-31 08:18 <DIR> d----c--- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2007-12-31 07:41 . 2007-12-31 10:25 <DIR> d----c--- C:\hijackthis
2007-12-30 10:38 . 2007-12-30 13:03 <DIR> d-------- C:\WINDOWS\system32\ActiveScan
2007-12-30 10:38 . 2007-12-30 10:38 30,590 --a------ C:\WINDOWS\system32\pavas.ico
2007-12-30 10:38 . 2007-12-30 10:38 2,550 --a------ C:\WINDOWS\system32\Uninstall.ico
2007-12-30 10:38 . 2007-12-30 10:38 1,406 --a------ C:\WINDOWS\system32\Help.ico
2007-12-30 09:44 . 2007-12-30 09:44 <DIR> d-------- C:\Program Files\XoftSpySE
2007-12-29 16:23 . 2007-12-29 16:23 0 --a------ C:\WINDOWS\nsreg.dat
2007-12-28 16:09 . 2007-12-28 16:11 8 --a------ C:\WINDOWS\system32\nvModes.dat
2007-12-28 16:07 . 2007-12-28 16:07 <DIR> d----c--- C:\Documents and Settings\All Users\Application Data\nView_Profiles
2007-12-28 16:04 . 2007-12-28 16:06 <DIR> d-------- C:\WINDOWS\nview
2007-12-28 16:04 . 2007-04-19 05:26 208,896 --a------ C:\WINDOWS\system32\nvudisp.exe
2007-12-28 16:04 . 2008-01-04 07:27 88,723 --a------ C:\WINDOWS\system32\nvapps.xml
2007-12-28 16:04 . 2007-04-19 05:26 17,056 --a------ C:\WINDOWS\system32\nvdisp.nvu
2007-12-28 16:03 . 2007-04-19 14:14 208,896 --a------ C:\WINDOWS\system32\NVUNINST.EXE
2007-12-11 10:57 . 2007-12-11 10:57 65,536 --a------ C:\WINDOWS\system32\QuickTimeVR.qtx
2007-12-11 10:57 . 2007-12-11 10:57 49,152 --a------ C:\WINDOWS\system32\QuickTime.qts
2007-12-08 08:12 . 2007-12-08 08:12 <DIR> d-------- C:\Program Files\LimeWire
2007-12-05 09:12 . 2007-12-05 09:12 <DIR> d-------- C:\Documents and Settings\Mark\Application Data\webex
2007-12-05 09:12 . 2007-12-05 09:12 202,827 --a------ C:\WINDOWS\system32\atasnt40.dll
2007-12-05 09:12 . 2007-12-05 09:12 51,304 --a------ C:\WINDOWS\system32\drivers\atnt40k.sys

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-12-31 08:17 --------- d-----w C:\Program Files\Free Offers from Freeze.com
2007-12-30 11:39 --------- d-----w C:\Program Files\Windows Live Toolbar
2007-12-30 11:34 --------- d-----w C:\Program Files\SightSpeed
2007-12-30 11:33 --------- d-----w C:\Program Files\Picasa2
2007-12-30 11:30 --------- d-----w C:\Program Files\iTunes
2007-12-30 11:26 --------- d-----w C:\Program Files\Google
2007-12-30 11:24 --------- d-----w C:\Program Files\Common Files\PestPatrol
2007-12-30 11:24 --------- d-----w C:\Program Files\Common Files\Command Software
2007-12-30 10:30 --------- d--h--w C:\Program Files\InstallShield Installation Information
2007-12-30 10:30 --------- d-----w C:\Program Files\EPSON
2007-12-30 10:26 --------- d-----w C:\Program Files\Freeze.com Toolbar
2007-12-30 10:22 --------- d-----w C:\Program Files\Messenger Plus! Live
2007-12-30 10:19 --------- d-----w C:\Program Files\MonkeyBongo
2007-12-30 10:12 --------- d-----w C:\Program Files\MSN Messenger
2007-12-30 07:07 5,427 ----a-w C:\WINDOWS\system32\EGATHDRV.SYS
2007-12-28 18:48 --------- d-----w C:\Documents and Settings\Mark\Application Data\LimeWire
2007-12-26 10:42 --------- d-----w C:\Program Files\QuickTime
2007-12-23 18:22 --------- d-----w C:\Documents and Settings\All Users\Application Data\WholeSecurity
2007-12-17 20:40 --------- d-----w C:\Program Files\Canon
2007-12-15 07:31 --------- d-----w C:\Documents and Settings\Mark\Application Data\eBay
2007-12-02 00:58 --------- d-----w C:\Program Files\OneStepSearch
2007-12-01 09:00 --------- dc----w C:\Documents and Settings\All Users\Application Data\Winferno
2007-12-01 08:38 --------- d-----w C:\Program Files\Freeze.com
2007-12-01 08:26 --------- dc----w C:\Documents and Settings\All Users\Application Data\Yahoo! Companion
2007-12-01 08:24 118,784 ----a-w C:\WINDOWS\Web\Wallpaper\Whales and Dolphins Wallpaper #1 dir\uninstall.exe
2007-12-01 08:24 --------- d-----w C:\Program Files\Winferno
2007-12-01 08:16 --------- dc----w C:\Documents and Settings\All Users\Application Data\Audio 4 part browse
2007-12-01 08:16 --------- d-----w C:\Program Files\Joy Long Test
2007-11-26 13:16 --------- d-----w C:\Program Files\CandleWorks
2007-11-23 18:11 --------- d-----w C:\Program Files\FxClub
2007-11-23 16:06 --------- d-----w C:\Program Files\Kybtec Software
2007-11-23 16:06 --------- d-----w C:\Documents and Settings\Mark\Application Data\MipKukSoft
2007-11-23 16:06 --------- d-----w C:\Documents and Settings\Mark\Application Data\Kybtec Software
2007-11-23 16:05 --------- dc----w C:\Documents and Settings\All Users\Application Data\MipKukSoft
2007-11-13 10:25 20,480 ------w C:\WINDOWS\system32\drivers\secdrv.sys
2007-11-12 14:24 --------- d-----w C:\Program Files\MetaTrader 4
2007-11-05 20:08 --------- d-----w C:\Documents and Settings\Chloe\Application Data\eBay
2007-10-30 23:42 3,590,656 ------w C:\WINDOWS\system32\dllcache\mshtml.dll
2007-10-29 22:43 1,287,680 ------w C:\WINDOWS\system32\quartz.dll
2007-10-29 22:43 1,287,680 ------w C:\WINDOWS\system32\dllcache\quartz.dll
2007-10-27 17:40 222,720 ------w C:\WINDOWS\system32\wmasf.dll
2007-10-27 17:40 222,720 ------w C:\WINDOWS\system32\dllcache\wmasf.dll
2007-10-26 03:34 8,460,288 ----a-w C:\WINDOWS\system32\dllcache\shell32.dll
2007-10-10 23:56 824,832 ------w C:\WINDOWS\system32\dllcache\wininet.dll
2007-10-10 23:56 232,960 ------w C:\WINDOWS\system32\dllcache\webcheck.dll
2007-10-10 23:56 1,159,680 ------w C:\WINDOWS\system32\dllcache\urlmon.dll
2007-10-10 23:55 671,232 ------w C:\WINDOWS\system32\dllcache\mstime.dll
2007-10-10 23:55 63,488 ------w C:\WINDOWS\system32\dllcache\icardie.dll
2007-10-10 23:55 6,065,664 ------w C:\WINDOWS\system32\dllcache\ieframe.dll
2007-10-10 23:55 52,224 ------w C:\WINDOWS\system32\dllcache\msfeedsbs.dll
2007-10-10 23:55 478,208 ------w C:\WINDOWS\system32\dllcache\mshtmled.dll
2007-10-10 23:55 459,264 ------w C:\WINDOWS\system32\dllcache\msfeeds.dll
2007-10-10 23:55 44,544 ------w C:\WINDOWS\system32\dllcache\iernonce.dll
2007-10-10 23:55 384,512 ------w C:\WINDOWS\system32\dllcache\iedkcs32.dll
2007-10-10 23:55 383,488 ------w C:\WINDOWS\system32\dllcache\ieapfltr.dll
2007-10-10 23:55 27,648 ------w C:\WINDOWS\system32\dllcache\jsproxy.dll
2007-10-10 23:55 267,776 ------w C:\WINDOWS\system32\dllcache\iertutil.dll
2007-10-10 23:55 230,400 ------w C:\WINDOWS\system32\dllcache\ieaksie.dll
2007-10-10 23:55 214,528 ------w C:\WINDOWS\system32\dllcache\dxtrans.dll
2007-10-10 23:55 193,024 ------w C:\WINDOWS\system32\dllcache\msrating.dll
2007-10-10 23:55 153,088 ------w C:\WINDOWS\system32\dllcache\ieakeng.dll
2007-10-10 23:55 132,608 ------w C:\WINDOWS\system32\dllcache\extmgr.dll
2007-10-10 23:55 124,928 ------w C:\WINDOWS\system32\dllcache\advpack.dll
2007-10-10 23:55 105,984 ------w C:\WINDOWS\system32\dllcache\url.dll
2007-10-10 23:55 102,400 ------w C:\WINDOWS\system32\dllcache\occache.dll
2007-10-10 10:59 70,656 ------w C:\WINDOWS\system32\dllcache\ie4uinit.exe
2007-10-10 10:59 625,152 ------w C:\WINDOWS\system32\dllcache\iexplore.exe
2007-10-10 10:59 13,824 ------w C:\WINDOWS\system32\dllcache\ieudinit.exe
2007-10-10 05:46 161,792 ------w C:\WINDOWS\system32\dllcache\ieakui.dll
2007-09-22 15:13 59,144 ----a-w C:\Documents and Settings\Mark\Application Data\GDIPFONTCACHEV1.DAT
2007-03-05 15:01 2,502,976 ------w C:\Program Files\PCLW300.ace
2007-03-05 14:12 576,548,864 ------w C:\Program Files\PCL-W310_WEBCAM_DRIVER_CD.iso
2006-11-06 10:02 96,651 ------w C:\WINDOWS\Fonts\kelt.zip
2006-11-06 10:02 34,973 ------w C:\WINDOWS\Fonts\hobbitonb.zip
2006-11-06 10:02 115,534 ------w C:\WINDOWS\Fonts\first_order.zip
2006-11-06 10:01 92,043 ------w C:\WINDOWS\Fonts\bilboh.zip
2006-11-06 10:01 49,167 ------w C:\WINDOWS\Fonts\elven.zip
2006-11-06 10:00 132,332 ------w C:\WINDOWS\Fonts\ringbearer.zip
2006-09-30 09:41 2,827,365 ------w C:\Program Files\MobileMusicPolyphonic.exe
2006-09-30 09:34 2,441,953 ------w C:\Program Files\mp3trt.exe
2006-09-30 05:40 118,784 ------w C:\Program Files\Download_joyRingtone1[1].21.exe
2006-09-30 05:27 5,581,144 ------w C:\Program Files\smart-audio-converter-setup.exe
2006-09-30 05:23 63,075 ------w C:\Program Files\mrconvertertrial.exe
2006-09-29 20:09 1,988,464 ------w C:\Program Files\EZRingtone.exe
2006-09-29 20:00 2,273,870 ------w C:\Program Files\setup_allformp3.exe
2006-09-22 17:16 3,192,537 ------w C:\Program Files\SopCast.zip
2006-09-22 06:53 6,192,024 ------w C:\Program Files\TVUPlayer.zip
2006-09-22 06:46 23,608,632 ------w C:\Program Files\wmp11-windowsxp-x86-enu.exe
2006-09-20 15:33 680,976 ------w C:\Program Files\bpmanlyz.exe
2006-09-07 16:40 3,282,340 ------w C:\Program Files\podutilsetup.exe
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 12:00 15360]
"WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2006-10-18 20:05 204288]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"VTTimer"="VTTimer.exe" [2005-03-08 10:33 53248 C:\WINDOWS\system32\VTTimer.exe]
"VTTrayp"="VTtrayp.exe" [2005-08-03 22:32 163840 C:\WINDOWS\system32\VTTrayp.exe]
"SoundMan"="SOUNDMAN.EXE" [2006-01-11 22:08 577536 C:\WINDOWS\soundman.exe]
"Mouse Suite 98 Daemon"="ICO.EXE" [2005-04-13 21:34 49152 C:\WINDOWS\system32\ico.exe]
"AMSG"="C:\Program Files\ThinkVantage\AMSG\Amsg.exe" [2005-11-23 03:36 507904]
"suScheduler"="C:\Program Files\ThinkVantage\SystemUpdate\UCLauncher.exe" [2005-08-02 00:32 40960]
"DiskeeperSystray"="C:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe" [2006-03-01 18:51 196710]
"ISUSPM Startup"="c:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2004-07-27 23:50 221184]
"ISUSScheduler"="c:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" [2004-07-27 23:50 81920]
"LPManager"="C:\PROGRA~1\Lenovo\LENOVO~2\LPMGR.exe" [2005-12-07 08:00 106496]
"cssauthe"="C:\Program Files\IBM ThinkVantage\Client Security Solution\cssauthe.exe" [2006-02-28 23:00 1992240]
"Picasa Media Detector"="C:\Program Files\Picasa2\PicasaMediaDetector.exe" [2005-10-28 18:08 335872]
"Google Desktop Search"="C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" [2006-06-10 03:51 169472]
"atwtusb"="atwtusb.exe" [2002-03-11 18:42 176128 C:\WINDOWS\system32\Atwtusb.exe]
"PCguardadvisor.exe"="C:\Program Files\blueyonder\PCguard advisor\PCguardadvisor.exe" [2006-04-28 22:27 1888256]
"PCguard"="C:\Program Files\blueyonder\PCguard\Rps.exe" [2006-05-01 20:43 274432]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [2006-09-04 17:01 180269]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe" [2006-12-15 03:23 75520]
"eBayToolbar"="C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe" [2007-11-03 06:37 599280]
"Part browse safe hold"="C:\Documents and Settings\All Users\Application Data\Audio 4 part browse\Seek kind.exe" [2008-01-04 07:30 7051264]
"trioService"="C:\PROGRA~1\Freeze.com\Living 3D Dolphins\trioService.exe" [ ]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-12-11 10:56 286720]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2007-04-19 05:26 7700480]
"nwiz"="nwiz.exe" [2007-04-19 05:26 1626112 C:\WINDOWS\system32\nwiz.exe]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2007-04-19 05:26 86016]
"MSConfig"="C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe" [2004-08-04 12:00 158208]

C:\Documents and Settings\Mark\Start Menu\Programs\Startup\
KybtecWcCaller.exe [2006-12-03 23:59:02]
Quick StartUp.lnk - C:\PENSOFT\fquick32.exe [2006-07-31 19:11:19]
Start.lnk - C:\PENSOFT\Quick95.exe [2006-07-31 19:11:19]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 08:01:04]
WinZip Quick Pick.lnk - I:\Program Files\WinZip\WZQKPICK.EXE [2005-10-25 13:59:23]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Gamma Loader.exe.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Gamma Loader.exe.lnk
backup=C:\WINDOWS\pss\Adobe Gamma Loader.exe.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Gamma Loader.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk
backup=C:\WINDOWS\pss\Adobe Gamma Loader.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk
backup=C:\WINDOWS\pss\Adobe Reader Speed Launch.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2007-09-26 13:42 267064 --a------ C:\Program Files\iTunes\iTunesHelper.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PenLock]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RegistryMechanic]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SightSpeed]
C:\Program Files\SightSpeed\SightSpeed.exe -minimized

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UERScw]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\was_check]

R2 ibmfilter;ibmfilter;C:\WINDOWS\system32\drivers\ibmfilter.sys [2005-12-22 00:14]
R2 smi2;smi2;C:\Program Files\SMI2\smi2.sys [2005-12-21 23:45]
R3 pelmouse;Mouse Suite Driver;C:\WINDOWS\system32\DRIVERS\pelmouse.sys [2003-01-10 20:55]
R3 pelusblf;USB Mouse Low Filter Driver;C:\WINDOWS\system32\DRIVERS\pelusblf.sys [2003-02-11 20:25]
S0 ANCSQ;ANCSQ;C:\WINDOWS\system32\drivers\ANCSQ.sys []
S3 usb2vcom;USB Data Cable;C:\WINDOWS\system32\DRIVERS\usb2vcom.sys [2005-05-25 03:24]
S3 utblfilt;utblfilt;C:\WINDOWS\system32\drivers\utblfilt.sys [2001-05-23 14:42]
S3 Via4in1;Via4in1;C:\IBMWORK\Via4in1.sys []

.
Contents of the 'Scheduled Tasks' folder
"2008-01-04 07:00:00 C:\WINDOWS\Tasks\A8ADAE3D918A2A85.job"
- c:\docume~1\matthew\applic~1\joylon~1\Itchburnproxy.exe
"2007-12-25 08:19:03 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
"2008-01-04 07:03:01 C:\WINDOWS\Tasks\Check Updates for Windows Live Toolbar.job"
- C:\Program Files\Windows Live Toolbar\MSNTBUP.EXE
"2008-01-04 07:28:29 C:\WINDOWS\Tasks\RegCure Program Check.job"
- C:\Program Files\RegCure\RegCure.exe
"2007-10-12 08:47:25 C:\WINDOWS\Tasks\RegCure.job"
- C:\Program Files\RegCure\RegCure.exe
"2007-12-29 09:00:00 C:\WINDOWS\Tasks\rpc.job"
- C:\Program Files\Winferno\RegistryPowerCleaner\RegPowerClean.exe
"2008-01-04 07:27:00 C:\WINDOWS\Tasks\XoftSpySE 2.job"
- C:\Program Files\XoftSpySE\XoftSpy.exe
"2007-12-30 09:44:07 C:\WINDOWS\Tasks\XoftSpySE.job"
- C:\Program Files\XoftSpySE\XoftSpy.exe
.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-01-04 07:34:02
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2008-01-04 7:34:38
ComboFix-quarantined-files.txt 2008-01-04 07:34:24
.
2007-12-12 18:22:48 --- E O F ---

And new HJT Log

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 07:36:32, on 04/01/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\blueyonder\PCguard\fws.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\ICO.EXE
C:\Program Files\ThinkVantage\AMSG\Amsg.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\PROGRA~1\Lenovo\LENOVO~2\LPMGR.exe
C:\WINDOWS\system32\FSRremoS.EXE
C:\Program Files\IBM ThinkVantage\Client Security Solution\cssauthe.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\WINDOWS\system32\atwtusb.exe
C:\Program Files\blueyonder\PCguard advisor\PCguardadvisor.exe
C:\Program Files\blueyonder\PCguard\Rps.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe
C:\WINDOWS\system32\Pelmiced.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
I:\Program Files\WinZip\WZQKPICK.EXE
C:\WINDOWS\system32\TBLMOUSE.EXE
C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopDisplay.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
C:\Program Files\Common Files\Command Software\dvpapi.exe
C:\WINDOWS\System32\svchost.exe
C:\PENSOFT\fquick32.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\PENSOFT\Quick95.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\IBM ThinkVantage\Rescue and Recovery\rrservice.exe
C:\Program Files\IBM ThinkVantage\Common\Scheduler\tvtsched.exe
C:\Program Files\ThinkVantage\SystemUpdate\UCLauncherService.exe
C:\Program Files\IBM ThinkVantage\Common\Logger\logmon.exe
C:\Program Files\IBM ThinkVantage\Client Security Solution\pwmgre.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Java\jre1.5.0_11\bin\jucheck.exe
C:\WINDOWS\explorer.exe
C:\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.broadband.blueyonder.co.uk
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: eBay Toolbar Helper - {22D8E815-4A5E-4DFB-845E-AAB64207F5BD} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll
O2 - BHO: PopKill Class - {3C060EA2-E6A9-4E49-A530-D4657B8C449A} - C:\Program Files\blueyonder\PCguard\pkR.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: ZKBho Class - {56071E0D-C61B-11D3-B41C-00E02927A304} - C:\Program Files\blueyonder\PCguard\FBHR.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: eBay Toolbar - {92085AD4-F48A-450D-BD93-B28CC7DF67CE} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [Mouse Suite 98 Daemon] ICO.EXE
O4 - HKLM\..\Run: [AMSG] C:\Program Files\ThinkVantage\AMSG\Amsg.exe
O4 - HKLM\..\Run: [suScheduler] C:\Program Files\ThinkVantage\SystemUpdate\UCLauncher.exe /SCHEDULER
O4 - HKLM\..\Run: [DiskeeperSystray] "C:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe"
O4 - HKLM\..\Run: [ISUSPM Startup] c:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "c:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [LPManager] C:\PROGRA~1\Lenovo\LENOVO~2\LPMGR.exe
O4 - HKLM\..\Run: [cssauthe] "C:\Program Files\IBM ThinkVantage\Client Security Solution\cssauthe.exe" silent
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [atwtusb] atwtusb.exe beta
O4 - HKLM\..\Run: [PCguardadvisor.exe] "C:\Program Files\blueyonder\PCguard advisor\PCguardadvisor.exe"
O4 - HKLM\..\Run: [PCguard] "C:\Program Files\blueyonder\PCguard\Rps.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
O4 - HKLM\..\Run: [eBayToolbar] C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe
O4 - HKLM\..\Run: [Part browse safe hold] C:\Documents and Settings\All Users\Application Data\Audio 4 part browse\Seek kind.exe
O4 - HKLM\..\Run: [trioService] "C:\PROGRA~1\Freeze.com\Living 3D Dolphins\trioService.exe "
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - Startup: KybtecWcCaller.exe
O4 - Startup: Quick StartUp.lnk = C:\PENSOFT\fquick32.exe
O4 - Startup: Start.lnk = C:\PENSOFT\Quick95.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: WinZip Quick Pick.lnk = I:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: &Search - ?p=ZCxdm491KOGB
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: eBay Search - res://C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html
O8 - Extra context menu item: Open in new background tab - res://C:\Program Files\Windows Live Toolbar\Components\en-gb\msntabres.dll.mui/229?69cbbc6e23284756bd56247f9cb92666
O8 - Extra context menu item: Open in new foreground tab - res://C:\Program Files\Windows Live Toolbar\Components\en-gb\msntabres.dll.mui/230?69cbbc6e23284756bd56247f9cb92666
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [JAVA_IBM] Java (IBM)
O14 - IERESET.INF: START_PAGE_URL=http://www.broadband.blueyonder.co.uk
O16 - DPF: {1754A1BA-A1DF-4F10-B199-AA55AA1A120F} (InstallerBehaviorFactory Class) - https://signup.msn.com/pages/MsnInstC.cab
O16 - DPF: {2250C29C-C5E9-4F55-BE4E-01E45A40FCF1} (CMediaMix Object) - http://musicmix.messenger.msn.com/Medialogic.CAB
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/EN-US/a-UNO1/GAME_UNO1.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan ... asinst.cab
O16 - DPF: {AF2E62B6-F9E1-4D4F-A10A-9DC8E6DCBCC0} (VideoEgg ActiveX Loader) - http://update.videoegg.com/Install/Windows/Initial/VideoEggPublisher.exe
O16 - DPF: {B64F4A7C-97C9-11DA-8BDE-F66BAD1E3F3A} - http://locator1.cdn.imagesrvr.com/sites ... nstall.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {CE3409C4-9E26-4F8E-83E4-778498F9E7B4} (PB_Uploader Class) - http://static.photobox.co.uk/sg/common/uploader_uni.cab
O16 - DPF: {D821DC4A-0814-435E-9820-661C543A4679} (CRLDownloadWrapper Class) - http://drmlicense.one.microsoft.com/crlupdate/en/crlocx.ocx
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} (GpcContainer Class) - https://performancesoft.webex.com/client/T25L/webex/ieatgpc.cab
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
O23 - Service: DvpApi (dvpapi) - Authentium, Inc. - C:\Program Files\Common Files\Command Software\dvpapi.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: IBM PSA Access Driver Control (PsaSrv) - Unknown owner - (no file)
O23 - Service: PCguard Firewall (RP_FWS) - Radialpoint Inc. - C:\Program Files\blueyonder\PCguard\fws.exe
O23 - Service: TVT Backup Service - Unknown owner - C:\Program Files\IBM ThinkVantage\Rescue and Recovery\rrservice.exe
O23 - Service: TVT Scheduler - Unknown owner - C:\Program Files\IBM ThinkVantage\Common\Scheduler\tvtsched.exe
O23 - Service: ThinkVantage System Update (UCLauncherService) - Unknown owner - C:\Program Files\ThinkVantage\SystemUpdate\UCLauncherService.exe

--
End of file - 12854 bytes

Katana

January 4, 2008, 3:28 PM UTC

Do you know what these Zip file are ?
C:\WINDOWS\Fonts\kelt.zip
C:\WINDOWS\Fonts\hobbitonb.zip
C:\WINDOWS\Fonts\first_order.zip
C:\WINDOWS\Fonts\bilboh.zip
C:\WINDOWS\Fonts\elven.zip
C:\WINDOWS\Fonts\ringbearer.zip

IMPORTANT I notice there are signs of one or more P2P (Person to Person) File Sharing Programs on your computer.

LimeWire

I'd like you to read the Guidelines for P2P Programs where we explain why it's not a good idea to have them.

Also available here.

My recommendation is you go to Control Panel > Add/Remove Programs and uninstall the programs listed above (in red).
Please note: you must NOT use this whilst we are cleaning your machine.

Custom CFScript

Please open Notepad (Start -> Run -> type notepad in the Open field -> OK) and copy and paste the text present inside the code box below:



DirLook::

C:\Documents and Settings\All Users\Application Data\WholeSecurity

C:\Program Files\MonkeyBongo

Comment - Existing Categories



File::

C:\WINDOWS\Tasks\A8ADAE3D918A2A85.job

Folder::

C:\Program Files\Free Offers from Freeze.com

C:\Program Files\Freeze.com Toolbar

C:\Program Files\OneStepSearch

C:\Program Files\Freeze.com

C:\Program Files\Joy Long Test

C:\Documents and Settings\All Users\Application Data\Audio 4 part browse

Driver::

ANCSQ

Via4in1

Registry::

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Part browse safe hold"=-

"trioService"=-

Save this as CFScript.txt and place it on your desktop.
Referring to the screenshot above, drag CFScript.txt into ComboFix.exe.
ComboFix will now run a scan on your system. It may reboot your system when it finishes. This is normal.
When finished, it will produce a log for you. Copy and paste the contents of the log in your next reply.

CAUTION: Do not mouse-click ComboFix's window while it is running. That may cause it to stall.
Note: the above code was created specifically for this user. If you are not this user, do NOT follow these directions as they could damage the workings of your system.

Installed Programs
Please could you give me a list of the programs that are installed.

Start HijackThis
Click on the Config button
Click on the Misc Tools button
Click on the Open Uninstall Manager button.

You will see a list with the programs installed in your computer.
Click on save list button and specify where you would like to save this file.
When you press Save button a notepad will open with the contents of that file.
Simply copy and paste the contents of that notepad into your next post.

tamskinner

January 4, 2008, 4:02 PM UTC

Again, many thanks Katana. #

The zip files are free font files I got from somewhere on the web

Programme List:

Access Help
Ad-Aware 2007
Adobe Flash Player 9 ActiveX
Adobe Photoshop 6.0
Adobe Photoshop CS
Adobe Reader 7.0.9
Adobe Shockwave Player
Adobe SVG Viewer
AirHockey 3D 1.82
AndreaMosaic 3.20
Apple Mobile Device Support
Apple Software Update
ArcSoft Software Suite
blueyonder PCguard
Crazy Golf
Crush'Em 2.0
Diskeeper Lite
eBay Toolbar
ebgcInfra
ebgcRes
ebgcSDK
EPSON PhotoQuicker3.5
EPSON Print CD
EPSON PRINT Image Framer Tool2.1
EPSON Printer Software
ESPR800 Referene Guide
ESPR800 Software Guide
FontPage 3.0.0
Football Manager 2006
Forex Money Map 1.0.17
FXCM Trading Station II
Google Desktop
Google Desktop
Google Earth
Google Toolbar for Internet Explorer
Help Center
HijackThis 2.0.2
hotComm® CL
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows Media Player 11 (KB939683)
Hotfix for Windows XP (KB914440)
Hotfix for Windows XP (KB915865)
Hotfix for Windows XP (KB926239)
iArt 3
IBM 32-bit Runtime Environment for Java 2, v1.4.2
InterVideo WinDVD
iPod for Windows 2005-10-12
iPod for Windows 2006-06-28
iTunes
J2SE Runtime Environment 5.0 Update 10
J2SE Runtime Environment 5.0 Update 11
J2SE Runtime Environment 5.0 Update 3
Lenovo Care
Lenovo Care Supplement
Living 3D Dolphins Screen Saver
Mahjong Deluxe
Memory-Map OS Edition 2004
Message Center
MetaTrader 4.00
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Hotfix (KB928366)
Microsoft .NET Framework 2.0
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft Midtown Madness 2
Microsoft National Language Support Downlevel APIs
Microsoft Office XP Professional
Microsoft User-Mode Driver Framework Feature Pack 1.0
MixMeister BPM Analyzer 1.0
Mouse Suite
Mozilla Firefox (2.0.0.11)
MSN
MSXML 4.0 SP2 (KB925672)
MSXML 4.0 SP2 (KB927978)
MSXML 4.0 SP2 (KB936181)
My DSC
NVIDIA Drivers
OpD2d
Packard Bell Diamond 1200Plus v1.0
Panda ActiveScan
PC-Doctor 5 for Windows
PCguard advisor 1.3.22
PCL-W300
PCSync
PenSoft
Picasa 2
PIF DESIGNER2.1
PodUtil 3.0.3
Puzzl'Em 1.0 Beta2
QuickTime
RealPlayer
Realtek AC'97 Audio
RegCure 1.5.0.0
Registry Mechanic 7.0
Rescue and Recovery
Rhapsody Player Engine
Roxio Digital Media LE
Roxio Express Labeler
Roxio RecordNow Audio
Roxio RecordNow Copy
Roxio RecordNow Data
Saints & Sinners Bowling
Security Update for CAPICOM (KB931906)
Security Update for CAPICOM (KB931906)
Security Update for Microsoft .NET Framework 2.0 (KB928365)
Security Update for Step By Step Interactive Training (KB923723)
Security Update for Windows Internet Explorer 7 (KB928090)
Security Update for Windows Internet Explorer 7 (KB929969)
Security Update for Windows Internet Explorer 7 (KB931768)
Security Update for Windows Internet Explorer 7 (KB933566)
Security Update for Windows Internet Explorer 7 (KB937143)
Security Update for Windows Internet Explorer 7 (KB938127)
Security Update for Windows Internet Explorer 7 (KB939653)
Security Update for Windows Internet Explorer 7 (KB942615)
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player 10 (KB911565)
Security Update for Windows Media Player 10 (KB917734)
Security Update for Windows Media Player 11 (KB936782)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows XP (KB899587)
Security Update for Windows XP (KB904706)
Security Update for Windows XP (KB905414)
Security Update for Windows XP (KB908519)
Security Update for Windows XP (KB911562)
Security Update for Windows XP (KB911567)
Security Update for Windows XP (KB911927)
Security Update for Windows XP (KB913580)
Security Update for Windows XP (KB914388)
Security Update for Windows XP (KB914389)
Security Update for Windows XP (KB916281)
Security Update for Windows XP (KB917159)
Security Update for Windows XP (KB917344)
Security Update for Windows XP (KB917422)
Security Update for Windows XP (KB917953)
Security Update for Windows XP (KB918118)
Security Update for Windows XP (KB918439)
Security Update for Windows XP (KB918899)
Security Update for Windows XP (KB919007)
Security Update for Windows XP (KB920213)
Security Update for Windows XP (KB920214)
Security Update for Windows XP (KB920670)
Security Update for Windows XP (KB920683)
Security Update for Windows XP (KB920685)
Security Update for Windows XP (KB921398)
Security Update for Windows XP (KB921503)
Security Update for Windows XP (KB921883)
Security Update for Windows XP (KB922616)
Security Update for Windows XP (KB922760)
Security Update for Windows XP (KB922819)
Security Update for Windows XP (KB923191)
Security Update for Windows XP (KB923414)
Security Update for Windows XP (KB923694)
Security Update for Windows XP (KB923980)
Security Update for Windows XP (KB924191)
Security Update for Windows XP (KB924270)
Security Update for Windows XP (KB924496)
Security Update for Windows XP (KB924667)
Security Update for Windows XP (KB925454)
Security Update for Windows XP (KB925486)
Security Update for Windows XP (KB925902)
Security Update for Windows XP (KB926255)
Security Update for Windows XP (KB926436)
Security Update for Windows XP (KB927779)
Security Update for Windows XP (KB927802)
Security Update for Windows XP (KB928255)
Security Update for Windows XP (KB928843)
Security Update for Windows XP (KB929123)
Security Update for Windows XP (KB930178)
Security Update for Windows XP (KB931261)
Security Update for Windows XP (KB931784)
Security Update for Windows XP (KB932168)
Security Update for Windows XP (KB933729)
Security Update for Windows XP (KB935839)
Security Update for Windows XP (KB935840)
Security Update for Windows XP (KB936021)
Security Update for Windows XP (KB938829)
Security Update for Windows XP (KB941202)
Security Update for Windows XP (KB941568)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB943460)
Security Update for Windows XP (KB944653)
Shape Shifter
SightSpeed (remove only)
Smart Menus (Windows Live Toolbar)
Sonic Update Manager
Spybot - Search & Destroy
Super Pool
Tabbed Browsing (Windows Live Toolbar)
Tennis Titans
ThinkVantage System Update
ThinkVantage Technologies Welcome Message
Toontown Online
Translation Services Provided by WorldLingo for Microsoft Word
TrojanHunter 5.0
Update for Windows XP (KB898461)
Update for Windows XP (KB900485)
Update for Windows XP (KB904942)
Update for Windows XP (KB908531)
Update for Windows XP (KB910437)
Update for Windows XP (KB911280)
Update for Windows XP (KB916595)
Update for Windows XP (KB920872)
Update for Windows XP (KB922582)
Update for Windows XP (KB927891)
Update for Windows XP (KB929338)
Update for Windows XP (KB930916)
Update for Windows XP (KB931836)
Update for Windows XP (KB933360)
Update for Windows XP (KB938828)
Update for Windows XP (KB942763)
VIA Rhine-Family Fast Ethernet Adapter
VIA/S3G Display Driver
VideoEgg Publisher
VK USB Driver
Wallpapers
WebEx
Whales and Dolphins Animated Wallpaper #1
WinAce Archiver
Windows Installer 3.1 (KB893803)
Windows Internet Explorer 7
Windows Live Messenger
Windows Live Sign-in Assistant
Windows Live Toolbar
Windows Live Toolbar
Windows Live Toolbar Extension (Windows Live Toolbar)
Windows Live Toolbar Feed Detector (Windows Live Toolbar)
Windows Media Format 11 runtime
Windows Media Format 11 runtime
Windows Media Player 11
Windows Media Player 11
Windows XP Hotfix - KB885884
Windows XP Hotfix - KB887472
Winferno Registry Power Cleaner
WIRELESS DESIGN & WORK TABLET 100/200/400/1200
XoftSpySE
XP Themes
Yahoo! Toolbar
Yetisports Deluxe

Log file from Combofix:

ComboFix 08-01-04.1 - Mark 2008-01-04 15:44:54.3 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.815 [GMT 0:00]
Running from: C:\Documents and Settings\[removed]\Desktop\ComboFix.exe
Command switches used :: C:\Documents and Settings\Mark\Desktop\CFScript.txt
* Created a new restore point

FILE
C:\WINDOWS\Tasks\A8ADAE3D918A2A85.job
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\All Users\Application Data\Audio 4 part browse
C:\Documents and Settings\All Users\Application Data\Audio 4 part browse\Seek kind.exe
C:\Documents and Settings\All Users\Application Data\Audio 4 part browse\tons hold.exe
C:\Program Files\Free Offers from Freeze.com
C:\Program Files\Free Offers from Freeze.com\3766.url
C:\Program Files\Free Offers from Freeze.com\3772.url
C:\Program Files\Free Offers from Freeze.com\3773.url
C:\Program Files\Free Offers from Freeze.com\control.txt
C:\Program Files\Freeze.com Toolbar
C:\Program Files\Freeze.com Toolbar\basis.xml
C:\Program Files\Freeze.com Toolbar\freeze.bmp
C:\Program Files\Freeze.com Toolbar\frzToolbar_logo.bmp
C:\Program Files\Freeze.com Toolbar\icons.bmp
C:\Program Files\Freeze.com Toolbar\options.html
C:\Program Files\Freeze.com Toolbar\powered_yahoo_search.bmp
C:\Program Files\Freeze.com Toolbar\version.txt
C:\Program Files\Freeze.com
C:\Program Files\Freeze.com\Living 3D Dolphins\common\data.bin
C:\Program Files\Freeze.com\Living 3D Dolphins\common\data.fat
C:\Program Files\Freeze.com\Living 3D Dolphins\dolphin.ico
C:\Program Files\Freeze.com\Living 3D Dolphins\dticon.url
C:\Program Files\Freeze.com\Living 3D Dolphins\FISHES\Blue Hippo Tang\data.bin
C:\Program Files\Freeze.com\Living 3D Dolphins\FISHES\Blue Hippo Tang\data.fat
C:\Program Files\Freeze.com\Living 3D Dolphins\FISHES\Morish Idol\data.bin
C:\Program Files\Freeze.com\Living 3D Dolphins\FISHES\Morish Idol\data.fat
C:\Program Files\Freeze.com\Living 3D Dolphins\FISHES\Percula Clown Fish\data.bin
C:\Program Files\Freeze.com\Living 3D Dolphins\FISHES\Percula Clown Fish\data.fat
C:\Program Files\Freeze.com\Living 3D Dolphins\FISHES\Whitefaced Surgeon Fish\data.bin
C:\Program Files\Freeze.com\Living 3D Dolphins\FISHES\Whitefaced Surgeon Fish\data.fat
C:\Program Files\Freeze.com\Living 3D Dolphins\FISHES\Yellow Tang\data.bin
C:\Program Files\Freeze.com\Living 3D Dolphins\FISHES\Yellow Tang\data.fat
C:\Program Files\Freeze.com\Living 3D Dolphins\freeze.ico
C:\Program Files\Freeze.com\Living 3D Dolphins\freeze.url
C:\Program Files\Freeze.com\Living 3D Dolphins\IMAGES\Acanthurus.jpg
C:\Program Files\Freeze.com\Living 3D Dolphins\IMAGES\morish.jpg
C:\Program Files\Freeze.com\Living 3D Dolphins\IMAGES\paracanthurus_hepatus.jpg
C:\Program Files\Freeze.com\Living 3D Dolphins\IMAGES\percula.jpg
C:\Program Files\Freeze.com\Living 3D Dolphins\IMAGES\tang.jpg
C:\Program Files\Freeze.com\Living 3D Dolphins\INSTALL.LOG
C:\Program Files\Freeze.com\Living 3D Dolphins\license.txt
C:\Program Files\Freeze.com\Living 3D Dolphins\PTest.exe
C:\Program Files\Freeze.com\Living 3D Dolphins\remove.exe
C:\Program Files\Freeze.com\Living 3D Dolphins\SCENES\1\data.bin
C:\Program Files\Freeze.com\Living 3D Dolphins\SCENES\1\data.fat
C:\Program Files\Freeze.com\Living 3D Dolphins\Settings.dat
C:\Program Files\Freeze.com\Living 3D Dolphins\settings.xml
C:\Program Files\Freeze.com\Living 3D Dolphins\smenu.url
C:\Program Files\Freeze.com\Living 3D Dolphins\Test Living 3D Dolphins.lnk
C:\Program Files\Freeze.com\Living 3D Dolphins\undata.exe
C:\Program Files\Freeze.com\Living 3D Dolphins\undata.ini
C:\Program Files\Freeze.com\Living 3D Dolphins\UNINSTAL.EXE
C:\Program Files\Freeze.com\Living 3D Dolphins\videomodes.xml
C:\Program Files\Freeze.com\Whales and Dolphins Animated Wallpaper #1\freeze.ico
C:\Program Files\Freeze.com\Whales and Dolphins Animated Wallpaper #1\INSTALL.LOG
C:\Program Files\Freeze.com\Whales and Dolphins Animated Wallpaper #1\license.txt
C:\Program Files\Freeze.com\Whales and Dolphins Animated Wallpaper #1\undata.exe
C:\Program Files\Freeze.com\Whales and Dolphins Animated Wallpaper #1\undata.ini
C:\Program Files\Freeze.com\Whales and Dolphins Animated Wallpaper #1\UNINSTAL.EXE
C:\Program Files\Freeze.com\Whales and Dolphins Animated Wallpaper #1\upgrade.url
C:\Program Files\Freeze.com\Whales and Dolphins Animated Wallpaper #1\WallpaperSet.exe
C:\Program Files\Joy Long Test
C:\Program Files\OneStepSearch
C:\WINDOWS\Tasks\A8ADAE3D918A2A85.job

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))

.
-------\ANCSQ
-------\Via4in1

((((((((((((((((((((((((( Files Created from 2007-12-04 to 2008-01-04 )))))))))))))))))))))))))))))))
.

2008-01-04 07:13 . 2000-08-31 08:00 51,200 --a------ C:\WINDOWS\NirCmd.exe
2007-12-31 15:44 . 2008-01-02 15:35 54,156 --ah----- C:\WINDOWS\QTFont.qfn
2007-12-31 15:44 . 2007-12-31 15:44 1,409 --a------ C:\WINDOWS\QTFont.for
2007-12-31 11:17 . 2007-12-31 11:17 1,158 --a------ C:\WINDOWS\mozver.dat
2007-12-31 10:17 . 2007-12-31 10:17 <DIR> d-------- C:\Documents and Settings\Mark\Application Data\TrojanHunter
2007-12-31 09:09 . 2007-12-31 09:09 <DIR> d-------- C:\Program Files\TrojanHunter 5.0
2007-12-31 08:24 . 2007-12-31 08:24 <DIR> d-------- C:\Program Files\Lavasoft
2007-12-31 08:24 . 2007-12-31 08:24 <DIR> d----c--- C:\Documents and Settings\All Users\Application Data\Lavasoft
2007-12-31 08:23 . 2007-12-31 08:23 <DIR> d-------- C:\Program Files\Common Files\Wise Installation Wizard
2007-12-31 07:46 . 2007-12-31 08:18 <DIR> d----c--- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2007-12-31 07:41 . 2008-01-04 07:36 <DIR> d----c--- C:\hijackthis
2007-12-30 10:38 . 2007-12-30 13:03 <DIR> d-------- C:\WINDOWS\system32\ActiveScan
2007-12-30 10:38 . 2007-12-30 10:38 30,590 --a------ C:\WINDOWS\system32\pavas.ico
2007-12-30 10:38 . 2007-12-30 10:38 2,550 --a------ C:\WINDOWS\system32\Uninstall.ico
2007-12-30 10:38 . 2007-12-30 10:38 1,406 --a------ C:\WINDOWS\system32\Help.ico
2007-12-30 09:44 . 2007-12-30 09:44 <DIR> d-------- C:\Program Files\XoftSpySE
2007-12-29 16:23 . 2007-12-29 16:23 0 --a------ C:\WINDOWS\nsreg.dat
2007-12-28 16:09 . 2007-12-28 16:11 8 --a------ C:\WINDOWS\system32\nvModes.dat
2007-12-28 16:07 . 2007-12-28 16:07 <DIR> d----c--- C:\Documents and Settings\All Users\Application Data\nView_Profiles
2007-12-28 16:04 . 2007-12-28 16:06 <DIR> d-------- C:\WINDOWS\nview
2007-12-28 16:04 . 2007-04-19 05:26 208,896 --a------ C:\WINDOWS\system32\nvudisp.exe
2007-12-28 16:04 . 2008-01-04 15:52 88,723 --a------ C:\WINDOWS\system32\nvapps.xml
2007-12-28 16:04 . 2007-04-19 05:26 17,056 --a------ C:\WINDOWS\system32\nvdisp.nvu
2007-12-28 16:03 . 2007-04-19 14:14 208,896 --a------ C:\WINDOWS\system32\NVUNINST.EXE
2007-12-11 10:57 . 2007-12-11 10:57 65,536 --a------ C:\WINDOWS\system32\QuickTimeVR.qtx
2007-12-11 10:57 . 2007-12-11 10:57 49,152 --a------ C:\WINDOWS\system32\QuickTime.qts
2007-12-08 08:12 . 2007-12-08 08:12 <DIR> d-------- C:\Program Files\LimeWire
2007-12-05 09:12 . 2007-12-05 09:12 <DIR> d-------- C:\Documents and Settings\Mark\Application Data\webex
2007-12-05 09:12 . 2007-12-05 09:12 202,827 --a------ C:\WINDOWS\system32\atasnt40.dll
2007-12-05 09:12 . 2007-12-05 09:12 51,304 --a------ C:\WINDOWS\system32\drivers\atnt40k.sys

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-12-30 11:39 --------- d-----w C:\Program Files\Windows Live Toolbar
2007-12-30 11:34 --------- d-----w C:\Program Files\SightSpeed
2007-12-30 11:33 --------- d-----w C:\Program Files\Picasa2
2007-12-30 11:30 --------- d-----w C:\Program Files\iTunes
2007-12-30 11:26 --------- d-----w C:\Program Files\Google
2007-12-30 11:24 --------- d-----w C:\Program Files\Common Files\PestPatrol
2007-12-30 11:24 --------- d-----w C:\Program Files\Common Files\Command Software
2007-12-30 10:30 --------- d--h--w C:\Program Files\InstallShield Installation Information
2007-12-30 10:30 --------- d-----w C:\Program Files\EPSON
2007-12-30 10:22 --------- d-----w C:\Program Files\Messenger Plus! Live
2007-12-30 10:19 --------- d-----w C:\Program Files\MonkeyBongo
2007-12-30 10:12 --------- d-----w C:\Program Files\MSN Messenger
2007-12-28 18:48 --------- d-----w C:\Documents and Settings\Mark\Application Data\LimeWire
2007-12-26 10:42 --------- d-----w C:\Program Files\QuickTime
2007-12-23 18:22 --------- d-----w C:\Documents and Settings\All Users\Application Data\WholeSecurity
2007-12-17 20:40 --------- d-----w C:\Program Files\Canon
2007-12-15 07:31 --------- d-----w C:\Documents and Settings\Mark\Application Data\eBay
2007-12-01 09:00 --------- dc----w C:\Documents and Settings\All Users\Application Data\Winferno
2007-12-01 08:26 --------- dc----w C:\Documents and Settings\All Users\Application Data\Yahoo! Companion
2007-12-01 08:24 --------- d-----w C:\Program Files\Winferno
2007-11-26 13:16 --------- d-----w C:\Program Files\CandleWorks
2007-11-23 18:11 --------- d-----w C:\Program Files\FxClub
2007-11-23 16:06 --------- d-----w C:\Program Files\Kybtec Software
2007-11-23 16:06 --------- d-----w C:\Documents and Settings\Mark\Application Data\MipKukSoft
2007-11-23 16:06 --------- d-----w C:\Documents and Settings\Mark\Application Data\Kybtec Software
2007-11-23 16:05 --------- dc----w C:\Documents and Settings\All Users\Application Data\MipKukSoft
2007-11-13 10:25 20,480 ------w C:\WINDOWS\system32\drivers\secdrv.sys
2007-11-12 14:24 --------- d-----w C:\Program Files\MetaTrader 4
2007-11-05 20:08 --------- d-----w C:\Documents and Settings\Chloe\Application Data\eBay
2007-09-22 15:13 59,144 ----a-w C:\Documents and Settings\Mark\Application Data\GDIPFONTCACHEV1.DAT
2007-03-05 15:01 2,502,976 ------w C:\Program Files\PCLW300.ace
2007-03-05 14:12 576,548,864 ------w C:\Program Files\PCL-W310_WEBCAM_DRIVER_CD.iso
2006-11-06 10:02 96,651 ------w C:\WINDOWS\Fonts\kelt.zip
2006-11-06 10:02 34,973 ------w C:\WINDOWS\Fonts\hobbitonb.zip
2006-11-06 10:02 115,534 ------w C:\WINDOWS\Fonts\first_order.zip
2006-11-06 10:01 92,043 ------w C:\WINDOWS\Fonts\bilboh.zip
2006-11-06 10:01 49,167 ------w C:\WINDOWS\Fonts\elven.zip
2006-11-06 10:00 132,332 ------w C:\WINDOWS\Fonts\ringbearer.zip
2006-09-30 09:41 2,827,365 ------w C:\Program Files\MobileMusicPolyphonic.exe
2006-09-30 09:34 2,441,953 ------w C:\Program Files\mp3trt.exe
2006-09-30 05:40 118,784 ------w C:\Program Files\Download_joyRingtone1[1].21.exe
2006-09-30 05:27 5,581,144 ------w C:\Program Files\smart-audio-converter-setup.exe
2006-09-30 05:23 63,075 ------w C:\Program Files\mrconvertertrial.exe
2006-09-29 20:09 1,988,464 ------w C:\Program Files\EZRingtone.exe
2006-09-29 20:00 2,273,870 ------w C:\Program Files\setup_allformp3.exe
2006-09-22 17:16 3,192,537 ------w C:\Program Files\SopCast.zip
2006-09-22 06:53 6,192,024 ------w C:\Program Files\TVUPlayer.zip
2006-09-22 06:46 23,608,632 ------w C:\Program Files\wmp11-windowsxp-x86-enu.exe
2006-09-20 15:33 680,976 ------w C:\Program Files\bpmanlyz.exe
2006-09-07 16:40 3,282,340 ------w C:\Program Files\podutilsetup.exe
.

(((((((((((((((((((((((((((((((((((((((((((( Look )))))))))))))))))))))))))))))))))))))))))))))))))))))))))
.

---- Directory of C:\Documents and Settings\All Users\Application Data\WholeSecurity ----

2007-12-23 18:22 98784 --a------ C:\Documents and Settings\All Users\Application Data\WholeSecurity\wcid0.log
2007-12-23 18:04 142559 --a------ C:\Documents and Settings\All Users\Application Data\WholeSecurity\wsa18.zip

---- Directory of C:\Program Files\MonkeyBongo ----

2006-11-29 18:17 481070 --------- C:\Program Files\MonkeyBongo\MyRingtones\Janis Joplin - Cry Baby3.mp3
2006-11-29 17:48 321409 --------- C:\Program Files\MonkeyBongo\MyRingtones\Shania Twain - Man I Feel Like A Women.mp3
2006-11-29 17:48 321409 --------- C:\Program Files\MonkeyBongo\MyRingtones\England Songs - Three lions '98 - Football is Coming Home(3).mp3
2006-11-29 17:40 481070 --------- C:\Program Files\MonkeyBongo\MyRingtones\The Proclaimers- I Would Walk 500 Miles.mp3
2006-11-29 17:40 481070 --------- C:\Program Files\MonkeyBongo\MyRingtones\Pink Floyd - Time.mp3
2006-11-29 17:40 481070 --------- C:\Program Files\MonkeyBongo\MyRingtones\Mision Imposible Theme song- Mission Impossible Soundtrack 3.mp3
2006-11-29 17:40 481070 --------- C:\Program Files\MonkeyBongo\MyRingtones\I Get Knocked Down.mp3
2006-11-29 17:40 481070 --------- C:\Program Files\MonkeyBongo\MyRingtones\04 Telephone Man.mp3
2006-11-29 17:39 481070 --------- C:\Program Files\MonkeyBongo\MyRingtones\01 Hanging On The Telephone.mp3
2006-10-07 07:01 321409 --------- C:\Program Files\MonkeyBongo\MyRingtones\Preview-T-3521242-The Beautiful South - Perfect 10.MP3
2006-10-07 06:32 299257 --------- C:\Program Files\MonkeyBongo\MyRingtones\Preview-T-3316421-Mision Imposible Theme song- Mission Impossible Soundtrack 3.mp3
2006-10-06 16:21 481070 --------- C:\Program Files\MonkeyBongo\MyRingtones\Some Girls.mp3
2006-10-06 16:21 481070 --------- C:\Program Files\MonkeyBongo\MyRingtones\03 Lyla.mp3
2006-10-06 16:20 481070 --------- C:\Program Files\MonkeyBongo\MyRingtones\You can ring my bell.mp3
2006-10-06 16:20 481070 --------- C:\Program Files\MonkeyBongo\MyRingtones\Survivor.mp3
2006-10-06 16:20 481070 --------- C:\Program Files\MonkeyBongo\MyRingtones\Perfect Day.mp3
2006-10-06 16:20 481070 --------- C:\Program Files\MonkeyBongo\MyRingtones\Paint It Black.mp3
2006-10-06 16:20 481070 --------- C:\Program Files\MonkeyBongo\MyRingtones\Mercedes Benz.mp3
2006-10-06 16:20 481070 --------- C:\Program Files\MonkeyBongo\MyRingtones\08 Santa Baby.mp3
2006-10-06 16:20 481070 --------- C:\Program Files\MonkeyBongo\MyRingtones\02 Maroon 5 - This Love.mp3

((((((((((((((((((((((((((((( snapshot@2008-01-04_ 7.34.09.71 )))))))))))))))))))))))))))))))))))))))))
.
+ 2000-08-31 08:00:00 163,328 ----a-w C:\WINDOWS\erdnt\subs\ERDNT.EXE
+ 2008-01-04 15:52:05 16,384 ----atw C:\WINDOWS\Temp\Perflib_Perfdata_1c4.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 12:00 15360]
"WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2006-10-18 20:05 204288]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"VTTimer"="VTTimer.exe" [2005-03-08 10:33 53248 C:\WINDOWS\system32\VTTimer.exe]
"VTTrayp"="VTtrayp.exe" [2005-08-03 22:32 163840 C:\WINDOWS\system32\VTTrayp.exe]
"SoundMan"="SOUNDMAN.EXE" [2006-01-11 22:08 577536 C:\WINDOWS\soundman.exe]
"Mouse Suite 98 Daemon"="ICO.EXE" [2005-04-13 21:34 49152 C:\WINDOWS\system32\ico.exe]
"AMSG"="C:\Program Files\ThinkVantage\AMSG\Amsg.exe" [2005-11-23 03:36 507904]
"suScheduler"="C:\Program Files\ThinkVantage\SystemUpdate\UCLauncher.exe" [2005-08-02 00:32 40960]
"DiskeeperSystray"="C:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe" [2006-03-01 18:51 196710]
"ISUSPM Startup"="c:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2004-07-27 23:50 221184]
"ISUSScheduler"="c:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" [2004-07-27 23:50 81920]
"LPManager"="C:\PROGRA~1\Lenovo\LENOVO~2\LPMGR.exe" [2005-12-07 08:00 106496]
"cssauthe"="C:\Program Files\IBM ThinkVantage\Client Security Solution\cssauthe.exe" [2006-02-28 23:00 1992240]
"Picasa Media Detector"="C:\Program Files\Picasa2\PicasaMediaDetector.exe" [2005-10-28 18:08 335872]
"Google Desktop Search"="C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" [2006-06-10 03:51 169472]
"atwtusb"="atwtusb.exe" [2002-03-11 18:42 176128 C:\WINDOWS\system32\Atwtusb.exe]
"PCguardadvisor.exe"="C:\Program Files\blueyonder\PCguard advisor\PCguardadvisor.exe" [2006-04-28 22:27 1888256]
"PCguard"="C:\Program Files\blueyonder\PCguard\Rps.exe" [2006-05-01 20:43 274432]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [2006-09-04 17:01 180269]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe" [2006-12-15 03:23 75520]
"eBayToolbar"="C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe" [2007-11-03 06:37 599280]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-12-11 10:56 286720]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2007-04-19 05:26 7700480]
"nwiz"="nwiz.exe" [2007-04-19 05:26 1626112 C:\WINDOWS\system32\nwiz.exe]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2007-04-19 05:26 86016]

C:\Documents and Settings\Mark\Start Menu\Programs\Startup\
KybtecWcCaller.exe [2006-12-03 23:59:02]
Quick StartUp.lnk - C:\PENSOFT\fquick32.exe [2006-07-31 19:11:19]
Start.lnk - C:\PENSOFT\Quick95.exe [2006-07-31 19:11:19]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 08:01:04]
WinZip Quick Pick.lnk - I:\Program Files\WinZip\WZQKPICK.EXE [2005-10-25 13:59:23]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Gamma Loader.exe.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Gamma Loader.exe.lnk
backup=C:\WINDOWS\pss\Adobe Gamma Loader.exe.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Gamma Loader.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk
backup=C:\WINDOWS\pss\Adobe Gamma Loader.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk
backup=C:\WINDOWS\pss\Adobe Reader Speed Launch.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2007-09-26 13:42 267064 --a------ C:\Program Files\iTunes\iTunesHelper.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PenLock]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RegistryMechanic]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SightSpeed]
C:\Program Files\SightSpeed\SightSpeed.exe -minimized

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UERScw]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\was_check]

R2 ibmfilter;ibmfilter;C:\WINDOWS\system32\drivers\ibmfilter.sys [2005-12-22 00:14]
R2 smi2;smi2;C:\Program Files\SMI2\smi2.sys [2005-12-21 23:45]
R3 pelmouse;Mouse Suite Driver;C:\WINDOWS\system32\DRIVERS\pelmouse.sys [2003-01-10 20:55]
R3 pelusblf;USB Mouse Low Filter Driver;C:\WINDOWS\system32\DRIVERS\pelusblf.sys [2003-02-11 20:25]

.
Contents of the 'Scheduled Tasks' folder
"2007-12-25 08:19:03 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
"2008-01-04 15:04:19 C:\WINDOWS\Tasks\Check Updates for Windows Live Toolbar.job"
- C:\Program Files\Windows Live Toolbar\MSNTBUP.EXE
"2008-01-04 15:52:35 C:\WINDOWS\Tasks\RegCure Program Check.job"
- C:\Program Files\RegCure\RegCure.exe
"2007-10-12 08:47:25 C:\WINDOWS\Tasks\RegCure.job"
- C:\Program Files\RegCure\RegCure.exe
"2007-12-29 09:00:00 C:\WINDOWS\Tasks\rpc.job"
- C:\Program Files\Winferno\RegistryPowerCleaner\RegPowerClean.exe
"2008-01-04 15:52:02 C:\WINDOWS\Tasks\XoftSpySE 2.job"
- C:\Program Files\XoftSpySE\XoftSpy.exe
"2007-12-30 09:44:07 C:\WINDOWS\Tasks\XoftSpySE.job"
- C:\Program Files\XoftSpySE\XoftSpy.exe
.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-01-04 15:52:28
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------

PROCESS: C:\WINDOWS\Explorer.EXE [6.00.2900.3156]
-> C:\Program Files\Google\Google Desktop Search\GoogleDesktopDeskbar2.dll
-> C:\Program Files\Google\Google Desktop Search\GoogleDesktopHyper.dll
-> C:\Program Files\Google\Google Desktop Search\GoogleDesktopResources_en.dll
.
Completion time: 2008-01-04 15:55:38 - machine was rebooted
ComboFix-quarantined-files.txt 2008-01-04 15:55:32
ComboFix2.txt 2008-01-04 07:34:39
.
2007-12-12 18:22:48 --- E O F ---

Many thanks

tamskinner

January 4, 2008, 4:06 PM UTC

sorry - should also say yes I will remove Limewire!

Katana

January 4, 2008, 4:40 PM UTC

The following program/s are regarded as either "Rogue", being bundled with "Adware" or having dubious reputations

XoftSpy << Used to be listed as Rogue

I recommend that you remove Via Add/Remove Programs

Your Java is out of date. Older versions have vulnerabilities that malware can use to infect your system.

Please follow these steps to remove older version Java components and update.

Updating Java:
Download the latest version of Java Runtime Environment (JRE) 6u3
http://java.sun.com/javase/downloads/index.jsp
Scroll down to where it says "The J2SE Runtime Environment (JRE) allows end-users to run Java applications".
Click the "Download" button to the right.
Check the box that says: "Accept License Agreement".
The page will refresh.
Click on the link to download Windows Offline Installation with or without Multi-language and save to your desktop.
Close any programs you may have running - especially your web browser.
Go to Start > Control Panel double-click on Add/Remove programs and remove all older versions of Java.
Check for any item with Java Runtime Environment (JRE or J2SE) in the name.
J2SE Runtime Environment 5.0 Update 10
J2SE Runtime Environment 5.0 Update 11
J2SE Runtime Environment 5.0 Update 3
Click the Remove or Change/Remove button.
Repeat as many times as necessary to remove each Java version.

Reboot your computer once all Java components are removed.
Then from your desktop double-click on the download to install the newest version.

Kaspersky Online Scanner .
Your Antivirus and/or Antispyware may give a warning during the scan. This is perfectly normal
Go Here http://www.kaspersky.com/kos/eng/partne ... bscan.html

Read the Requirements and limitations before you click Accept.
Allow the ActiveX download if necessary
Once the database has downloaded, click Next.
Click Scan Settings and change the "Scan using the following antivirus database" from standard to extended and then click OK.
Click on "My Computer" and then put the kettle on!
When the scan has completed, click Save Report As...
Enter a name for the file in the Filename: text box and then click the down arrow to the right of Save as type: and select text file (*.txt)
Click Save - by default the file will be saved to your Desktop, but you can change this if you wish.

Please post the Kaspersky log in your reply.

tamskinner

January 4, 2008, 7:27 PM UTC

Hi Katana - results of Kaspersky scan below

-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Friday, January 04, 2008 7:23:46 PM
Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 4/01/2008
Kaspersky Anti-Virus database records: 502526
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
C:\
D:\
E:\
F:\
G:\
H:\
I:\

Scan Statistics:
Total number of scanned objects: 163937
Number of viruses found: 25
Number of infected objects: 203
Number of suspicious objects: 0
Duration of the scan process: 02:00:38

Infected Object Name / Virus Name / Last Action
C:\Documents and Settings\All Users\Application Data\blueyonder\PCguard\logs\FirewallService01-04-2008--17-03-08.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\blueyonder\PCguard\logs\Fw_Session.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\blueyonder\PCguard\logs\SafetyConsoleLog01-04-2008--17-03-45.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\blueyonder\PCguard\logs\ServiceModel01-04-2008--17-03-44.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Lenovo\messages\logs\lf000.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp Object is locked skipped
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\Mark\Application Data\Mozilla\Firefox\Profiles\ky48t48i.default\cert8.db Object is locked skipped
C:\Documents and Settings\Mark\Application Data\Mozilla\Firefox\Profiles\ky48t48i.default\GoogleToolbarData\googlesafebrowsing.db Object is locked skipped
C:\Documents and Settings\Mark\Application Data\Mozilla\Firefox\Profiles\ky48t48i.default\history.dat Object is locked skipped
C:\Documents and Settings\Mark\Application Data\Mozilla\Firefox\Profiles\ky48t48i.default\key3.db Object is locked skipped
C:\Documents and Settings\Mark\Application Data\Mozilla\Firefox\Profiles\ky48t48i.default\parent.lock Object is locked skipped
C:\Documents and Settings\Mark\Application Data\Mozilla\Firefox\Profiles\ky48t48i.default\search.sqlite Object is locked skipped
C:\Documents and Settings\Mark\Application Data\Mozilla\Firefox\Profiles\ky48t48i.default\urlclassifier2.sqlite Object is locked skipped
C:\Documents and Settings\Mark\Application Data\Telewest\PCguard advisor\client_gateway.log Object is locked skipped
C:\Documents and Settings\Mark\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\Mark\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\Mark\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\Mark\Local Settings\Application Data\Mozilla\Firefox\Profiles\ky48t48i.default\Cache\_CACHE_001_ Object is locked skipped
C:\Documents and Settings\Mark\Local Settings\Application Data\Mozilla\Firefox\Profiles\ky48t48i.default\Cache\_CACHE_002_ Object is locked skipped
C:\Documents and Settings\Mark\Local Settings\Application Data\Mozilla\Firefox\Profiles\ky48t48i.default\Cache\_CACHE_003_ Object is locked skipped
C:\Documents and Settings\Mark\Local Settings\Application Data\Mozilla\Firefox\Profiles\ky48t48i.default\Cache\_CACHE_MAP_ Object is locked skipped
C:\Documents and Settings\Mark\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Mark\Local Settings\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat Object is locked skipped
C:\Documents and Settings\Mark\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Mark\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\Mark\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Apple Computer\iTunes\iTunesPrefs.xml Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\blueyonder\PCguard\AdBlocker.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\blueyonder\PCguard\AdBlocker.dat.backup Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\blueyonder\PCguard\admanager.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\blueyonder\PCguard\Privacy.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\blueyonder\PCguard\Privacy.dat.backup Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\desktop.ini Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\eBay\eBay Toolbar2\User_tamskinner.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\GDIPFONTCACHEV1.DAT Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Google\GoogleEarth\myplaces.backup.kml Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Google\GoogleEarth\myplaces.kml Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Google\GoogleEarth\myplaces.kml.tmp Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Google\Local Search History\google%2Efroogle.w Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Google\Local Search History\google%2Eimages.w Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Google\Local Search History\google%2Enews.w Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Google\Local Search History\google%2Eweb.w Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\0.gif-59861b18-29ec13f7.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\0.gif-59861b18-29ec13f7.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\1.gif-59943299-12356685.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\1.gif-59943299-12356685.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\10.gif-5014c3b9-54935ee2.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\10.gif-5014c3b9-54935ee2.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\11.gif-5022db3a-24bb1d2e.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\11.gif-5022db3a-24bb1d2e.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\12.gif-5030f2bb-3cb700e4.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\12.gif-5030f2bb-3cb700e4.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\13.gif-503f0a3c-38bb47c2.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\13.gif-503f0a3c-38bb47c2.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\14.gif-504d21bd-58c91f55.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\14.gif-504d21bd-58c91f55.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\15.gif-505b393e-7dd74129.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\15.gif-505b393e-7dd74129.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\2.gif-59a24a1a-4ba4d971.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\2.gif-59a24a1a-4ba4d971.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\3.gif-59b0619b-21a0e52b.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\3.gif-59b0619b-21a0e52b.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\4.gif-59be791c-5fc3b8b1.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\4.gif-59be791c-5fc3b8b1.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\5.gif-59cc909d-28845e1b.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\5.gif-59cc909d-28845e1b.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\6.gif-59daa81e-1352ef65.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\6.gif-59daa81e-1352ef65.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\7.gif-59e8bf9f-5f418b71.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\7.gif-59e8bf9f-5f418b71.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\8.gif-59f6d720-4a90bd76.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\8.gif-59f6d720-4a90bd76.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\9.gif-5a04eea1-1b060fcc.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\9.gif-5a04eea1-1b060fcc.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\a3o.au-6b3f35a0-1c089617.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\a3o.au-6b3f35a0-1c089617.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\adds.gif-17afb9cc-789ad8c2.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\adds.gif-17afb9cc-789ad8c2.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\b.gif-58d536f5-44eccf4d.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\b.gif-58d536f5-44eccf4d.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\ball1.gif-4d59107a-597aad08.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\ball1.gif-4d59107a-597aad08.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\ball2.gif-4d6727fb-1f0b0a9e.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\ball2.gif-4d6727fb-1f0b0a9e.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\bg.au-290d0558-3882c306.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\bg.au-290d0558-3882c306.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\bg2.au-6fb519d0-1614f6f3.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\bg2.au-6fb519d0-1614f6f3.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\c0.gif-3aa9237c-17cf0137.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\c0.gif-3aa9237c-17cf0137.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\c1.gif-3ab73afd-127b4407.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\c1.gif-3ab73afd-127b4407.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\c2.gif-3ac5527e-631f43db.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\c2.gif-3ac5527e-631f43db.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\c3.gif-3ad369ff-11912999.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\c3.gif-3ad369ff-11912999.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\controls.gif-18ef0b05-19331a9f.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\controls.gif-18ef0b05-19331a9f.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\controls2.gif-7c3127cf-4e01e21b.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\controls2.gif-7c3127cf-4e01e21b.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\d.gif-58f165f7-20444f5c.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\d.gif-58f165f7-20444f5c.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\dest.gif-1de0447c-28504a52.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\dest.gif-1de0447c-28504a52.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\eclips.au-177e311f-6c2a8e4b.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\eclips.au-177e311f-6c2a8e4b.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\ef.gif-410bc9f0-1fd0c2e4.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\ef.gif-410bc9f0-1fd0c2e4.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\excited.au-5840c223-3c27fb9e.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\excited.au-5840c223-3c27fb9e.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\focus0.gif-679cd2f2-5c048040.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\focus0.gif-679cd2f2-5c048040.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\focus1.gif-67aaea73-2cd008cc.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\focus1.gif-67aaea73-2cd008cc.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\fulltime.gif-35f6572b-22ebfd63.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\fulltime.gif-35f6572b-22ebfd63.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\g0.gif-2c3a7543-11afda41.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\g0.gif-2c3a7543-11afda41.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\g1.gif-2c488cc4-77bf1aed.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\g1.gif-2c488cc4-77bf1aed.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\g2.gif-2c56a445-3b7667ba.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\g2.gif-2c56a445-3b7667ba.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\g3.gif-2c64bbc6-79051dbd.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\g3.gif-2c64bbc6-79051dbd.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\g4.gif-2c72d347-45400209.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\g4.gif-2c72d347-45400209.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\g5.gif-2c80eac8-301e7bed.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\g5.gif-2c80eac8-301e7bed.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\g6.gif-2c8f0249-71c34cbc.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\g6.gif-2c8f0249-71c34cbc.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\g7.gif-2c9d19ca-5fc27ae7.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\g7.gif-2c9d19ca-5fc27ae7.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\g8.gif-2cab314b-506b8a25.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\g8.gif-2cab314b-506b8a25.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\goal.au-16e62fca-3ac27696.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\goal.au-16e62fca-3ac27696.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\goal.gif-145adbe2-639fdb58.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\goal.gif-145adbe2-639fdb58.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\gol.gif-4105a7ac-17c326d1.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\gol.gif-4105a7ac-17c326d1.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\goldengoal.gif-2762716b-658b8656.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\goldengoal.gif-2762716b-658b8656.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\halftime.gif-29e110cf-2f01ac01.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\halftime.gif-29e110cf-2f01ac01.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\head.au-3ab851dd-58ab96a4.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\head.au-3ab851dd-58ab96a4.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\kick.au-605dc3b7-68f8a6bf.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\kick.au-605dc3b7-68f8a6bf.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\l.gif-596221ff-5794cca5.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\l.gif-596221ff-5794cca5.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\login.gif-1f9d883e-1ba92e38.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\login.gif-1f9d883e-1ba92e38.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\main.au-56f273b2-38600a1e.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\main.au-56f273b2-38600a1e.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\miniclip2.gif-148668fe-260a50a7.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\miniclip2.gif-148668fe-260a50a7.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\p.gif-599a8003-6372c1ee.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\p.gif-599a8003-6372c1ee.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\pass.au-5c1b420c-7c32fd48.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\pass.au-5c1b420c-7c32fd48.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\r.gif-59b6af05-4b457bbe.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\r.gif-59b6af05-4b457bbe.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\ref1.au-4be5e8ff-4ae4d315.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\ref1.au-4be5e8ff-4ae4d315.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\ref2.au-4be65d5e-555d39a0.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\ref2.au-4be65d5e-555d39a0.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\replay.au-3ec63744-4e0ade04.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\replay.au-3ec63744-4e0ade04.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\RSProxy.class-9fe5204-43b971be.class Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\RSProxy.class-9fe5204-43b971be.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\shad.gif-332be412-43d93963.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\shad.gif-332be412-43d93963.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\sky.jpg-35b449e6-526013d6.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\sky.jpg-35b449e6-526013d6.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\stad.gif-2df6ab1e-5fed69c1.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\stad.gif-2df6ab1e-5fed69c1.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\sws.gif-5cd9de22-35e52c65.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\sws.gif-5cd9de22-35e52c65.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\theme.au-41270486-6e3f623a.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\theme.au-41270486-6e3f623a.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\u.gif-59e0f588-62da8875.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\u.gif-59e0f588-62da8875.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\worldcup.gif-5f656f2f-36f9753f.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\worldcup.gif-5f656f2f-36f9753f.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\jar\boom.zip-9cdf889-7caa38d8.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\jar\boom.zip-9cdf889-7caa38d8.zip Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\jar\loader-1921061343.jar-6d028c5b-6eba2928.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\jar\loader-1921061343.jar-6d028c5b-6eba2928.zip Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\jar\okchat270.jar-5457c483-72409692.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\jar\okchat270.jar-5457c483-72409692.zip Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\jar\socca.jar-3fc469e5-21dab0f3.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\jar\socca.jar-3fc469e5-21dab0f3.zip Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\deployment.properties Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\log\plugin142.trace Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Joy Long Test\0 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Joy Long Test\bciukvzd.exe Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Joy Long Test\Itchburnproxy.exe Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Joy Long Test\ofonhnrk.exe Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Joy Long Test\style base setup load.exe Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Joy Long Test\user less.exe Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Joy Long Test\wsgvhxwb.exe Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Director MX 2004\Tennis Titans\Prefs\TEN1k_curr1.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Director MX 2004\Tennis Titans\Prefs\TEN1k_hardware.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Director MX 2004\Tennis Titans\Prefs\TEN1k_match.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Director MX 2004\Tennis Titans\Prefs\TEN1k_options.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Director MX 2004\Tennis Titans\Prefs\TEN1k_players.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#Security\FlashPlayerTrust\FreezeProducts.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\adidas.uk.tangozebra.com\00005986\uk\main.swf\user_data.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\clubpenguin.com\SaveGame.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\ebaystatic.com\ft1693-1.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\flashtalking.com\ft523-2.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\flashtalking.com\ft523-5.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\flashtalking.com\ft523-8.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\mediaplex.com\ft575-1.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\miniclip.com\ads\homepagefillerad300x250.swf\MiniclipGlobal300x250.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\miniclip.com\games\alien-attack\en\alienattack_HS.swf\MiniclipHighscores.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\miniclip.com\games\disc-golf\en\discgolf.swf\MiniclipLoaderAd.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\miniclip.com\games\elastic-soccer\en\elasticsoccer.swf\MiniclipHighscores.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\miniclip.com\games\electro-air-hockey\en\airhockey.swf\eah.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\miniclip.com\games\gyroball\en\gyroball.swf\MiniclipHighscores.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\miniclip.com\games\monster-truck\en\swf\mt_gameSounds.swf\MiniclipHighscores.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\miniclip.com\games\skidoo-tt\en\skidoott.swf\MiniclipLoaderAd.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\miniclip.com\games\world-cup-soccer\en\world-cup-soccer.dcr\MiniclipHighscores.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\miniclip.com\swfcontent\highscore.swf\MiniclipHighscores.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\mochibot.com\com.mochibot.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\pagead2.googlesyndication.com\pagead\googleadplayer.swf\mediaPlayerUserSettings.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\www.adidas.com\campaigns\verticalsfootball\content\logon\logon.swf\adidasFootball.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\www.miniclip.com\games\motocross-fever\en\motocross_x.dcr\motocross.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\www.miniclip.com\games\ping-pong\en\pingpong.swf\so.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\www.miniclip.com\games\scribble\en\scribble.swf\scribble_1.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\www.miniclip.com\games\scribble\en\scribble.swf\scribble_gdf.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\www.miniclip.com\games\stunt-driver\en\stunt_driver.dcr\stunt_driver.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\www.miniclip.com\games\world-cup-soccer\en\world-cup-soccer.dcr\world_cup_soccer.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\www.miniclip.com\swfcontent\lobby.swf\MonkeySnowfight.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\www.ugotgames.com\11.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\www.youtube.com\soundData.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\www.youtube.com\videostats.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\zedo.com\tram040406.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#adidas.uk.tangozebra.com\settings.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#clubpenguin.com\settings.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#ebaystatic.com\settings.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#flashtalking.com\settings.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#mediaplex.com\settings.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#miniclip.com\settings.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#mochibot.com\settings.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#pagead2.googlesyndication.com\settings.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.adidas.com\settings.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.miniclip.com\settings.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.ugotgames.com\settings.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.youtube.com\settings.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#zedo.com\settings.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\dirapi.mch Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\Prefs\A5ABYSJ3\kbox_g124.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\Prefs\A5ABYSJ3\kbox_g124b.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\Prefs\A5ABYSJ3\kbox_g124c.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\Prefs\A5ABYSJ3\pingisminidemo.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\Prefs\A5ABYSJ3\rd_curmotd.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\Prefs\A5ABYSJ3\rd_membericon.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\Prefs\A5ABYSJ3\rd_snowfight_keys.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\Prefs\A5ABYSJ3\rd_snowfight_settings.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\Prefs\A5ABYSJ3\TENw1k_curr1.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\Prefs\A5ABYSJ3\TENw1k_hardware.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\Prefs\A5ABYSJ3\TENw1k_match.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\Prefs\A5ABYSJ3\TENw1k_options.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\Prefs\A5ABYSJ3\TENw1k_players.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\Prefs\A5ABYSJ3\_RD_.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\Prefs\A5ABYSJ3\_RD_Global.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\Prefs\A5ABYSJ3\_RD_sbwaterslide-miniclip.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\Prefs\A5ABYSJ3\__preftest.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\Prefs\A5ABYSJ3\__skive_global_data.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\Prefs\A5ABYSJ3\__skive_totefreekick_mc_data.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\Shockwave Log Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\xtras\download\AndradeArts\MoveCursorw32\MoveCursor.x32 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\xtras\download\MacromediaInc\AnimatedGIFAsset\Animated GIF Asset.X32 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\xtras\download\MacromediaInc\DirectSound\DirectSound.x32 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\xtras\download\MacromediaInc\FlashAsset\Flash Asset.x32 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\xtras\download\MacromediaInc\FontAsset\Font Asset.x32 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\xtras\download\MacromediaInc\FontXtra\Font Xtra.x32 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\xtras\download\MacromediaInc\Havok\Havok.x32 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\xtras\download\MacromediaInc\MacroMix\MacroMix.x32 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\xtras\download\MacromediaInc\Shockwave3dAsset\Shockwave 3d Asset.x32 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\xtras\download\MacromediaInc\SoundControl\Sound Control.x32 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\xtras\download\MacromediaInc\SWA\swadcmpr.x32 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\xtras\download\MacromediaInc\SWA\SWASTRM.X32 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\xtras\download\MacromediaInc\TextAsset\Text Asset.x32 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\xtras\download\MacromediaInc\TextXtra\TextXtra.x32 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\xtras\download\MacromediaInc\XMLParser\XMLParser.X32 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\Content\2BF68F4714092295550497DD56F57004 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\Content\486CC6AFD08942336C61FCD401C4A1D1 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\Content\5C8DDA36D60247082B142836039F4636 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\Content\60E31627FDA0A46932B0E5948949F2A5 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\Content\696F3DE637E6DE85B458996D49D759AD Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\Content\71644221AC231DBD2359C18EBB2118DC Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\Content\74BFD122C0875EC75DBE5C6DB4C59019 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\Content\7C8A03C4580C6B04FDF34357F3474EDC Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\Content\A44F4E7CB3133FF765C39A53AD8FCFDD Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\Content\A8FABA189DB7D25FBA7CAC806625FD30 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\Content\B2F4B1D39F0694C6CDB433BC3CCF1418 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\Content\B82262A5D5DA4DDACE9EDA7F787D0DEB Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\Content\C571B417AAF1F617555A0486AB3F5361 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\Content\DC2135CED98D8A4D7C0CEE202BB0B810 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\Content\F482C95F83F1B59228F1B1E720F2EDF1 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\Content\F5A17C00E427F919C4A49EEF5AD0EE53 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\MetaData\2BF68F4714092295550497DD56F57004 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\MetaData\486CC6AFD08942336C61FCD401C4A1D1 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\MetaData\5C8DDA36D60247082B142836039F4636 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\MetaData\60E31627FDA0A46932B0E5948949F2A5 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\MetaData\696F3DE637E6DE85B458996D49D759AD Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\MetaData\71644221AC231DBD2359C18EBB2118DC Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\MetaData\74BFD122C0875EC75DBE5C6DB4C59019 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\MetaData\7C8A03C4580C6B04FDF34357F3474EDC Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\MetaData\A44F4E7CB3133FF765C39A53AD8FCFDD Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\MetaData\A8FABA189DB7D25FBA7CAC806625FD30 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\MetaData\B2F4B1D39F0694C6CDB433BC3CCF1418 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\MetaData\B82262A5D5DA4DDACE9EDA7F787D0DEB Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\MetaData\C571B417AAF1F617555A0486AB3F5361 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\MetaData\DC2135CED98D8A4D7C0CEE202BB0B810 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\MetaData\F482C95F83F1B59228F1B1E720F2EDF1 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\MetaData\F5A17C00E427F919C4A49EEF5AD0EE53 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Crypto\RSA\S-1-5-21-1381385058-3852577522-4169218411-1009\533145ef011ddf5ca3983e2545a902b4_d92f6388-d58d-40cf-83bf-6aaa833ec81c Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Crypto\RSA\S-1-5-21-1381385058-3852577522-4169218411-1009\e346aa0582ed1e833c77f4ad46188426_d92f6388-d58d-40cf-83bf-6aaa833ec81c Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Internet Explorer\brndlog.bak Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Internet Explorer\brndlog.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Internet Explorer\Desktop.htt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Internet Explorer\Internet Explorer Wallpaper.bmp Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Internet Explorer\Quick Launch\desktop.ini Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Internet Explorer\Quick Launch\iTunes.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Microsoft Outlook.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Internet Explorer\Quick Launch\Winferno Registry Power Cleaner.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Media Player\00445B83.wpl Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2256670353\sqmnoopt00.sqm Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Backgrounds\map.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Backgrounds\TFR10.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Backgrounds\TFR11.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Backgrounds\TFR12.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Backgrounds\TFR13.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Backgrounds\TFRF.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\DynamicBackgrounds\map.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\DynamicBackgrounds\TFR1B.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\DynamicBackgrounds\TFR26.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\DynamicBackgrounds\TFR31.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\DynamicBackgrounds\TFR3C.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\MapFile\TFR44.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\MapFile\TFR45.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\MapFile\TFR64.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\MapFile\TFRE.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\sqmnoopt00.sqm Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\sqmnoopt01.sqm Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\sqmnoopt02.sqm Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\sqmnoopt03.sqm Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\sqmnoopt04.sqm Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\sqmnoopt05.sqm Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\sqmnoopt06.sqm Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\sqmnoopt07.sqm Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\sqmnoopt08.sqm Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\UserTile\map.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\UserTile\TFR3.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\UserTile\TFR4.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\UserTile\TFR5.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\UserTile\TFR6.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\UserTile\TFR7.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\UserTile\TFR8.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\UserTile\TFR9.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\UserTile\TFRA.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\UserTile\TFRB.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\UserTile\TFRC.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\UserTile\TFRD.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Winks3\map.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Winks3\TFR47.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Winks3\TFR49.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Winks3\TFR4B.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Winks3\TFR4D.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Winks3\TFR4F.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Winks3\TFR51.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Winks3\TFR53.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Winks3\TFR55.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Winks3\TFR57.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Winks3\TFR59.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Winks3\TFR5B.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Winks3\TFR5D.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Winks3\TFR5F.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Winks3\TFR61.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Winks3\TFR63.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Backgrounds\map.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Backgrounds\TFR35.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Backgrounds\TFR36.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Backgrounds\TFR37.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Backgrounds\TFR38.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Backgrounds\TFR39.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Backgrounds\TFR396.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Backgrounds\TFR397.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Backgrounds\TFR398.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Backgrounds\TFR399.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Backgrounds\TFR39A.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\DynamicBackgrounds\map.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\DynamicBackgrounds\TFR3D.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\DynamicBackgrounds\TFR48.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\DynamicBackgrounds\TFR53.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\DynamicBackgrounds\TFR5E.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\MapFile\TFR395.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\MapFile\TFR66.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\MapFile\TFR67.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\MapFile\TFR86.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\sqmnoopt00.sqm Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\sqmnoopt01.sqm Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\sqmnoopt02.sqm Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\sqmnoopt03.sqm Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\UserTile\map.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\UserTile\TFR38A.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\UserTile\TFR38B.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\UserTile\TFR38C.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\UserTile\TFR38D.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\UserTile\TFR38E.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\UserTile\TFR38F.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\UserTile\TFR390.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\UserTile\TFR391.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\UserTile\TFR392.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\UserTile\TFR393.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\UserTile\TFR394.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Winks3\map.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Winks3\TFR69.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Winks3\TFR6B.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Winks3\TFR6D.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Winks3\TFR6F.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Winks3\TFR71.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Winks3\TFR73.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Winks3\TFR75.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Winks3\TFR77.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Winks3\TFR79.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Winks3\TFR7B.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Winks3\TFR7D.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Winks3\TFR7F.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Winks3\TFR81.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Winks3\TFR83.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Winks3\TFR85.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3072885681\sqmnoopt00.sqm Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Office\MSO1033.acl Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Office\MSOut10.pip Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Office\Recent\06.09.27. Daily Bulletin.doc.url Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Office\Recent\Art.LNK Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Office\Recent\cool pics 4 me!!.LNK Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Office\Recent\Doc1.LNK Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Office\Recent\index.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Office\Recent\msg_attachments on http://www.sct1.net.url Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Office\Recent\Templates.LNK Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Office\Word10.pip Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Outlook\outcmd.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Outlook\Outlook.srs Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Outlook\VIEWS.DAT Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Proof\CUSTOM.DIC Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Protect\CREDHIST Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Protect\S-1-5-21-1381385058-3852577522-4169218411-1009\25e13c7d-ec52-4b27-867d-3d2bf6582691 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Protect\S-1-5-21-1381385058-3852577522-4169218411-1009\4401bb5b-673f-44b2-8c94-e1c75a010ef8 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Protect\S-1-5-21-1381385058-3852577522-4169218411-1009\463740d1-5f21-4495-9d47-88b2ba9b47bc Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Protect\S-1-5-21-1381385058-3852577522-4169218411-1009\b1afc900-082d-483f-b97a-e3c0032564f3 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Protect\S-1-5-21-1381385058-3852577522-4169218411-1009\ced00369-224a-465e-956c-dd42852b3912 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Protect\S-1-5-21-1381385058-3852577522-4169218411-1009\d1847f5a-0cd8-49db-a4d6-b2fe45dd316e Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Protect\S-1-5-21-1381385058-3852577522-4169218411-1009\f9e3c824-f053-49e4-9448-915fc3fae2d1 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Protect\S-1-5-21-1381385058-3852577522-4169218411-1009\Preferred Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Protect\S-1-5-21-3589872248-1821354942-904758527-1003\fafb8e3f-9c21-471f-bf23-e4fde1890e36 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Protect\S-1-5-21-3589872248-1821354942-904758527-1003\Preferred Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Protect\S-1-5-21-3972929438-621129394-426773285-1003\9b8808bf-0636-4772-88ce-67cb1643b290 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Protect\S-1-5-21-3972929438-621129394-426773285-1003\Preferred Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Templates\Normal.dot Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Templates\~$Normal.dot Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Windows\Themes\Custom.theme Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Word\AutoRecovery save of Document1.asd Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Real\Msg\Category.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Real\Msg\Messages.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Real\Msg\SCategory.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Real\RealMediaSDK\3e1f2700.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Real\RealMediaSDK\52263000.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Real\RealMediaSDK\cookies.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Real\RealPlayer\ErrorLogs\DownloadMgr.log Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Real\RealPlayer\History\KS2 ReviseWise Mental Maths.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Real\RealPlayer\History\ks2maths.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Real\RealPlayer\lclkdb.son Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Real\RealPlayer\realplayer.ste Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Real\RealPlayer\skins\data\normal\imgcache.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Real\RealPlayer\skins\data\normal\state.ini Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Real\RealPlayer\viz.ini Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Real\rnadmin\rnsystem.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\SpamBlockerUtility_Icons\Jamster2.ico Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\SpamBlockerUtility_Icons\Registryrepair.ico Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\SpamBlockerUtility_Icons\wallpapere1.ico Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\0.gif-54093bde-2617c8d7.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\0.gif-54093bde-2617c8d7.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\1.gif-5417535f-5660cb28.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\1.gif-5417535f-5660cb28.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\10.gif-4a97e47f-355a0b9a.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\10.gif-4a97e47f-355a0b9a.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\11.gif-4aa5fc00-11376b59.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\11.gif-4aa5fc00-11376b59.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\12.gif-4ab41381-47bcae31.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\12.gif-4ab41381-47bcae31.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\13.gif-4ac22b02-1e6f020e.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\13.gif-4ac22b02-1e6f020e.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\14.gif-4ad04283-6c6406fa.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\14.gif-4ad04283-6c6406fa.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\15.gif-4ade5a04-3498de7a.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\15.gif-4ade5a04-3498de7a.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\2.gif-54256ae0-5e106903.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\2.gif-54256ae0-5e106903.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\3.gif-54338261-77319d6a.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\3.gif-54338261-77319d6a.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\4.gif-544199e2-14fa9cd0.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\4.gif-544199e2-14fa9cd0.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\5.gif-544fb163-55574ccb.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\5.gif-544fb163-55574ccb.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\6.gif-545dc8e4-4abb923b.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\6.gif-545dc8e4-4abb923b.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\7.gif-546be065-6969a484.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\7.gif-546be065-6969a484.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\8.gif-5479f7e6-50e4bead.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\8.gif-5479f7e6-50e4bead.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\9.gif-54880f67-43fbf9ca.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\9.gif-54880f67-43fbf9ca.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\a3o.au-65c25666-342eed13.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\a3o.au-65c25666-342eed13.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\adds.gif-1232da92-4055ddae.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\adds.gif-1232da92-4055ddae.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\b.gif-535857bb-21b6af59.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\b.gif-535857bb-21b6af59.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\ball1.gif-47dc3140-6b7a95e1.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\ball1.gif-47dc3140-6b7a95e1.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\ball2.gif-47ea48c1-14a3da13.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\ball2.gif-47ea48c1-14a3da13.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\bg.au-2390261e-54be38df.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\bg.au-2390261e-54be38df.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\bg2.au-6a383a96-69e7579c.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\bg2.au-6a383a96-69e7579c.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\c0.gif-352c4442-680d5bc0.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\c0.gif-352c4442-680d5bc0.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\c1.gif-353a5bc3-56c342f0.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\c1.gif-353a5bc3-56c342f0.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\c2.gif-35487344-6f892c8b.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\c2.gif-35487344-6f892c8b.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\c3.gif-35568ac5-267cea78.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\c3.gif-35568ac5-267cea78.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\controls.gif-13722bcb-4c32a956.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\controls.gif-13722bcb-4c32a956.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\controls2.gif-76b44895-2a56abff.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\controls2.gif-76b44895-2a56abff.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\d.gif-537486bd-7950180f.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\d.gif-537486bd-7950180f.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\dest.gif-18636542-463d50ea.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\dest.gif-18636542-463d50ea.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\eclips.au-120151e5-51dbc531.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\eclips.au-120151e5-51dbc531.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\ef.gif-3b8eeab6-77bc2219.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\ef.gif-3b8eeab6-77bc2219.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\europeancup.jpg-7104011-7b4855b6.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\europeancup.jpg-7104011-7b4855b6.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\excited.au-52c3e2e9-16893ab5.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\excited.au-52c3e2e9-16893ab5.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\focus0.gif-621ff3b8-22cbc358.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\focus0.gif-621ff3b8-22cbc358.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\focus1.gif-622e0b39-5f26cbf0.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\focus1.gif-622e0b39-5f26cbf0.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\fulltime.gif-307977f1-123cc30e.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\fulltime.gif-307977f1-123cc30e.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\g0.gif-26bd9609-48b109de.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\g0.gif-26bd9609-48b109de.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\g1.gif-26cbad8a-6bb81506.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\g1.gif-26cbad8a-6bb81506.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\g2.gif-26d9c50b-536fe3b4.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\g2.gif-26d9c50b-536fe3b4.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\g3.gif-26e7dc8c-4897cd77.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\g3.gif-26e7dc8c-4897cd77.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\g4.gif-26f5f40d-43b8e744.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\g4.gif-26f5f40d-43b8e744.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\g5.gif-27040b8e-67f6a2af.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\g5.gif-27040b8e-67f6a2af.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\g6.gif-2712230f-31e5d6fb.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\g6.gif-2712230f-31e5d6fb.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\g7.gif-27203a90-4b875154.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\g7.gif-27203a90-4b875154.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\g8.gif-272e5211-410e00a3.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\g8.gif-272e5211-410e00a3.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\goal.au-11695090-3d41298f.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\goal.au-11695090-3d41298f.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\goal.gif-eddfca8-535399d0.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\goal.gif-eddfca8-535399d0.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\gol.gif-3b88c872-62d4dd90.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\gol.gif-3b88c872-62d4dd90.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\goldengoal.gif-21e59231-24d2c5ee.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\goldengoal.gif-21e59231-24d2c5ee.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\halftime.gif-24643195-34c8670b.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\halftime.gif-24643195-34c8670b.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\head.au-353b72a3-2a4c4886.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\head.au-353b72a3-2a4c4886.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\kick.au-5ae0e47d-6a12f0c4.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\kick.au-5ae0e47d-6a12f0c4.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\l.gif-53e542c5-25189ee3.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\l.gif-53e542c5-25189ee3.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\main.au-51759478-673ed345.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\main.au-51759478-673ed345.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\miniclip2.gif-f0989c4-26aa86e6.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\miniclip2.gif-f0989c4-26aa86e6.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\p.gif-541da0c9-58fe858e.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\p.gif-541da0c9-58fe858e.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\pass.au-569e62d2-102f44c0.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\pass.au-569e62d2-102f44c0.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\r.gif-5439cfcb-7cb7a366.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\r.gif-5439cfcb-7cb7a366.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\ref1.au-466909c5-38693171.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\ref1.au-466909c5-38693171.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\ref2.au-46697e24-3877aff2.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\ref2.au-46697e24-3877aff2.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\replay.au-3949580a-21b81129.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\replay.au-3949580a-21b81129.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\replay.gif-6a3a43fc-46ff7a04.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\replay.gif-6a3a43fc-46ff7a04.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\shad.gif-2daf04d8-600e0a71.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\shad.gif-2daf04d8-600e0a71.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\sky.jpg-30376aac-3870d645.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\sky.jpg-30376aac-3870d645.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\stad.gif-2879cbe4-418de68f.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\stad.gif-2879cbe4-418de68f.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\sws.gif-575cfee8-486cd896.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\sws.gif-575cfee8-486cd896.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\theme.au-3baa254c-472fdcfe.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\theme.au-3baa254c-472fdcfe.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\u.gif-5464164e-34dc6249.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\u.gif-5464164e-34dc6249.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\worldcup.gif-59e88ff5-519fc17d.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\worldcup.gif-59e88ff5-519fc17d.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\socca.jar-3a478aab-3979708e.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\socca.jar-3a478aab-3979708e.zip Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\deployment.properties Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\log\plugin150_10.trace Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\log\plugin150_11.trace Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Telewest\PCguard advisor\CampaignStore.xml Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Telewest\PCguard advisor\client_gateway.log Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Telewest\PCguard advisor\client_gateway.log.1 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Telewest\PCguard advisor\downloads\spa13-football-200712.41.zip.dir\en\broadband-advisor.css Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Telewest\PCguard advisor\downloads\spa13-football-200712.41.zip.dir\en\images\vm-arrow-hover.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Telewest\PCguard advisor\downloads\spa13-football-200712.41.zip.dir\en\images\vm-coca-cola.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Telewest\PCguard advisor\downloads\spa13-football-200712.41.zip.dir\en\images\vm-mr-sheepskin-bg.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Telewest\PCguard advisor\downloads\spa13-football-200712.41.zip.dir\en\images\vm-mr-sheepskin.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Telewest\PCguard advisor\downloads\spa13-football-200712.41.zip.dir\en\images\vm-premier.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Telewest\PCguard advisor\downloads\spa13-football-200712.41.zip.dir\en\images\vm-sport-url.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Telewest\PCguard advisor\downloads\spa13-football-200712.41.zip.dir\en\images\vm-strapline.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Telewest\PCguard advisor\downloads\spa13-football-200712.41.zip.dir\en\index.html Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Telewest\PCguard advisor\downloads\Telewest-Vista_message-06022007.41.zip.dir\en\index.html Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Telewest\PCguard advisor\EventStore.xml Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Telewest\PCguard advisor\SoftwarePackageStore.xml Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Telewest\PCguard advisor\UpdateStore.xml Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\ThinkVantage\Client Security\encobject.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\ThinkVantage\Client Security\hibernation.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\ThinkVantage\Client Security\swkeys.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\ThinkVantage\Client Security\symkeys.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\WholeSecurity\wcid0.log Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\WholeSecurity\wsasc.zip Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\Desktop.ini Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\contactcoll.cache Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\contactcoll.cache Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\02c8b6f1-ade1-4539-b988-262a10f0c9b4.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\060b64d8-40e4-4ddc-b0e7-7c0d093c5e77.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\076528bc-e654-4edd-9448-56187148b72a.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\08533e4f-18ea-4a8d-a8bb-fff3d66e0f0c.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\09519f2e-58c2-4b38-bed9-8caafd242ab4.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\0b7f8510-9825-4c59-88b4-7b7b9c683d8b.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\0ba0d637-16d0-497e-8dff-a15d03db3c6a.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\0f05e43e-ec16-4db2-8d75-c2302ca3680d.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\157176da-0f5d-4c6a-9859-fb155a197474.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\1b6e4dd8-27a3-444c-a005-512d5e71701f.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\1bf786c3-16bd-47d4-8f17-f48994fab8b2.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\1ce61a5a-1389-40d5-bcd2-c8074e8ad339.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\1dd6935b-1279-4842-a9a0-09af6b42b82c.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\219e4d94-bb21-4bde-afe8-3f40d40174ea.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\227aa116-d9ea-4c9f-835f-5d23a280ee70.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\248451ba-517e-4195-8430-205a6fca7b67.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\2603f6f8-55bd-4e92-8127-c21870c98d9c.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\2a68f7d0-c02c-482e-8ec2-54f334b7156b.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\2f37f1ee-e6bc-4c40-afbf-168362225345.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\30257d21-9a7c-4bf9-8fca-02d43f6fe390.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\32549664-a961-4b40-84cc-07d8968d2f9b.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\335d347a-cb4e-4c17-b110-96227805a746.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\39cce79c-5dd6-4de6-a847-3f92b1260bb1.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\3a3f6685-7a46-4eb2-90c6-6e547fae6b82.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\3d031795-848e-4ead-b700-108ca41bf7db.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\3f466fa6-7f17-485e-9601-6f22cb9c7669.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\3fd47cd9-ffc0-4a95-a555-557caa5ba408.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\471baf50-ee77-491c-9433-c7419e85a695.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\4d970cfe-114f-4a91-b1d2-467be418fbca.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\4fadb838-0541-4a74-bf26-443295006d59.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\50813dfd-49de-4c61-97e0-bda2bd6be087.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\559aa0db-0a58-4274-8f30-ef405f37b565.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\582e7157-5159-4eb2-be79-be600e9e7dc5.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\5a830386-b552-4169-9d01-36995c935358.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\5b5567bf-7e5d-4938-a8a1-6ba9b0c0f8c1.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\62053c39-a0e1-4ca3-b40b-370a4d396a95.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\6425d1af-8180-4ad6-89d7-e6dd71c16af1.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\6696c3a2-8ecc-4a8c-a3a7-3700245ce2a0.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\6a691a08-15f1-4c1f-ac8c-fab96b5b344b.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\6ad33b0b-e53a-4b1c-a403-23f5ccb494ae.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\6c9bc1bf-0489-4376-b642-eceb58276839.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\6cd75d78-0c21-4706-b6f3-4b777ad4a0af.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\6f0176fa-a652-423d-9588-ea4ebdb6ea1c.WindowsLiveGroup Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\6f32b30c-ae2b-4c57-b07d-7204cefefbe9.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\70a4e9ab-d2b1-4bae-be2a-c6f3e1188a0b.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\73854001-2f53-4ae4-86fe-bf933496441c.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\7b701a9f-dd44-4ad0-ac81-441265fec836.WindowsLiveGroup Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\7cc21c2a-0ec8-4fe6-a0ff-f5a806eef6fe.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\7df8e134-1c1b-4de8-9b71-c97322391e53.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\7e176b87-d83a-4bd7-b578-2e64933813a9.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\802e7f72-e16a-462b-a576-c76abc5325c1.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\8170bbd4-12b1-4a10-8d11-c2e4ad7fb5ad.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\8602f36c-d970-4907-97e8-6d75ada3b502.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\88022c26-ce94-4dbd-9b40-0ec9ede1f0f5.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\891729ec-0125-4da5-8947-4fd5154309b9.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\8c2e4b1c-6049-442c-8953-ae525a928fa9.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\8d673a33-5154-441f-9bf6-1ad227002c6c.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\8d6ac43c-87d3-4ae6-8e4a-a4528d5da017.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\8e412a1f-20ab-4163-b766-d953e40cccc1.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\9017167e-f718-40ba-b8f9-4a8ca4679f62.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\925aa01c-ba0e-438f-9511-f3d79bf7dcc6.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\926314b7-8120-4f5e-8ec3-cb07f321bed4.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\9386b974-14ce-4658-9d2e-ee45714367f7.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\96c6e2fb-b0b1-483c-a8bf-9ac155c112b0.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\9d93d652-5856-40b5-a1fa-42c4002c44ea.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\a3fa1516-afcc-4a7c-80c3-5ccccc25134b.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\a43316d7-7cff-431e-be05-5d754f3d8a17.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\a463259a-ac59-4911-b55d-afedf24c5bcd.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\a506b0ab-9a60-427c-a22e-e28d9b7787bf.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\a69ac453-4fc7-4d2e-a79b-713fc9fd10e0.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\a86e1871-2712-4ece-8176-9253da582d4f.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\a8d71fde-391e-41de-9d37-dadd685ef8ec.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\ac9a2bd2-9d7a-44d3-80c6-431e88ea1d6e.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\b083b588-7113-464e-8982-0966be94a541.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\ba9ea89e-f63e-4ee1-8c45-55001096ecee.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\bcc11ff1-3eeb-4c11-883c-9616aaa547c0.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\bdd4194b-fd4b-4890-85c2-c47bddadf835.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\c160edad-49a5-45a6-b05e-d771d242e3ed.WindowsLiveGroup Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\c337ce21-1feb-47f9-b5a4-2da469620b49.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\ce663e8b-0023-4da6-af57-b800d4c1b76a.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\cf1992bb-2ead-43f2-ac29-7a02c758679a.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\contactcoll.cache Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\d0fb169e-0334-47f8-af28-ff03f8228efe.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\d2645b66-f881-4aa2-afd0-eaad0a6a5c56.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\d3092cab-36ee-48a6-b931-a80e33fab766.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\d8f83c6a-a623-4922-a2b3-6a781ff01c79.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\dba46517-68e9-482a-af30-3bc62a0122d6.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\e1011385-297d-46dd-8b73-93ca87fb9253.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\e2af41e9-46e8-4ff1-8e33-11f5e4b51ca5.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\e33246cb-5621-448c-866c-3b96974ad77f.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\e43276a9-ced3-4bce-a0e7-9807bbd75b7c.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\e5021855-9431-43d8-82cd-c5ae827e6208.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\e9347906-3aa1-420d-8a9c-487e88eb8f0a.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\e93d4df0-bc3f-4209-bcb6-d0fec1837477.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\ea395214-1d75-4b1e-98ac-1b9b6551cb91.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\f25f3fa5-bbf5-4e57-be45-6a8c115b24e6.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\f2af446f-e756-4bd3-a991-087f3c857ffd.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\f3147605-fddf-4914-8b98-3bb1d2b61d26.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\f3e82864-a0ca-48c5-ad24-b765037548c0.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\fb84e6a0-1e7d-46be-861f-f02e29d71532.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\ffb3bfd1-0962-48f7-b1b5-d66a117f2caa.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\002815dc-2a67-4d31-ab68-15ce15edf7f5.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\08ae5733-6920-453c-9c6c-4a0dc7450e03.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\18f9a6e4-e5db-43d1-aa23-9a46ec382121.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\2ae1ab84-64bc-4d4a-96f1-65de1969dc19.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\31b980af-2e40-4a8e-a135-b911896aae8d.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\35b6298a-2cfb-4e06-b983-be1a0513ff35.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\502e8b8d-f3d9-41e2-bd7f-9f87668c6af7.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\51029bce-282b-44cf-9a60-bae2df1277ca.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\6062d513-13e3-4556-8d6b-3e92149b5b1f.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\62dbb110-247a-4ee2-b5fb-8c75cf54a46a.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\69ae915f-5ddf-4829-a27d-a5658257fbe0.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\7986323e-de99-4137-b01c-830c5b574626.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\7c5c567e-26ea-4912-83fb-61180d80181c.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\85669a7c-5987-4758-bd0c-8b6b24349d16.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\86f63c93-f445-431c-b712-f6ff29c24893.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\8706f040-d93b-4446-a570-853d4deb95c4.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\98155310-1950-4bde-b3d1-06e431858e59.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\a2e99f26-55c5-4d6b-bef7-b93acefe3cbc.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\ab292340-7b57-438e-b156-5787835507c7.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\b9c6d2ce-81eb-4cff-ae4d-07293c4719fb.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\bf125fc4-7f9d-4662-9feb-63ca7fdf66cc.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\cd581e24-7955-44ea-bfb2-dc81f15ee5f5.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\contactcoll.cache Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\da43c344-87e9-4e50-b43f-a1b1865197ce.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\[removed]\da5c93d6-1593-4880-8f15-ca2f89ada764.WindowsLiveGroup Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@216.239.59[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@422[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@422[4].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@addictinggames[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@adidas[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@advertising[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@atdmt[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed]-wait[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@a[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@businessinternetdirectory[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@canadiancrc[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@carnavalcasino[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@channel-ai[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@connextra[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@connextra[3].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@connextra[4].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@connextra[5].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@crazymonkeygames[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@datingforparents[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@digitalclarity.112.2o7[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@doubleclick[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@ebayobjects[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@ebayrtm[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@ebay[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed]-network[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed]-on-internet[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@errorsafe[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@facebook[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@flipcorp[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@freeze[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@gamesheep[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@geocities[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@google[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@google[3].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@go[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@ign[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][3].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][4].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][5].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@jsp[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@kontera[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@live[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@login[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@m3[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@mb[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@metacafe.122.2o7[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@metacafe[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@miniclip[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@msn[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@nytdigital[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@nytimes[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@overture[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][3].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@pkrcasino[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@pogo[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@pokemon-games[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@questionmarket[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@real[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed]-games-online[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@reviewcentre[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@s2d6[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@snap[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@systemdoctor[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@toontown[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@travelblog[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@VictorChandler[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@wallpapers[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@websiteceo[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@wowpapers[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@wowpapers[3].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@www.adserver5[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed]-ai[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed]-ai[3].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed]-media[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@yahoo[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@youtube[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\AirHockey 3D.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\cool things\pics\Arsenal.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\cool things\pics\Bulbasaur with trainers.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\cool things\pics\Charizard.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\cool things\pics\Galactik footie.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\cool things\pics\girls.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\cool things\pics\Gotta catch them all.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\cool things\pics\Latias.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\cool things\pics\Latios.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\cool things\pics\Mew.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\cool things\pics\Pokèmon- Mew + Mew2.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\cool things\pics\Pokèmon- Pigitu with Ash.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\cool things\pics\Power rangers mf 1.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\cool things\pics\Power rangers mf 2.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\cool things\pics\Squirtle2.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\cool things\pics\Thierry Henry.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\cool things\pics\Thumbs.db Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\cool things\pics\Torchic.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\Crazy Golf.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\Free Dolphins Screensaver.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\Free Whales ScreenSaver.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\InternetGameBox.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\More Games at GameHouse.com.url Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\Unused Desktop Shortcuts\Adobe Reader 7.0.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\Unused Desktop Shortcuts\AOL Double-Click to Start.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\Unused Desktop Shortcuts\AvRack.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\Unused Desktop Shortcuts\blueyonder PCguard.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\Unused Desktop Shortcuts\EarthLink Internet 30 Days Free.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\Unused Desktop Shortcuts\ESPR800 Referene Guide.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\Unused Desktop Shortcuts\ESPR800 Software Guide.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\Unused Desktop Shortcuts\iRiverManager.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\Unused Desktop Shortcuts\iTunes.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\Unused Desktop Shortcuts\Lenovo Care.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\Unused Desktop Shortcuts\Memory-Map OS2004.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\Unused Desktop Shortcuts\QuickTime Player.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\Unused Desktop Shortcuts\RealPlayer.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\Unused Desktop Shortcuts\Shortcut to blueyonder Roaming Access.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\Unused Desktop Shortcuts\ZoomBrowser EX.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\Upgrade Living 3D Dolphins!.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\Windows Media Player.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\BBC - Schools - Dance Mat Typing - Level 4 - Stage 10.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Bingley Juniors Football Club.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Desktop.ini Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\eBay UK - The UK's Online Marketplace.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Free Online Games, Flash Games and Fun Games at MostFunGames.com.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Free Online Games.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\gameSheep.com - Free Online Games.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Google.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Lenovo Recommended Sites\Lenovo Home.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Lenovo Recommended Sites\News.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Lenovo Recommended Sites\Products.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Lenovo Recommended Sites\Support and Downloads.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Lenovo Recommended Sites\Upgrades, Accessories, and Parts.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Links\Customize Links.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Links\Free Hotmail.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Links\Self Care.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Links\Service Status.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Links\Support.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Links\Telewest Broadband.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Links\Webmail.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Links\Windows Marketplace.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Links\Windows Media.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Links\Windows.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\matthew football.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Merlin Stickers Online.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Microsoft Websites\IE Add-on site.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Microsoft Websites\IE site on Microsoft.com.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Microsoft Websites\Marketplace.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Microsoft Websites\Microsoft At Home.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Microsoft Websites\Microsoft At Work.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Microsoft Websites\Welcome to IE7.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Miniclip Games - Play Free Games.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\MSN.com.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\OneMoreLevel.com - 10 Second Challenge.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Play Arcade Games - Action Games - Shooting Games.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Play Online Games and Download Games at GameHouse.com.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Pokemon-Games.com.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Racing Frogs - the crazy frog racing game!.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Radio Station Guide.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\robotduck.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Sky Sports - The Best Sport Coverage From Around The World.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\TheGameBlazer.com Your Online Gaming Portal.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Vampire Boy [from robotduck.com shockwave games].url Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Apple Computer\iTunes\iPodDevices.xml Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Apple Computer\iTunes\iTunesPrefs.xml Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\ApplicationHistory\CreateRegFile.exe.28a53a86.ini Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\ApplicationHistory\MsiExec.exe.8cb23528.ini.inuse Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\ApplicationHistory\ngen.exe.2c05686e.ini Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\ApplicationHistory\SL9.tmp.82733c4a.ini Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\fusioncache.dat Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\GDIPFONTCACHEV1.DAT Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\dbCache.dat Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\dbCache.dat.index Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\icons\kh.google.com_icons_1027_nh.png Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\icons\kh.google.com_icons_773_l.png Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\icons\kh.google.com_icons_773_nh.png Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\icons\kh.google.com_icons_bbs_32_nh.png Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\icons\kh.google.com_icons_blue_star_l.png Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\icons\kh.google.com_icons_buildings_stagger_16e_l.png Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\icons\kh.google.com_icons_dining_new_l.png Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\icons\kh.google.com_icons_flag64_l.png Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\icons\kh.google.com_icons_flag_new_l.png Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\icons\kh.google.com_icons_green_star_l.png Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\icons\kh.google.com_icons_lil_earth_l.png Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\icons\kh.google.com_icons_lodging_new_l.png Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\icons\kh.google.com_icons_panoramio_32_nh.png Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\icons\kh.google.com_icons_shield1_l.png Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\icons\kh.google.com_icons_wikipedia_32_nh.png Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\images\khimg0.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\images\khimg1.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\images\khimg2.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\images\khimg3.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\images\khimg4.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\images\khimg5.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\images\khimg6.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\IconCache.db Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Feeds\FeedsStore.feedsdb-ms Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Feeds\Microsoft Feeds~\Microsoft at Home~.feed-ms Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Feeds\Microsoft Feeds~\Microsoft at Work~.feed-ms Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Feeds Cache\74883FMS\desktop.ini Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Feeds Cache\7QTXENFW\desktop.ini Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Feeds Cache\7QTXENFW\fwlink[1] Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Feeds Cache\9N02QKVO\desktop.ini Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Feeds Cache\desktop.ini Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Feeds Cache\JKUB55GE\desktop.ini Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Feeds Cache\JKUB55GE\fwlink[1] Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\FORMS\FRMCACHE.DAT Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Internet Explorer\brndlog.txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Internet Explorer\MSIMGSIZ.DAT Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Media Player\CurrentDatabase_219.wmdb Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Media Player\CurrentDatabase_360.wmdb Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Media Player\CurrentDatabase_59R.wmdb Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Media Player\LocalMLS_3.wmdb Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Media Player\wmdbexport.xml Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\activesharingfolder.dat Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\[removed]\SharingMetadata\Logs\Dfsr.log Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\[removed]\SharingMetadata\pending.dat Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\[removed]\SharingMetadata\volume.xml Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\[removed]\SharingMetadata\volume.xml~ Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\[removed]\SharingMetadata\Working\$db_normal$ Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\[removed]\SharingMetadata\Working\database_1AA4_13BD_A413_99F9\$db_clean$ Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\[removed]\SharingMetadata\Working\database_1AA4_13BD_A413_99F9\dfsr.db Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\[removed]\SharingMetadata\Working\database_1AA4_13BD_A413_99F9\fsr.chk Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\[removed]\SharingMetadata\Working\database_1AA4_13BD_A413_99F9\fsr.log Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\[removed]\SharingMetadata\Working\database_1AA4_13BD_A413_99F9\fsr0001E.log Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\[removed]\SharingMetadata\Working\database_1AA4_13BD_A413_99F9\fsr0001F.log Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\[removed]\SharingMetadata\Working\database_1AA4_13BD_A413_99F9\fsr00020.log Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\[removed]\SharingMetadata\Working\database_1AA4_13BD_A413_99F9\fsr00021.log Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\[removed]\SharingMetadata\Working\database_1AA4_13BD_A413_99F9\fsr00022.log Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\[removed]\SharingMetadata\Working\database_1AA4_13BD_A413_99F9\res1.log Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\[removed]\SharingMetadata\Working\database_1AA4_13BD_A413_99F9\res2.log Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\[removed]\SharingMetadata\Logs\Dfsr.log Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\[removed]\SharingMetadata\pending.dat Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\[removed]\SharingMetadata\volume.xml Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\[removed]\SharingMetadata\volume.xml~ Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\[removed]\SharingMetadata\Working\$db_normal$ Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\[removed]\SharingMetadata\Working\database_1AA4_13BD_A413_99F9\$db_clean$ Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\[removed]\SharingMetadata\Working\database_1AA4_13BD_A413_99F9\dfsr.db Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\[removed]\SharingMetadata\Working\database_1AA4_13BD_A413_99F9\fsr.chk Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\[removed]\SharingMetadata\Working\database_1AA4_13BD_A413_99F9\fsr.log Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\[removed]\SharingMetadata\Working\database_1AA4_13BD_A413_99F9\res1.log Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\[removed]\SharingMetadata\Working\database_1AA4_13BD_A413_99F9\res2.log Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Outlook\extend.dat Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Wallpaper1.bmp Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\Desktop.ini Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\real\contactcoll.cache Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\real\contactcoll.cache Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\real\b8d57abf-67ba-4b7f-9cdf-c38ba65189dd.MeContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\real\contactcoll.cache Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\real\f687d741-d75c-40c2-9c76-68f5697a13f4.AddressBook Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\real\members.stg Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\000ff706-9c09-4a06-8ce4-124f4258caac.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\0270d6cc-bfe7-4122-bc7e-4d7a39c8837f.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\0339a584-5c38-476f-9f81-87e2f7971c41.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\039347c6-539c-4d89-97c5-7e3631d9754e.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\0b49e348-5084-4486-90d6-d556a0c97653.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\10461e06-c18b-4375-9553-744930cb27e3.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\104e44f5-1512-42b0-9974-0d5c15106e61.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\1080dbcb-20b3-4c23-839e-9b34ba493aa0.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\14ebe7d3-e038-4c6c-910d-165a65e75218.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\15f84ecc-eab1-496b-b60e-5c831c05b71a.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\1816734c-ff1c-45c8-9513-66e10f804509.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\1c80c2e6-4a59-44b8-9d28-e42704ac19a3.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\1e0a0de0-102f-4bb1-b24a-117653d8351a.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\20406cb4-bb95-4826-a62e-4acfe184fb91.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\207a2210-14f1-4d47-9a76-a9e049e70a75.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\2155225e-465c-4e27-8f17-8150002a1c9d.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\24f2a54f-113d-4c48-93fb-71e101bc2003.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\2700dabe-ab2b-43b6-bb35-c7996d16dadd.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\290e3253-9ae5-42db-b259-ab35e6b92c8e.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\2984df6b-0c4f-490a-8b23-65bc2d1d223b.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\29e7b844-842a-4224-b29a-3248176eb3fc.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\29ef8822-2968-427a-97f6-c25cf2c1fc39.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\2d137698-3d68-479e-8042-1737adb1800f.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\3529f5b6-5329-4025-a8cd-427d96e0a99d.MeContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\3c17b634-66f4-4c4c-a51d-19ad96fee6bb.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\40d9a20b-3b2d-4bb9-9b95-2c2d95245a3c.WindowsLiveGroup Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\427c3735-bf07-4867-a668-bc2439d57be6.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\45ac2f52-ad1b-41af-ae1a-02f2cf7a4229.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\4e070d73-2a1a-438e-8a3b-a6058d3d93dc.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\4eb780b5-588c-4052-b801-88dd44425f0b.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\50a56df8-2763-4f71-98f1-3bcc2e9ae2f9.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\50f2fa60-33e1-4eb5-bbef-21a019986a0d.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\525fb5e6-e247-4bd3-aa88-5d59c9b81ee5.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\53a7641b-9bc7-4c82-b065-086557771072.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\56fb0d29-2a37-42c9-8d6d-6f15d7f98d5e.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\583a0233-234a-4846-a5c6-055bfb0aaf95.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\5858cbea-a3fb-4363-8efc-a6bc59034efd.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\5969777b-9c61-4c2e-94b5-9706176c5edd.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\59e12d0a-d827-4917-ae66-667651ba20fe.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\59fef1be-f31b-459b-ab65-08e897978788.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\5b17c323-a21a-462c-b939-c49887def9ac.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\60904886-6798-4fa6-9318-15ec37ac74e5.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\64b2d487-f926-48e9-b3f8-c9e9ba85d62f.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\6b117016-dd73-4150-b36b-41ed859d4216.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\6d18f2f9-5e22-4a9d-b4cd-5b4ba8b791bc.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\6dbde505-d4aa-444c-b7da-f67c6d7f4649.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\6f1526c7-810c-411f-95c2-3cd196333455.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\6f969b4b-f5fb-4cfa-97cc-8bc4aeed872b.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\70cdc380-4717-4886-b226-275c24955ac1.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\716fbdf9-4e3a-44c5-b944-8951f6d979a4.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\727570a3-db9d-4958-b59b-cafbe5ae62ee.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\746193c9-2c8e-485f-9eb1-6c4d0d6c82d5.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\778d53c6-55a2-4c6d-83a9-60099a9457b9.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\7c786d6c-cc5c-4722-b255-a3ef2b7746d2.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\7d961124-9f4c-469d-b352-6b07569c8a04.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\7fb06a2a-8c7e-4f1a-8992-31014657fb3b.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\813a5c81-7845-43e1-bd0f-69428cdb4b9c.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\816d5dc5-de9e-4605-a441-4954aa65b97b.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\831276f2-432e-454e-b85f-e7d68ee42cc2.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\8321572b-6431-48b9-897c-aaf1bcbafd08.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\94b5a8ea-7b16-48b3-8655-9b4af723838d.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\960812dd-5363-4af2-90b2-fed2c8ef861a.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\99f44b22-d583-4ed3-8ace-62b984db81da.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\9ddced10-9ed4-4656-8693-c3668a72c853.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\9ee58618-e76d-4d02-bd3a-8a49660fbdb9.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\a04303e5-5966-4d9d-8998-5bb5007a9d5a.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\a17769c1-015a-4119-b720-46639cd21df7.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\a223f8d5-c819-4c10-85a3-fcb82db2ad6d.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\a352c9b9-ba3c-44d1-bf57-04be246a190b.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\a39d1758-5806-4910-a16a-3b0481b52ade.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\a8db1983-a65c-4d43-bd0f-a2603dace975.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\acbcae1c-52d1-4490-b7b5-57b890ae5e3c.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\adb8e47c-0b81-4393-a068-b323e1137aa9.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\aed7ce92-3ff7-4f72-bf19-b328521604ee.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\af3c019a-9d38-467f-85ef-b349eccd7bc0.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\affe5c3b-789f-4449-be68-3cdba16dc30c.WindowsLiveGroup Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\b1de1b81-3428-4093-997d-a000f9d010b2.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\bc0948f8-05a7-4ff9-a7cc-011e03ce2b9c.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\c06aa86c-da32-473d-85e4-129fbb790c09.WindowsLiveGroup Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\c3129417-7e6b-4fd2-bc1f-ec3557ddd8e2.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\ca73d2a0-8a2c-42af-9136-a7af8b5dec27.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\cc2a0080-580c-4a3f-a2a8-5193f2d29d86.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\cd354f78-ec49-410f-9153-25baedb89d9e.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\ce9f5ab1-0279-41cb-bdb6-321526f73c55.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\ceaf0676-48b8-490f-a4ae-80175ad9ea4f.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\cf4dd25a-fc4c-48ef-b808-76520ae05410.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\contactcoll.cache Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\d5d34cac-61d5-4721-9a6a-604a3fa5d2d4.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\d8457ff9-fc51-4773-a328-f9771943b97f.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\ddc97259-1071-4607-94e3-217ff7abb37e.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\ddd1fff4-fd74-4feb-a193-b4671c5f362c.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\def650e6-ad4d-4597-a548-846fcecd16a2.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\e74f7cbf-9701-4890-993b-0f8b994124d3.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\e8e57eda-3848-48ff-8944-aad7132a108b.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\f167d78a-ec90-4d35-9991-a89332fc5c4a.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\f25fc84f-2f37-44f0-a7d1-d205b3063398.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\f2725dd9-923c-428c-802d-e1060bb09769.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\f696b8be-8ac0-4235-8647-d005077795f5.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\f6f02260-d336-4383-8cb1-b57f65b273a6.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\f755de72-56fa-4f61-9702-8ae501baf66f.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\fa360030-c9b4-42ae-9f2c-bfa5212e5d72.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\fc92da8e-1912-44e1-87a3-9bae108baf65.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\members.stg Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\real\080a5cc6-e16d-4993-ae31-db9b8667e36d.MeContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\real\contactcoll.cache Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\real\f13049e0-bd1b-48a3-905d-5f0755247c41.AddressBook Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\real\members.stg Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\1407f01b-40e6-4c40-8470-adafaf18462e.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\1f2b1e43-2b8b-4d0a-a41c-c69d099ada45.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\29389a62-3acf-43f7-9090-44fcede8adf8.WindowsLiveGroup Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\45b9cd5c-5dd9-42ae-aa12-f91691cdeb27.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\46b34ad8-4f9a-43c9-b990-869a34d30276.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\473df5df-09f4-4b29-9e66-9429201d8677.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\59e33971-3ab2-4d0c-9a16-c42f0a01e7e2.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\6052f2d5-eb94-4c50-af4e-ed650489fa3b.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\6a83d6b4-7db1-460b-b534-cc2214c7c08d.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\73dec0bc-9dcd-4e29-ae91-67a465d0c677.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\78419fe8-9d54-44b4-a91d-a92b25d7cb7c.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\7d082e72-9125-4297-b1cc-54b4a75a7900.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\949a6759-e195-40db-873e-cfb5bd6d63dc.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\b1764345-aa21-4c4e-a104-ec7acf06fbc7.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\bfb38eed-2c88-4d5b-bf76-bb5da16c99c5.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\c4bf7480-3e28-49aa-b4b7-8f74ff64d81b.MeContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\ce2c2dd3-7c74-4c82-8d5c-b0d4883234ff.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\contactcoll.cache Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\d2dab083-d782-49fa-8666-85341be4622d.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\d5727837-f98b-4fff-9fdf-0d7be5a2a64d.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\d6da8e0c-bbaf-4d1e-961e-803280b85503.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\e47ac0df-37e1-4653-b48f-eb070bf72ae4.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\f123958d-6d64-40e4-a96c-265fe9f45a0d.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\f225a7e2-d16e-4ae2-8c71-5f96f07380c2.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\fc36ce1c-8319-445c-92c3-17c6a2bef3af.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\ff50fb20-5074-450b-8631-59577895ccb1.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\members.stg Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Media\10.0\WMSDKNS.DTD Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Media\10.0\WMSDKNS.XML Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Media\11.0\WMSDKNS.DTD Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Media\11.0\WMSDKNS.XML Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Media\9.0\WMSDKNS.DTD Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Media\9.0\WMSDKNS.XML Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\desktop.ini Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\History\desktop.ini Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\History\History.IE5\desktop.ini Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\History\History.IE5\MSHist012007120320071210\index.dat Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\History\History.IE5\MSHist012007122320071224\index.dat Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@1072294680[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@422[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@422[3].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@422[4].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@422[5].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@422[6].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@adtech[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@advertising[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@adviva[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@apmebf[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@atdmt[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@a[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\[removed]-sys[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@connextra[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@doubleclick[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@drivecleaner[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@ebayobjects[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@ebay[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\[removed]-network[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@emjcd[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@errorsafe[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@fastclick[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@flashkit[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@football[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@gamesheep[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@google[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@indexstats[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@kpremium[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@Ladbrokes[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@mediaplex[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@merlin[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@miniclip[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@mobilemarketplace[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@mywebsearch[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@overture[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@questionmarket[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@rtm[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@serving-sys[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@SkyBet[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@s[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@traceics[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@tradedoubler[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@tribalfusion[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@valueclick[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@watchmojo[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@winantivirus[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\[removed][1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\[removed][2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@xiti[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@yahoo[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@zedo[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\History\History.IE5\desktop.ini Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\++vafooJLGKfQ72HhQ5cLiIn23U= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\0xL8U7T4dvKoxZg0tCgPavhwDXU= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\2VdOiRn8R6vgyAo1OuWk82FGrO9g= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\7GP2FsjPXuA5lyMxLQ4pMry9+dX4= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\8K2F2FxPZPkqvB0RmUpzl6XxhN1J0= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\8yZRi1UNwPujZzAtPraR2FasdDbs= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\BbcG7CqlSDk7M0MwJht7ju3PhWo= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\byjelJU1HOOr33HSk7fxudZzQUk= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\c2xPMZhQq9cg5IWNH3HjPOBZQ+I= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\Ezy8B2F7w8DnQO0KHqWjncA9NnM4= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\f9c2F0WHwYWW2Fm+cyow2jUEuexjw= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\fptKw22FhToyjauGzolcqHhN5oaI= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\GVmfWXXBiwmT2THKvpKtbuzv2iY= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\HstWaRrKOWzImT0BvbDwQzjrozk= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\m2bWZXAnazDBGoufImBw7Lnwqp4= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\mRw+WitVdQoGkEUyHBFHQqo0Kcs= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\oO6bo4nRi7goym+6g1Ytno1R7QQ= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\OzdErbSKuvki99B014CByLCdxrk= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\SQQLXZRn0n+7gyCs7yNro6g8BfQ= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\uPdMa8kL2txPhWWkfIrkxUvnVR0= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\uU1d4738FuC3eu52F0QFabDF+dww= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\wfhoO57Z30FjlVObS2ktpUMgNFs= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\y+9lR2+PWy7pazS1NuDd8C7DZ1I= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\zWg2VBCLOjjJOPq0BcIdNF18Qqs= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\NI.UERS_9999_N91S2507\settings.ini Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\NI.UERS_9999_N91S2507\setup.len Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\NI.UWA6P_0001_N91M1807\settings.ini Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\Program Files\WinAce\VVSNInst.exe Infected: not-a-virus:AdTool.Win32.WhenU.a skipped
C:\QooBox\Quarantine\C\Documents and Settings\All Users\Application Data\Audio 4 part browse\Seek kind.exe.vir Infected: Trojan.Win32.Obfuscated.en skipped
C:\QooBox\Quarantine\C\Documents and Settings\All Users\Application Data\Audio 4 part browse\tons hold.exe.vir Infected: Trojan.Win32.Obfuscated.en skipped
C:\QooBox\Quarantine\C\Documents and Settings\Mark\Application Data\setup_en[1].exe.vir Infected: not-a-virus:Downloader.Win32.WinFixer.ba skipped
C:\QooBox\Quarantine\C\Documents and Settings\Matthew\err.log.vir Object is locked skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP403\A0070107.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP403\A0070159.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP403\A0070184.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP403\A0070210.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP403\A0071209.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP403\A0071240.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP403\A0071259.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP404\A0071281.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP404\A0071303.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP404\A0071326.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP404\A0071350.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP405\A0071384.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP406\A0071416.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP406\A0071441.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP407\A0071452.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP407\A0072440.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP408\A0072454.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP408\A0072456.dll Infected: not-a-virus:AdWare.Win32.Shopper.l skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP408\A0072472.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP408\A0072506.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP409\A0072547.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP409\A0072577.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP409\A0072605.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP410\A0072640.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP410\A0072662.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP411\A0072692.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP411\A0072715.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP412\A0072729.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP412\A0073715.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP412\A0073734.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP412\A0073752.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP413\A0073786.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP413\A0073818.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP413\A0073856.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP414\A0073862.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP414\A0073891.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP415\A0073904.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP415\A0073930.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP416\A0073953.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP417\A0073984.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP417\A0074009.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP417\A0074038.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP418\A0074068.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP418\A0074083.exe/stream/data0002 Infected: not-a-virus:AdWare.Win32.180Solutions.bj skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP418\A0074083.exe/stream Infected: not-a-virus:AdWare.Win32.180Solutions.bj skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP418\A0074083.exe NSIS: infected - 2 skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP418\A0074102.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP418\A0074121.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP418\A0074155.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP418\A0074184.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP419\A0074198.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP419\A0074225.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP420\A0074260.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP420\A0074296.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP420\A0074327.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP421\A0074344.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP421\A0074374.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP421\A0074407.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP422\A0074432.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP423\A0074541.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP423\A0074543.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP423\A0074544.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP423\A0074545.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP423\A0074554.exe Infected: not-a-virus:AdWare.Win32.OneStep.c skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP423\A0074556.dll Infected: not-a-virus:AdWare.Win32.OneStep.d skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP423\A0074557.exe Infected: not-a-virus:AdWare.Win32.OneStep.c skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP423\A0074558.exe Infected: not-a-virus:AdWare.Win32.OneStep.c skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP423\A0074560.exe Infected: not-a-virus:AdWare.Win32.OneStep.c skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP423\A0074576.dll Infected: not-a-virus:AdWare.Win32.OneStep.a skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP423\A0074577.exe Infected: not-a-virus:AdWare.Win32.OneStep.c skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP423\A0075526.dll Infected: not-a-virus:AdWare.Win32.OneStep.a skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP423\A0075527.exe Infected: not-a-virus:AdWare.Win32.OneStep.c skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP423\A0075545.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP424\A0075580.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP424\A0075609.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP424\A0075670.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP425\A0075693.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP425\A0075753.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP425\A0075789.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP425\A0075825.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP425\A0075857.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP425\A0075891.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP425\A0076891.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP426\A0076952.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP426\A0076979.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP426\A0077000.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP426\A0077030.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP427\A0077037.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP427\A0077060.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP427\A0077084.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP428\A0077113.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP428\A0077141.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP428\A0078142.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP428\A0078167.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP428\A0078190.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP429\A0078236.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP429\A0078269.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP430\A0078277.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP430\A0078295.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP431\A0078398.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP431\A0078423.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP431\A0079423.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP431\A0079454.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP431\A0079478.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP432\A0079488.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP432\A0079518.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP432\A0079538.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP432\A0079568.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP432\A0079588.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP432\A0079624.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP432\A0079644.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP433\A0079688.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP433\A0079728.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP433\A0079755.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP433\A0080755.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP433\A0080776.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP438\A0081005.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP438\A0081045.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP439\A0081087.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP439\A0081108.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP439\A0081149.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP440\A0081191.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP441\A0081224.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP441\A0081252.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP442\A0081265.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP442\A0081292.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP443\A0081300.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP443\A0081323.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP443\A0081347.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP444\A0081581.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP444\A0081612.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP444\A0081664.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP444\A0081693.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP445\A0082720.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP445\A0082747.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP445\A0082792.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP446\A0082831.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP446\A0082840.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.as skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP446\A0082841.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.as skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP446\A0082842.dll Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP446\A0082844.dll Infected: not-a-virus:AdTool.Win32.MyWebSearch.au skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP446\A0082845.scr Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP446\A0082846.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP446\A0082847.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.au skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP446\A0082849.EXE Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP446\A0082850.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP446\A0082851.Dll Infected: not-a-virus:AdTool.Win32.MyWebSearch.au skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP446\A0082852.Dll Infected: not-a-virus:AdTool.Win32.MyWebSearch.au skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP446\A0082853.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.at skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP446\A0082855.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.bc skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP446\A0082856.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP446\A0082857.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.l skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP446\A0082858.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.af skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP446\A0082859.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.au skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP446\A0082860.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.au skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP446\A0082861.SCR Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP446\A0082862.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.au skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP446\A0082863.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP446\A0082864.EXE Infected: not-a-virus:AdTool.Win32.MyWebSearch.a skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP446\A0082865.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.an skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP446\A0082866.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.aq skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP446\A0082867.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.bh skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP446\A0082869.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.bc skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP446\A0082870.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.ax skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP446\A0082872.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.bc skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP446\A0082874.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.as skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP446\A0082875.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.ad skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP446\A0082877.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.au skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP446\A0082878.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.i skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP447\A0083814.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP447\A0083815.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.bc skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP447\A0083816.EXE Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP447\A0083817.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP447\A0083836.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP447\A0083845.dll Infected: not-a-virus:AdTool.Win32.MyWebSearch.bc skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP447\A0083862.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP447\A0083887.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP448\A0084011.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP448\A0084614.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP449\A0084620.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP449\A0084649.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP449\A0085677.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP450\A0085697.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP450\A0085730.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP450\A0085756.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP451\A0085758.exe Infected: not-a-virus:Downloader.Win32.WinFixer.ba skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP451\A0087815.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP451\A0087840.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP451\A0088839.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP451\A0090860.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP452\A0090868.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP452\A0090869.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP456\change.log Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\EventCache\{EAF1EE88-E094-4FD5-9A49-BBA9F2E44F55}.bin Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\DEFAULT Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\Internet.evt Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\SOFTWARE Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SYSTEM Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\spool\PRINTERS\FP00000.SHD Object is locked skipped
C:\WINDOWS\system32\spool\PRINTERS\FP00000.SPL Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\Temp\Perflib_Perfdata_6b8.dat Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
I:\Documents and Settings\chloem1\Local Settings\Temporary Internet Files\Content.IE5\L450GNLA\popup[1].htm Infected: Trojan-Clicker.HTML.Agent.a skipped
I:\Documents and Settings\chloem1\Local Settings\Temporary Internet Files\Content.IE5\O1M6P549\popup[2].htm Infected: Trojan-Clicker.HTML.Agent.a skipped
I:\Documents and Settings\mattew\Local Settings\Temporary Internet Files\Content.IE5\QK9VXZCZ\jokes[1].exe/stream/data0005 Infected: not-a-virus:AdWare.Win32.Comet.ay skipped
I:\Documents and Settings\mattew\Local Settings\Temporary Internet Files\Content.IE5\QK9VXZCZ\jokes[1].exe/stream Infected: not-a-virus:AdWare.Win32.Comet.ay skipped
I:\Documents and Settings\mattew\Local Settings\Temporary Internet Files\Content.IE5\QK9VXZCZ\jokes[1].exe NSIS: infected - 2 skipped
I:\Program Files\Packard Bell Diamond 1200Plus\Driver\Thumbs.db Object is locked skipped
I:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
I:\System Volume Information\_restore{025C8538-4E57-46CB-8ADF-C8B5AEC1F95E}\RP245\A0076975.dll Infected: not-a-virus:AdWare.Win32.BHO.w skipped
I:\System Volume Information\_restore{025C8538-4E57-46CB-8ADF-C8B5AEC1F95E}\RP249\A0078237.dll Infected: not-a-virus:AdWare.Win32.Comet.ay skipped
I:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\Fifoed\A0065337.exe Object is locked skipped
I:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP456\change.log Object is locked skipped

Scan process completed.

Katana

January 4, 2008, 9:03 PM UTC

OTMoveIt
Please download OTMoveIt by OldTimer.

Save it to your desktop.
Please double-click OTMoveIt.exe to run it.
Copy the file paths below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy):

C:\Program Files\WinAce\VVSNInst.exe
I:\Documents and Settings\chloem1\Local Settings\Temporary Internet Files\Content.IE5\L450GNLA\popup[1].htm
I:\Documents and Settings\chloem1\Local Settings\Temporary Internet Files\Content.IE5\O1M6P549\popup[2].htm
I:\Documents and Settings\mattew\Local Settings\Temporary Internet Files\Content.IE5\QK9VXZCZ\jokes[1].exe
Return to OTMoveIt, right click on the "Paste List of Files/Folders to be moved" window and choose Paste.
Click the red Moveit! button.
Close OTMoveIt
Copy and paste the contents of the results box as a reply to this topic

If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes.

**If a reboot was necessary or you needed to Exit before posting the log, you will find a copy of the log at the root of the drive where OTMoveIt is installed, usually at :
C:\\_OTMoveIt\\MovedFiles\\********_******.log
(where "********_******" is the "date_time")

CCleaner
Please download CCleaner from here to clean temp files from your computer.

Double click on the ccsetup.exe file to start the installation of the program.
Select your language and click OK, then next.
Read the license agreement and click I Agree.
Click next to use the default install location.
Under Install Options, choose all the default settings
Click Install then finish to complete installation.
Double click the CCleaner shortcut on the desktop to start the program.
On the "Windows" tab, under "Internet Explorer," uncheck "Cookies" if you do not want them deleted. (If deleted, you will likely need to reenter your passwords at all sites where a cookie is used to recognize you when you visit).
If you use either the Firefox or Mozilla browsers, the box to uncheck for "Cookies" is on the Applications tab, under Firefox/Mozilla.
Click on the "Options" icon at the left side of the window, then click on "Advanced."
deselect "Only delete files in Windows Temp folders older than 48 hours."
Caution: It is not recommended that you use the "Issues" feature unless you are very familiar with the registry as it has been known to find legitimate items. Click on Issues and make sure Registry Integrity is UNchecked!
Click on the "Cleaner" icon on the left side of the window, then click Run Cleaner to run the program.
After CCleaner has completed its process, click Exit.

Download AVG Anti-Spyware
Please download AVG Anti-Spyware. to your Desktop or to your usual Download Folder.

Install AVG Anti-Spyware by double clicking the installer.
Follow the prompts. Make sure that Launch AVG Anti-Spyware is checked.
On the main screen under Your Computer's security.
- Click on Change state next to Resident shield. It should now change to inactive.
- Click on Change state next to Automatic updates. It should now change to inactive.
- Next to Last Update, click on Update now. (You will need an active internet connection to perform this)
- Wait until you see the Update succesfull message.
Right-click the AVG Anti-Spyware Tray Icon and uncheck Start with Windows.
Right-click the AVG Anti-Spyware Tray Icon and select Exit. Confirm by clicking Yes.

If you are having problems with the updater, you can use this link to manually update ewido.
AVG Anti-Spyware manual updates.
Download the Full database to your Desktop or to your usual Download Folder and install it by double clicking the file. Make sure that AVG Anti-Spyware is closed before installing the update.

Run AVG Anti-Spyware
Close ALL open Windows / Programs / Folders. Please start AVG Anti-Spyware and run a full scan.

Click on Scanner on the toolbar.
Click on the Settings tab.
- Under How to act?
  - Click on Recommended Action and choose Quarantine from the popup menu.
- Under How to scan?
  - All checkboxes should be ticked.
- Under Possibly unwanted software:
  - All checkboxes should be ticked.
- Under Reports:
  - Select Do not automatically generate reports
- Under What to scan?
  - Select Scan every file.
Click on the Scan tab.
Click on Complete System Scan to start the scan process.
Let the program scan the machine.
When the scan has finished, follow the instructions below.
IMPORTANT : Don't click on the "Save Scan Report" button before you did hit the "Apply all Actions" button.
- Make sure that Set all elements to: shows Quarantine (1), if not click on the link and choose Quarantine from the popup menu. (2)
- At the bottom of the window click on the Apply all Actions button. (3)
When done, click the Save Scan Report button. (4)
- Click the Save Report as button.
- Save the report to your Desktop.
Right-click the AVG Anti-Spyware Tray Icon and select Exit. Confirm by clicking Yes.

Logs/Information to Post in Reply
Please post the following logs/Information in your reply

OTMoveIt Log
AVG report
How are things running now ?

tamskinner

January 5, 2008, 9:47 AM UTC

Hi Katana

The "moveit files" appear to be just the ones I pasted into the first box. Your instruction said close it down after "moveit", - was that right - I did not use "clean up"

The results file from AVG:

---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at: 09:30:29 05/01/2008

+ Scan result:

I:\System Volume Information\_restore{025C8538-4E57-46CB-8ADF-C8B5AEC1F95E}\RP245\A0076975.dll -> Adware.BHO : Cleaned with backup (quarantined).
I:\System Volume Information\_restore{025C8538-4E57-46CB-8ADF-C8B5AEC1F95E}\RP249\A0078237.dll -> Adware.Comet : Cleaned with backup (quarantined).
C:\_OTMoveIt\MovedFiles\Program Files\WinAce\VVSNInst.exe/Setup.exe -> Dropper.Agent.asf : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP418\A0074083.exe -> Not-A-Virus.Adware.180Solutions : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP423\A0074554.exe -> Not-A-Virus.Adware.OneStep : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP423\A0074556.dll -> Not-A-Virus.Adware.OneStep : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP423\A0074557.exe -> Not-A-Virus.Adware.OneStep : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP423\A0074558.exe -> Not-A-Virus.Adware.OneStep : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP423\A0074560.exe -> Not-A-Virus.Adware.OneStep : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP423\A0074576.dll -> Not-A-Virus.Adware.OneStep : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP423\A0074577.exe -> Not-A-Virus.Adware.OneStep : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP423\A0075526.dll -> Not-A-Virus.Adware.OneStep : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP423\A0075527.exe -> Not-A-Virus.Adware.OneStep : Cleaned with backup (quarantined).
C:\QooBox\Quarantine\C\Documents and Settings\Mark\Application Data\setup_en[1].exe.vir -> Not-A-Virus.Downloader.Win32.WinFixer.ba : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP451\A0085758.exe -> Not-A-Virus.Downloader.Win32.WinFixer.ba : Cleaned with backup (quarantined).
:mozilla.34:I:\Documents and Settings\Morrison\Application Data\Mozilla\Profiles\default\nuea7rml.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.35:I:\Documents and Settings\Morrison\Application Data\Mozilla\Profiles\default\nuea7rml.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\Pat\Cookies\pat@lenovo.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\Pat\Cookies\pat@marksandspencer.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
I:\Documents and Settings\Morrison\Cookies\morrison@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
I:\Documents and Settings\chloem1\Cookies\chloem1@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\Chloe\Cookies\chloe@adtech[1].txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.12:I:\Documents and Settings\Morrison\Application Data\Mozilla\Profiles\default\nuea7rml.slt\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
C:\Documents and Settings\Pat\Cookies\pat@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned.
I:\Documents and Settings\The Oakdale Gallery\Cookies\the oakdale gallery@atdmt[1].txt -> TrackingCookie.Atdmt : Cleaned.
I:\Documents and Settings\Morrison\Cookies\[removed][2].txt -> TrackingCookie.Burstbeacon : Cleaned.
I:\Documents and Settings\Morrison\Cookies\[removed][1].txt -> TrackingCookie.Burstnet : Cleaned.
I:\Documents and Settings\chloe\Cookies\chloe@burstnet[2].txt -> TrackingCookie.Burstnet : Cleaned.
I:\Documents and Settings\chloe\Cookies\[removed][1].txt -> TrackingCookie.Burstnet : Cleaned.
I:\Documents and Settings\chloe\Cookies\chloe@casalemedia[1].txt -> TrackingCookie.Casalemedia : Cleaned.
C:\Documents and Settings\Chloe\Cookies\chloe@connextra[3].txt -> TrackingCookie.Connextra : Cleaned.
C:\Documents and Settings\Pat\Cookies\pat@connextra[3].txt -> TrackingCookie.Connextra : Cleaned.
I:\Documents and Settings\Morrison\Cookies\morrison@connextra[2].txt -> TrackingCookie.Connextra : Cleaned.
I:\Documents and Settings\chloe\Cookies\chloe@connextra[2].txt -> TrackingCookie.Connextra : Cleaned.
I:\Documents and Settings\chloem1\Cookies\chloem1@connextra[1].txt -> TrackingCookie.Connextra : Cleaned.
I:\Documents and Settings\mattew\Cookies\mattew@connextra[2].txt -> TrackingCookie.Connextra : Cleaned.
:mozilla.28:I:\Documents and Settings\Morrison\Application Data\Mozilla\Profiles\default\nuea7rml.slt\cookies.txt -> TrackingCookie.Coremetrics : Cleaned.
C:\Documents and Settings\Chloe\Cookies\chloe@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned.
C:\Documents and Settings\Pat\Cookies\pat@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned.
I:\Documents and Settings\The Oakdale Gallery\Cookies\the oakdale gallery@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned.
I:\Documents and Settings\Morrison\Cookies\[removed][2].txt -> TrackingCookie.Esomniture : Cleaned.
I:\Documents and Settings\Morrison\Cookies\[removed][2].txt -> TrackingCookie.Esomniture : Cleaned.
I:\Documents and Settings\Morrison\Cookies\[removed][2].txt -> TrackingCookie.Esomniture : Cleaned.
:mozilla.18:I:\Documents and Settings\Morrison\Application Data\Mozilla\Profiles\default\nuea7rml.slt\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
:mozilla.19:I:\Documents and Settings\Morrison\Application Data\Mozilla\Profiles\default\nuea7rml.slt\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
:mozilla.20:I:\Documents and Settings\Morrison\Application Data\Mozilla\Profiles\default\nuea7rml.slt\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
I:\Documents and Settings\Morrison\Cookies\[removed][2].txt -> TrackingCookie.Euroclick : Cleaned.
I:\Documents and Settings\chloem1\Cookies\[removed][1].txt -> TrackingCookie.Euroclick : Cleaned.
I:\Documents and Settings\Morrison\Cookies\[removed][2].txt -> TrackingCookie.Fastclick : Cleaned.
I:\Documents and Settings\chloem1\Cookies\[removed][2].txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.27:I:\Documents and Settings\Morrison\Application Data\Mozilla\Profiles\default\nuea7rml.slt\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
C:\Documents and Settings\Pat\Cookies\[removed][1].txt -> TrackingCookie.Hitbox : Cleaned.
I:\Documents and Settings\The Oakdale Gallery\Cookies\the oakdale [removed][2].txt -> TrackingCookie.Hitbox : Cleaned.
I:\Documents and Settings\chloem1\Cookies\[removed][1].txt -> TrackingCookie.Hitbox : Cleaned.
I:\Documents and Settings\chloem1\Cookies\[removed][2].txt -> TrackingCookie.Hitbox : Cleaned.
I:\Documents and Settings\chloe\Cookies\[removed][1].txt -> TrackingCookie.Information : Cleaned.
I:\Documents and Settings\Morrison\Cookies\[removed][2].txt -> TrackingCookie.Liveperson : Cleaned.
I:\Documents and Settings\chloem1\Cookies\[removed][2].txt -> TrackingCookie.Liveperson : Cleaned.
C:\Documents and Settings\Chloe\Cookies\chloe@mediaplex[1].txt -> TrackingCookie.Mediaplex : Cleaned.
C:\Documents and Settings\Pat\Cookies\pat@mediaplex[1].txt -> TrackingCookie.Mediaplex : Cleaned.
I:\Documents and Settings\Morrison\Cookies\[removed][1].txt -> TrackingCookie.Myaffiliateprogram : Cleaned.
I:\Documents and Settings\chloem1\Cookies\[removed][1].txt -> TrackingCookie.Myaffiliateprogram : Cleaned.
I:\Documents and Settings\Morrison\Cookies\morrison@overture[1].txt -> TrackingCookie.Overture : Cleaned.
I:\Documents and Settings\Morrison\Cookies\[removed][1].txt -> TrackingCookie.Overture : Cleaned.
I:\Documents and Settings\chloem1\Cookies\chloem1@overture[2].txt -> TrackingCookie.Overture : Cleaned.
I:\Documents and Settings\chloem1\Cookies\[removed][1].txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.36:I:\Documents and Settings\Morrison\Application Data\Mozilla\Profiles\default\nuea7rml.slt\cookies.txt -> TrackingCookie.Real : Cleaned.
:mozilla.37:I:\Documents and Settings\Morrison\Application Data\Mozilla\Profiles\default\nuea7rml.slt\cookies.txt -> TrackingCookie.Real : Cleaned.
I:\Documents and Settings\Morrison\Cookies\morrison@real[1].txt -> TrackingCookie.Real : Cleaned.
I:\Documents and Settings\chloem1\Cookies\[removed][1].txt -> TrackingCookie.Reliablestats : Cleaned.
I:\Documents and Settings\Morrison\Cookies\morrison@revsci[2].txt -> TrackingCookie.Revsci : Cleaned.
I:\Documents and Settings\chloe\Cookies\chloe@revsci[2].txt -> TrackingCookie.Revsci : Cleaned.
C:\Documents and Settings\Chloe\Cookies\[removed]-sys[1].txt -> TrackingCookie.Serving-sys : Cleaned.
C:\Documents and Settings\Chloe\Cookies\chloe@serving-sys[1].txt -> TrackingCookie.Serving-sys : Cleaned.
I:\Documents and Settings\Morrison\Cookies\morrison@statistik-gallup[1].txt -> TrackingCookie.Statistik-gallup : Cleaned.
I:\Documents and Settings\chloem1\Cookies\chloem1@statistik-gallup[1].txt -> TrackingCookie.Statistik-gallup : Cleaned.
C:\Documents and Settings\Pat\Cookies\pat@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.29:I:\Documents and Settings\Morrison\Application Data\Mozilla\Profiles\default\nuea7rml.slt\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.5:I:\Documents and Settings\Morrison\Application Data\Mozilla\Profiles\default\nuea7rml.slt\cookies.txt -> TrackingCookie.Valueclick : Cleaned.
:mozilla.6:I:\Documents and Settings\Morrison\Application Data\Mozilla\Profiles\default\nuea7rml.slt\cookies.txt -> TrackingCookie.Valueclick : Cleaned.
I:\Documents and Settings\Morrison\Cookies\morrison@web-stat[2].txt -> TrackingCookie.Web-stat : Cleaned.
C:\Documents and Settings\Chloe\Cookies\[removed][2].txt -> TrackingCookie.Webtrends : Cleaned.
:mozilla.13:I:\Documents and Settings\Morrison\Application Data\Mozilla\Profiles\default\nuea7rml.slt\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.14:I:\Documents and Settings\Morrison\Application Data\Mozilla\Profiles\default\nuea7rml.slt\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.15:I:\Documents and Settings\Morrison\Application Data\Mozilla\Profiles\default\nuea7rml.slt\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.16:I:\Documents and Settings\Morrison\Application Data\Mozilla\Profiles\default\nuea7rml.slt\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.17:I:\Documents and Settings\Morrison\Application Data\Mozilla\Profiles\default\nuea7rml.slt\cookies.txt -> TrackingCookie.Zedo : Cleaned.

::Report end

I dont really understand how all this stuff has got on my computer - shouldnt my Blueyonder software stop it getting through. I used to use the Lavasoft stuff on a regular basis, but when blueyonder provided their package they insisted that I turn off Adaware!

Katana

January 5, 2008, 11:18 AM UTC

That's fine, the "Clean Up" button is for later on when we finish
Re your BlueYonder suite, there are so many different types of malware and new ones all the time that no single application will ever pick up everything.
Most of what AVG found was Cookies which will appear every time you surf the net.

That Kaspersky scan had a lot of locked items that it can normally access, did you run it from an Admin account ?

Let's try a different scan.

TotalScan
Your Antivirus and/or Antispyware may give a warning during the scan. This is perfectly normal
Please go to this site Link >> TotalScan << LINK

Under Scan Now click the Full Scan button
Follow the prompts to install the Active X if necessary
Go and make a cup of tea/coffee/beverage of your choice and watch some TV
When the scan is finished, a report will be generated
Next to Scan Details click the small Save button and save the report to your desktop.
Please post the report in your reply.

tamskinner

January 5, 2008, 11:39 AM UTC

OK thanks. I am the administrator for this computer, but ran the programmes from my account on the computer. Not sure if that counts!
I have cleared up my desktop a bit, and put all the downloaded scan programmes we have used in a folder - will that matter when we come to clean up?
At some point I wouldnt mind an idiots guide to what I should do on a regualr basis to keep my PC relatively clean from all this rubbish that you are finding!

I have rebooted a couple of times this morning, and thing are definitely better already. Running the panda total scan now, got to 10%, will post results when they appear.
Really appreciate your help thanks

tamskinner

January 5, 2008, 1:28 PM UTC

Hi Katana - results of PAnda Total scan below

;***********************************************************************************************************************************************************************************
ANALYSIS: 2008-01-05 13:26:43
PROTECTIONS: 1
MALWARE: 54
SUSPECTS: 0
;***********************************************************************************************************************************************************************************
PROTECTIONS
Description Version Active Updated
;===================================================================================================================================================================================
PCguard Anti-Virus 5.5.1 Yes No
;===================================================================================================================================================================================
MALWARE
Id Description Type Active Severity Disinfectable Disinfected Location
;===================================================================================================================================================================================
00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No C:\Documents and Settings\Matthew\Cookies\matthew@doubleclick[1].txt
00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@doubleclick[1].txt
00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@atdmt[2].txt
00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Documents and Settings\Matthew\Cookies\matthew@atdmt[2].txt
00145393 Cookie/Tradedoubler TrackingCookie No 0 Yes No C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@tradedoubler[1].txt
00145457 Cookie/FastClick TrackingCookie No 0 Yes No C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@fastclick[1].txt
00145731 Cookie/Tribalfusion TrackingCookie No 0 Yes No C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@tribalfusion[2].txt
00145738 Cookie/Mediaplex TrackingCookie No 0 Yes No C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@mediaplex[2].txt
00167642 Cookie/Com.com TrackingCookie No 0 Yes No I:\Documents and Settings\chloe\Cookies\chloe@com[1].txt
00167704 Cookie/Xiti TrackingCookie No 0 Yes No I:\Documents and Settings\chloe\Cookies\chloe@xiti[1].txt
00167704 Cookie/Xiti TrackingCookie No 0 Yes No C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@xiti[1].txt
00168048 Cookie/Overture TrackingCookie No 0 Yes No C:\Documents and Settings\Matthew\Cookies\[removed][1].txt
00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\[removed][2].txt
00168061 Cookie/Apmebf TrackingCookie No 0 Yes No C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@apmebf[2].txt
00168061 Cookie/Apmebf TrackingCookie No 0 Yes No I:\Documents and Settings\Morrison\Cookies\morrison@apmebf[2].txt
00168061 Cookie/Apmebf TrackingCookie No 0 Yes No I:\Documents and Settings\mattew\Cookies\mattew@apmebf[2].txt
00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@serving-sys[1].txt
00168093 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\[removed]-sys[1].txt
00168109 Cookie/Adtech TrackingCookie No 0 Yes No C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@adtech[2].txt
00169190 Cookie/Advertising TrackingCookie No 0 Yes No C:\Documents and Settings\Matthew\Cookies\matthew@advertising[2].txt
00169190 Cookie/Advertising TrackingCookie No 0 Yes No C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@advertising[2].txt
00170495 Cookie/PointRoll TrackingCookie No 0 Yes No C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\[removed][2].txt
00170554 Cookie/Overture TrackingCookie No 0 Yes No C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@overture[1].txt
00170554 Cookie/Overture TrackingCookie No 0 Yes No C:\Documents and Settings\Matthew\Cookies\matthew@overture[1].txt
00171982 Cookie/QuestionMarket TrackingCookie No 0 Yes No C:\Documents and Settings\Matthew\Cookies\matthew@questionmarket[1].txt
00171982 Cookie/QuestionMarket TrackingCookie No 0 Yes No C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@questionmarket[1].txt
00172221 Cookie/Zedo TrackingCookie No 0 Yes No C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@zedo[1].txt
00172483 Cookie/888 TrackingCookie No 0 Yes No C:\Documents and Settings\Matthew\Cookies\[removed][2].txt
00172484 Cookie/Cassava TrackingCookie No 0 Yes No C:\Documents and Settings\Matthew\Cookies\[removed][4].txt
00186469 Cookie/Reliablestats TrackingCookie No 0 Yes No C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\[removed][1].txt
00186469 Cookie/Reliablestats TrackingCookie No 0 Yes No C:\Documents and Settings\Matthew\Cookies\[removed][1].txt
00194327 Cookie/Go TrackingCookie No 0 Yes No C:\Documents and Settings\Matthew\Cookies\matthew@go[1].txt
00207936 Cookie/Adviva TrackingCookie No 0 Yes No C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@adviva[2].txt
00217990 Cookie/WinFixer TrackingCookie No 0 Yes No I:\Documents and Settings\chloem1\Cookies\chloem1@winfixer[2].txt
00234869 Cookie/FastClick TrackingCookie No 0 Yes No C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\[removed][2].txt
00262020 Cookie/Atwola TrackingCookie No 0 Yes No I:\Documents and Settings\Morrison\Cookies\morrison@atwola[1].txt
00262024 Cookie/ErrorSafe TrackingCookie No 0 Yes No C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\[removed][2].txt
00262024 Cookie/ErrorSafe TrackingCookie No 0 Yes No C:\Documents and Settings\Matthew\Cookies\[removed][1].txt
00262025 Cookie/ErrorSafe TrackingCookie No 0 Yes No C:\Documents and Settings\Matthew\Cookies\matthew@errorsafe[1].txt
00262025 Cookie/ErrorSafe TrackingCookie No 0 Yes No C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@errorsafe[2].txt
00296582 Cookie/DriveCleaner TrackingCookie No 0 Yes No C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\[removed][2].txt
00296583 Cookie/DriveCleaner TrackingCookie No 0 Yes No C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\[removed][2].txt
00296584 Cookie/DriveCleaner TrackingCookie No 0 Yes No C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@drivecleaner[1].txt
00320977 Cookie/Winantivirus TrackingCookie No 0 Yes No C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\[removed][2].txt
00320978 Cookie/Winantivirus TrackingCookie No 0 Yes No C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@winantivirus[1].txt
00326065 Application/InternetGameBox HackTools No 0 Yes No C:\QooBox\Quarantine\C\Program Files\InternetGameBox\InternetGameBox.exe.vir
00326065 Application/InternetGameBox HackTools No 0 Yes No C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP451\A0085760.exe
00329272 Cookie/Systemdoctor TrackingCookie No 0 Yes No C:\Documents and Settings\Matthew\Cookies\[removed][1].txt
00333562 Application/MyWebSearch HackTools No 0 Yes No C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP446\A0082840.DLL
00350182 Adware/SaveNow Adware No 0 Yes No C:\_OTMoveIt\MovedFiles\Program Files\WinAce\VVSNInst.exe
00351416 Cookie/Systemdoctor TrackingCookie No 0 Yes No I:\Documents and Settings\chloem1\Cookies\chloem1@systemdoctor[1].txt
00351416 Cookie/Systemdoctor TrackingCookie No 0 Yes No C:\Documents and Settings\Matthew\Cookies\matthew@systemdoctor[1].txt
00365124 Application/MyWebSearch HackTools No 0 Yes No C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP446\A0082846.DLL
00397047 Adware/Comet Adware No 0 No No I:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP456\A0092308.exe[jokester.dll]
00397047 Adware/Comet Adware No 0 No No C:\_OTMoveIt\MovedFiles\Documents and Settings\mattew\Local Settings\Temporary Internet Files\Content.IE5\QK9VXZCZ\jokes[1].exe[jokester.dll]
00505447 Cookie/Winantivirus TrackingCookie No 0 Yes No C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\[removed][1].txt
00530383 Cookie/DriveCleaner TrackingCookie No 0 Yes No C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\[removed][2].txt
01262593 Application/NirCmd.A HackTools No 0 No No C:\Documents and Settings\Mark\Desktop\ComboFix.exe[nircmd.cfexe]
01262593 Application/NirCmd.A HackTools No 0 Yes No C:\WINDOWS\NirCmd.exe
01262593 Application/NirCmd.A HackTools No 0 No No C:\Documents and Settings\Mark\Desktop\ComboFix.exe[nircmd.exe]
01262593 Application/NirCmd.A HackTools No 0 Yes No C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP452\A0090924.exe
01262593 Application/NirCmd.A HackTools No 0 Yes No C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP451\A0087802.exe
01262593 Application/NirCmd.A HackTools No 0 Yes No C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP451\A0087814.exe
01262593 Application/NirCmd.A HackTools No 0 Yes No C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP451\A0090864.exe
02164072 Adware/OneStep Adware No 0 Yes No C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP423\A0074555.exe
02164072 Adware/OneStep Adware No 0 Yes No C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP423\A0074561.exe
02372550 Adware/Zango Adware No 0 Yes No C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP418\A0074104.exe
02372550 Adware/Zango Adware No 0 Yes No C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP423\A0075528.exe
02577117 Adware/Zango Adware No 0 Yes No C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP418\A0074081.exe
02585872 Adware/Zango Adware No 0 Yes No C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP418\A0074088.exe
02631560 Adware/Zango Adware No 0 Yes No C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP418\A0074082.dll
02660997 Adware/NaviPromo Adware No 1 Yes No C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP439\A0081121.exe
02661038 Adware/Lop Adware No 0 Yes No C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP418\A0074068.exe
02726948 Adware/SystemDoctor Adware No 0 Yes No C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP423\A0074545.exe
02788215 Adware/Lop Adware No 0 Yes No C:\Documents and Settings\Matthew\Application Data\Joy Long Test\ofonhnrk.exe
02885963 Rootkit/Booto.C Virus/Worm No 0 Yes No C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP451\A0086775.sys
;===================================================================================================================================================================================
SUSPECTS
Location
;===================================================================================================================================================================================
;===================================================================================================================================================================================

Katana

January 5, 2008, 10:21 PM UTC

OTMoveIt

Please double-click OTMoveIt.exe to run it.
Copy the file paths below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy):

C:\Documents and Settings\Matthew\Application Data\Joy Long Test
Return to OTMoveIt, right click on the "Paste List of Files/Folders to be moved" window and choose Paste.
Click the red Moveit! button.
Close OTMoveIt
Copy and paste the contents of the results box as a reply to this topic

Let’s see if I can help you keep it that way

First lets tidy up

Open OTMoveIt Click Cleanup,
it will now connect to the internet and get a list of files to delete.
When a box pops up click YES.

Delete any logs we have produced and delete the folder that you have put all the logs/tools in
Empty your recycle bin

Set correct settings for files that should be hidden in Windows XP

Click Start > My Computer > Tools menu (at top of page) > Folder Options > View tab.
Under "Hidden files and folders" if necessary select Do not show hidden files and folders.
If unchecked please checkHide protected operating system files (Recommended)
If necessary check "Display content of system folders"
If necessary Uncheck Hide file extensions for known file types.
Click OK

Reset System Restore.
Now you should disable System restore to purge any infected files and then re-enable it,

On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
Check Turn off System Restore.
Click Apply, and then click OK.
Restart your computer

Turn ON System Restore

On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
Un-Check Turn off System Restore.
Click Apply, and then click OK.

The following is some info to help you stay safe and clean.

Online Scanners
I would recommend a scan at one or more of the following sites at least once a month.

http://www.nanoscan.com
http://www.pandasoftware.com/activescan ... ncipal.htm
http://www.kaspersky.com/virusscanner

AntiSpyware

not

Spybot - Search & Destroy <<< A must have program
- It includes host protection and registry protection
- A hosts file is a bit like a phone book, it points to the actual numeric address (i.e. the IP address) from the human friendly name of a website. This feature can be used to block malicious websites
a-squared Free <<< A good "realtime" or "on demand" scanner
AVG Anti-Spyware 7.5 <<< A good "realtime" or "on demand" scanner
superantispyware <<< A good "realtime" or "on demand" scanner
Ad-Aware 2007 Free <<< A good "realtime" or "on demand" scanner

Prevention

Winpatrol
- An excellent startup manager and then some !!
- Notifies you if programs are added to startup
- Allows delayed startup
- A must have addition
SpywareBlaster 3.5.1
- SpywareBlaster sets killbits in the registry to prevent known malicious activex controls from installing themselves on your computer.
SpywareGuard 2.2
- SpywareGuard provides real-time protection against spyware.
- Not required if you have other "realtime" antispyware or Winpatrol
ZonedOut
- Formerly known as IE-SPYAD, adds a long list of sites and domains associated with known advertisers and marketers to the Restricted sites zone of Internet Explorer.
MVPS HOSTS
- This little program packs a powerful punch as it blocks ads, banners, 3rd party Cookies, 3rd party page counters, web bugs, and many hijackers.
- For information on how to download and install, please read this tutorial by WinHelp2002.
- Not required if you are using other host file protections

Internet Browsers

Make your Internet Explorer more secure - This can be done by following these simple instructions:
1. From within Internet Explorer click on the Tools menu and then click on Options.
2. Click once on the Security tab
3. Click once on the Internet icon so it becomes highlighted.
4. Click once on the Custom Level button.
  - Change the Download signed ActiveX controls to Prompt
  - Change the Download unsigned ActiveX controls to Disable
  - Change the Initialise and script ActiveX controls not marked as safe to Disable
  - Change the Installation of desktop items to Prompt
  - Change the Launching programs and files in an IFRAME to Prompt
  - Change the Navigate sub-frames across different domains to Prompt
  - When all these settings have been made, click on the OK button.
  - If it prompts you as to whether or not you want to save the settings, press the Yes button.
5. Next press the Apply button and then the OK to exit the Internet Properties page.

FireFox
- With many addons available that make customization easy this is a very popular choice
- NoScript and AdBlockPlus addons are essential
Opera
- Another popular alternative
Netscape
- Another popular alternative
- Also has Addons available

Cleaning Temporary Internet Files and Tracking Cookies

ATF Cleaner
- Free and very simple to use
CCleaner
- Free and very flexible, you can chose which cookies to keep

Also PLEASE read this article.....So How Did I Get Infected In The First Place

The last and most important thing I can tell you is UPDATE.
If you don't update your security programs (Antivirus, Antispyware even Windows) then you are at risk.
Malware changes on a day to day basis. You should update every week at the very least.

If you follow this advice then (with a bit of luck) you will never have to hear from me again

If you could post back one more time to let me know everything is OK, then I can have this thread archived.

Happy surfing K'

tamskinner

January 6, 2008, 9:06 AM UTC

Hi Katana
Yes the moveit file worked ok again. I did copy the result to paste here, but have rebooted several times since then, so have lost the result!

Everything seems fine, no pop ups, redirects etc. I am very very impressed with the service thank you very much, and have made a small donation - how is the service funded if not through donation?

I shall endeavour to follow the good advice on staying clean also!

Kind regards
Mark Morrison