Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

OneStep search - hjt log, please help!!

MalwareRemoval.com provides free support for people with infected computers. Using plain language that anyone can understand, our community of volunteer experts will walk you through each step.

Re: OneStep search - hjt log, please help!!

Unread postby tamskinner » May 22nd, 2008, 3:52 pm

Hi - new kaspersky file below

-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Thursday, May 22, 2008 8:50:50 PM
Operating System: Microsoft Windows XP Home Edition, Service Pack 3 (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 22/05/2008
Kaspersky Anti-Virus database records: 795505
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
C:\
D:\
E:\
F:\
G:\
H:\
I:\

Scan Statistics:
Total number of scanned objects: 162332
Number of viruses found: 3
Number of infected objects: 8
Number of suspicious objects: 2
Duration of the scan process: 01:52:48

Infected Object Name / Virus Name / Last Action
C:\Documents and Settings\All Users\Application Data\blueyonder\PCguard\logs\FirewallService05-22-2008--10-02-09.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\blueyonder\PCguard\logs\Fw_Session.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\blueyonder\PCguard\logs\SafetyConsoleLog05-22-2008--10-03-18.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\blueyonder\PCguard\logs\ServiceModel05-22-2008--10-03-17.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Lenovo\messages\logs\lf000.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\Mark\Application Data\Microsoft\Outlook\Outlook.NK2 Object is locked skipped
C:\Documents and Settings\Mark\Application Data\Microsoft\Outlook\Outlook.srs Object is locked skipped
C:\Documents and Settings\Mark\Application Data\Mozilla\Firefox\Profiles\ky48t48i.default\cert8.db Object is locked skipped
C:\Documents and Settings\Mark\Application Data\Mozilla\Firefox\Profiles\ky48t48i.default\GoogleToolbarData\googlesafebrowsing.db Object is locked skipped
C:\Documents and Settings\Mark\Application Data\Mozilla\Firefox\Profiles\ky48t48i.default\history.dat Object is locked skipped
C:\Documents and Settings\Mark\Application Data\Mozilla\Firefox\Profiles\ky48t48i.default\key3.db Object is locked skipped
C:\Documents and Settings\Mark\Application Data\Mozilla\Firefox\Profiles\ky48t48i.default\parent.lock Object is locked skipped
C:\Documents and Settings\Mark\Application Data\Mozilla\Firefox\Profiles\ky48t48i.default\search.sqlite Object is locked skipped
C:\Documents and Settings\Mark\Application Data\Mozilla\Firefox\Profiles\ky48t48i.default\urlclassifier2.sqlite Object is locked skipped
C:\Documents and Settings\Mark\Application Data\Telewest\PCguard advisor\client_gateway.log Object is locked skipped
C:\Documents and Settings\Mark\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\Mark\Desktop\Navilog1.exe/file11 Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped
C:\Documents and Settings\Mark\Desktop\Navilog1.exe Inno: infected - 1 skipped
C:\Documents and Settings\Mark\Desktop\Navilog1.zip/Navilog1.exe/file11 Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped
C:\Documents and Settings\Mark\Desktop\Navilog1.zip/Navilog1.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped
C:\Documents and Settings\Mark\Desktop\Navilog1.zip ZIP: infected - 2 skipped
C:\Documents and Settings\Mark\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat Object is locked skipped
C:\Documents and Settings\Mark\Local Settings\Application Data\Microsoft\Outlook\archive.pst Object is locked skipped
C:\Documents and Settings\Mark\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst Object is locked skipped
C:\Documents and Settings\Mark\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\Mark\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\Mark\Local Settings\Application Data\Mozilla\Firefox\Profiles\ky48t48i.default\Cache\_CACHE_001_ Object is locked skipped
C:\Documents and Settings\Mark\Local Settings\Application Data\Mozilla\Firefox\Profiles\ky48t48i.default\Cache\_CACHE_002_ Object is locked skipped
C:\Documents and Settings\Mark\Local Settings\Application Data\Mozilla\Firefox\Profiles\ky48t48i.default\Cache\_CACHE_003_ Object is locked skipped
C:\Documents and Settings\Mark\Local Settings\Application Data\Mozilla\Firefox\Profiles\ky48t48i.default\Cache\_CACHE_MAP_ Object is locked skipped
C:\Documents and Settings\Mark\Local Settings\Application Data\Mozilla\Firefox\Profiles\ky48t48i.default\XUL.mfl Object is locked skipped
C:\Documents and Settings\Mark\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Mark\Local Settings\History\History.IE5\MSHist012008052220080523\index.dat Object is locked skipped
C:\Documents and Settings\Mark\Local Settings\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat Object is locked skipped
C:\Documents and Settings\Mark\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Mark\My Documents\My Received Files\foto879h1.zip/img_838.JPG_spotsndots@hotmail.co.uk.com Infected: Trojan.Win32.Agent.kks skipped
C:\Documents and Settings\Mark\My Documents\My Received Files\foto879h1.zip ZIP: infected - 1 skipped
C:\Documents and Settings\Mark\ntuser.dat Object is locked skipped
C:\Documents and Settings\Mark\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Apple Computer\iTunes\iTunesPrefs.xml Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\blueyonder\PCguard\AdBlocker.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\blueyonder\PCguard\AdBlocker.dat.backup Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\blueyonder\PCguard\admanager.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\blueyonder\PCguard\Privacy.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\blueyonder\PCguard\Privacy.dat.backup Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\desktop.ini Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\eBay\eBay Toolbar2\User_tamskinner.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\GDIPFONTCACHEV1.DAT Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Google\GoogleEarth\myplaces.backup.kml Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Google\GoogleEarth\myplaces.kml Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Google\GoogleEarth\myplaces.kml.tmp Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Google\Local Search History\google%2Efroogle.w Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Google\Local Search History\google%2Eimages.w Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Google\Local Search History\google%2Enews.w Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Google\Local Search History\google%2Eweb.w Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\0.gif-59861b18-29ec13f7.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\0.gif-59861b18-29ec13f7.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\1.gif-59943299-12356685.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\1.gif-59943299-12356685.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\10.gif-5014c3b9-54935ee2.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\10.gif-5014c3b9-54935ee2.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\11.gif-5022db3a-24bb1d2e.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\11.gif-5022db3a-24bb1d2e.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\12.gif-5030f2bb-3cb700e4.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\12.gif-5030f2bb-3cb700e4.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\13.gif-503f0a3c-38bb47c2.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\13.gif-503f0a3c-38bb47c2.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\14.gif-504d21bd-58c91f55.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\14.gif-504d21bd-58c91f55.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\15.gif-505b393e-7dd74129.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\15.gif-505b393e-7dd74129.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\2.gif-59a24a1a-4ba4d971.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\2.gif-59a24a1a-4ba4d971.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\3.gif-59b0619b-21a0e52b.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\3.gif-59b0619b-21a0e52b.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\4.gif-59be791c-5fc3b8b1.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\4.gif-59be791c-5fc3b8b1.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\5.gif-59cc909d-28845e1b.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\5.gif-59cc909d-28845e1b.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\6.gif-59daa81e-1352ef65.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\6.gif-59daa81e-1352ef65.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\7.gif-59e8bf9f-5f418b71.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\7.gif-59e8bf9f-5f418b71.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\8.gif-59f6d720-4a90bd76.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\8.gif-59f6d720-4a90bd76.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\9.gif-5a04eea1-1b060fcc.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\9.gif-5a04eea1-1b060fcc.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\a3o.au-6b3f35a0-1c089617.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\a3o.au-6b3f35a0-1c089617.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\adds.gif-17afb9cc-789ad8c2.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\adds.gif-17afb9cc-789ad8c2.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\b.gif-58d536f5-44eccf4d.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\b.gif-58d536f5-44eccf4d.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\ball1.gif-4d59107a-597aad08.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\ball1.gif-4d59107a-597aad08.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\ball2.gif-4d6727fb-1f0b0a9e.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\ball2.gif-4d6727fb-1f0b0a9e.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\bg.au-290d0558-3882c306.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\bg.au-290d0558-3882c306.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\bg2.au-6fb519d0-1614f6f3.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\bg2.au-6fb519d0-1614f6f3.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\c0.gif-3aa9237c-17cf0137.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\c0.gif-3aa9237c-17cf0137.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\c1.gif-3ab73afd-127b4407.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\c1.gif-3ab73afd-127b4407.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\c2.gif-3ac5527e-631f43db.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\c2.gif-3ac5527e-631f43db.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\c3.gif-3ad369ff-11912999.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\c3.gif-3ad369ff-11912999.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\controls.gif-18ef0b05-19331a9f.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\controls.gif-18ef0b05-19331a9f.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\controls2.gif-7c3127cf-4e01e21b.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\controls2.gif-7c3127cf-4e01e21b.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\d.gif-58f165f7-20444f5c.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\d.gif-58f165f7-20444f5c.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\dest.gif-1de0447c-28504a52.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\dest.gif-1de0447c-28504a52.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\eclips.au-177e311f-6c2a8e4b.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\eclips.au-177e311f-6c2a8e4b.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\ef.gif-410bc9f0-1fd0c2e4.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\ef.gif-410bc9f0-1fd0c2e4.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\excited.au-5840c223-3c27fb9e.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\excited.au-5840c223-3c27fb9e.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\focus0.gif-679cd2f2-5c048040.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\focus0.gif-679cd2f2-5c048040.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\focus1.gif-67aaea73-2cd008cc.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\focus1.gif-67aaea73-2cd008cc.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\fulltime.gif-35f6572b-22ebfd63.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\fulltime.gif-35f6572b-22ebfd63.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\g0.gif-2c3a7543-11afda41.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\g0.gif-2c3a7543-11afda41.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\g1.gif-2c488cc4-77bf1aed.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\g1.gif-2c488cc4-77bf1aed.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\g2.gif-2c56a445-3b7667ba.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\g2.gif-2c56a445-3b7667ba.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\g3.gif-2c64bbc6-79051dbd.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\g3.gif-2c64bbc6-79051dbd.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\g4.gif-2c72d347-45400209.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\g4.gif-2c72d347-45400209.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\g5.gif-2c80eac8-301e7bed.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\g5.gif-2c80eac8-301e7bed.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\g6.gif-2c8f0249-71c34cbc.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\g6.gif-2c8f0249-71c34cbc.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\g7.gif-2c9d19ca-5fc27ae7.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\g7.gif-2c9d19ca-5fc27ae7.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\g8.gif-2cab314b-506b8a25.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\g8.gif-2cab314b-506b8a25.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\goal.au-16e62fca-3ac27696.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\goal.au-16e62fca-3ac27696.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\goal.gif-145adbe2-639fdb58.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\goal.gif-145adbe2-639fdb58.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\gol.gif-4105a7ac-17c326d1.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\gol.gif-4105a7ac-17c326d1.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\goldengoal.gif-2762716b-658b8656.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\goldengoal.gif-2762716b-658b8656.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\halftime.gif-29e110cf-2f01ac01.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\halftime.gif-29e110cf-2f01ac01.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\head.au-3ab851dd-58ab96a4.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\head.au-3ab851dd-58ab96a4.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\kick.au-605dc3b7-68f8a6bf.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\kick.au-605dc3b7-68f8a6bf.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\l.gif-596221ff-5794cca5.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\l.gif-596221ff-5794cca5.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\login.gif-1f9d883e-1ba92e38.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\login.gif-1f9d883e-1ba92e38.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\main.au-56f273b2-38600a1e.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\main.au-56f273b2-38600a1e.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\miniclip2.gif-148668fe-260a50a7.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\miniclip2.gif-148668fe-260a50a7.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\p.gif-599a8003-6372c1ee.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\p.gif-599a8003-6372c1ee.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\pass.au-5c1b420c-7c32fd48.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\pass.au-5c1b420c-7c32fd48.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\r.gif-59b6af05-4b457bbe.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\r.gif-59b6af05-4b457bbe.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\ref1.au-4be5e8ff-4ae4d315.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\ref1.au-4be5e8ff-4ae4d315.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\ref2.au-4be65d5e-555d39a0.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\ref2.au-4be65d5e-555d39a0.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\replay.au-3ec63744-4e0ade04.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\replay.au-3ec63744-4e0ade04.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\RSProxy.class-9fe5204-43b971be.class Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\RSProxy.class-9fe5204-43b971be.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\shad.gif-332be412-43d93963.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\shad.gif-332be412-43d93963.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\sky.jpg-35b449e6-526013d6.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\sky.jpg-35b449e6-526013d6.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\stad.gif-2df6ab1e-5fed69c1.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\stad.gif-2df6ab1e-5fed69c1.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\sws.gif-5cd9de22-35e52c65.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\sws.gif-5cd9de22-35e52c65.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\theme.au-41270486-6e3f623a.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\theme.au-41270486-6e3f623a.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\u.gif-59e0f588-62da8875.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\u.gif-59e0f588-62da8875.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\worldcup.gif-5f656f2f-36f9753f.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\file\worldcup.gif-5f656f2f-36f9753f.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\jar\boom.zip-9cdf889-7caa38d8.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\jar\boom.zip-9cdf889-7caa38d8.zip Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\jar\loader-1921061343.jar-6d028c5b-6eba2928.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\jar\loader-1921061343.jar-6d028c5b-6eba2928.zip Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\jar\okchat270.jar-5457c483-72409692.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\jar\okchat270.jar-5457c483-72409692.zip Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\jar\socca.jar-3fc469e5-21dab0f3.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\cache\javapi\v1.0\jar\socca.jar-3fc469e5-21dab0f3.zip Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\deployment.properties Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\IBM\Java\Deployment\log\plugin142.trace Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Joy Long Test\0 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Joy Long Test\bciukvzd.exe Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Joy Long Test\Itchburnproxy.exe Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Joy Long Test\ofonhnrk.exe Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Joy Long Test\style base setup load.exe Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Joy Long Test\user less.exe Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Joy Long Test\wsgvhxwb.exe Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Director MX 2004\Tennis Titans\Prefs\TEN1k_curr1.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Director MX 2004\Tennis Titans\Prefs\TEN1k_hardware.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Director MX 2004\Tennis Titans\Prefs\TEN1k_match.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Director MX 2004\Tennis Titans\Prefs\TEN1k_options.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Director MX 2004\Tennis Titans\Prefs\TEN1k_players.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#Security\FlashPlayerTrust\FreezeProducts.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\adidas.uk.tangozebra.com\00005986\uk\main.swf\user_data.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\clubpenguin.com\SaveGame.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\ebaystatic.com\ft1693-1.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\flashtalking.com\ft523-2.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\flashtalking.com\ft523-5.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\flashtalking.com\ft523-8.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\mediaplex.com\ft575-1.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\miniclip.com\ads\homepagefillerad300x250.swf\MiniclipGlobal300x250.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\miniclip.com\games\alien-attack\en\alienattack_HS.swf\MiniclipHighscores.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\miniclip.com\games\disc-golf\en\discgolf.swf\MiniclipLoaderAd.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\miniclip.com\games\elastic-soccer\en\elasticsoccer.swf\MiniclipHighscores.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\miniclip.com\games\electro-air-hockey\en\airhockey.swf\eah.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\miniclip.com\games\gyroball\en\gyroball.swf\MiniclipHighscores.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\miniclip.com\games\monster-truck\en\swf\mt_gameSounds.swf\MiniclipHighscores.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\miniclip.com\games\skidoo-tt\en\skidoott.swf\MiniclipLoaderAd.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\miniclip.com\games\world-cup-soccer\en\world-cup-soccer.dcr\MiniclipHighscores.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\miniclip.com\swfcontent\highscore.swf\MiniclipHighscores.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\mochibot.com\com.mochibot.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\pagead2.googlesyndication.com\pagead\googleadplayer.swf\mediaPlayerUserSettings.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\www.adidas.com\campaigns\verticalsfootball\content\logon\logon.swf\adidasFootball.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\www.miniclip.com\games\motocross-fever\en\motocross_x.dcr\motocross.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\www.miniclip.com\games\ping-pong\en\pingpong.swf\so.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\www.miniclip.com\games\scribble\en\scribble.swf\scribble_1.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\www.miniclip.com\games\scribble\en\scribble.swf\scribble_gdf.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\www.miniclip.com\games\stunt-driver\en\stunt_driver.dcr\stunt_driver.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\www.miniclip.com\games\world-cup-soccer\en\world-cup-soccer.dcr\world_cup_soccer.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\www.miniclip.com\swfcontent\lobby.swf\MonkeySnowfight.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\www.ugotgames.com\11.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\www.youtube.com\soundData.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\www.youtube.com\videostats.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\#SharedObjects\DLSU3XLJ\zedo.com\tram040406.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#adidas.uk.tangozebra.com\settings.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#clubpenguin.com\settings.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#ebaystatic.com\settings.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#flashtalking.com\settings.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#mediaplex.com\settings.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#miniclip.com\settings.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#mochibot.com\settings.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#pagead2.googlesyndication.com\settings.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.adidas.com\settings.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.miniclip.com\settings.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.ugotgames.com\settings.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.youtube.com\settings.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#zedo.com\settings.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\dirapi.mch Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\Prefs\A5ABYSJ3\kbox_g124.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\Prefs\A5ABYSJ3\kbox_g124b.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\Prefs\A5ABYSJ3\kbox_g124c.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\Prefs\A5ABYSJ3\pingisminidemo.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\Prefs\A5ABYSJ3\rd_curmotd.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\Prefs\A5ABYSJ3\rd_membericon.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\Prefs\A5ABYSJ3\rd_snowfight_keys.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\Prefs\A5ABYSJ3\rd_snowfight_settings.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\Prefs\A5ABYSJ3\TENw1k_curr1.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\Prefs\A5ABYSJ3\TENw1k_hardware.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\Prefs\A5ABYSJ3\TENw1k_match.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\Prefs\A5ABYSJ3\TENw1k_options.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\Prefs\A5ABYSJ3\TENw1k_players.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\Prefs\A5ABYSJ3\_RD_.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\Prefs\A5ABYSJ3\_RD_Global.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\Prefs\A5ABYSJ3\_RD_sbwaterslide-miniclip.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\Prefs\A5ABYSJ3\__preftest.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\Prefs\A5ABYSJ3\__skive_global_data.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\Prefs\A5ABYSJ3\__skive_totefreekick_mc_data.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\Shockwave Log Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\xtras\download\AndradeArts\MoveCursorw32\MoveCursor.x32 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\xtras\download\MacromediaInc\AnimatedGIFAsset\Animated GIF Asset.X32 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\xtras\download\MacromediaInc\DirectSound\DirectSound.x32 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\xtras\download\MacromediaInc\FlashAsset\Flash Asset.x32 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\xtras\download\MacromediaInc\FontAsset\Font Asset.x32 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\xtras\download\MacromediaInc\FontXtra\Font Xtra.x32 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\xtras\download\MacromediaInc\Havok\Havok.x32 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\xtras\download\MacromediaInc\MacroMix\MacroMix.x32 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\xtras\download\MacromediaInc\Shockwave3dAsset\Shockwave 3d Asset.x32 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\xtras\download\MacromediaInc\SoundControl\Sound Control.x32 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\xtras\download\MacromediaInc\SWA\swadcmpr.x32 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\xtras\download\MacromediaInc\SWA\SWASTRM.X32 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\xtras\download\MacromediaInc\TextAsset\Text Asset.x32 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\xtras\download\MacromediaInc\TextXtra\TextXtra.x32 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Macromedia\Shockwave Player\xtras\download\MacromediaInc\XMLParser\XMLParser.X32 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\Content\2BF68F4714092295550497DD56F57004 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\Content\486CC6AFD08942336C61FCD401C4A1D1 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\Content\5C8DDA36D60247082B142836039F4636 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\Content\60E31627FDA0A46932B0E5948949F2A5 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\Content\696F3DE637E6DE85B458996D49D759AD Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\Content\71644221AC231DBD2359C18EBB2118DC Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\Content\74BFD122C0875EC75DBE5C6DB4C59019 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\Content\7C8A03C4580C6B04FDF34357F3474EDC Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\Content\A44F4E7CB3133FF765C39A53AD8FCFDD Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\Content\A8FABA189DB7D25FBA7CAC806625FD30 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\Content\B2F4B1D39F0694C6CDB433BC3CCF1418 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\Content\B82262A5D5DA4DDACE9EDA7F787D0DEB Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\Content\C571B417AAF1F617555A0486AB3F5361 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\Content\DC2135CED98D8A4D7C0CEE202BB0B810 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\Content\F482C95F83F1B59228F1B1E720F2EDF1 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\Content\F5A17C00E427F919C4A49EEF5AD0EE53 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\MetaData\2BF68F4714092295550497DD56F57004 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\MetaData\486CC6AFD08942336C61FCD401C4A1D1 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\MetaData\5C8DDA36D60247082B142836039F4636 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\MetaData\60E31627FDA0A46932B0E5948949F2A5 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\MetaData\696F3DE637E6DE85B458996D49D759AD Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\MetaData\71644221AC231DBD2359C18EBB2118DC Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\MetaData\74BFD122C0875EC75DBE5C6DB4C59019 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\MetaData\7C8A03C4580C6B04FDF34357F3474EDC Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\MetaData\A44F4E7CB3133FF765C39A53AD8FCFDD Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\MetaData\A8FABA189DB7D25FBA7CAC806625FD30 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\MetaData\B2F4B1D39F0694C6CDB433BC3CCF1418 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\MetaData\B82262A5D5DA4DDACE9EDA7F787D0DEB Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\MetaData\C571B417AAF1F617555A0486AB3F5361 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\MetaData\DC2135CED98D8A4D7C0CEE202BB0B810 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\MetaData\F482C95F83F1B59228F1B1E720F2EDF1 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\CryptnetUrlCache\MetaData\F5A17C00E427F919C4A49EEF5AD0EE53 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Crypto\RSA\S-1-5-21-1381385058-3852577522-4169218411-1009\533145ef011ddf5ca3983e2545a902b4_d92f6388-d58d-40cf-83bf-6aaa833ec81c Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Crypto\RSA\S-1-5-21-1381385058-3852577522-4169218411-1009\e346aa0582ed1e833c77f4ad46188426_d92f6388-d58d-40cf-83bf-6aaa833ec81c Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Internet Explorer\brndlog.bak Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Internet Explorer\brndlog.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Internet Explorer\Desktop.htt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Internet Explorer\Internet Explorer Wallpaper.bmp Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Internet Explorer\Quick Launch\desktop.ini Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Internet Explorer\Quick Launch\iTunes.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Microsoft Outlook.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Internet Explorer\Quick Launch\Winferno Registry Power Cleaner.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Media Player\00445B83.wpl Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2256670353\sqmnoopt00.sqm Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Backgrounds\map.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Backgrounds\TFR10.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Backgrounds\TFR11.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Backgrounds\TFR12.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Backgrounds\TFR13.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Backgrounds\TFRF.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\DynamicBackgrounds\map.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\DynamicBackgrounds\TFR1B.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\DynamicBackgrounds\TFR26.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\DynamicBackgrounds\TFR31.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\DynamicBackgrounds\TFR3C.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\MapFile\TFR44.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\MapFile\TFR45.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\MapFile\TFR64.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\MapFile\TFRE.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\sqmnoopt00.sqm Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\sqmnoopt01.sqm Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\sqmnoopt02.sqm Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\sqmnoopt03.sqm Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\sqmnoopt04.sqm Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\sqmnoopt05.sqm Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\sqmnoopt06.sqm Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\sqmnoopt07.sqm Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\sqmnoopt08.sqm Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\UserTile\map.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\UserTile\TFR3.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\UserTile\TFR4.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\UserTile\TFR5.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\UserTile\TFR6.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\UserTile\TFR7.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\UserTile\TFR8.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\UserTile\TFR9.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\UserTile\TFRA.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\UserTile\TFRB.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\UserTile\TFRC.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\UserTile\TFRD.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Winks3\map.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Winks3\TFR47.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Winks3\TFR49.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Winks3\TFR4B.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Winks3\TFR4D.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Winks3\TFR4F.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Winks3\TFR51.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Winks3\TFR53.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Winks3\TFR55.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Winks3\TFR57.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Winks3\TFR59.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Winks3\TFR5B.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Winks3\TFR5D.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Winks3\TFR5F.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Winks3\TFR61.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\2547488523\Winks3\TFR63.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Backgrounds\map.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Backgrounds\TFR35.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Backgrounds\TFR36.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Backgrounds\TFR37.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Backgrounds\TFR38.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Backgrounds\TFR39.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Backgrounds\TFR396.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Backgrounds\TFR397.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Backgrounds\TFR398.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Backgrounds\TFR399.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Backgrounds\TFR39A.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\DynamicBackgrounds\map.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\DynamicBackgrounds\TFR3D.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\DynamicBackgrounds\TFR48.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\DynamicBackgrounds\TFR53.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\DynamicBackgrounds\TFR5E.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\MapFile\TFR395.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\MapFile\TFR66.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\MapFile\TFR67.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\MapFile\TFR86.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\sqmnoopt00.sqm Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\sqmnoopt01.sqm Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\sqmnoopt02.sqm Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\sqmnoopt03.sqm Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\UserTile\map.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\UserTile\TFR38A.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\UserTile\TFR38B.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\UserTile\TFR38C.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\UserTile\TFR38D.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\UserTile\TFR38E.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\UserTile\TFR38F.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\UserTile\TFR390.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\UserTile\TFR391.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\UserTile\TFR392.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\UserTile\TFR393.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\UserTile\TFR394.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Winks3\map.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Winks3\TFR69.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Winks3\TFR6B.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Winks3\TFR6D.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Winks3\TFR6F.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Winks3\TFR71.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Winks3\TFR73.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Winks3\TFR75.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Winks3\TFR77.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Winks3\TFR79.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Winks3\TFR7B.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Winks3\TFR7D.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Winks3\TFR7F.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Winks3\TFR81.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Winks3\TFR83.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3014917533\Winks3\TFR85.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\MSN Messenger\3072885681\sqmnoopt00.sqm Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Office\MSO1033.acl Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Office\MSOut10.pip Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Office\Recent\06.09.27. Daily Bulletin.doc.url Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Office\Recent\Art.LNK Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Office\Recent\cool pics 4 me!!.LNK Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Office\Recent\Doc1.LNK Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Office\Recent\index.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Office\Recent\msg_attachments on http://www.sct1.net.url Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Office\Recent\Templates.LNK Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Office\Word10.pip Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Outlook\outcmd.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Outlook\Outlook.srs Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Outlook\VIEWS.DAT Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Proof\CUSTOM.DIC Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Protect\CREDHIST Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Protect\S-1-5-21-1381385058-3852577522-4169218411-1009\25e13c7d-ec52-4b27-867d-3d2bf6582691 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Protect\S-1-5-21-1381385058-3852577522-4169218411-1009\2e53e226-9a6f-4f3a-937f-ac8d09197a37 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Protect\S-1-5-21-1381385058-3852577522-4169218411-1009\4401bb5b-673f-44b2-8c94-e1c75a010ef8 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Protect\S-1-5-21-1381385058-3852577522-4169218411-1009\463740d1-5f21-4495-9d47-88b2ba9b47bc Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Protect\S-1-5-21-1381385058-3852577522-4169218411-1009\b1afc900-082d-483f-b97a-e3c0032564f3 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Protect\S-1-5-21-1381385058-3852577522-4169218411-1009\ced00369-224a-465e-956c-dd42852b3912 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Protect\S-1-5-21-1381385058-3852577522-4169218411-1009\d1847f5a-0cd8-49db-a4d6-b2fe45dd316e Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Protect\S-1-5-21-1381385058-3852577522-4169218411-1009\f9e3c824-f053-49e4-9448-915fc3fae2d1 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Protect\S-1-5-21-1381385058-3852577522-4169218411-1009\Preferred Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Protect\S-1-5-21-3589872248-1821354942-904758527-1003\fafb8e3f-9c21-471f-bf23-e4fde1890e36 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Protect\S-1-5-21-3589872248-1821354942-904758527-1003\Preferred Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Protect\S-1-5-21-3972929438-621129394-426773285-1003\9b8808bf-0636-4772-88ce-67cb1643b290 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Protect\S-1-5-21-3972929438-621129394-426773285-1003\Preferred Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Templates\Normal.dot Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Templates\~$Normal.dot Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Windows\Themes\Custom.theme Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Microsoft\Word\AutoRecovery save of Document1.asd Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Real\Msg\Category.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Real\Msg\Messages.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Real\Msg\SCategory.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Real\RealMediaSDK\3e1f2700.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Real\RealMediaSDK\52263000.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Real\RealMediaSDK\cookies.txt Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Real\RealPlayer\ErrorLogs\DownloadMgr.log Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Real\RealPlayer\History\KS2 ReviseWise Mental Maths.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Real\RealPlayer\History\ks2maths.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Real\RealPlayer\lclkdb.son Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Real\RealPlayer\realplayer.ste Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Real\RealPlayer\skins\data\normal\imgcache.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Real\RealPlayer\skins\data\normal\state.ini Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Real\RealPlayer\viz.ini Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Real\rnadmin\rnsystem.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\0.gif-54093bde-2617c8d7.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\0.gif-54093bde-2617c8d7.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\1.gif-5417535f-5660cb28.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\1.gif-5417535f-5660cb28.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\10.gif-4a97e47f-355a0b9a.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\10.gif-4a97e47f-355a0b9a.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\11.gif-4aa5fc00-11376b59.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\11.gif-4aa5fc00-11376b59.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\12.gif-4ab41381-47bcae31.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\12.gif-4ab41381-47bcae31.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\13.gif-4ac22b02-1e6f020e.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\13.gif-4ac22b02-1e6f020e.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\14.gif-4ad04283-6c6406fa.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\14.gif-4ad04283-6c6406fa.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\15.gif-4ade5a04-3498de7a.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\15.gif-4ade5a04-3498de7a.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\2.gif-54256ae0-5e106903.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\2.gif-54256ae0-5e106903.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\3.gif-54338261-77319d6a.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\3.gif-54338261-77319d6a.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\4.gif-544199e2-14fa9cd0.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\4.gif-544199e2-14fa9cd0.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\5.gif-544fb163-55574ccb.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\5.gif-544fb163-55574ccb.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\6.gif-545dc8e4-4abb923b.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\6.gif-545dc8e4-4abb923b.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\7.gif-546be065-6969a484.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\7.gif-546be065-6969a484.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\8.gif-5479f7e6-50e4bead.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\8.gif-5479f7e6-50e4bead.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\9.gif-54880f67-43fbf9ca.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\9.gif-54880f67-43fbf9ca.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\a3o.au-65c25666-342eed13.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\a3o.au-65c25666-342eed13.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\adds.gif-1232da92-4055ddae.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\adds.gif-1232da92-4055ddae.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\b.gif-535857bb-21b6af59.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\b.gif-535857bb-21b6af59.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\ball1.gif-47dc3140-6b7a95e1.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\ball1.gif-47dc3140-6b7a95e1.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\ball2.gif-47ea48c1-14a3da13.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\ball2.gif-47ea48c1-14a3da13.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\bg.au-2390261e-54be38df.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\bg.au-2390261e-54be38df.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\bg2.au-6a383a96-69e7579c.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\bg2.au-6a383a96-69e7579c.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\c0.gif-352c4442-680d5bc0.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\c0.gif-352c4442-680d5bc0.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\c1.gif-353a5bc3-56c342f0.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\c1.gif-353a5bc3-56c342f0.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\c2.gif-35487344-6f892c8b.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\c2.gif-35487344-6f892c8b.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\c3.gif-35568ac5-267cea78.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\c3.gif-35568ac5-267cea78.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\controls.gif-13722bcb-4c32a956.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\controls.gif-13722bcb-4c32a956.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\controls2.gif-76b44895-2a56abff.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\controls2.gif-76b44895-2a56abff.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\d.gif-537486bd-7950180f.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\d.gif-537486bd-7950180f.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\dest.gif-18636542-463d50ea.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\dest.gif-18636542-463d50ea.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\eclips.au-120151e5-51dbc531.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\eclips.au-120151e5-51dbc531.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\ef.gif-3b8eeab6-77bc2219.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\ef.gif-3b8eeab6-77bc2219.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\europeancup.jpg-7104011-7b4855b6.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\europeancup.jpg-7104011-7b4855b6.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\excited.au-52c3e2e9-16893ab5.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\excited.au-52c3e2e9-16893ab5.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\focus0.gif-621ff3b8-22cbc358.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\focus0.gif-621ff3b8-22cbc358.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\focus1.gif-622e0b39-5f26cbf0.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\focus1.gif-622e0b39-5f26cbf0.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\fulltime.gif-307977f1-123cc30e.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\fulltime.gif-307977f1-123cc30e.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\g0.gif-26bd9609-48b109de.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\g0.gif-26bd9609-48b109de.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\g1.gif-26cbad8a-6bb81506.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\g1.gif-26cbad8a-6bb81506.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\g2.gif-26d9c50b-536fe3b4.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\g2.gif-26d9c50b-536fe3b4.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\g3.gif-26e7dc8c-4897cd77.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\g3.gif-26e7dc8c-4897cd77.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\g4.gif-26f5f40d-43b8e744.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\g4.gif-26f5f40d-43b8e744.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\g5.gif-27040b8e-67f6a2af.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\g5.gif-27040b8e-67f6a2af.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\g6.gif-2712230f-31e5d6fb.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\g6.gif-2712230f-31e5d6fb.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\g7.gif-27203a90-4b875154.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\g7.gif-27203a90-4b875154.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\g8.gif-272e5211-410e00a3.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\g8.gif-272e5211-410e00a3.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\goal.au-11695090-3d41298f.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\goal.au-11695090-3d41298f.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\goal.gif-eddfca8-535399d0.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\goal.gif-eddfca8-535399d0.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\gol.gif-3b88c872-62d4dd90.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\gol.gif-3b88c872-62d4dd90.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\goldengoal.gif-21e59231-24d2c5ee.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\goldengoal.gif-21e59231-24d2c5ee.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\halftime.gif-24643195-34c8670b.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\halftime.gif-24643195-34c8670b.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\head.au-353b72a3-2a4c4886.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\head.au-353b72a3-2a4c4886.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\kick.au-5ae0e47d-6a12f0c4.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\kick.au-5ae0e47d-6a12f0c4.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\l.gif-53e542c5-25189ee3.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\l.gif-53e542c5-25189ee3.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\main.au-51759478-673ed345.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\main.au-51759478-673ed345.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\miniclip2.gif-f0989c4-26aa86e6.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\miniclip2.gif-f0989c4-26aa86e6.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\p.gif-541da0c9-58fe858e.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\p.gif-541da0c9-58fe858e.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\pass.au-569e62d2-102f44c0.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\pass.au-569e62d2-102f44c0.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\r.gif-5439cfcb-7cb7a366.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\r.gif-5439cfcb-7cb7a366.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\ref1.au-466909c5-38693171.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\ref1.au-466909c5-38693171.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\ref2.au-46697e24-3877aff2.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\ref2.au-46697e24-3877aff2.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\replay.au-3949580a-21b81129.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\replay.au-3949580a-21b81129.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\replay.gif-6a3a43fc-46ff7a04.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\replay.gif-6a3a43fc-46ff7a04.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\shad.gif-2daf04d8-600e0a71.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\shad.gif-2daf04d8-600e0a71.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\sky.jpg-30376aac-3870d645.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\sky.jpg-30376aac-3870d645.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\stad.gif-2879cbe4-418de68f.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\stad.gif-2879cbe4-418de68f.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\sws.gif-575cfee8-486cd896.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\sws.gif-575cfee8-486cd896.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\theme.au-3baa254c-472fdcfe.au Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\theme.au-3baa254c-472fdcfe.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\u.gif-5464164e-34dc6249.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\u.gif-5464164e-34dc6249.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\worldcup.gif-59e88ff5-519fc17d.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\worldcup.gif-59e88ff5-519fc17d.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\socca.jar-3a478aab-3979708e.idx Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\socca.jar-3a478aab-3979708e.zip Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\deployment.properties Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\log\plugin150_10.trace Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Sun\Java\Deployment\log\plugin150_11.trace Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Telewest\PCguard advisor\CampaignStore.xml Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Telewest\PCguard advisor\client_gateway.log Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Telewest\PCguard advisor\client_gateway.log.1 Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Telewest\PCguard advisor\downloads\spa13-football-200712.41.zip.dir\en\broadband-advisor.css Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Telewest\PCguard advisor\downloads\spa13-football-200712.41.zip.dir\en\images\vm-arrow-hover.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Telewest\PCguard advisor\downloads\spa13-football-200712.41.zip.dir\en\images\vm-coca-cola.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Telewest\PCguard advisor\downloads\spa13-football-200712.41.zip.dir\en\images\vm-mr-sheepskin-bg.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Telewest\PCguard advisor\downloads\spa13-football-200712.41.zip.dir\en\images\vm-mr-sheepskin.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Telewest\PCguard advisor\downloads\spa13-football-200712.41.zip.dir\en\images\vm-premier.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Telewest\PCguard advisor\downloads\spa13-football-200712.41.zip.dir\en\images\vm-sport-url.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Telewest\PCguard advisor\downloads\spa13-football-200712.41.zip.dir\en\images\vm-strapline.gif Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Telewest\PCguard advisor\downloads\spa13-football-200712.41.zip.dir\en\index.html Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Telewest\PCguard advisor\downloads\Telewest-Vista_message-06022007.41.zip.dir\en\index.html Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Telewest\PCguard advisor\EventStore.xml Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Telewest\PCguard advisor\SoftwarePackageStore.xml Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\Telewest\PCguard advisor\UpdateStore.xml Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\ThinkVantage\Client Security\encobject.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\ThinkVantage\Client Security\hibernation.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\ThinkVantage\Client Security\swkeys.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\ThinkVantage\Client Security\symkeys.dat Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\WholeSecurity\wcid0.log Object is locked skipped
C:\Documents and Settings\Matthew\Application Data\WholeSecurity\wsasc.zip Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\Desktop.ini Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\dotsnspots@hotmail.co.uk\contactcoll.cache Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharp@hotmail.co.uk\contactcoll.cache Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\02c8b6f1-ade1-4539-b988-262a10f0c9b4.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\060b64d8-40e4-4ddc-b0e7-7c0d093c5e77.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\076528bc-e654-4edd-9448-56187148b72a.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\08533e4f-18ea-4a8d-a8bb-fff3d66e0f0c.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\09519f2e-58c2-4b38-bed9-8caafd242ab4.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\0b7f8510-9825-4c59-88b4-7b7b9c683d8b.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\0ba0d637-16d0-497e-8dff-a15d03db3c6a.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\0f05e43e-ec16-4db2-8d75-c2302ca3680d.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\157176da-0f5d-4c6a-9859-fb155a197474.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\1b6e4dd8-27a3-444c-a005-512d5e71701f.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\1bf786c3-16bd-47d4-8f17-f48994fab8b2.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\1ce61a5a-1389-40d5-bcd2-c8074e8ad339.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\1dd6935b-1279-4842-a9a0-09af6b42b82c.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\219e4d94-bb21-4bde-afe8-3f40d40174ea.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\227aa116-d9ea-4c9f-835f-5d23a280ee70.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\248451ba-517e-4195-8430-205a6fca7b67.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\2603f6f8-55bd-4e92-8127-c21870c98d9c.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\2a68f7d0-c02c-482e-8ec2-54f334b7156b.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\2f37f1ee-e6bc-4c40-afbf-168362225345.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\30257d21-9a7c-4bf9-8fca-02d43f6fe390.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\32549664-a961-4b40-84cc-07d8968d2f9b.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\335d347a-cb4e-4c17-b110-96227805a746.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\39cce79c-5dd6-4de6-a847-3f92b1260bb1.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\3a3f6685-7a46-4eb2-90c6-6e547fae6b82.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\3d031795-848e-4ead-b700-108ca41bf7db.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\3f466fa6-7f17-485e-9601-6f22cb9c7669.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\3fd47cd9-ffc0-4a95-a555-557caa5ba408.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\471baf50-ee77-491c-9433-c7419e85a695.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\4d970cfe-114f-4a91-b1d2-467be418fbca.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\4fadb838-0541-4a74-bf26-443295006d59.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\50813dfd-49de-4c61-97e0-bda2bd6be087.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\559aa0db-0a58-4274-8f30-ef405f37b565.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\582e7157-5159-4eb2-be79-be600e9e7dc5.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\5a830386-b552-4169-9d01-36995c935358.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\5b5567bf-7e5d-4938-a8a1-6ba9b0c0f8c1.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\62053c39-a0e1-4ca3-b40b-370a4d396a95.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\6425d1af-8180-4ad6-89d7-e6dd71c16af1.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\6696c3a2-8ecc-4a8c-a3a7-3700245ce2a0.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\6a691a08-15f1-4c1f-ac8c-fab96b5b344b.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\6ad33b0b-e53a-4b1c-a403-23f5ccb494ae.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\6c9bc1bf-0489-4376-b642-eceb58276839.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\6cd75d78-0c21-4706-b6f3-4b777ad4a0af.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\6f0176fa-a652-423d-9588-ea4ebdb6ea1c.WindowsLiveGroup Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\6f32b30c-ae2b-4c57-b07d-7204cefefbe9.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\70a4e9ab-d2b1-4bae-be2a-c6f3e1188a0b.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\73854001-2f53-4ae4-86fe-bf933496441c.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\7b701a9f-dd44-4ad0-ac81-441265fec836.WindowsLiveGroup Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\7cc21c2a-0ec8-4fe6-a0ff-f5a806eef6fe.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\7df8e134-1c1b-4de8-9b71-c97322391e53.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\7e176b87-d83a-4bd7-b578-2e64933813a9.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\802e7f72-e16a-462b-a576-c76abc5325c1.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\8170bbd4-12b1-4a10-8d11-c2e4ad7fb5ad.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\8602f36c-d970-4907-97e8-6d75ada3b502.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\88022c26-ce94-4dbd-9b40-0ec9ede1f0f5.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\891729ec-0125-4da5-8947-4fd5154309b9.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\8c2e4b1c-6049-442c-8953-ae525a928fa9.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\8d673a33-5154-441f-9bf6-1ad227002c6c.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\8d6ac43c-87d3-4ae6-8e4a-a4528d5da017.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\8e412a1f-20ab-4163-b766-d953e40cccc1.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\9017167e-f718-40ba-b8f9-4a8ca4679f62.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\925aa01c-ba0e-438f-9511-f3d79bf7dcc6.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\926314b7-8120-4f5e-8ec3-cb07f321bed4.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\9386b974-14ce-4658-9d2e-ee45714367f7.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\96c6e2fb-b0b1-483c-a8bf-9ac155c112b0.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\9d93d652-5856-40b5-a1fa-42c4002c44ea.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\a3fa1516-afcc-4a7c-80c3-5ccccc25134b.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\a43316d7-7cff-431e-be05-5d754f3d8a17.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\a463259a-ac59-4911-b55d-afedf24c5bcd.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\a506b0ab-9a60-427c-a22e-e28d9b7787bf.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\a69ac453-4fc7-4d2e-a79b-713fc9fd10e0.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\a86e1871-2712-4ece-8176-9253da582d4f.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\a8d71fde-391e-41de-9d37-dadd685ef8ec.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\ac9a2bd2-9d7a-44d3-80c6-431e88ea1d6e.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\b083b588-7113-464e-8982-0966be94a541.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\ba9ea89e-f63e-4ee1-8c45-55001096ecee.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\bcc11ff1-3eeb-4c11-883c-9616aaa547c0.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\bdd4194b-fd4b-4890-85c2-c47bddadf835.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\c160edad-49a5-45a6-b05e-d771d242e3ed.WindowsLiveGroup Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\c337ce21-1feb-47f9-b5a4-2da469620b49.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\ce663e8b-0023-4da6-af57-b800d4c1b76a.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\cf1992bb-2ead-43f2-ac29-7a02c758679a.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\contactcoll.cache Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\d0fb169e-0334-47f8-af28-ff03f8228efe.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\d2645b66-f881-4aa2-afd0-eaad0a6a5c56.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\d3092cab-36ee-48a6-b931-a80e33fab766.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\d8f83c6a-a623-4922-a2b3-6a781ff01c79.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\dba46517-68e9-482a-af30-3bc62a0122d6.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\e1011385-297d-46dd-8b73-93ca87fb9253.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\e2af41e9-46e8-4ff1-8e33-11f5e4b51ca5.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\e33246cb-5621-448c-866c-3b96974ad77f.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\e43276a9-ced3-4bce-a0e7-9807bbd75b7c.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\e5021855-9431-43d8-82cd-c5ae827e6208.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\e9347906-3aa1-420d-8a9c-487e88eb8f0a.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\e93d4df0-bc3f-4209-bcb6-d0fec1837477.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\ea395214-1d75-4b1e-98ac-1b9b6551cb91.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\f25f3fa5-bbf5-4e57-be45-6a8c115b24e6.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\f2af446f-e756-4bd3-a991-087f3c857ffd.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\f3147605-fddf-4914-8b98-3bb1d2b61d26.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\f3e82864-a0ca-48c5-ad24-b765037548c0.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\fb84e6a0-1e7d-46be-861f-f02e29d71532.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\josh_sharpie@hotmail.co.uk\ffb3bfd1-0962-48f7-b1b5-d66a117f2caa.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\spotsndots@hotmail.co.uk\002815dc-2a67-4d31-ab68-15ce15edf7f5.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\spotsndots@hotmail.co.uk\08ae5733-6920-453c-9c6c-4a0dc7450e03.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\spotsndots@hotmail.co.uk\18f9a6e4-e5db-43d1-aa23-9a46ec382121.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\spotsndots@hotmail.co.uk\2ae1ab84-64bc-4d4a-96f1-65de1969dc19.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\spotsndots@hotmail.co.uk\31b980af-2e40-4a8e-a135-b911896aae8d.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\spotsndots@hotmail.co.uk\35b6298a-2cfb-4e06-b983-be1a0513ff35.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\spotsndots@hotmail.co.uk\502e8b8d-f3d9-41e2-bd7f-9f87668c6af7.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\spotsndots@hotmail.co.uk\51029bce-282b-44cf-9a60-bae2df1277ca.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\spotsndots@hotmail.co.uk\6062d513-13e3-4556-8d6b-3e92149b5b1f.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\spotsndots@hotmail.co.uk\62dbb110-247a-4ee2-b5fb-8c75cf54a46a.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\spotsndots@hotmail.co.uk\69ae915f-5ddf-4829-a27d-a5658257fbe0.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\spotsndots@hotmail.co.uk\7986323e-de99-4137-b01c-830c5b574626.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\spotsndots@hotmail.co.uk\7c5c567e-26ea-4912-83fb-61180d80181c.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\spotsndots@hotmail.co.uk\85669a7c-5987-4758-bd0c-8b6b24349d16.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\spotsndots@hotmail.co.uk\86f63c93-f445-431c-b712-f6ff29c24893.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\spotsndots@hotmail.co.uk\8706f040-d93b-4446-a570-853d4deb95c4.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\spotsndots@hotmail.co.uk\98155310-1950-4bde-b3d1-06e431858e59.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\spotsndots@hotmail.co.uk\a2e99f26-55c5-4d6b-bef7-b93acefe3cbc.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\spotsndots@hotmail.co.uk\ab292340-7b57-438e-b156-5787835507c7.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\spotsndots@hotmail.co.uk\b9c6d2ce-81eb-4cff-ae4d-07293c4719fb.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\spotsndots@hotmail.co.uk\bf125fc4-7f9d-4662-9feb-63ca7fdf66cc.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\spotsndots@hotmail.co.uk\cd581e24-7955-44ea-bfb2-dc81f15ee5f5.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\spotsndots@hotmail.co.uk\contactcoll.cache Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\spotsndots@hotmail.co.uk\da43c344-87e9-4e50-b43f-a1b1865197ce.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Contacts\spotsndots@hotmail.co.uk\da5c93d6-1593-4880-8f15-ca2f89ada764.WindowsLiveGroup Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@216.239.59[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@422[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@422[4].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@ad.uk.tangozebra[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@ad1.emediate[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@addictinggames[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@adidas[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@ads.ak.facebook[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@ayb.netbios-wait[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@banner.carnavalcasino[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@bbc.co[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@blairendersby.co[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@businessinternetdirectory[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@canadiancrc[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@carnavalcasino[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@channel-ai[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@connextra[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@connextra[3].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@connextra[4].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@connextra[5].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@core.mochibot[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@crazymonkeygames[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@cs.shopperreports[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@datingforparents[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@dialaphone.co[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@disney.go[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@doubleclick[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@e-2dj6wakyshc5alo.stats.esomniture[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@e-2dj6whmyejdpsbo.stats.esomniture[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@e-2dj6wjl4epazegp.stats.esomniture[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@e-2dj6wjmiwidzccp.stats.esomniture[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@ebay.co[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@ebayexpress.co[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@ebayobjects[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@ebayrtm[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@ebay[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@em.gad-network[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@em.pc-on-internet[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@errorsafe[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@facebook[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@familyfun.go[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@flipcorp[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@gamesheep[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@geocities[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@go.errorsafe[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@go.systemdoctor[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@google.co[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@google[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@google[3].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@go[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@home.skysports[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@hotmail.msn[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@ign[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@int.sitestat[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@int.sitestat[3].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@int.sitestat[4].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@int.sitestat[5].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@jsp[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@live[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@login.facebook[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@login.live[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@login[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@m.webtrends[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@m3[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@mb[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@messenger.msn[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@metacafe[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@metrics.adobe[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@miniclip[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@msn[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@my.freeze[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@mydebtplan.co[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@myoffers.co[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@network.adsmarket-finance.co[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@network.adsmarket[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@nytdigital[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@nytimes[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@o.nytimes[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@onlinestores.metaservices.microsoft[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@overture[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@parentalcontrolcentre.virginmedia[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@partners.dialaphone.co[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@paydayuk.co[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@peach.bskyb[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@peach.bskyb[3].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@pkrcasino[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@play.toontown[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@pogo[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@pokemon-games[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@rad.msn[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@realarcadebundles.real[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@register.free-games-online[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@register.wallpapers[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@report.legalandgeneral[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@reviewcentre[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@s2d6[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@sdc.brightcove[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@sdc.shockwave[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@search.live[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@shelter.org[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@sky.uk.intellitxt[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@snap[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@stats1.reliablestats[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@streaming.skysports[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@systemdoctor[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@toontown[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@tp.msn[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@travelblog[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@tv.arsenal[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@uk.celldorado[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@uk.cheats.ign[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@uk.ebayrtm[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@uk.ign[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@uk.sitestat[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@ukprizedraw.co[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@VictorChandler[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@wallpapers[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@websiteceo[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@wentworthdirect.co[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@wowpapers[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@wowpapers[3].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@wt.o.nytimes[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@www.addictinggames[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@www.adidas-shop.co[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@www.adidas[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@www.adserver5[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@www.amaena[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@www.arsenal[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@www.channel-ai[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@www.channel-ai[3].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@www.clash-media[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@www.dialaphone.co[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@www.disney.co[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@www.errorsafe[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@www.hotbar[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@www.miniclip[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@www.mobilemarketplace[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@www.msn[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@www.myoffers.co[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@www.pkrcasino[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@www.racingfrogsstumpycreek[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@www.realarcade[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@www.reviewcentre[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@www.screensavers[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@www.skysports[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@www.systemdoctor[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@www.ukprizedraw.co[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@www.utarget.co[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@www.wallpapers[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@www.wentworthdirect.co[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@www.wowpapers[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@yahoo[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Cookies\matthew@youtube[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\AirHockey 3D.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\cool things\pics\Arsenal.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\cool things\pics\Bulbasaur with trainers.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\cool things\pics\Charizard.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\cool things\pics\Galactik footie.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\cool things\pics\girls.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\cool things\pics\Gotta catch them all.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\cool things\pics\Latias.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\cool things\pics\Latios.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\cool things\pics\Mew.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\cool things\pics\Pokèmon- Mew + Mew2.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\cool things\pics\Pokèmon- Pigitu with Ash.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\cool things\pics\Power rangers mf 1.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\cool things\pics\Power rangers mf 2.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\cool things\pics\Squirtle2.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\cool things\pics\Thierry Henry.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\cool things\pics\Thumbs.db Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\cool things\pics\Torchic.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\Crazy Golf.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\Free Dolphins Screensaver.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\Free Whales ScreenSaver.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\More Games at GameHouse.com.url Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\Unused Desktop Shortcuts\Adobe Reader 7.0.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\Unused Desktop Shortcuts\AOL Double-Click to Start.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\Unused Desktop Shortcuts\AvRack.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\Unused Desktop Shortcuts\blueyonder PCguard.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\Unused Desktop Shortcuts\EarthLink Internet 30 Days Free.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\Unused Desktop Shortcuts\ESPR800 Referene Guide.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\Unused Desktop Shortcuts\ESPR800 Software Guide.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\Unused Desktop Shortcuts\iRiverManager.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\Unused Desktop Shortcuts\iTunes.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\Unused Desktop Shortcuts\Lenovo Care.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\Unused Desktop Shortcuts\Memory-Map OS2004.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\Unused Desktop Shortcuts\QuickTime Player.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\Unused Desktop Shortcuts\RealPlayer.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\Unused Desktop Shortcuts\Shortcut to blueyonder Roaming Access.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\Unused Desktop Shortcuts\ZoomBrowser EX.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\Upgrade Living 3D Dolphins!.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Desktop\Windows Media Player.lnk Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\BBC - Schools - Dance Mat Typing - Level 4 - Stage 10.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Bingley Juniors Football Club.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Desktop.ini Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\eBay UK - The UK's Online Marketplace.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Free Online Games, Flash Games and Fun Games at MostFunGames.com.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Free Online Games.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\gameSheep.com - Free Online Games.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Google.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Lenovo Recommended Sites\Lenovo Home.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Lenovo Recommended Sites\News.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Lenovo Recommended Sites\Products.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Lenovo Recommended Sites\Support and Downloads.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Lenovo Recommended Sites\Upgrades, Accessories, and Parts.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Links\Customize Links.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Links\Free Hotmail.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Links\Self Care.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Links\Service Status.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Links\Support.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Links\Telewest Broadband.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Links\Webmail.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Links\Windows Marketplace.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Links\Windows Media.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Links\Windows.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\matthew football.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Merlin Stickers Online.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Microsoft Websites\IE Add-on site.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Microsoft Websites\IE site on Microsoft.com.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Microsoft Websites\Marketplace.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Microsoft Websites\Microsoft At Home.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Microsoft Websites\Microsoft At Work.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Microsoft Websites\Welcome to IE7.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Miniclip Games - Play Free Games.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\MSN.com.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\OneMoreLevel.com - 10 Second Challenge.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Play Arcade Games - Action Games - Shooting Games.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Play Online Games and Download Games at GameHouse.com.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Pokemon-Games.com.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Racing Frogs - the crazy frog racing game!.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Radio Station Guide.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\robotduck.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Sky Sports - The Best Sport Coverage From Around The World.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\TheGameBlazer.com Your Online Gaming Portal.url Object is locked skipped
C:\Documents and Settings\Matthew\Favorites\Vampire Boy [from robotduck.com shockwave games].url Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Apple Computer\iTunes\iPodDevices.xml Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Apple Computer\iTunes\iTunesPrefs.xml Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\ApplicationHistory\CreateRegFile.exe.28a53a86.ini Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\ApplicationHistory\MsiExec.exe.8cb23528.ini.inuse Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\ApplicationHistory\ngen.exe.2c05686e.ini Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\ApplicationHistory\SL9.tmp.82733c4a.ini Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\fusioncache.dat Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\GDIPFONTCACHEV1.DAT Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\dbCache.dat Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\dbCache.dat.index Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\icons\kh.google.com_icons_1027_nh.png Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\icons\kh.google.com_icons_773_l.png Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\icons\kh.google.com_icons_773_nh.png Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\icons\kh.google.com_icons_bbs_32_nh.png Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\icons\kh.google.com_icons_blue_star_l.png Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\icons\kh.google.com_icons_buildings_stagger_16e_l.png Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\icons\kh.google.com_icons_dining_new_l.png Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\icons\kh.google.com_icons_flag64_l.png Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\icons\kh.google.com_icons_flag_new_l.png Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\icons\kh.google.com_icons_green_star_l.png Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\icons\kh.google.com_icons_lil_earth_l.png Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\icons\kh.google.com_icons_lodging_new_l.png Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\icons\kh.google.com_icons_panoramio_32_nh.png Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\icons\kh.google.com_icons_shield1_l.png Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\icons\kh.google.com_icons_wikipedia_32_nh.png Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\images\khimg0.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\images\khimg1.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\images\khimg2.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\images\khimg3.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\images\khimg4.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\images\khimg5.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Google\GoogleEarth\images\khimg6.jpg Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\IconCache.db Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Feeds\FeedsStore.feedsdb-ms Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Feeds\Microsoft Feeds~\Microsoft at Home~.feed-ms Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Feeds\Microsoft Feeds~\Microsoft at Work~.feed-ms Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Feeds Cache\74883FMS\desktop.ini Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Feeds Cache\7QTXENFW\desktop.ini Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Feeds Cache\7QTXENFW\fwlink[1] Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Feeds Cache\9N02QKVO\desktop.ini Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Feeds Cache\desktop.ini Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Feeds Cache\JKUB55GE\desktop.ini Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Feeds Cache\JKUB55GE\fwlink[1] Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\FORMS\FRMCACHE.DAT Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Internet Explorer\brndlog.txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Internet Explorer\MSIMGSIZ.DAT Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Media Player\CurrentDatabase_219.wmdb Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Media Player\CurrentDatabase_360.wmdb Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Media Player\CurrentDatabase_59R.wmdb Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Media Player\LocalMLS_3.wmdb Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Media Player\wmdbexport.xml Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\activesharingfolder.dat Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\josh_sharpie@hotmail.co.uk\SharingMetadata\Logs\Dfsr.log Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\josh_sharpie@hotmail.co.uk\SharingMetadata\pending.dat Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\josh_sharpie@hotmail.co.uk\SharingMetadata\volume.xml Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\josh_sharpie@hotmail.co.uk\SharingMetadata\volume.xml~ Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\josh_sharpie@hotmail.co.uk\SharingMetadata\Working\$db_normal$ Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\josh_sharpie@hotmail.co.uk\SharingMetadata\Working\database_1AA4_13BD_A413_99F9\$db_clean$ Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\josh_sharpie@hotmail.co.uk\SharingMetadata\Working\database_1AA4_13BD_A413_99F9\dfsr.db Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\josh_sharpie@hotmail.co.uk\SharingMetadata\Working\database_1AA4_13BD_A413_99F9\fsr.chk Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\josh_sharpie@hotmail.co.uk\SharingMetadata\Working\database_1AA4_13BD_A413_99F9\fsr.log Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\josh_sharpie@hotmail.co.uk\SharingMetadata\Working\database_1AA4_13BD_A413_99F9\fsr0001E.log Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\josh_sharpie@hotmail.co.uk\SharingMetadata\Working\database_1AA4_13BD_A413_99F9\fsr0001F.log Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\josh_sharpie@hotmail.co.uk\SharingMetadata\Working\database_1AA4_13BD_A413_99F9\fsr00020.log Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\josh_sharpie@hotmail.co.uk\SharingMetadata\Working\database_1AA4_13BD_A413_99F9\fsr00021.log Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\josh_sharpie@hotmail.co.uk\SharingMetadata\Working\database_1AA4_13BD_A413_99F9\fsr00022.log Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\josh_sharpie@hotmail.co.uk\SharingMetadata\Working\database_1AA4_13BD_A413_99F9\res1.log Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\josh_sharpie@hotmail.co.uk\SharingMetadata\Working\database_1AA4_13BD_A413_99F9\res2.log Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\spotsndots@hotmail.co.uk\SharingMetadata\Logs\Dfsr.log Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\spotsndots@hotmail.co.uk\SharingMetadata\pending.dat Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\spotsndots@hotmail.co.uk\SharingMetadata\volume.xml Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\spotsndots@hotmail.co.uk\SharingMetadata\volume.xml~ Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\spotsndots@hotmail.co.uk\SharingMetadata\Working\$db_normal$ Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\spotsndots@hotmail.co.uk\SharingMetadata\Working\database_1AA4_13BD_A413_99F9\$db_clean$ Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\spotsndots@hotmail.co.uk\SharingMetadata\Working\database_1AA4_13BD_A413_99F9\dfsr.db Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\spotsndots@hotmail.co.uk\SharingMetadata\Working\database_1AA4_13BD_A413_99F9\fsr.chk Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\spotsndots@hotmail.co.uk\SharingMetadata\Working\database_1AA4_13BD_A413_99F9\fsr.log Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\spotsndots@hotmail.co.uk\SharingMetadata\Working\database_1AA4_13BD_A413_99F9\res1.log Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Messenger\spotsndots@hotmail.co.uk\SharingMetadata\Working\database_1AA4_13BD_A413_99F9\res2.log Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Wallpaper1.bmp Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\Desktop.ini Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\dotsnspots@hotmail.co.uk\real\contactcoll.cache Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharp@hotmail.co.uk\real\contactcoll.cache Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\real\b8d57abf-67ba-4b7f-9cdf-c38ba65189dd.MeContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\real\contactcoll.cache Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\real\f687d741-d75c-40c2-9c76-68f5697a13f4.AddressBook Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\real\members.stg Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\000ff706-9c09-4a06-8ce4-124f4258caac.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\0270d6cc-bfe7-4122-bc7e-4d7a39c8837f.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\0339a584-5c38-476f-9f81-87e2f7971c41.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\039347c6-539c-4d89-97c5-7e3631d9754e.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\0b49e348-5084-4486-90d6-d556a0c97653.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\10461e06-c18b-4375-9553-744930cb27e3.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\104e44f5-1512-42b0-9974-0d5c15106e61.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\1080dbcb-20b3-4c23-839e-9b34ba493aa0.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\14ebe7d3-e038-4c6c-910d-165a65e75218.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\15f84ecc-eab1-496b-b60e-5c831c05b71a.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\1816734c-ff1c-45c8-9513-66e10f804509.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\1c80c2e6-4a59-44b8-9d28-e42704ac19a3.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\1e0a0de0-102f-4bb1-b24a-117653d8351a.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\20406cb4-bb95-4826-a62e-4acfe184fb91.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\207a2210-14f1-4d47-9a76-a9e049e70a75.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\2155225e-465c-4e27-8f17-8150002a1c9d.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\24f2a54f-113d-4c48-93fb-71e101bc2003.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\2700dabe-ab2b-43b6-bb35-c7996d16dadd.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\290e3253-9ae5-42db-b259-ab35e6b92c8e.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\2984df6b-0c4f-490a-8b23-65bc2d1d223b.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\29e7b844-842a-4224-b29a-3248176eb3fc.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\29ef8822-2968-427a-97f6-c25cf2c1fc39.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\2d137698-3d68-479e-8042-1737adb1800f.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\3529f5b6-5329-4025-a8cd-427d96e0a99d.MeContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\3c17b634-66f4-4c4c-a51d-19ad96fee6bb.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\40d9a20b-3b2d-4bb9-9b95-2c2d95245a3c.WindowsLiveGroup Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\427c3735-bf07-4867-a668-bc2439d57be6.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\45ac2f52-ad1b-41af-ae1a-02f2cf7a4229.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\4e070d73-2a1a-438e-8a3b-a6058d3d93dc.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\4eb780b5-588c-4052-b801-88dd44425f0b.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\50a56df8-2763-4f71-98f1-3bcc2e9ae2f9.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\50f2fa60-33e1-4eb5-bbef-21a019986a0d.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\525fb5e6-e247-4bd3-aa88-5d59c9b81ee5.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\53a7641b-9bc7-4c82-b065-086557771072.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\56fb0d29-2a37-42c9-8d6d-6f15d7f98d5e.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\583a0233-234a-4846-a5c6-055bfb0aaf95.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\5858cbea-a3fb-4363-8efc-a6bc59034efd.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\5969777b-9c61-4c2e-94b5-9706176c5edd.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\59e12d0a-d827-4917-ae66-667651ba20fe.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\59fef1be-f31b-459b-ab65-08e897978788.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\5b17c323-a21a-462c-b939-c49887def9ac.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\60904886-6798-4fa6-9318-15ec37ac74e5.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\64b2d487-f926-48e9-b3f8-c9e9ba85d62f.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\6b117016-dd73-4150-b36b-41ed859d4216.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\6d18f2f9-5e22-4a9d-b4cd-5b4ba8b791bc.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\6dbde505-d4aa-444c-b7da-f67c6d7f4649.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\6f1526c7-810c-411f-95c2-3cd196333455.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\6f969b4b-f5fb-4cfa-97cc-8bc4aeed872b.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\70cdc380-4717-4886-b226-275c24955ac1.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\716fbdf9-4e3a-44c5-b944-8951f6d979a4.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\727570a3-db9d-4958-b59b-cafbe5ae62ee.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\746193c9-2c8e-485f-9eb1-6c4d0d6c82d5.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\778d53c6-55a2-4c6d-83a9-60099a9457b9.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\7c786d6c-cc5c-4722-b255-a3ef2b7746d2.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\7d961124-9f4c-469d-b352-6b07569c8a04.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\7fb06a2a-8c7e-4f1a-8992-31014657fb3b.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\813a5c81-7845-43e1-bd0f-69428cdb4b9c.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\816d5dc5-de9e-4605-a441-4954aa65b97b.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\831276f2-432e-454e-b85f-e7d68ee42cc2.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\8321572b-6431-48b9-897c-aaf1bcbafd08.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\94b5a8ea-7b16-48b3-8655-9b4af723838d.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\960812dd-5363-4af2-90b2-fed2c8ef861a.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\99f44b22-d583-4ed3-8ace-62b984db81da.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\9ddced10-9ed4-4656-8693-c3668a72c853.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\9ee58618-e76d-4d02-bd3a-8a49660fbdb9.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\a04303e5-5966-4d9d-8998-5bb5007a9d5a.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\a17769c1-015a-4119-b720-46639cd21df7.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\a223f8d5-c819-4c10-85a3-fcb82db2ad6d.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\a352c9b9-ba3c-44d1-bf57-04be246a190b.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\a39d1758-5806-4910-a16a-3b0481b52ade.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\a8db1983-a65c-4d43-bd0f-a2603dace975.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\acbcae1c-52d1-4490-b7b5-57b890ae5e3c.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\adb8e47c-0b81-4393-a068-b323e1137aa9.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\aed7ce92-3ff7-4f72-bf19-b328521604ee.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\af3c019a-9d38-467f-85ef-b349eccd7bc0.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\affe5c3b-789f-4449-be68-3cdba16dc30c.WindowsLiveGroup Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\b1de1b81-3428-4093-997d-a000f9d010b2.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\bc0948f8-05a7-4ff9-a7cc-011e03ce2b9c.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\c06aa86c-da32-473d-85e4-129fbb790c09.WindowsLiveGroup Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\c3129417-7e6b-4fd2-bc1f-ec3557ddd8e2.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\ca73d2a0-8a2c-42af-9136-a7af8b5dec27.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\cc2a0080-580c-4a3f-a2a8-5193f2d29d86.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\cd354f78-ec49-410f-9153-25baedb89d9e.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\ce9f5ab1-0279-41cb-bdb6-321526f73c55.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\ceaf0676-48b8-490f-a4ae-80175ad9ea4f.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\cf4dd25a-fc4c-48ef-b808-76520ae05410.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\contactcoll.cache Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\d5d34cac-61d5-4721-9a6a-604a3fa5d2d4.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\d8457ff9-fc51-4773-a328-f9771943b97f.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\ddc97259-1071-4607-94e3-217ff7abb37e.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\ddd1fff4-fd74-4feb-a193-b4671c5f362c.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\def650e6-ad4d-4597-a548-846fcecd16a2.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\e74f7cbf-9701-4890-993b-0f8b994124d3.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\e8e57eda-3848-48ff-8944-aad7132a108b.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\f167d78a-ec90-4d35-9991-a89332fc5c4a.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\f25fc84f-2f37-44f0-a7d1-d205b3063398.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\f2725dd9-923c-428c-802d-e1060bb09769.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\f696b8be-8ac0-4235-8647-d005077795f5.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\f6f02260-d336-4383-8cb1-b57f65b273a6.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\f755de72-56fa-4f61-9702-8ae501baf66f.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\fa360030-c9b4-42ae-9f2c-bfa5212e5d72.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\fc92da8e-1912-44e1-87a3-9bae108baf65.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\josh_sharpie@hotmail.co.uk\shadow\members.stg Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\spotsndots@hotmail.co.uk\real\080a5cc6-e16d-4993-ae31-db9b8667e36d.MeContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\spotsndots@hotmail.co.uk\real\contactcoll.cache Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\spotsndots@hotmail.co.uk\real\f13049e0-bd1b-48a3-905d-5f0755247c41.AddressBook Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\spotsndots@hotmail.co.uk\real\members.stg Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\spotsndots@hotmail.co.uk\shadow\1407f01b-40e6-4c40-8470-adafaf18462e.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\spotsndots@hotmail.co.uk\shadow\1f2b1e43-2b8b-4d0a-a41c-c69d099ada45.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\spotsndots@hotmail.co.uk\shadow\29389a62-3acf-43f7-9090-44fcede8adf8.WindowsLiveGroup Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\spotsndots@hotmail.co.uk\shadow\45b9cd5c-5dd9-42ae-aa12-f91691cdeb27.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\spotsndots@hotmail.co.uk\shadow\46b34ad8-4f9a-43c9-b990-869a34d30276.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\spotsndots@hotmail.co.uk\shadow\473df5df-09f4-4b29-9e66-9429201d8677.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\spotsndots@hotmail.co.uk\shadow\59e33971-3ab2-4d0c-9a16-c42f0a01e7e2.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\spotsndots@hotmail.co.uk\shadow\6052f2d5-eb94-4c50-af4e-ed650489fa3b.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\spotsndots@hotmail.co.uk\shadow\6a83d6b4-7db1-460b-b534-cc2214c7c08d.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\spotsndots@hotmail.co.uk\shadow\73dec0bc-9dcd-4e29-ae91-67a465d0c677.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\spotsndots@hotmail.co.uk\shadow\78419fe8-9d54-44b4-a91d-a92b25d7cb7c.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\spotsndots@hotmail.co.uk\shadow\7d082e72-9125-4297-b1cc-54b4a75a7900.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\spotsndots@hotmail.co.uk\shadow\949a6759-e195-40db-873e-cfb5bd6d63dc.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\spotsndots@hotmail.co.uk\shadow\b1764345-aa21-4c4e-a104-ec7acf06fbc7.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\spotsndots@hotmail.co.uk\shadow\bfb38eed-2c88-4d5b-bf76-bb5da16c99c5.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\spotsndots@hotmail.co.uk\shadow\c4bf7480-3e28-49aa-b4b7-8f74ff64d81b.MeContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\spotsndots@hotmail.co.uk\shadow\ce2c2dd3-7c74-4c82-8d5c-b0d4883234ff.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\spotsndots@hotmail.co.uk\shadow\contactcoll.cache Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\spotsndots@hotmail.co.uk\shadow\d2dab083-d782-49fa-8666-85341be4622d.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\spotsndots@hotmail.co.uk\shadow\d5727837-f98b-4fff-9fdf-0d7be5a2a64d.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\spotsndots@hotmail.co.uk\shadow\d6da8e0c-bbaf-4d1e-961e-803280b85503.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\spotsndots@hotmail.co.uk\shadow\e47ac0df-37e1-4653-b48f-eb070bf72ae4.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\spotsndots@hotmail.co.uk\shadow\f123958d-6d64-40e4-a96c-265fe9f45a0d.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\spotsndots@hotmail.co.uk\shadow\f225a7e2-d16e-4ae2-8c71-5f96f07380c2.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\spotsndots@hotmail.co.uk\shadow\fc36ce1c-8319-445c-92c3-17c6a2bef3af.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\spotsndots@hotmail.co.uk\shadow\ff50fb20-5074-450b-8631-59577895ccb1.WindowsLiveContact Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Live Contacts\spotsndots@hotmail.co.uk\shadow\members.stg Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Media\10.0\WMSDKNS.DTD Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Media\10.0\WMSDKNS.XML Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Media\11.0\WMSDKNS.DTD Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Media\11.0\WMSDKNS.XML Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Media\9.0\WMSDKNS.DTD Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Application Data\Microsoft\Windows Media\9.0\WMSDKNS.XML Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\desktop.ini Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\History\desktop.ini Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\History\History.IE5\desktop.ini Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\History\History.IE5\MSHist012007120320071210\index.dat Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\History\History.IE5\MSHist012007122320071224\index.dat Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@1072294680[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@422[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@422[3].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@422[4].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@422[5].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@422[6].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@ad.yieldmanager[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@ads.pointroll[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@adtech[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@advertising[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@adviva[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@apmebf[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@atdmt[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@a[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@bbc.co[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@bs.serving-sys[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@connextra[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@doubleclick[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@drivecleaner[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@e-2dj6wglockazkgp.stats.esomniture[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@e-2dj6wgmyahczsco.stats.esomniture[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@ebay.co[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@ebayobjects[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@ebay[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@em.gad-network[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@emjcd[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@errorsafe[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@fastclick[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@flashkit[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@football[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@gallery.live[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@gamesheep[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@go.drivecleaner[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@go.errorsafe[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@go.systemdoctor[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@go.winantispyware[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@go.winantivirus[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@google.co[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@google[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@home.skysports[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@indexstats[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@js.forrestersurveys[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@kpremium[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@Ladbrokes[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@media.fastclick[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@mediaplex[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@merlin[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@metrixlab58.customers.luna[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@miniclip[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@mobilemarketplace[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@mywebsearch[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@overture[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@partners.gallery.live[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@peach.bskyb[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@questionmarket[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@report.legalandgeneral[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@reporting.tvlicensing.co[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@reviews.ebay.co[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@rotator.adjuggler[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@rtm[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@sdc.brightcove[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@serving-sys[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@sky.uk.intellitxt[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@SkyBet[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@stats.drivecleaner[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@stats1.reliablestats[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@s[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@testandvote.co[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@traceics[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@tradedoubler[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@tribalfusion[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@valueclick[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@watchmojo[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@winantivirus[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@www.amaena[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@www.drivecleaner[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@www.errorsafe[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@www.merlinonline.co[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@www.miniclip[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@www.mobilemarketplace[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@www.ugotgames[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@www.winantivirus[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@xiti[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@yahoo[2].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\Cookies\matthew@zedo[1].txt Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\History\History.IE5\desktop.ini Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\++vafooJLGKfQ72HhQ5cLiIn23U= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\0xL8U7T4dvKoxZg0tCgPavhwDXU= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\2VdOiRn8R6vgyAo1OuWk82FGrO9g= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\7GP2FsjPXuA5lyMxLQ4pMry9+dX4= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\8K2F2FxPZPkqvB0RmUpzl6XxhN1J0= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\8yZRi1UNwPujZzAtPraR2FasdDbs= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\BbcG7CqlSDk7M0MwJht7ju3PhWo= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\byjelJU1HOOr33HSk7fxudZzQUk= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\c2xPMZhQq9cg5IWNH3HjPOBZQ+I= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\Ezy8B2F7w8DnQO0KHqWjncA9NnM4= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\f9c2F0WHwYWW2Fm+cyow2jUEuexjw= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\fptKw22FhToyjauGzolcqHhN5oaI= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\GVmfWXXBiwmT2THKvpKtbuzv2iY= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\HstWaRrKOWzImT0BvbDwQzjrozk= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\m2bWZXAnazDBGoufImBw7Lnwqp4= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\mRw+WitVdQoGkEUyHBFHQqo0Kcs= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\oO6bo4nRi7goym+6g1Ytno1R7QQ= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\OzdErbSKuvki99B014CByLCdxrk= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\SQQLXZRn0n+7gyCs7yNro6g8BfQ= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\uPdMa8kL2txPhWWkfIrkxUvnVR0= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\uU1d4738FuC3eu52F0QFabDF+dww= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\wfhoO57Z30FjlVObS2ktpUMgNFs= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\y+9lR2+PWy7pazS1NuDd8C7DZ1I= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\MessengerCache\zWg2VBCLOjjJOPq0BcIdNF18Qqs= Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\NI.UERS_9999_N91S2507\settings.ini Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\NI.UERS_9999_N91S2507\setup.len Object is locked skipped
C:\Documents and Settings\Matthew\Local Settings\Temp\NI.UWA6P_0001_N91M1807\settings.ini Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\Program Files\Navilog1\reboot.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
C:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP114\change.log Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\DEFAULT Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\Internet.evt Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\SOFTWARE Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SYSTEM Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\Temp\Perflib_Perfdata_28c.dat Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
I:\Documents and Settings\Morrison\Local Settings\Application Data\Identities\{8BCE63DC-3FDC-422F-A0FF-4E6B64F2BB72}\Microsoft\Outlook Express\Deleted Items.dbx/[From <Barclays@ibank.co.uk>][Date Fri, 21 Apr 2006 19:13:01 +0200]/html Suspicious: Trojan-Spy.HTML.Fraud.gen skipped
I:\Documents and Settings\Morrison\Local Settings\Application Data\Identities\{8BCE63DC-3FDC-422F-A0FF-4E6B64F2BB72}\Microsoft\Outlook Express\Deleted Items.dbx MailMSOutlook5: suspicious - 1 skipped
I:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
I:\System Volume Information\_restore{4D6BEA17-F0FC-48F3-9A6E-F4DFEC719F06}\RP114\change.log Object is locked skipped

Scan process completed.
tamskinner
Member+
 
Posts: 83
Joined: December 31st, 2007, 3:21 am
Advertisement
Register to Remove

Re: OneStep search - hjt log, please help!!

Unread postby ndmmxiaomayi » May 23rd, 2008, 12:47 am

Hi,

If you already have Combofix, please delete this copy and download it again as it's being updated regularly.

Please download Combofix from one of these links:

Bleeping Computer
Forospyware
Geeks to Go

Double click to run it. Follow the prompts.

When done, a log will be produced. Please post that log and a new HijackThis log in your next reply.

Do not mouse click on Combofix while it is running. That may cause it to stall.
ndmmxiaomayi
MRU Emeritus
MRU Emeritus
 
Posts: 9708
Joined: July 17th, 2006, 9:22 am

Re: OneStep search - hjt log, please help!!

Unread postby tamskinner » May 23rd, 2008, 2:04 am

Hi - new log files below
Tam

ComboFix 08-05-21.3 - Mark 2008-05-23 6:56:12.4 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.993 [GMT 1:00]
Running from: C:\Documents and Settings\Mark\Desktop\ComboFix.exe
* Created a new restore point

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((( Files Created from 2008-04-23 to 2008-05-23 )))))))))))))))))))))))))))))))
.

2008-05-20 07:27 . 2008-05-20 07:28 <DIR> d----c--- C:\MSNCleaner
2008-05-20 07:13 . 2008-05-20 07:13 <DIR> d-------- C:\WINDOWS\system32\scripting
2008-05-20 07:13 . 2008-05-20 07:13 <DIR> d-------- C:\WINDOWS\system32\en
2008-05-20 07:13 . 2008-05-20 07:13 <DIR> d-------- C:\WINDOWS\system32\bits
2008-05-20 07:13 . 2008-05-20 07:13 <DIR> d-------- C:\WINDOWS\l2schemas
2008-05-20 07:11 . 2008-05-20 07:11 <DIR> d-------- C:\WINDOWS\ServicePackFiles
2008-05-20 07:06 . 2008-05-20 07:06 <DIR> d-------- C:\WINDOWS\EHome
2008-05-20 07:00 . 2008-04-14 01:11 1,888,992 --------- C:\WINDOWS\system32\ati3duag.dll
2008-05-19 11:57 . 2008-05-19 11:57 <DIR> d-------- C:\WINDOWS\system32\Kaspersky Lab
2008-05-19 08:22 . 2008-05-19 08:22 <DIR> d----c--- C:\Deckard
2008-05-16 18:21 . 2008-05-17 16:54 <DIR> d-------- C:\Program Files\Navilog1
2008-05-15 21:30 . 2008-05-15 21:30 <DIR> d-------- C:\Program Files\Malwarebytes' Anti-Malware
2008-05-15 21:30 . 2008-05-15 21:30 <DIR> d-------- C:\Documents and Settings\Mark\Application Data\Malwarebytes
2008-05-15 21:30 . 2008-05-15 21:30 <DIR> d----c--- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-05-15 21:30 . 2008-05-05 20:46 27,048 --a------ C:\WINDOWS\system32\drivers\mbamcatchme.sys
2008-05-15 21:30 . 2008-05-05 20:46 15,864 --a------ C:\WINDOWS\system32\drivers\mbam.sys
2008-05-14 21:25 . 2008-05-14 21:25 1,374 --a------ C:\WINDOWS\imsins.BAK
2008-05-06 07:21 . 2008-05-06 07:21 <DIR> d-------- C:\WINDOWS\system32\GroupPolicy
2008-05-06 07:20 . 2008-05-06 08:14 <DIR> d-------- C:\Program Files\Hitman Pro
2008-05-04 08:22 . 2008-05-04 08:51 <DIR> d-------- C:\Program Files\Spyware Terminator
2008-05-04 08:22 . 2008-05-15 21:21 <DIR> d-------- C:\Program Files\Crawler
2008-05-04 08:22 . 2008-05-04 08:25 <DIR> d-------- C:\Documents and Settings\Mark\Application Data\Spyware Terminator
2008-05-04 08:22 . 2008-05-04 08:51 <DIR> d----c--- C:\Documents and Settings\All Users\Application Data\Spyware Terminator
2008-05-04 08:22 . 2008-05-04 08:22 141,312 --a------ C:\WINDOWS\system32\drivers\sp_rsdrv2.sys
2008-05-04 07:49 . 2008-05-09 06:57 32 --a------ C:\WINDOWS\system32\thxcfg.ini
2008-04-27 07:12 . 2008-04-27 07:12 <DIR> d-------- C:\Program Files\Common Files\xing shared
2008-04-26 19:01 . 2008-04-26 19:01 244 --ah-c--- C:\sqmnoopt02.sqm
2008-04-26 19:01 . 2008-04-26 19:01 232 --ah-c--- C:\sqmdata02.sqm

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-05-23 05:52 --------- d-----w C:\Program Files\Common Files\PestPatrol
2008-05-22 18:05 --------- d-----w C:\Program Files\Common Files\Command Software
2008-05-19 10:57 --------- dc----w C:\Documents and Settings\All Users\Application Data\Kaspersky Lab
2008-05-18 04:06 5,427 ----a-w C:\WINDOWS\system32\EGATHDRV.SYS
2008-05-12 21:40 --------- d-----w C:\Documents and Settings\Mark\Application Data\AdobeUM
2008-05-09 06:39 --------- d-----w C:\Program Files\Mozilla Sunbird
2008-05-06 07:11 --------- dc----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-05-02 08:33 --------- d-----w C:\Program Files\Spybot - Search & Destroy
2008-04-27 06:12 499,712 ----a-w C:\WINDOWS\system32\msvcp71.dll
2008-04-27 06:12 348,160 ----a-w C:\WINDOWS\system32\msvcr71.dll
2008-04-27 06:12 --------- d-----w C:\Program Files\Common Files\Real
2008-04-27 06:03 --------- d-----w C:\Program Files\iTunes
2008-04-27 06:03 --------- d-----w C:\Program Files\Apple Software Update
2008-04-26 04:56 --------- d-----w C:\Program Files\iArt
2008-04-26 04:22 --------- d-----w C:\Program Files\iPod
2008-04-26 04:21 --------- d-----w C:\Program Files\QuickTime
2008-04-20 06:58 --------- dc----w C:\Documents and Settings\All Users\Application Data\NVIDIA
2008-04-17 19:24 61,128 ----a-w C:\Documents and Settings\Mark\Application Data\GDIPFONTCACHEV1.DAT
2008-04-14 04:42 985,088 ----a-w C:\WINDOWS\system32\setupapi.dll
2008-04-14 04:42 11,264 ------w C:\WINDOWS\system32\spnpinst.exe
2008-04-14 04:41 423,936 ------w C:\WINDOWS\system32\licdll.dll
2008-04-14 00:25 1,804 ------w C:\WINDOWS\system32\dcache.bin
2008-04-14 00:16 329,728 ------w C:\WINDOWS\system32\netsetup.exe
2008-04-14 00:13 92,424 ------w C:\WINDOWS\system32\rdpdd.dll
2008-04-14 00:13 87,176 ------w C:\WINDOWS\system32\rdpwsx.dll
2008-04-14 00:13 40,840 ------w C:\WINDOWS\system32\drivers\termdd.sys
2008-04-14 00:13 21,896 ------w C:\WINDOWS\system32\drivers\tdtcp.sys
2008-04-14 00:13 139,656 ------w C:\WINDOWS\system32\drivers\rdpwd.sys
2008-04-14 00:13 12,168 ------w C:\WINDOWS\system32\tsddd.dll
2008-04-14 00:13 12,040 ------w C:\WINDOWS\system32\drivers\tdpipe.sys
2008-04-14 00:11 997,376 ----a-w C:\WINDOWS\system32\msgina.dll
2008-04-14 00:10 53,279 ------w C:\WINDOWS\system32\odbcji32.dll
2008-04-14 00:10 4,126 ------w C:\WINDOWS\system32\msdxmlc.dll
2008-04-14 00:10 3,584 ------w C:\WINDOWS\system32\msafd.dll
2008-04-13 21:00 103,424 ------w C:\WINDOWS\system32\dpcdll.dll
2008-04-13 19:30 1,845,632 ------w C:\WINDOWS\system32\win32k.sys
2008-04-13 19:28 175,744 ------w C:\WINDOWS\system32\drivers\rdbss.sys
2008-04-13 19:27 2,188,928 ------w C:\WINDOWS\system32\ntoskrnl.exe
2008-04-13 19:21 162,816 ------w C:\WINDOWS\system32\drivers\netbt.sys
2008-04-13 19:20 91,520 ------w C:\WINDOWS\system32\drivers\ndiswan.sys
2008-04-13 19:20 361,344 ----a-w C:\WINDOWS\system32\drivers\tcpip.sys
2008-04-13 19:20 182,656 ------w C:\WINDOWS\system32\drivers\ndis.sys
2008-04-13 19:19 75,264 ------w C:\WINDOWS\system32\drivers\ipsec.sys
2008-04-13 19:19 51,328 ------w C:\WINDOWS\system32\drivers\rasl2tp.sys
2008-04-13 19:19 48,384 ------w C:\WINDOWS\system32\drivers\raspptp.sys
2008-04-13 19:19 146,048 ------w C:\WINDOWS\system32\drivers\portcls.sys
2008-04-13 19:19 138,112 ------w C:\WINDOWS\system32\drivers\afd.sys
2008-04-13 19:18 52,480 ------w C:\WINDOWS\system32\drivers\i8042prt.sys
2008-04-13 19:17 83,072 ------w C:\WINDOWS\system32\drivers\wdmaud.sys
2008-04-13 19:17 456,576 ------w C:\WINDOWS\system32\drivers\mrxsmb.sys
2008-04-13 19:17 105,344 ------w C:\WINDOWS\system32\drivers\mup.sys
2008-04-13 19:16 49,536 ------w C:\WINDOWS\system32\drivers\classpnp.sys
2008-04-13 19:16 141,056 ----a-w C:\WINDOWS\system32\drivers\ks.sys
2008-04-13 19:15 64,512 ------w C:\WINDOWS\system32\drivers\serial.sys
2008-04-13 19:15 60,800 ------w C:\WINDOWS\system32\drivers\sysaudio.sys
2008-04-13 19:15 574,976 ------w C:\WINDOWS\system32\drivers\ntfs.sys
2008-04-13 19:15 334,848 ------w C:\WINDOWS\system32\drivers\srv.sys
2008-04-13 19:14 63,744 ------w C:\WINDOWS\system32\drivers\cdfs.sys
2008-04-13 19:14 143,744 ------w C:\WINDOWS\system32\drivers\fastfat.sys
2008-04-13 19:00 30,080 ------w C:\WINDOWS\system32\drivers\modem.sys
2008-04-13 19:00 225,664 ------w C:\WINDOWS\system32\drivers\tcpip6.sys
2008-04-13 19:00 19,072 ------w C:\WINDOWS\system32\drivers\tdi.sys
2008-04-13 18:57 41,472 ------w C:\WINDOWS\system32\drivers\raspppoe.sys
2008-04-13 18:57 40,576 ------w C:\WINDOWS\system32\drivers\ndproxy.sys
2008-04-13 18:57 34,560 ------w C:\WINDOWS\system32\drivers\wanarp.sys
2008-04-13 18:57 20,864 ------w C:\WINDOWS\system32\drivers\ipinip.sys
2008-04-13 18:57 152,832 ------w C:\WINDOWS\system32\drivers\ipnat.sys
2008-04-13 18:57 14,336 ------w C:\WINDOWS\system32\drivers\asyncmac.sys
2008-04-13 18:57 10,112 ------w C:\WINDOWS\system32\drivers\ndistapi.sys
2008-04-13 18:56 88,320 ------w C:\WINDOWS\system32\drivers\nwlnkipx.sys
2008-04-13 18:56 69,120 ------w C:\WINDOWS\system32\drivers\psched.sys
2008-04-13 18:56 35,072 ------w C:\WINDOWS\system32\drivers\msgpc.sys
2008-04-13 18:56 34,688 ------w C:\WINDOWS\system32\drivers\netbios.sys
2008-04-13 18:56 30,592 ------w C:\WINDOWS\system32\drivers\rndismpx.sys
2008-04-13 18:56 30,592 ------w C:\WINDOWS\system32\drivers\rndismp.sys
2008-04-13 18:56 12,800 ------w C:\WINDOWS\system32\drivers\usb8023x.sys
2008-04-13 18:56 12,800 ------w C:\WINDOWS\system32\drivers\usb8023.sys
2008-04-13 18:56 12,288 ------w C:\WINDOWS\system32\drivers\tunmp.sys
2008-04-13 18:55 202,624 ------w C:\WINDOWS\system32\drivers\rmcast.sys
2008-04-13 18:55 14,592 ------w C:\WINDOWS\system32\drivers\ndisuio.sys
2008-04-13 18:54 11,264 ------w C:\WINDOWS\system32\drivers\irenum.sys
2008-04-13 18:53 71,552 ------w C:\WINDOWS\system32\drivers\bridge.sys
2008-04-13 18:53 40,320 ------w C:\WINDOWS\system32\drivers\nmnt.sys
2008-04-13 18:53 36,608 ------w C:\WINDOWS\system32\drivers\ip6fw.sys
2008-04-13 18:53 264,832 ------w C:\WINDOWS\system32\drivers\http.sys
2008-04-13 18:51 61,824 ------w C:\WINDOWS\system32\drivers\nic1394.sys
2008-04-13 18:51 60,800 ------w C:\WINDOWS\system32\drivers\arp1394.sys
2008-04-13 18:51 59,904 ------w C:\WINDOWS\system32\drivers\atmarpc.sys
2008-04-13 18:51 55,808 ------w C:\WINDOWS\system32\drivers\atmlane.sys
2008-04-13 18:51 101,120 ------w C:\WINDOWS\system32\drivers\bthpan.sys
2008-04-13 18:47 25,856 ------w C:\WINDOWS\system32\drivers\usbprint.sys
2008-04-13 18:45 60,160 ------w C:\WINDOWS\system32\drivers\drmk.sys
2008-04-13 18:44 81,664 ------w C:\WINDOWS\system32\drivers\videoprt.sys
2008-04-13 18:44 799,744 ------w C:\WINDOWS\system32\drivers\dmboot.sys
2008-04-13 18:44 20,992 ------w C:\WINDOWS\system32\drivers\vga.sys
2008-04-13 18:44 17,664 ------w C:\WINDOWS\system32\watchdog.sys
2008-04-13 18:44 153,344 ------w C:\WINDOWS\system32\drivers\dmio.sys
2008-04-13 18:43 14,208 ------w C:\WINDOWS\system32\drivers\wacompen.sys
2008-04-13 18:43 12,672 ------w C:\WINDOWS\system32\drivers\mutohpen.sys
2008-04-13 18:41 8,576 ------w C:\WINDOWS\system32\drivers\i2omgmt.sys
2008-01-20 11:27 4,711,200 --sha-w C:\WINDOWS\system32\drivers\fidbox.dat
2008-01-20 11:14 17,184 --sha-w C:\WINDOWS\system32\drivers\fidbox2.dat
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2008-04-14 01:12 15360]
"WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2006-10-18 21:05 204288]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"VTTimer"="VTTimer.exe" [2005-03-08 11:33 53248 C:\WINDOWS\system32\VTTimer.exe]
"VTTrayp"="VTtrayp.exe" [2005-08-03 23:32 163840 C:\WINDOWS\system32\VTTrayp.exe]
"SoundMan"="SOUNDMAN.EXE" [2006-01-11 23:08 577536 C:\WINDOWS\soundman.exe]
"Mouse Suite 98 Daemon"="ICO.EXE" [2005-04-13 22:34 49152 C:\WINDOWS\system32\ico.exe]
"AMSG"="C:\Program Files\ThinkVantage\AMSG\Amsg.exe" [2005-11-23 04:36 507904]
"DiskeeperSystray"="C:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe" [2006-03-01 19:51 196710]
"ISUSPM Startup"="c:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2004-07-28 00:50 221184]
"ISUSScheduler"="c:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" [2004-07-28 00:50 81920]
"LPManager"="C:\PROGRA~1\Lenovo\LENOVO~2\LPMGR.exe" [2005-12-07 09:00 106496]
"cssauthe"="C:\Program Files\IBM ThinkVantage\Client Security Solution\cssauthe.exe" [2006-03-01 00:00 1992240]
"Picasa Media Detector"="C:\Program Files\Picasa2\PicasaMediaDetector.exe" [2005-10-28 19:08 335872]
"Google Desktop Search"="C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" [2006-06-10 04:51 169472]
"atwtusb"="atwtusb.exe" [2002-03-11 19:42 176128 C:\WINDOWS\system32\Atwtusb.exe]
"PCguardadvisor.exe"="C:\Program Files\blueyonder\PCguard advisor\PCguardadvisor.exe" [2006-04-28 23:27 1888256]
"PCguard"="C:\Program Files\blueyonder\PCguard\Rps.exe" [2006-05-01 21:43 274432]
"eBayToolbar"="C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe" [2008-03-24 13:42 652528]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2007-04-19 06:26 7700480]
"nwiz"="nwiz.exe" [2007-04-19 06:26 1626112 C:\WINDOWS\system32\nwiz.exe]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2007-04-19 06:26 86016]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 02:11 132496]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2008-03-28 23:37 413696]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2008-03-30 10:36 267048]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [2008-04-27 07:12 185896]

C:\Documents and Settings\Mark\Start Menu\Programs\Startup\
KybtecWcCaller.exe [12/4/2006 12:59:02 AM 6144]
Quick StartUp.lnk - C:\PENSOFT\fquick32.exe [7/31/2006 8:11:19 PM 185476]
Start.lnk - C:\PENSOFT\Quick95.exe [7/31/2006 8:11:19 PM 60928]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2/13/2001 9:01:04 AM 83360]
WinZip Quick Pick.lnk - I:\Program Files\WinZip\WZQKPICK.EXE [10/25/2005 2:59:23 PM 118784]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Gamma Loader.exe.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Gamma Loader.exe.lnk
backup=C:\WINDOWS\pss\Adobe Gamma Loader.exe.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Gamma Loader.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk
backup=C:\WINDOWS\pss\Adobe Gamma Loader.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk
backup=C:\WINDOWS\pss\Adobe Reader Speed Launch.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
--a------ 2008-03-30 10:36 267048 C:\Program Files\iTunes\iTunesHelper.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PenLock]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RegistryMechanic]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SightSpeed]
--------- 2007-03-01 21:03 3524672 C:\Program Files\SightSpeed\SightSpeed.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UERScw]


[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\was_check]


[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"C:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"C:\\Program Files\\iTunes\\iTunes.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=

R2 ibmfilter;ibmfilter;C:\WINDOWS\system32\drivers\ibmfilter.sys [2005-12-22 01:14]
R2 smi2;smi2;C:\Program Files\SMI2\smi2.sys [2005-12-22 00:45]
R3 pelmouse;Mouse Suite Driver;C:\WINDOWS\system32\DRIVERS\pelmouse.sys [2003-01-10 21:55]
R3 pelusblf;USB Mouse Low Filter Driver;C:\WINDOWS\system32\DRIVERS\pelusblf.sys [2003-02-11 21:25]
S3 usb2vcom;USB Data Cable;C:\WINDOWS\system32\DRIVERS\usb2vcom.sys [2005-05-25 04:24]
S3 utblfilt;utblfilt;C:\WINDOWS\system32\drivers\utblfilt.sys [2001-05-23 15:42]

.
Contents of the 'Scheduled Tasks' folder
"2008-04-26 04:17:00 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
"2008-05-22 19:03:15 C:\WINDOWS\Tasks\Check Updates for Windows Live Toolbar.job"
- C:\Program Files\Windows Live Toolbar\MSNTBUP.EXE
"2008-05-17 08:00:00 C:\WINDOWS\Tasks\rpc.job"
- C:\Program Files\Winferno\RegistryPowerCleaner\RegPowerClean.exe
.
**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-05-23 07:00:14
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2008-05-23 7:01:49
ComboFix-quarantined-files.txt 2008-05-23 06:01:23

Pre-Run: 11,273,457,664 bytes free
Post-Run: 11,263,254,528 bytes free

237 --- E O F --- 2008-05-16 07:23:27


HJT log

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 07:03:47, on 23/05/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\blueyonder\PCguard\fws.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
C:\Program Files\Common Files\Command Software\dvpapi.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\IBM ThinkVantage\Rescue and Recovery\rrservice.exe
C:\Program Files\IBM ThinkVantage\Common\Scheduler\tvtsched.exe
C:\Program Files\IBM ThinkVantage\Common\Logger\logmon.exe
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\ICO.EXE
C:\Program Files\ThinkVantage\AMSG\Amsg.exe
C:\WINDOWS\system32\FSRremoS.EXE
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\PROGRA~1\Lenovo\LENOVO~2\LPMGR.exe
C:\Program Files\IBM ThinkVantage\Client Security Solution\cssauthe.exe
C:\WINDOWS\system32\Pelmiced.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\WINDOWS\system32\atwtusb.exe
C:\Program Files\blueyonder\PCguard advisor\PCguardadvisor.exe
C:\Program Files\blueyonder\PCguard\Rps.exe
C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe
C:\WINDOWS\system32\TBLMOUSE.EXE
C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopDisplay.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
I:\Program Files\WinZip\WZQKPICK.EXE
C:\PENSOFT\fquick32.exe
C:\PENSOFT\Quick95.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\IBM ThinkVantage\Client Security Solution\pwmgre.exe
C:\PROGRA~1\Mozilla Firefox\firefox.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Mark\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60287
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_custo ... TbId=60287
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: eBay Toolbar Helper - {22D8E815-4A5E-4DFB-845E-AAB64207F5BD} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: PopKill Class - {3C060EA2-E6A9-4E49-A530-D4657B8C449A} - C:\Program Files\blueyonder\PCguard\pkR.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: ZKBho Class - {56071E0D-C61B-11D3-B41C-00E02927A304} - C:\Program Files\blueyonder\PCguard\FBHR.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: eBay Toolbar - {92085AD4-F48A-450D-BD93-B28CC7DF67CE} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll
O3 - Toolbar: (no name) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - (no file)
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [Mouse Suite 98 Daemon] ICO.EXE
O4 - HKLM\..\Run: [AMSG] C:\Program Files\ThinkVantage\AMSG\Amsg.exe
O4 - HKLM\..\Run: [DiskeeperSystray] "C:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe"
O4 - HKLM\..\Run: [ISUSPM Startup] c:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "c:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [LPManager] C:\PROGRA~1\Lenovo\LENOVO~2\LPMGR.exe
O4 - HKLM\..\Run: [cssauthe] "C:\Program Files\IBM ThinkVantage\Client Security Solution\cssauthe.exe" silent
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [atwtusb] atwtusb.exe beta
O4 - HKLM\..\Run: [PCguardadvisor.exe] "C:\Program Files\blueyonder\PCguard advisor\PCguardadvisor.exe"
O4 - HKLM\..\Run: [PCguard] "C:\Program Files\blueyonder\PCguard\Rps.exe"
O4 - HKLM\..\Run: [eBayToolbar] C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - Startup: KybtecWcCaller.exe
O4 - Startup: Quick StartUp.lnk = C:\PENSOFT\fquick32.exe
O4 - Startup: Start.lnk = C:\PENSOFT\Quick95.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: WinZip Quick Pick.lnk = I:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: eBay Search - res://C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html
O8 - Extra context menu item: Open in new background tab - res://C:\Program Files\Windows Live Toolbar\Components\en-gb\msntabres.dll.mui/229?69cbbc6e23284756bd56247f9cb92666
O8 - Extra context menu item: Open in new foreground tab - res://C:\Program Files\Windows Live Toolbar\Components\en-gb\msntabres.dll.mui/230?69cbbc6e23284756bd56247f9cb92666
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [JAVA_IBM] Java (IBM)
O14 - IERESET.INF: START_PAGE_URL=http://www.broadband.blueyonder.co.uk
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partne ... nicode.cab
O16 - DPF: {1754A1BA-A1DF-4F10-B199-AA55AA1A120F} (InstallerBehaviorFactory Class) - https://signup.msn.com/pages/MsnInstC.cab
O16 - DPF: {2250C29C-C5E9-4F55-BE4E-01E45A40FCF1} (CMediaMix Object) - http://musicmix.messenger.msn.com/Medialogic.CAB
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/EN-US/a-U ... E_UNO1.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me ... b31267.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan ... asinst.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me ... b56907.cab
O16 - DPF: {CE3409C4-9E26-4F8E-83E4-778498F9E7B4} (PB_Uploader Class) - http://static.photobox.co.uk/sg/common/uploader_uni.cab
O16 - DPF: {D821DC4A-0814-435E-9820-661C543A4679} (CRLDownloadWrapper Class) - http://drmlicense.one.microsoft.com/crl ... crlocx.ocx
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} (GpcContainer Class) - https://performancesoft.webex.com/clien ... eatgpc.cab
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
O23 - Service: DvpApi (dvpapi) - Authentium, Inc. - C:\Program Files\Common Files\Command Software\dvpapi.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: IBM PSA Access Driver Control (PsaSrv) - Unknown owner - (no file)
O23 - Service: PCguard Firewall (RP_FWS) - Radialpoint Inc. - C:\Program Files\blueyonder\PCguard\fws.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: TVT Backup Service - Unknown owner - C:\Program Files\IBM ThinkVantage\Rescue and Recovery\rrservice.exe
O23 - Service: TVT Scheduler - Unknown owner - C:\Program Files\IBM ThinkVantage\Common\Scheduler\tvtsched.exe

--
End of file - 13045 bytes
tamskinner
Member+
 
Posts: 83
Joined: December 31st, 2007, 3:21 am

Re: OneStep search - hjt log, please help!!

Unread postby ndmmxiaomayi » May 23rd, 2008, 1:26 pm

Hi,

Please open Notepad and copy and paste the following in the Code box into Notepad:

Code: Select all
http://malwareremoval.com/forum/viewtopic.php?f=11&t=30570&start=30

File::
C:\Documents and Settings\Mark\My Documents\My Received Files\foto879h1.zip

Collect::
C:\Documents and Settings\Matthew\Application Data\Joy Long Test\bciukvzd.exe
C:\Documents and Settings\Matthew\Application Data\Joy Long Test\ofonhnrk.exe
C:\Documents and Settings\Matthew\Application Data\Joy Long Test\wsgvhxwb.exe

Folder::
C:\Documents and Settings\Matthew\Application Data\Joy Long Test

Registry::
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UERScw]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\was_check]


Warning: The above script is just for tamskinner. If you are not tamskinner, please do not use this script as it may damage the workings of your system.

Click on File > Save As....

In the File Name field, copy and paste in CFScript.txt. Do not change the file name.

Click Save.

Referring to the picture below, drag CFScript into Combofix.

Image

Combofix will start running. When done, a log will be produced. Please post this log in your next reply.

In addition, it will prompt you to submit some files for analyzing.

Image

Click OK.

Copy and paste the file path into the text box next to the Browse button (boxed up in red).

Image

Click on Send File.

Do not mouse click on Combofix while it is running. That may cause it to stall.

In your next reply, please post:

  1. Combofix log (C:\Combofix.txt)
  2. A new HijackThis log
ndmmxiaomayi
MRU Emeritus
MRU Emeritus
 
Posts: 9708
Joined: July 17th, 2006, 9:22 am

Re: OneStep search - hjt log, please help!!

Unread postby tamskinner » May 25th, 2008, 4:29 am

Hi, did you get the zip file? I was redirected to "beebcomputer". Ive never been to that site before, sna it asked me to log in. I assukmed it was the malware removal site and input my login details, which it clearly didnt recognise!
Tam

ComboFix 08-05-21.3 - Mark 2008-05-25 9:18:26.5 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.965 [GMT 1:00]
Running from: C:\Documents and Settings\Mark\Desktop\ComboFix.exe
Command switches used :: C:\Documents and Settings\Mark\Desktop\CFScript.txt
* Created a new restore point

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!

FILE ::
C:\Documents and Settings\Mark\My Documents\My Received Files\foto879h1.zip
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\Mark\My Documents\My Received Files\foto879h1.zip

.
((((((((((((((((((((((((( Files Created from 2008-04-25 to 2008-05-25 )))))))))))))))))))))))))))))))
.

2008-05-20 07:27 . 2008-05-20 07:28 <DIR> d----c--- C:\MSNCleaner
2008-05-20 07:13 . 2008-05-20 07:13 <DIR> d-------- C:\WINDOWS\system32\scripting
2008-05-20 07:13 . 2008-05-20 07:13 <DIR> d-------- C:\WINDOWS\system32\en
2008-05-20 07:13 . 2008-05-20 07:13 <DIR> d-------- C:\WINDOWS\system32\bits
2008-05-20 07:13 . 2008-05-20 07:13 <DIR> d-------- C:\WINDOWS\l2schemas
2008-05-20 07:11 . 2008-05-20 07:11 <DIR> d-------- C:\WINDOWS\ServicePackFiles
2008-05-20 07:06 . 2008-05-20 07:06 <DIR> d-------- C:\WINDOWS\EHome
2008-05-20 07:00 . 2008-04-14 01:11 1,888,992 --------- C:\WINDOWS\system32\ati3duag.dll
2008-05-19 11:57 . 2008-05-19 11:57 <DIR> d-------- C:\WINDOWS\system32\Kaspersky Lab
2008-05-19 08:22 . 2008-05-19 08:22 <DIR> d----c--- C:\Deckard
2008-05-16 18:21 . 2008-05-17 16:54 <DIR> d-------- C:\Program Files\Navilog1
2008-05-15 21:30 . 2008-05-15 21:30 <DIR> d-------- C:\Program Files\Malwarebytes' Anti-Malware
2008-05-15 21:30 . 2008-05-15 21:30 <DIR> d-------- C:\Documents and Settings\Mark\Application Data\Malwarebytes
2008-05-15 21:30 . 2008-05-15 21:30 <DIR> d----c--- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-05-15 21:30 . 2008-05-05 20:46 27,048 --a------ C:\WINDOWS\system32\drivers\mbamcatchme.sys
2008-05-15 21:30 . 2008-05-05 20:46 15,864 --a------ C:\WINDOWS\system32\drivers\mbam.sys
2008-05-14 21:25 . 2008-05-14 21:25 1,374 --a------ C:\WINDOWS\imsins.BAK
2008-05-06 07:21 . 2008-05-06 07:21 <DIR> d-------- C:\WINDOWS\system32\GroupPolicy
2008-05-06 07:20 . 2008-05-06 08:14 <DIR> d-------- C:\Program Files\Hitman Pro
2008-05-04 08:22 . 2008-05-04 08:51 <DIR> d-------- C:\Program Files\Spyware Terminator
2008-05-04 08:22 . 2008-05-15 21:21 <DIR> d-------- C:\Program Files\Crawler
2008-05-04 08:22 . 2008-05-04 08:25 <DIR> d-------- C:\Documents and Settings\Mark\Application Data\Spyware Terminator
2008-05-04 08:22 . 2008-05-04 08:51 <DIR> d----c--- C:\Documents and Settings\All Users\Application Data\Spyware Terminator
2008-05-04 08:22 . 2008-05-04 08:22 141,312 --a------ C:\WINDOWS\system32\drivers\sp_rsdrv2.sys
2008-05-04 07:49 . 2008-05-09 06:57 32 --a------ C:\WINDOWS\system32\thxcfg.ini
2008-04-27 07:12 . 2008-04-27 07:12 <DIR> d-------- C:\Program Files\Common Files\xing shared
2008-04-26 19:01 . 2008-04-26 19:01 244 --ah-c--- C:\sqmnoopt02.sqm
2008-04-26 19:01 . 2008-04-26 19:01 232 --ah-c--- C:\sqmdata02.sqm

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-05-25 08:13 5,427 ----a-w C:\WINDOWS\system32\EGATHDRV.SYS
2008-05-25 08:12 --------- d-----w C:\Documents and Settings\Mark\Application Data\AdobeUM
2008-05-24 11:33 --------- d-----w C:\Program Files\Common Files\PestPatrol
2008-05-24 11:33 --------- d-----w C:\Program Files\Common Files\Command Software
2008-05-19 10:57 --------- dc----w C:\Documents and Settings\All Users\Application Data\Kaspersky Lab
2008-05-09 06:39 --------- d-----w C:\Program Files\Mozilla Sunbird
2008-05-06 07:11 --------- dc----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-05-02 08:33 --------- d-----w C:\Program Files\Spybot - Search & Destroy
2008-04-27 06:12 499,712 ----a-w C:\WINDOWS\system32\msvcp71.dll
2008-04-27 06:12 348,160 ----a-w C:\WINDOWS\system32\msvcr71.dll
2008-04-27 06:12 --------- d-----w C:\Program Files\Common Files\Real
2008-04-27 06:03 --------- d-----w C:\Program Files\iTunes
2008-04-27 06:03 --------- d-----w C:\Program Files\Apple Software Update
2008-04-26 04:56 --------- d-----w C:\Program Files\iArt
2008-04-26 04:22 --------- d-----w C:\Program Files\iPod
2008-04-26 04:21 --------- d-----w C:\Program Files\QuickTime
2008-04-20 06:58 --------- dc----w C:\Documents and Settings\All Users\Application Data\NVIDIA
2008-04-17 19:24 61,128 ----a-w C:\Documents and Settings\Mark\Application Data\GDIPFONTCACHEV1.DAT
2008-04-14 04:42 985,088 ----a-w C:\WINDOWS\system32\setupapi.dll
2008-04-14 04:42 11,264 ------w C:\WINDOWS\system32\spnpinst.exe
2008-04-14 04:41 423,936 ------w C:\WINDOWS\system32\licdll.dll
2008-04-14 00:25 1,804 ------w C:\WINDOWS\system32\dcache.bin
2008-04-14 00:16 329,728 ------w C:\WINDOWS\system32\netsetup.exe
2008-04-14 00:13 92,424 ------w C:\WINDOWS\system32\rdpdd.dll
2008-04-14 00:13 87,176 ------w C:\WINDOWS\system32\rdpwsx.dll
2008-04-14 00:13 40,840 ------w C:\WINDOWS\system32\drivers\termdd.sys
2008-04-14 00:13 21,896 ------w C:\WINDOWS\system32\drivers\tdtcp.sys
2008-04-14 00:13 139,656 ------w C:\WINDOWS\system32\drivers\rdpwd.sys
2008-04-14 00:13 12,168 ------w C:\WINDOWS\system32\tsddd.dll
2008-04-14 00:13 12,040 ------w C:\WINDOWS\system32\drivers\tdpipe.sys
2008-04-14 00:11 997,376 ----a-w C:\WINDOWS\system32\msgina.dll
2008-04-14 00:10 53,279 ------w C:\WINDOWS\system32\odbcji32.dll
2008-04-14 00:10 4,126 ------w C:\WINDOWS\system32\msdxmlc.dll
2008-04-14 00:10 3,584 ------w C:\WINDOWS\system32\msafd.dll
2008-04-13 21:00 103,424 ------w C:\WINDOWS\system32\dpcdll.dll
2008-04-13 19:30 1,845,632 ------w C:\WINDOWS\system32\win32k.sys
2008-04-13 19:28 175,744 ------w C:\WINDOWS\system32\drivers\rdbss.sys
2008-04-13 19:27 2,188,928 ------w C:\WINDOWS\system32\ntoskrnl.exe
2008-04-13 19:21 162,816 ------w C:\WINDOWS\system32\drivers\netbt.sys
2008-04-13 19:20 91,520 ------w C:\WINDOWS\system32\drivers\ndiswan.sys
2008-04-13 19:20 361,344 ----a-w C:\WINDOWS\system32\drivers\tcpip.sys
2008-04-13 19:20 182,656 ------w C:\WINDOWS\system32\drivers\ndis.sys
2008-04-13 19:19 75,264 ------w C:\WINDOWS\system32\drivers\ipsec.sys
2008-04-13 19:19 51,328 ------w C:\WINDOWS\system32\drivers\rasl2tp.sys
2008-04-13 19:19 48,384 ------w C:\WINDOWS\system32\drivers\raspptp.sys
2008-04-13 19:19 146,048 ------w C:\WINDOWS\system32\drivers\portcls.sys
2008-04-13 19:19 138,112 ------w C:\WINDOWS\system32\drivers\afd.sys
2008-04-13 19:18 52,480 ------w C:\WINDOWS\system32\drivers\i8042prt.sys
2008-04-13 19:17 83,072 ------w C:\WINDOWS\system32\drivers\wdmaud.sys
2008-04-13 19:17 456,576 ------w C:\WINDOWS\system32\drivers\mrxsmb.sys
2008-04-13 19:17 105,344 ------w C:\WINDOWS\system32\drivers\mup.sys
2008-04-13 19:16 49,536 ------w C:\WINDOWS\system32\drivers\classpnp.sys
2008-04-13 19:16 141,056 ----a-w C:\WINDOWS\system32\drivers\ks.sys
2008-04-13 19:15 64,512 ------w C:\WINDOWS\system32\drivers\serial.sys
2008-04-13 19:15 60,800 ------w C:\WINDOWS\system32\drivers\sysaudio.sys
2008-04-13 19:15 574,976 ------w C:\WINDOWS\system32\drivers\ntfs.sys
2008-04-13 19:15 334,848 ------w C:\WINDOWS\system32\drivers\srv.sys
2008-04-13 19:14 63,744 ------w C:\WINDOWS\system32\drivers\cdfs.sys
2008-04-13 19:14 143,744 ------w C:\WINDOWS\system32\drivers\fastfat.sys
2008-04-13 19:00 30,080 ------w C:\WINDOWS\system32\drivers\modem.sys
2008-04-13 19:00 225,664 ------w C:\WINDOWS\system32\drivers\tcpip6.sys
2008-04-13 19:00 19,072 ------w C:\WINDOWS\system32\drivers\tdi.sys
2008-04-13 18:57 41,472 ------w C:\WINDOWS\system32\drivers\raspppoe.sys
2008-04-13 18:57 40,576 ------w C:\WINDOWS\system32\drivers\ndproxy.sys
2008-04-13 18:57 34,560 ------w C:\WINDOWS\system32\drivers\wanarp.sys
2008-04-13 18:57 20,864 ------w C:\WINDOWS\system32\drivers\ipinip.sys
2008-04-13 18:57 152,832 ------w C:\WINDOWS\system32\drivers\ipnat.sys
2008-04-13 18:57 14,336 ------w C:\WINDOWS\system32\drivers\asyncmac.sys
2008-04-13 18:57 10,112 ------w C:\WINDOWS\system32\drivers\ndistapi.sys
2008-04-13 18:56 88,320 ------w C:\WINDOWS\system32\drivers\nwlnkipx.sys
2008-04-13 18:56 69,120 ------w C:\WINDOWS\system32\drivers\psched.sys
2008-04-13 18:56 35,072 ------w C:\WINDOWS\system32\drivers\msgpc.sys
2008-04-13 18:56 34,688 ------w C:\WINDOWS\system32\drivers\netbios.sys
2008-04-13 18:56 30,592 ------w C:\WINDOWS\system32\drivers\rndismpx.sys
2008-04-13 18:56 30,592 ------w C:\WINDOWS\system32\drivers\rndismp.sys
2008-04-13 18:56 12,800 ------w C:\WINDOWS\system32\drivers\usb8023x.sys
2008-04-13 18:56 12,800 ------w C:\WINDOWS\system32\drivers\usb8023.sys
2008-04-13 18:56 12,288 ------w C:\WINDOWS\system32\drivers\tunmp.sys
2008-04-13 18:55 202,624 ------w C:\WINDOWS\system32\drivers\rmcast.sys
2008-04-13 18:55 14,592 ------w C:\WINDOWS\system32\drivers\ndisuio.sys
2008-04-13 18:54 11,264 ------w C:\WINDOWS\system32\drivers\irenum.sys
2008-04-13 18:53 71,552 ------w C:\WINDOWS\system32\drivers\bridge.sys
2008-04-13 18:53 40,320 ------w C:\WINDOWS\system32\drivers\nmnt.sys
2008-04-13 18:53 36,608 ------w C:\WINDOWS\system32\drivers\ip6fw.sys
2008-04-13 18:53 264,832 ------w C:\WINDOWS\system32\drivers\http.sys
2008-04-13 18:51 61,824 ------w C:\WINDOWS\system32\drivers\nic1394.sys
2008-04-13 18:51 60,800 ------w C:\WINDOWS\system32\drivers\arp1394.sys
2008-04-13 18:51 59,904 ------w C:\WINDOWS\system32\drivers\atmarpc.sys
2008-04-13 18:51 55,808 ------w C:\WINDOWS\system32\drivers\atmlane.sys
2008-04-13 18:51 101,120 ------w C:\WINDOWS\system32\drivers\bthpan.sys
2008-04-13 18:47 25,856 ------w C:\WINDOWS\system32\drivers\usbprint.sys
2008-04-13 18:45 60,160 ------w C:\WINDOWS\system32\drivers\drmk.sys
2008-04-13 18:44 81,664 ------w C:\WINDOWS\system32\drivers\videoprt.sys
2008-04-13 18:44 799,744 ------w C:\WINDOWS\system32\drivers\dmboot.sys
2008-04-13 18:44 20,992 ------w C:\WINDOWS\system32\drivers\vga.sys
2008-04-13 18:44 17,664 ------w C:\WINDOWS\system32\watchdog.sys
2008-04-13 18:44 153,344 ------w C:\WINDOWS\system32\drivers\dmio.sys
2008-04-13 18:43 14,208 ------w C:\WINDOWS\system32\drivers\wacompen.sys
2008-04-13 18:43 12,672 ------w C:\WINDOWS\system32\drivers\mutohpen.sys
2008-04-13 18:41 8,576 ------w C:\WINDOWS\system32\drivers\i2omgmt.sys
2008-01-20 11:27 4,711,200 --sha-w C:\WINDOWS\system32\drivers\fidbox.dat
2008-01-20 11:14 17,184 --sha-w C:\WINDOWS\system32\drivers\fidbox2.dat
.

((((((((((((((((((((((((((((( snapshot@2008-05-23_ 7.01.13.75 )))))))))))))))))))))))))))))))))))))))))
.
- 2008-05-23 05:48:39 2,048 --s-a-w C:\WINDOWS\bootstat.dat
+ 2008-05-25 08:12:41 2,048 --s-a-w C:\WINDOWS\bootstat.dat
+ 2008-05-25 08:13:04 16,384 ----atw C:\WINDOWS\Temp\Perflib_Perfdata_1bc.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2008-04-14 01:12 15360]
"WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2006-10-18 21:05 204288]
"updateMgr"="C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" [2006-03-30 17:45 313472]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"VTTimer"="VTTimer.exe" [2005-03-08 11:33 53248 C:\WINDOWS\system32\VTTimer.exe]
"VTTrayp"="VTtrayp.exe" [2005-08-03 23:32 163840 C:\WINDOWS\system32\VTTrayp.exe]
"SoundMan"="SOUNDMAN.EXE" [2006-01-11 23:08 577536 C:\WINDOWS\soundman.exe]
"Mouse Suite 98 Daemon"="ICO.EXE" [2005-04-13 22:34 49152 C:\WINDOWS\system32\ico.exe]
"AMSG"="C:\Program Files\ThinkVantage\AMSG\Amsg.exe" [2005-11-23 04:36 507904]
"DiskeeperSystray"="C:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe" [2006-03-01 19:51 196710]
"ISUSPM Startup"="c:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2004-07-28 00:50 221184]
"ISUSScheduler"="c:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" [2004-07-28 00:50 81920]
"LPManager"="C:\PROGRA~1\Lenovo\LENOVO~2\LPMGR.exe" [2005-12-07 09:00 106496]
"cssauthe"="C:\Program Files\IBM ThinkVantage\Client Security Solution\cssauthe.exe" [2006-03-01 00:00 1992240]
"Picasa Media Detector"="C:\Program Files\Picasa2\PicasaMediaDetector.exe" [2005-10-28 19:08 335872]
"Google Desktop Search"="C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" [2006-06-10 04:51 169472]
"atwtusb"="atwtusb.exe" [2002-03-11 19:42 176128 C:\WINDOWS\system32\Atwtusb.exe]
"PCguardadvisor.exe"="C:\Program Files\blueyonder\PCguard advisor\PCguardadvisor.exe" [2006-04-28 23:27 1888256]
"PCguard"="C:\Program Files\blueyonder\PCguard\Rps.exe" [2006-05-01 21:43 274432]
"eBayToolbar"="C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe" [2008-03-24 13:42 652528]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2007-04-19 06:26 7700480]
"nwiz"="nwiz.exe" [2007-04-19 06:26 1626112 C:\WINDOWS\system32\nwiz.exe]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2007-04-19 06:26 86016]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 02:11 132496]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2008-03-28 23:37 413696]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2008-03-30 10:36 267048]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [2008-04-27 07:12 185896]

C:\Documents and Settings\Mark\Start Menu\Programs\Startup\
KybtecWcCaller.exe [12/4/2006 12:59:02 AM 6144]
Quick StartUp.lnk - C:\PENSOFT\fquick32.exe [7/31/2006 8:11:19 PM 185476]
Start.lnk - C:\PENSOFT\Quick95.exe [7/31/2006 8:11:19 PM 60928]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2/13/2001 9:01:04 AM 83360]
WinZip Quick Pick.lnk - I:\Program Files\WinZip\WZQKPICK.EXE [10/25/2005 2:59:23 PM 118784]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Gamma Loader.exe.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Gamma Loader.exe.lnk
backup=C:\WINDOWS\pss\Adobe Gamma Loader.exe.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Gamma Loader.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk
backup=C:\WINDOWS\pss\Adobe Gamma Loader.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk
backup=C:\WINDOWS\pss\Adobe Reader Speed Launch.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
--a------ 2008-03-30 10:36 267048 C:\Program Files\iTunes\iTunesHelper.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PenLock]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RegistryMechanic]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SightSpeed]
--------- 2007-03-01 21:03 3524672 C:\Program Files\SightSpeed\SightSpeed.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"C:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"C:\\Program Files\\iTunes\\iTunes.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=

R2 ibmfilter;ibmfilter;C:\WINDOWS\system32\drivers\ibmfilter.sys [2005-12-22 01:14]
R2 smi2;smi2;C:\Program Files\SMI2\smi2.sys [2005-12-22 00:45]
R3 pelmouse;Mouse Suite Driver;C:\WINDOWS\system32\DRIVERS\pelmouse.sys [2003-01-10 21:55]
R3 pelusblf;USB Mouse Low Filter Driver;C:\WINDOWS\system32\DRIVERS\pelusblf.sys [2003-02-11 21:25]
S3 usb2vcom;USB Data Cable;C:\WINDOWS\system32\DRIVERS\usb2vcom.sys [2005-05-25 04:24]
S3 utblfilt;utblfilt;C:\WINDOWS\system32\drivers\utblfilt.sys [2001-05-23 15:42]
S4 Gusveneouw96;Gusveneouw96;C:\WINDOWS\system32\drivers\ndistapi.sys [2008-04-13 19:57]

.
Contents of the 'Scheduled Tasks' folder
"2008-04-26 04:17:00 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
"2008-05-23 15:03:00 C:\WINDOWS\Tasks\Check Updates for Windows Live Toolbar.job"
- C:\Program Files\Windows Live Toolbar\MSNTBUP.EXE
"2008-05-17 08:00:00 C:\WINDOWS\Tasks\rpc.job"
- C:\Program Files\Winferno\RegistryPowerCleaner\RegPowerClean.exe
.
**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-05-25 09:21:39
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2008-05-25 9:23:12
ComboFix-quarantined-files.txt 2008-05-25 08:22:48
ComboFix2.txt 2008-05-23 06:01:51

Pre-Run: 11,261,247,488 bytes free
Post-Run: 11,252,359,168 bytes free

251 --- E O F --- 2008-05-16 07:23:27


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 09:27:27, on 25/05/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\blueyonder\PCguard\fws.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\ICO.EXE
C:\Program Files\ThinkVantage\AMSG\Amsg.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\PROGRA~1\Lenovo\LENOVO~2\LPMGR.exe
C:\WINDOWS\system32\FSRremoS.EXE
C:\Program Files\IBM ThinkVantage\Client Security Solution\cssauthe.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\WINDOWS\system32\atwtusb.exe
C:\Program Files\blueyonder\PCguard advisor\PCguardadvisor.exe
C:\Program Files\blueyonder\PCguard\Rps.exe
C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe
C:\WINDOWS\system32\Pelmiced.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\TBLMOUSE.EXE
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopDisplay.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
I:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\Common Files\Command Software\dvpapi.exe
C:\PENSOFT\fquick32.exe
C:\PENSOFT\Quick95.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\IBM ThinkVantage\Rescue and Recovery\rrservice.exe
C:\Program Files\IBM ThinkVantage\Common\Scheduler\tvtsched.exe
C:\Program Files\IBM ThinkVantage\Common\Logger\logmon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Program Files\IBM ThinkVantage\Client Security Solution\pwmgre.exe
C:\WINDOWS\system32\notepad.exe
C:\WINDOWS\explorer.exe
C:\Documents and Settings\Mark\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60287
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_custo ... TbId=60287
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: eBay Toolbar Helper - {22D8E815-4A5E-4DFB-845E-AAB64207F5BD} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: PopKill Class - {3C060EA2-E6A9-4E49-A530-D4657B8C449A} - C:\Program Files\blueyonder\PCguard\pkR.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: ZKBho Class - {56071E0D-C61B-11D3-B41C-00E02927A304} - C:\Program Files\blueyonder\PCguard\FBHR.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: eBay Toolbar - {92085AD4-F48A-450D-BD93-B28CC7DF67CE} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll
O3 - Toolbar: (no name) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - (no file)
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [Mouse Suite 98 Daemon] ICO.EXE
O4 - HKLM\..\Run: [AMSG] C:\Program Files\ThinkVantage\AMSG\Amsg.exe
O4 - HKLM\..\Run: [DiskeeperSystray] "C:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe"
O4 - HKLM\..\Run: [ISUSPM Startup] c:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "c:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [LPManager] C:\PROGRA~1\Lenovo\LENOVO~2\LPMGR.exe
O4 - HKLM\..\Run: [cssauthe] "C:\Program Files\IBM ThinkVantage\Client Security Solution\cssauthe.exe" silent
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [atwtusb] atwtusb.exe beta
O4 - HKLM\..\Run: [PCguardadvisor.exe] "C:\Program Files\blueyonder\PCguard advisor\PCguardadvisor.exe"
O4 - HKLM\..\Run: [PCguard] "C:\Program Files\blueyonder\PCguard\Rps.exe"
O4 - HKLM\..\Run: [eBayToolbar] C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9
O4 - Startup: KybtecWcCaller.exe
O4 - Startup: Quick StartUp.lnk = C:\PENSOFT\fquick32.exe
O4 - Startup: Start.lnk = C:\PENSOFT\Quick95.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: WinZip Quick Pick.lnk = I:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: eBay Search - res://C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html
O8 - Extra context menu item: Open in new background tab - res://C:\Program Files\Windows Live Toolbar\Components\en-gb\msntabres.dll.mui/229?69cbbc6e23284756bd56247f9cb92666
O8 - Extra context menu item: Open in new foreground tab - res://C:\Program Files\Windows Live Toolbar\Components\en-gb\msntabres.dll.mui/230?69cbbc6e23284756bd56247f9cb92666
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [JAVA_IBM] Java (IBM)
O14 - IERESET.INF: START_PAGE_URL=http://www.broadband.blueyonder.co.uk
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partne ... nicode.cab
O16 - DPF: {1754A1BA-A1DF-4F10-B199-AA55AA1A120F} (InstallerBehaviorFactory Class) - https://signup.msn.com/pages/MsnInstC.cab
O16 - DPF: {2250C29C-C5E9-4F55-BE4E-01E45A40FCF1} (CMediaMix Object) - http://musicmix.messenger.msn.com/Medialogic.CAB
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/EN-US/a-U ... E_UNO1.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me ... b31267.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan ... asinst.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me ... b56907.cab
O16 - DPF: {CE3409C4-9E26-4F8E-83E4-778498F9E7B4} (PB_Uploader Class) - http://static.photobox.co.uk/sg/common/uploader_uni.cab
O16 - DPF: {D821DC4A-0814-435E-9820-661C543A4679} (CRLDownloadWrapper Class) - http://drmlicense.one.microsoft.com/crl ... crlocx.ocx
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} (GpcContainer Class) - https://performancesoft.webex.com/clien ... eatgpc.cab
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
O23 - Service: DvpApi (dvpapi) - Authentium, Inc. - C:\Program Files\Common Files\Command Software\dvpapi.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: IBM PSA Access Driver Control (PsaSrv) - Unknown owner - (no file)
O23 - Service: PCguard Firewall (RP_FWS) - Radialpoint Inc. - C:\Program Files\blueyonder\PCguard\fws.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: TVT Backup Service - Unknown owner - C:\Program Files\IBM ThinkVantage\Rescue and Recovery\rrservice.exe
O23 - Service: TVT Scheduler - Unknown owner - C:\Program Files\IBM ThinkVantage\Common\Scheduler\tvtsched.exe

--
End of file - 13113 bytes
tamskinner
Member+
 
Posts: 83
Joined: December 31st, 2007, 3:21 am

Re: OneStep search - hjt log, please help!!

Unread postby ndmmxiaomayi » May 25th, 2008, 5:09 am

Hi,

We've received the files, thank you. :)

I will get back to you in a moment.
ndmmxiaomayi
MRU Emeritus
MRU Emeritus
 
Posts: 9708
Joined: July 17th, 2006, 9:22 am

Re: OneStep search - hjt log, please help!!

Unread postby ndmmxiaomayi » May 25th, 2008, 8:23 am

Hi,

Please open Notepad and copy and paste the following in the Code box into Notepad:

Code: Select all
Driver::
Gusveneouw96

Registry::
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ONESTEP_SEARCH_SERVICE]


Warning: The above script is just for tamskinner. If you are not tamskinner, please do not use this script as it may damage the workings of your system.

Click on File > Save As....

In the File Name field, copy and paste in CFScript.txt. Do not change the file name.

Click Save.

Referring to the picture below, drag CFScript into Combofix.

Image

Combofix will start running. When done, a log will be produced. Please post this log in your next reply.

Do not mouse click on Combofix while it is running. That may cause it to stall.

In your next reply, please post:

  1. Combofix log (C:\Combofix.txt)
  2. A new HijackThis log
ndmmxiaomayi
MRU Emeritus
MRU Emeritus
 
Posts: 9708
Joined: July 17th, 2006, 9:22 am

Re: OneStep search - hjt log, please help!!

Unread postby tamskinner » May 26th, 2008, 9:06 am

Hi log files below. Many thanks
Tam

ComboFix 08-05-21.3 - Mark 2008-05-26 13:51:48.6 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.923 [GMT 1:00]
Running from: C:\Documents and Settings\Mark\Desktop\ComboFix.exe
Command switches used :: C:\Documents and Settings\Mark\Desktop\CFScript.txt
* Created a new restore point

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Service_Gusveneouw96


((((((((((((((((((((((((( Files Created from 2008-04-26 to 2008-05-26 )))))))))))))))))))))))))))))))
.

2008-05-20 07:27 . 2008-05-20 07:28 <DIR> d----c--- C:\MSNCleaner
2008-05-20 07:13 . 2008-05-20 07:13 <DIR> d-------- C:\WINDOWS\system32\scripting
2008-05-20 07:13 . 2008-05-20 07:13 <DIR> d-------- C:\WINDOWS\system32\en
2008-05-20 07:13 . 2008-05-20 07:13 <DIR> d-------- C:\WINDOWS\system32\bits
2008-05-20 07:13 . 2008-05-20 07:13 <DIR> d-------- C:\WINDOWS\l2schemas
2008-05-20 07:11 . 2008-05-20 07:11 <DIR> d-------- C:\WINDOWS\ServicePackFiles
2008-05-20 07:06 . 2008-05-20 07:06 <DIR> d-------- C:\WINDOWS\EHome
2008-05-20 07:00 . 2008-04-14 01:11 1,888,992 --------- C:\WINDOWS\system32\ati3duag.dll
2008-05-19 11:57 . 2008-05-19 11:57 <DIR> d-------- C:\WINDOWS\system32\Kaspersky Lab
2008-05-19 08:22 . 2008-05-19 08:22 <DIR> d----c--- C:\Deckard
2008-05-16 18:21 . 2008-05-17 16:54 <DIR> d-------- C:\Program Files\Navilog1
2008-05-15 21:30 . 2008-05-15 21:30 <DIR> d-------- C:\Program Files\Malwarebytes' Anti-Malware
2008-05-15 21:30 . 2008-05-15 21:30 <DIR> d-------- C:\Documents and Settings\Mark\Application Data\Malwarebytes
2008-05-15 21:30 . 2008-05-15 21:30 <DIR> d----c--- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-05-15 21:30 . 2008-05-05 20:46 27,048 --a------ C:\WINDOWS\system32\drivers\mbamcatchme.sys
2008-05-15 21:30 . 2008-05-05 20:46 15,864 --a------ C:\WINDOWS\system32\drivers\mbam.sys
2008-05-14 21:25 . 2008-05-14 21:25 1,374 --a------ C:\WINDOWS\imsins.BAK
2008-05-06 07:21 . 2008-05-06 07:21 <DIR> d-------- C:\WINDOWS\system32\GroupPolicy
2008-05-06 07:20 . 2008-05-06 08:14 <DIR> d-------- C:\Program Files\Hitman Pro
2008-05-04 08:22 . 2008-05-04 08:51 <DIR> d-------- C:\Program Files\Spyware Terminator
2008-05-04 08:22 . 2008-05-15 21:21 <DIR> d-------- C:\Program Files\Crawler
2008-05-04 08:22 . 2008-05-04 08:25 <DIR> d-------- C:\Documents and Settings\Mark\Application Data\Spyware Terminator
2008-05-04 08:22 . 2008-05-04 08:51 <DIR> d----c--- C:\Documents and Settings\All Users\Application Data\Spyware Terminator
2008-05-04 08:22 . 2008-05-04 08:22 141,312 --a------ C:\WINDOWS\system32\drivers\sp_rsdrv2.sys
2008-05-04 07:49 . 2008-05-09 06:57 32 --a------ C:\WINDOWS\system32\thxcfg.ini
2008-04-27 07:12 . 2008-04-27 07:12 <DIR> d-------- C:\Program Files\Common Files\xing shared
2008-04-26 19:01 . 2008-04-26 19:01 244 --ah-c--- C:\sqmnoopt02.sqm
2008-04-26 19:01 . 2008-04-26 19:01 232 --ah-c--- C:\sqmdata02.sqm

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-05-26 12:58 --------- d-----w C:\Documents and Settings\Mark\Application Data\AdobeUM
2008-05-26 12:22 --------- d-----w C:\Program Files\Common Files\Command Software
2008-05-24 11:33 --------- d-----w C:\Program Files\Common Files\PestPatrol
2008-05-19 10:57 --------- dc----w C:\Documents and Settings\All Users\Application Data\Kaspersky Lab
2008-05-09 06:39 --------- d-----w C:\Program Files\Mozilla Sunbird
2008-05-06 07:11 --------- dc----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-05-02 08:33 --------- d-----w C:\Program Files\Spybot - Search & Destroy
2008-04-27 06:12 --------- d-----w C:\Program Files\Common Files\Real
2008-04-27 06:03 --------- d-----w C:\Program Files\iTunes
2008-04-27 06:03 --------- d-----w C:\Program Files\Apple Software Update
2008-04-26 04:56 --------- d-----w C:\Program Files\iArt
2008-04-26 04:22 --------- d-----w C:\Program Files\iPod
2008-04-26 04:21 --------- d-----w C:\Program Files\QuickTime
2008-04-20 06:58 --------- dc----w C:\Documents and Settings\All Users\Application Data\NVIDIA
2008-04-17 19:24 61,128 ----a-w C:\Documents and Settings\Mark\Application Data\GDIPFONTCACHEV1.DAT
2008-04-14 00:13 40,840 ------w C:\WINDOWS\system32\drivers\termdd.sys
2008-04-14 00:13 21,896 ------w C:\WINDOWS\system32\drivers\tdtcp.sys
2008-04-14 00:13 139,656 ------w C:\WINDOWS\system32\drivers\rdpwd.sys
2008-04-14 00:13 12,040 ------w C:\WINDOWS\system32\drivers\tdpipe.sys
2008-04-14 00:12 69,120 ------w C:\WINDOWS\notepad.exe
2008-04-14 00:12 50,688 ------w C:\WINDOWS\twain_32.dll
2008-04-14 00:12 34,816 ------w C:\WINDOWS\Help\sniffpol.dll
2008-04-14 00:12 33,280 ------w C:\WINDOWS\Help\sstub.dll
2008-04-14 00:12 32,866 ------w C:\WINDOWS\slrundll.exe
2008-04-14 00:12 3,901 ------w C:\WINDOWS\system32\drivers\siint5.dll
2008-04-14 00:12 283,648 ------w C:\WINDOWS\winhlp32.exe
2008-04-14 00:12 279,040 ------w C:\WINDOWS\Help\tshoot.dll
2008-04-14 00:12 146,432 ------w C:\WINDOWS\regedit.exe
2008-04-14 00:12 11,325 ------w C:\WINDOWS\system32\drivers\vchnt5.dll
2008-04-14 00:12 10,752 ------w C:\WINDOWS\hh.exe
2008-04-14 00:12 1,033,728 ----a-w C:\WINDOWS\explorer.exe
2008-04-13 19:28 175,744 ------w C:\WINDOWS\system32\drivers\rdbss.sys
2008-04-13 19:21 162,816 ------w C:\WINDOWS\system32\drivers\netbt.sys
2008-04-13 19:20 91,520 ------w C:\WINDOWS\system32\drivers\ndiswan.sys
2008-04-13 19:20 361,344 ----a-w C:\WINDOWS\system32\drivers\tcpip.sys
2008-04-13 19:20 182,656 ------w C:\WINDOWS\system32\drivers\ndis.sys
2008-04-13 19:19 75,264 ------w C:\WINDOWS\system32\drivers\ipsec.sys
2008-04-13 19:19 51,328 ------w C:\WINDOWS\system32\drivers\rasl2tp.sys
2008-04-13 19:19 48,384 ------w C:\WINDOWS\system32\drivers\raspptp.sys
2008-04-13 19:19 146,048 ------w C:\WINDOWS\system32\drivers\portcls.sys
2008-04-13 19:19 138,112 ------w C:\WINDOWS\system32\drivers\afd.sys
2008-04-13 19:18 52,480 ------w C:\WINDOWS\system32\drivers\i8042prt.sys
2008-04-13 19:17 83,072 ------w C:\WINDOWS\system32\drivers\wdmaud.sys
2008-04-13 19:17 456,576 ------w C:\WINDOWS\system32\drivers\mrxsmb.sys
2008-04-13 19:17 105,344 ------w C:\WINDOWS\system32\drivers\mup.sys
2008-04-13 19:16 49,536 ------w C:\WINDOWS\system32\drivers\classpnp.sys
2008-04-13 19:16 141,056 ----a-w C:\WINDOWS\system32\drivers\ks.sys
2008-04-13 19:15 64,512 ------w C:\WINDOWS\system32\drivers\serial.sys
2008-04-13 19:15 60,800 ------w C:\WINDOWS\system32\drivers\sysaudio.sys
2008-04-13 19:15 574,976 ------w C:\WINDOWS\system32\drivers\ntfs.sys
2008-04-13 19:15 334,848 ------w C:\WINDOWS\system32\drivers\srv.sys
2008-04-13 19:14 63,744 ------w C:\WINDOWS\system32\drivers\cdfs.sys
2008-04-13 19:14 143,744 ------w C:\WINDOWS\system32\drivers\fastfat.sys
2008-04-13 19:00 30,080 ------w C:\WINDOWS\system32\drivers\modem.sys
2008-04-13 19:00 225,664 ------w C:\WINDOWS\system32\drivers\tcpip6.sys
2008-04-13 19:00 19,072 ------w C:\WINDOWS\system32\drivers\tdi.sys
2008-04-13 18:57 41,472 ------w C:\WINDOWS\system32\drivers\raspppoe.sys
2008-04-13 18:57 40,576 ------w C:\WINDOWS\system32\drivers\ndproxy.sys
2008-04-13 18:57 34,560 ------w C:\WINDOWS\system32\drivers\wanarp.sys
2008-04-13 18:57 20,864 ------w C:\WINDOWS\system32\drivers\ipinip.sys
2008-04-13 18:57 152,832 ------w C:\WINDOWS\system32\drivers\ipnat.sys
2008-04-13 18:57 14,336 ------w C:\WINDOWS\system32\drivers\asyncmac.sys
2008-04-13 18:57 10,112 ------w C:\WINDOWS\system32\drivers\ndistapi.sys
2008-04-13 18:56 88,320 ------w C:\WINDOWS\system32\drivers\nwlnkipx.sys
2008-04-13 18:56 69,120 ------w C:\WINDOWS\system32\drivers\psched.sys
2008-04-13 18:56 35,072 ------w C:\WINDOWS\system32\drivers\msgpc.sys
2008-04-13 18:56 34,688 ------w C:\WINDOWS\system32\drivers\netbios.sys
2008-04-13 18:56 30,592 ------w C:\WINDOWS\system32\drivers\rndismpx.sys
2008-04-13 18:56 30,592 ------w C:\WINDOWS\system32\drivers\rndismp.sys
2008-04-13 18:56 12,800 ------w C:\WINDOWS\system32\drivers\usb8023x.sys
2008-04-13 18:56 12,800 ------w C:\WINDOWS\system32\drivers\usb8023.sys
2008-04-13 18:56 12,288 ------w C:\WINDOWS\system32\drivers\tunmp.sys
2008-04-13 18:55 202,624 ------w C:\WINDOWS\system32\drivers\rmcast.sys
2008-04-13 18:55 14,592 ------w C:\WINDOWS\system32\drivers\ndisuio.sys
2008-04-13 18:54 11,264 ------w C:\WINDOWS\system32\drivers\irenum.sys
2008-04-13 18:53 71,552 ------w C:\WINDOWS\system32\drivers\bridge.sys
2008-04-13 18:53 40,320 ------w C:\WINDOWS\system32\drivers\nmnt.sys
2008-04-13 18:53 36,608 ------w C:\WINDOWS\system32\drivers\ip6fw.sys
2008-04-13 18:53 264,832 ------w C:\WINDOWS\system32\drivers\http.sys
2008-04-13 18:51 61,824 ------w C:\WINDOWS\system32\drivers\nic1394.sys
2008-04-13 18:51 60,800 ------w C:\WINDOWS\system32\drivers\arp1394.sys
2008-04-13 18:51 59,904 ------w C:\WINDOWS\system32\drivers\atmarpc.sys
2008-04-13 18:51 55,808 ------w C:\WINDOWS\system32\drivers\atmlane.sys
2008-04-13 18:51 101,120 ------w C:\WINDOWS\system32\drivers\bthpan.sys
2008-04-13 18:47 25,856 ------w C:\WINDOWS\system32\drivers\usbprint.sys
2008-04-13 18:45 60,160 ------w C:\WINDOWS\system32\drivers\drmk.sys
2008-04-13 18:44 81,664 ------w C:\WINDOWS\system32\drivers\videoprt.sys
2008-04-13 18:44 799,744 ------w C:\WINDOWS\system32\drivers\dmboot.sys
2008-04-13 18:44 20,992 ------w C:\WINDOWS\system32\drivers\vga.sys
2008-04-13 18:44 153,344 ------w C:\WINDOWS\system32\drivers\dmio.sys
2008-04-13 18:43 14,208 ------w C:\WINDOWS\system32\drivers\wacompen.sys
2008-04-13 18:43 12,672 ------w C:\WINDOWS\system32\drivers\mutohpen.sys
2008-04-13 18:41 8,576 ------w C:\WINDOWS\system32\drivers\i2omgmt.sys
2008-04-13 18:41 52,352 ------w C:\WINDOWS\system32\drivers\volsnap.sys
2008-04-13 18:41 18,560 ------w C:\WINDOWS\system32\drivers\i2omp.sys
2008-04-13 18:39 7,552 ------w C:\WINDOWS\system32\drivers\mskssrv.sys
2008-04-13 18:39 5,504 ------w C:\WINDOWS\system32\drivers\mstee.sys
2008-04-13 18:39 5,376 ------w C:\WINDOWS\system32\drivers\mspclock.sys
2008-04-13 18:39 42,368 ------w C:\WINDOWS\system32\drivers\mountmgr.sys
2008-04-13 18:39 4,992 ------w C:\WINDOWS\system32\drivers\mspqm.sys
2008-01-20 11:27 4,711,200 --sha-w C:\WINDOWS\system32\drivers\fidbox.dat
2008-01-20 11:14 17,184 --sha-w C:\WINDOWS\system32\drivers\fidbox2.dat
.

((((((((((((((((((((((((((((( snapshot@2008-05-23_ 7.01.13.75 )))))))))))))))))))))))))))))))))))))))))
.
- 2008-05-23 05:48:39 2,048 --s-a-w C:\WINDOWS\bootstat.dat
+ 2008-05-26 12:57:25 2,048 --s-a-w C:\WINDOWS\bootstat.dat
- 2000-08-31 08:00:00 163,328 ----a-w C:\WINDOWS\erdnt\subs\ERDNT.EXE
+ 2005-10-20 19:02:28 163,328 ----a-w C:\WINDOWS\erdnt\subs\ERDNT.EXE
- 2008-05-18 04:06:15 5,427 ----a-w C:\WINDOWS\system32\EGATHDRV.SYS
+ 2008-05-25 08:13:12 5,427 ----a-w C:\WINDOWS\system32\EGATHDRV.SYS
+ 2008-05-26 12:57:44 16,384 ----atw C:\WINDOWS\Temp\Perflib_Perfdata_294.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2008-04-14 01:12 15360]
"WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2006-10-18 21:05 204288]
"updateMgr"="C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" [2006-03-30 17:45 313472]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"VTTimer"="VTTimer.exe" [2005-03-08 11:33 53248 C:\WINDOWS\system32\VTTimer.exe]
"VTTrayp"="VTtrayp.exe" [2005-08-03 23:32 163840 C:\WINDOWS\system32\VTTrayp.exe]
"SoundMan"="SOUNDMAN.EXE" [2006-01-11 23:08 577536 C:\WINDOWS\soundman.exe]
"Mouse Suite 98 Daemon"="ICO.EXE" [2005-04-13 22:34 49152 C:\WINDOWS\system32\ico.exe]
"AMSG"="C:\Program Files\ThinkVantage\AMSG\Amsg.exe" [2005-11-23 04:36 507904]
"DiskeeperSystray"="C:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe" [2006-03-01 19:51 196710]
"ISUSPM Startup"="c:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2004-07-28 00:50 221184]
"ISUSScheduler"="c:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" [2004-07-28 00:50 81920]
"LPManager"="C:\PROGRA~1\Lenovo\LENOVO~2\LPMGR.exe" [2005-12-07 09:00 106496]
"cssauthe"="C:\Program Files\IBM ThinkVantage\Client Security Solution\cssauthe.exe" [2006-03-01 00:00 1992240]
"Picasa Media Detector"="C:\Program Files\Picasa2\PicasaMediaDetector.exe" [2005-10-28 19:08 335872]
"Google Desktop Search"="C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" [2006-06-10 04:51 169472]
"atwtusb"="atwtusb.exe" [2002-03-11 19:42 176128 C:\WINDOWS\system32\Atwtusb.exe]
"PCguardadvisor.exe"="C:\Program Files\blueyonder\PCguard advisor\PCguardadvisor.exe" [2006-04-28 23:27 1888256]
"PCguard"="C:\Program Files\blueyonder\PCguard\Rps.exe" [2006-05-01 21:43 274432]
"eBayToolbar"="C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe" [2008-03-24 13:42 652528]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2007-04-19 06:26 7700480]
"nwiz"="nwiz.exe" [2007-04-19 06:26 1626112 C:\WINDOWS\system32\nwiz.exe]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2007-04-19 06:26 86016]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 02:11 132496]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2008-03-28 23:37 413696]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2008-03-30 10:36 267048]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [2008-04-27 07:12 185896]

C:\Documents and Settings\Mark\Start Menu\Programs\Startup\
KybtecWcCaller.exe [12/4/2006 12:59:02 AM 6144]
Quick StartUp.lnk - C:\PENSOFT\fquick32.exe [7/31/2006 8:11:19 PM 185476]
Start.lnk - C:\PENSOFT\Quick95.exe [7/31/2006 8:11:19 PM 60928]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2/13/2001 9:01:04 AM 83360]
WinZip Quick Pick.lnk - I:\Program Files\WinZip\WZQKPICK.EXE [10/25/2005 2:59:23 PM 118784]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Gamma Loader.exe.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Gamma Loader.exe.lnk
backup=C:\WINDOWS\pss\Adobe Gamma Loader.exe.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Gamma Loader.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk
backup=C:\WINDOWS\pss\Adobe Gamma Loader.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk
backup=C:\WINDOWS\pss\Adobe Reader Speed Launch.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
--a------ 2008-03-30 10:36 267048 C:\Program Files\iTunes\iTunesHelper.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PenLock]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RegistryMechanic]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SightSpeed]
--------- 2007-03-01 21:03 3524672 C:\Program Files\SightSpeed\SightSpeed.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"C:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"C:\\Program Files\\iTunes\\iTunes.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=

R2 ibmfilter;ibmfilter;C:\WINDOWS\system32\drivers\ibmfilter.sys [2005-12-22 01:14]
R2 smi2;smi2;C:\Program Files\SMI2\smi2.sys [2005-12-22 00:45]
R3 pelmouse;Mouse Suite Driver;C:\WINDOWS\system32\DRIVERS\pelmouse.sys [2003-01-10 21:55]
R3 pelusblf;USB Mouse Low Filter Driver;C:\WINDOWS\system32\DRIVERS\pelusblf.sys [2003-02-11 21:25]
S3 usb2vcom;USB Data Cable;C:\WINDOWS\system32\DRIVERS\usb2vcom.sys [2005-05-25 04:24]
S3 utblfilt;utblfilt;C:\WINDOWS\system32\drivers\utblfilt.sys [2001-05-23 15:42]

.
Contents of the 'Scheduled Tasks' folder
"2008-04-26 04:17:00 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
"2008-05-23 15:03:00 C:\WINDOWS\Tasks\Check Updates for Windows Live Toolbar.job"
- C:\Program Files\Windows Live Toolbar\MSNTBUP.EXE
"2008-05-17 08:00:00 C:\WINDOWS\Tasks\rpc.job"
- C:\Program Files\Winferno\RegistryPowerCleaner\RegPowerClean.exe
.
**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-05-26 13:58:27
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
------------------------ Other Running Processes ------------------------
.
C:\Program Files\blueyonder\PCguard\fws.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
C:\Program Files\Common Files\Command Software\dvpapi.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\Program Files\IBM ThinkVantage\Rescue and Recovery\rrservice.exe
C:\Program Files\IBM ThinkVantage\Common\Scheduler\tvtsched.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\IBM ThinkVantage\Common\Logger\logmon.exe
C:\WINDOWS\system32\FSRremoS.EXE
C:\WINDOWS\system32\PELMICED.EXE
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\tblmouse.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopDisplay.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\IBM ThinkVantage\Client Security Solution\pwmgre.exe
C:\WINDOWS\system32\verclsid.exe
.
**************************************************************************
.
Completion time: 2008-05-26 14:03:16 - machine was rebooted
ComboFix-quarantined-files.txt 2008-05-26 13:03:04
ComboFix2.txt 2008-05-25 08:23:12
ComboFix3.txt 2008-05-23 06:01:51

Pre-Run: 11,221,610,496 bytes free
Post-Run: 11,234,537,472 bytes free

282 --- E O F --- 2008-05-16 07:23:27

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:05:30, on 26/05/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\blueyonder\PCguard\fws.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
C:\Program Files\Common Files\Command Software\dvpapi.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\IBM ThinkVantage\Rescue and Recovery\rrservice.exe
C:\Program Files\IBM ThinkVantage\Common\Scheduler\tvtsched.exe
C:\Program Files\IBM ThinkVantage\Common\Logger\logmon.exe
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\ICO.EXE
C:\Program Files\ThinkVantage\AMSG\Amsg.exe
C:\WINDOWS\system32\FSRremoS.EXE
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\PROGRA~1\Lenovo\LENOVO~2\LPMGR.exe
C:\Program Files\IBM ThinkVantage\Client Security Solution\cssauthe.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\WINDOWS\system32\atwtusb.exe
C:\Program Files\blueyonder\PCguard advisor\PCguardadvisor.exe
C:\Program Files\blueyonder\PCguard\Rps.exe
C:\WINDOWS\system32\Pelmiced.exe
C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\TBLMOUSE.EXE
C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopDisplay.exe
I:\Program Files\WinZip\WZQKPICK.EXE
C:\PENSOFT\fquick32.exe
C:\PENSOFT\Quick95.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\IBM ThinkVantage\Client Security Solution\pwmgre.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Mark\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60287
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_custo ... TbId=60287
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: eBay Toolbar Helper - {22D8E815-4A5E-4DFB-845E-AAB64207F5BD} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: PopKill Class - {3C060EA2-E6A9-4E49-A530-D4657B8C449A} - C:\Program Files\blueyonder\PCguard\pkR.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: ZKBho Class - {56071E0D-C61B-11D3-B41C-00E02927A304} - C:\Program Files\blueyonder\PCguard\FBHR.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: eBay Toolbar - {92085AD4-F48A-450D-BD93-B28CC7DF67CE} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll
O3 - Toolbar: (no name) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - (no file)
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [Mouse Suite 98 Daemon] ICO.EXE
O4 - HKLM\..\Run: [AMSG] C:\Program Files\ThinkVantage\AMSG\Amsg.exe
O4 - HKLM\..\Run: [DiskeeperSystray] "C:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe"
O4 - HKLM\..\Run: [ISUSPM Startup] c:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "c:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [LPManager] C:\PROGRA~1\Lenovo\LENOVO~2\LPMGR.exe
O4 - HKLM\..\Run: [cssauthe] "C:\Program Files\IBM ThinkVantage\Client Security Solution\cssauthe.exe" silent
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [atwtusb] atwtusb.exe beta
O4 - HKLM\..\Run: [PCguardadvisor.exe] "C:\Program Files\blueyonder\PCguard advisor\PCguardadvisor.exe"
O4 - HKLM\..\Run: [PCguard] "C:\Program Files\blueyonder\PCguard\Rps.exe"
O4 - HKLM\..\Run: [eBayToolbar] C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9
O4 - Startup: KybtecWcCaller.exe
O4 - Startup: Quick StartUp.lnk = C:\PENSOFT\fquick32.exe
O4 - Startup: Start.lnk = C:\PENSOFT\Quick95.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: WinZip Quick Pick.lnk = I:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: eBay Search - res://C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html
O8 - Extra context menu item: Open in new background tab - res://C:\Program Files\Windows Live Toolbar\Components\en-gb\msntabres.dll.mui/229?69cbbc6e23284756bd56247f9cb92666
O8 - Extra context menu item: Open in new foreground tab - res://C:\Program Files\Windows Live Toolbar\Components\en-gb\msntabres.dll.mui/230?69cbbc6e23284756bd56247f9cb92666
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [JAVA_IBM] Java (IBM)
O14 - IERESET.INF: START_PAGE_URL=http://www.broadband.blueyonder.co.uk
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partne ... nicode.cab
O16 - DPF: {1754A1BA-A1DF-4F10-B199-AA55AA1A120F} (InstallerBehaviorFactory Class) - https://signup.msn.com/pages/MsnInstC.cab
O16 - DPF: {2250C29C-C5E9-4F55-BE4E-01E45A40FCF1} (CMediaMix Object) - http://musicmix.messenger.msn.com/Medialogic.CAB
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/EN-US/a-U ... E_UNO1.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me ... b31267.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan ... asinst.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me ... b56907.cab
O16 - DPF: {CE3409C4-9E26-4F8E-83E4-778498F9E7B4} (PB_Uploader Class) - http://static.photobox.co.uk/sg/common/uploader_uni.cab
O16 - DPF: {D821DC4A-0814-435E-9820-661C543A4679} (CRLDownloadWrapper Class) - http://drmlicense.one.microsoft.com/crl ... crlocx.ocx
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} (GpcContainer Class) - https://performancesoft.webex.com/clien ... eatgpc.cab
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
O23 - Service: DvpApi (dvpapi) - Authentium, Inc. - C:\Program Files\Common Files\Command Software\dvpapi.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: IBM PSA Access Driver Control (PsaSrv) - Unknown owner - (no file)
O23 - Service: PCguard Firewall (RP_FWS) - Radialpoint Inc. - C:\Program Files\blueyonder\PCguard\fws.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: TVT Backup Service - Unknown owner - C:\Program Files\IBM ThinkVantage\Rescue and Recovery\rrservice.exe
O23 - Service: TVT Scheduler - Unknown owner - C:\Program Files\IBM ThinkVantage\Common\Scheduler\tvtsched.exe

--
End of file - 13159 bytes
tamskinner
Member+
 
Posts: 83
Joined: December 31st, 2007, 3:21 am

Re: OneStep search - hjt log, please help!!

Unread postby ndmmxiaomayi » May 26th, 2008, 9:26 am

Hi,

Run ATF Cleaner

If you have deleted ATF Cleaner, please it from here again and save it to your desktop.

Double click on ATF-Cleaner.exe to run it.

  • Click on Main at the top.
  • Tick all the boxes except the Prefetch and Cookies box.
  • Click on Empty Selected button.

If you use Firefox

  • Click on Firefox at the top.
  • Tick all the boxes except Firefox Cookies and Firefox Saved Passwords.
  • Click on Empty Selected button.

If you use Opera

  • Click on Opera at the top.
  • Tick all the boxes except Opera Cookies and Opera Saved Passwords.
  • Click on Empty Selected button.

Close ATF Cleaner when you are done.

Run Malwarebytes' Anti-Malware

  1. Open Malwarebytes' Anti-Malware.
  2. Select the Update tab. Under Update Mirror, select one of the websites and click on Check for Updates.
  3. Select the Scanner tab. Click on Perform full scan, then click on Scan.
  4. Leave the default options as it is and click on Start Scan.
  5. When done, you will be prompted. Click OK, then click on Show Results.
  6. Checked (ticked) all items and click on Remove Selected.
  7. After it has removed the items, Notepad will open. Please post this log in your next reply. You can also find the log in the Logs tab. The bottom most log is the latest.

In your next reply, please post:

  1. Malwarebytes' Anti-Malware scan report
  2. A new HijackThis log
ndmmxiaomayi
MRU Emeritus
MRU Emeritus
 
Posts: 9708
Joined: July 17th, 2006, 9:22 am

Re: OneStep search - hjt log, please help!!

Unread postby tamskinner » May 26th, 2008, 12:18 pm

Hi logs below:
Malwarebytes' Anti-Malware 1.12
Database version: 788

Scan type: Full Scan (C:\|I:\|)
Objects scanned: 214334
Time elapsed: 1 hour(s), 33 minute(s), 43 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\services.txt (Heuristics.Reserved.Word.Exploit) -> Quarantined and deleted successfully.


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:18:30, on 26/05/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\blueyonder\PCguard\fws.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
C:\Program Files\Common Files\Command Software\dvpapi.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\IBM ThinkVantage\Rescue and Recovery\rrservice.exe
C:\Program Files\IBM ThinkVantage\Common\Scheduler\tvtsched.exe
C:\Program Files\IBM ThinkVantage\Common\Logger\logmon.exe
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\ICO.EXE
C:\Program Files\ThinkVantage\AMSG\Amsg.exe
C:\WINDOWS\system32\FSRremoS.EXE
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\PROGRA~1\Lenovo\LENOVO~2\LPMGR.exe
C:\Program Files\IBM ThinkVantage\Client Security Solution\cssauthe.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\WINDOWS\system32\atwtusb.exe
C:\Program Files\blueyonder\PCguard advisor\PCguardadvisor.exe
C:\Program Files\blueyonder\PCguard\Rps.exe
C:\WINDOWS\system32\Pelmiced.exe
C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\TBLMOUSE.EXE
C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopDisplay.exe
I:\Program Files\WinZip\WZQKPICK.EXE
C:\PENSOFT\fquick32.exe
C:\PENSOFT\Quick95.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\IBM ThinkVantage\Client Security Solution\pwmgre.exe
C:\WINDOWS\explorer.exe
C:\Program Files\iTunes\iTunes.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceHelper.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\distnoted.exe
C:\PROGRA~1\MICROS~2\Office10\OUTLOOK.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Mark\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60287
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_custo ... TbId=60287
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: eBay Toolbar Helper - {22D8E815-4A5E-4DFB-845E-AAB64207F5BD} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: PopKill Class - {3C060EA2-E6A9-4E49-A530-D4657B8C449A} - C:\Program Files\blueyonder\PCguard\pkR.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: ZKBho Class - {56071E0D-C61B-11D3-B41C-00E02927A304} - C:\Program Files\blueyonder\PCguard\FBHR.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: eBay Toolbar - {92085AD4-F48A-450D-BD93-B28CC7DF67CE} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll
O3 - Toolbar: (no name) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - (no file)
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [Mouse Suite 98 Daemon] ICO.EXE
O4 - HKLM\..\Run: [AMSG] C:\Program Files\ThinkVantage\AMSG\Amsg.exe
O4 - HKLM\..\Run: [DiskeeperSystray] "C:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe"
O4 - HKLM\..\Run: [ISUSPM Startup] c:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "c:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [LPManager] C:\PROGRA~1\Lenovo\LENOVO~2\LPMGR.exe
O4 - HKLM\..\Run: [cssauthe] "C:\Program Files\IBM ThinkVantage\Client Security Solution\cssauthe.exe" silent
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [atwtusb] atwtusb.exe beta
O4 - HKLM\..\Run: [PCguardadvisor.exe] "C:\Program Files\blueyonder\PCguard advisor\PCguardadvisor.exe"
O4 - HKLM\..\Run: [PCguard] "C:\Program Files\blueyonder\PCguard\Rps.exe"
O4 - HKLM\..\Run: [eBayToolbar] C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9
O4 - Startup: KybtecWcCaller.exe
O4 - Startup: Quick StartUp.lnk = C:\PENSOFT\fquick32.exe
O4 - Startup: Start.lnk = C:\PENSOFT\Quick95.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: WinZip Quick Pick.lnk = I:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: eBay Search - res://C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html
O8 - Extra context menu item: Open in new background tab - res://C:\Program Files\Windows Live Toolbar\Components\en-gb\msntabres.dll.mui/229?69cbbc6e23284756bd56247f9cb92666
O8 - Extra context menu item: Open in new foreground tab - res://C:\Program Files\Windows Live Toolbar\Components\en-gb\msntabres.dll.mui/230?69cbbc6e23284756bd56247f9cb92666
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [JAVA_IBM] Java (IBM)
O14 - IERESET.INF: START_PAGE_URL=http://www.broadband.blueyonder.co.uk
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partne ... nicode.cab
O16 - DPF: {1754A1BA-A1DF-4F10-B199-AA55AA1A120F} (InstallerBehaviorFactory Class) - https://signup.msn.com/pages/MsnInstC.cab
O16 - DPF: {2250C29C-C5E9-4F55-BE4E-01E45A40FCF1} (CMediaMix Object) - http://musicmix.messenger.msn.com/Medialogic.CAB
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/EN-US/a-U ... E_UNO1.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me ... b31267.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan ... asinst.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me ... b56907.cab
O16 - DPF: {CE3409C4-9E26-4F8E-83E4-778498F9E7B4} (PB_Uploader Class) - http://static.photobox.co.uk/sg/common/uploader_uni.cab
O16 - DPF: {D821DC4A-0814-435E-9820-661C543A4679} (CRLDownloadWrapper Class) - http://drmlicense.one.microsoft.com/crl ... crlocx.ocx
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} (GpcContainer Class) - https://performancesoft.webex.com/clien ... eatgpc.cab
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
O23 - Service: DvpApi (dvpapi) - Authentium, Inc. - C:\Program Files\Common Files\Command Software\dvpapi.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: IBM PSA Access Driver Control (PsaSrv) - Unknown owner - (no file)
O23 - Service: PCguard Firewall (RP_FWS) - Radialpoint Inc. - C:\Program Files\blueyonder\PCguard\fws.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: TVT Backup Service - Unknown owner - C:\Program Files\IBM ThinkVantage\Rescue and Recovery\rrservice.exe
O23 - Service: TVT Scheduler - Unknown owner - C:\Program Files\IBM ThinkVantage\Common\Scheduler\tvtsched.exe

--
End of file - 13373 bytes
tamskinner
Member+
 
Posts: 83
Joined: December 31st, 2007, 3:21 am

Re: OneStep search - hjt log, please help!!

Unread postby ndmmxiaomayi » May 27th, 2008, 3:44 am

Logs are looking good. :)

Move HijackThis

Let's move HijackThis to another folder rather than put it on the desktop. The backups folder will be created on your desktop when you fix items with HijackThis. To prevent accidental removal of the backups folder, HijackThis needs to be moved.

Here's a tutorial for creating a permanent folder for HijackThis.

Fix items with HijackThis

Open HijackThis and select Do a system scan only.

Put a check (tick) next to these lines:

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60287
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_custo ... TbId=60287
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
    O3 - Toolbar: (no name) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - (no file)

Click Fix checked. Close HijackThis.

Run Kaspersky online scan

Please go to Kaspersky website and perform an online antivirus scan. Please use Internet Explorer as it uses ActiveX.

  1. Read through the requirements and privacy statement and click on Accept button.
  2. It will start downloading and installing the scanner and virus definitions. You will be prompted to install an ActiveX from Kaspersky. Click Yes.
  3. When the downloads have finished, click on Next button.
  4. Click on Scan Settings button.
  5. Select extended under Scan using the following antivirus database:
  6. Check (tick) these boxes under Scan options:
    • Scan Archives
    • Scan Mail Bases
  7. Click OK
  8. Click on My Computer under Please select a target to scan:
  9. Once the scan is complete it will display if your system has been infected. Click on Save as text button and save it to your desktop.
  10. Copy and paste this log in your next reply.

In your next reply, please post:

  1. Kaspersky Antivirus scan report
  2. A new HijackThis log
ndmmxiaomayi
MRU Emeritus
MRU Emeritus
 
Posts: 9708
Joined: July 17th, 2006, 9:22 am

Re: OneStep search - hjt log, please help!!

Unread postby tamskinner » May 27th, 2008, 1:05 pm

ok sounds good many thanks. I am currently away from my pc, and may be till the week end. I will post the logs when I get back to it.
Again thanks for your help on this. As I do quite a bit of roaming with my laptop, may do a scan on that as well just to be sure!
Tam
tamskinner
Member+
 
Posts: 83
Joined: December 31st, 2007, 3:21 am

Re: OneStep search - hjt log, please help!!

Unread postby ndmmxiaomayi » May 28th, 2008, 4:08 am

No worries, I will be around. :)
ndmmxiaomayi
MRU Emeritus
MRU Emeritus
 
Posts: 9708
Joined: July 17th, 2006, 9:22 am

Re: OneStep search - hjt log, please help!!

Unread postby ndmmxiaomayi » June 1st, 2008, 3:01 am

Hi,

How's it going?

Any problems? If there, please let me know.
ndmmxiaomayi
MRU Emeritus
MRU Emeritus
 
Posts: 9708
Joined: July 17th, 2006, 9:22 am

Re: OneStep search - hjt log, please help!!

Unread postby tamskinner » June 1st, 2008, 6:56 am

Hi, tried todo the Kapsersky scan a coulpe of times. Whe it gets tothe end it freezes, and only allows the option of Stop scan - no chance to save the log file. It has found 4 viruses though. There is an "error on page" message in lower left corner of screeen. Below is the HJT log
Tam
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:54:39, on 01/06/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\blueyonder\PCguard\fws.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\IBM ThinkVantage\Rescue and Recovery\rrservice.exe
C:\Program Files\IBM ThinkVantage\Common\Scheduler\tvtsched.exe
C:\Program Files\IBM ThinkVantage\Common\Logger\logmon.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\ICO.EXE
C:\Program Files\ThinkVantage\AMSG\Amsg.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\PROGRA~1\Lenovo\LENOVO~2\LPMGR.exe
C:\WINDOWS\system32\FSRremoS.EXE
C:\Program Files\IBM ThinkVantage\Client Security Solution\cssauthe.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\WINDOWS\system32\atwtusb.exe
C:\Program Files\blueyonder\PCguard advisor\PCguardadvisor.exe
C:\WINDOWS\system32\Pelmiced.exe
C:\Program Files\blueyonder\PCguard\Rps.exe
C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\TBLMOUSE.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
I:\Program Files\WinZip\WZQKPICK.EXE
C:\PENSOFT\Quick95.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopDisplay.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\IBM ThinkVantage\Client Security Solution\pwmgre.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Program Files\Common Files\Command Software\dvpapi.exe
C:\Program Files\Windows Live Toolbar\msn_sl.exe
C:\Documents and Settings\Mark\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: eBay Toolbar Helper - {22D8E815-4A5E-4DFB-845E-AAB64207F5BD} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: PopKill Class - {3C060EA2-E6A9-4E49-A530-D4657B8C449A} - C:\Program Files\blueyonder\PCguard\pkR.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: ZKBho Class - {56071E0D-C61B-11D3-B41C-00E02927A304} - C:\Program Files\blueyonder\PCguard\FBHR.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: eBay Toolbar - {92085AD4-F48A-450D-BD93-B28CC7DF67CE} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [Mouse Suite 98 Daemon] ICO.EXE
O4 - HKLM\..\Run: [AMSG] C:\Program Files\ThinkVantage\AMSG\Amsg.exe
O4 - HKLM\..\Run: [DiskeeperSystray] "C:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe"
O4 - HKLM\..\Run: [ISUSPM Startup] c:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "c:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [LPManager] C:\PROGRA~1\Lenovo\LENOVO~2\LPMGR.exe
O4 - HKLM\..\Run: [cssauthe] "C:\Program Files\IBM ThinkVantage\Client Security Solution\cssauthe.exe" silent
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [atwtusb] atwtusb.exe beta
O4 - HKLM\..\Run: [PCguardadvisor.exe] "C:\Program Files\blueyonder\PCguard advisor\PCguardadvisor.exe"
O4 - HKLM\..\Run: [PCguard] "C:\Program Files\blueyonder\PCguard\Rps.exe"
O4 - HKLM\..\Run: [eBayToolbar] C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9
O4 - Startup: KybtecWcCaller.exe
O4 - Startup: Quick StartUp.lnk = C:\PENSOFT\fquick32.exe
O4 - Startup: Start.lnk = C:\PENSOFT\Quick95.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: WinZip Quick Pick.lnk = I:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: eBay Search - res://C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html
O8 - Extra context menu item: Open in new background tab - res://C:\Program Files\Windows Live Toolbar\Components\en-gb\msntabres.dll.mui/229?69cbbc6e23284756bd56247f9cb92666
O8 - Extra context menu item: Open in new foreground tab - res://C:\Program Files\Windows Live Toolbar\Components\en-gb\msntabres.dll.mui/230?69cbbc6e23284756bd56247f9cb92666
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [JAVA_IBM] Java (IBM)
O14 - IERESET.INF: START_PAGE_URL=http://www.broadband.blueyonder.co.uk
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partne ... nicode.cab
O16 - DPF: {1754A1BA-A1DF-4F10-B199-AA55AA1A120F} (InstallerBehaviorFactory Class) - https://signup.msn.com/pages/MsnInstC.cab
O16 - DPF: {2250C29C-C5E9-4F55-BE4E-01E45A40FCF1} (CMediaMix Object) - http://musicmix.messenger.msn.com/Medialogic.CAB
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/EN-US/a-U ... E_UNO1.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me ... b31267.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan ... asinst.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me ... b56907.cab
O16 - DPF: {CE3409C4-9E26-4F8E-83E4-778498F9E7B4} (PB_Uploader Class) - http://static.photobox.co.uk/sg/common/uploader_uni.cab
O16 - DPF: {D821DC4A-0814-435E-9820-661C543A4679} (CRLDownloadWrapper Class) - http://drmlicense.one.microsoft.com/crl ... crlocx.ocx
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} (GpcContainer Class) - https://performancesoft.webex.com/clien ... eatgpc.cab
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
O23 - Service: DvpApi (dvpapi) - Authentium, Inc. - C:\Program Files\Common Files\Command Software\dvpapi.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: IBM PSA Access Driver Control (PsaSrv) - Unknown owner - (no file)
O23 - Service: PCguard Firewall (RP_FWS) - Radialpoint Inc. - C:\Program Files\blueyonder\PCguard\fws.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: TVT Backup Service - Unknown owner - C:\Program Files\IBM ThinkVantage\Rescue and Recovery\rrservice.exe
O23 - Service: TVT Scheduler - Unknown owner - C:\Program Files\IBM ThinkVantage\Common\Scheduler\tvtsched.exe

--
End of file - 12675 bytes
tamskinner
Member+
 
Posts: 83
Joined: December 31st, 2007, 3:21 am
Advertisement
Register to Remove

PreviousNext

  • Similar Topics
    Replies
    Views
    Last post

Return to Infected? Virus, malware, adware, ransomware, oh my!



Who is online

Users browsing this forum: No registered users and 309 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware