Malware Removal Forums

Symantec PopUps

101 min read

stevepereira

June 4, 2009, 12:17 PM UTC

I think I have been infected with a virus or trojan via Facebook. I keep getting Symantec Email Scanning pop-ups without even trying to email anything. Here is my Hijack Log.
Logfile of HijackThis v1.99.1
Scan saved at 8:14:29 AM, on 6/4/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\WiFi\bin\S24EvMon.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\stsystra.exe
C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\HP\ToolBoxFX\bin\HPTLBXFX.exe
C:\Program Files\HP\HP UT\bin\hppusg.exe
C:\Program Files\Intel\WiFi\bin\ZCfgSvc.exe
C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
C:\Program Files\DNA\btdna.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Intel\WiFi\bin\EvtEng.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
C:\Program Files\Tall Emu\Online Armor\oacat.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
C:\Program Files\Symantec AntiVirus\SavRoam.exe
C:\Program Files\SigmaTel\C-Major Audio\WDM\StacSV.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\Program Files\Intel\WiFi\bin\WLKeeper.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2 .exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier .exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Java\jre6\bin\jucheck.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\HP\HP LaserJet M2727\Fax Driver\hppfaxprintersrv.exe
C:\Program Files\Hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://intranet.aecon.com/en-CA/Pages/default.aspx
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.aecon.com/home.aspx
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\Documents and Settings\A-02843\iarv.exe \s
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset .exe C:\Program Files\Dell\QuickSet\quickset.exe .exe C:\Program Files\Dell\QuickSet\quickset.exe .exe C:\Program Files\Dell\QuickSet\quickset.exe .exe C:\Program Files\Dell\QuickSet\quickset.exe .exe C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [PDVDDXSrv] "C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe"
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [ToolBoxFX] "C:\Program Files\HP\ToolBoxFX\bin\HPTLBXFX.exe" /enum:on /alerts:on /notifications:on /fl:on /fr:on /appData:on /tmcp:on
O4 - HKLM\..\Run: [HPUsageTracking] "C:\Program Files\HP\HP UT\bin\hppusg.exe" "C:\Program Files\HP\HP UT\"
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\WiFi\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" /tf Intel Wireless Tray
O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [BearShare] "C:\Program Files\BearShare\BearShare.exe" /pause
O4 - HKLM\..\Run: [wihr] C:\WINDOWS\system32\wihr.exe \u
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O15 - Trusted Zone: http://citrix.aecon.com
O15 - Trusted Zone: http://helpdesk.aecon.com
O15 - Trusted Zone: http://support.aecon.com
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
O16 - DPF: {3EA4FA88-E0BE-419A-A732-9B79B87A6ED0} (CTVUAxCtrl Object) - http://dl.tvunetworks.com/TVUAx.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1190927746203
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1190928151656
O16 - DPF: {B9F79165-A264-4C4A-A211-133A5E8D647F} (F-Secure Health Check 1.1) - http://support.f-secure.com/enu/home/on ... /fscax.cab
O16 - DPF: {DAF7E6E6-D53A-439A-B28D-12271406B8A9} (RIM AxLoader) - http://mobileapps.blackberry.com/devicesoftware/AxLoader.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WINDOW~4\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WINDOW~4\MESSEN~1\MSGRAP~1.DLL
O20 - Winlogon Notify: dimsntfy - %SystemRoot%\System32\dimsntfy.dll (file missing)
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Unknown owner - C:\Program Files\Java\jre6\bin\jqs.exe" -service -config "C:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf (file missing)
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
O23 - Service: Online Armor Helper Service (OAcat) - Tall Emu - C:\Program Files\Tall Emu\Online Armor\oacat.exe
O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: Roxio UPnP Renderer 9 - Sonic Solutions - C:\Program Files\Roxio\Digital Home 9\RoxioUPnPRenderer9.exe
O23 - Service: Roxio Upnp Server 9 - Sonic Solutions - C:\Program Files\Roxio\Digital Home 9\RoxioUpnpService9.exe
O23 - Service: LiveShare P2P Server 9 (RoxLiveShare9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxLiveShare9.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: Intel® PROSet/Wireless WiFi Service (S24EventMonitor) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\S24EvMon.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: SPBBCSvc - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: SigmaTel Audio Service (STacSV) - SigmaTel, Inc. - C:\Program Files\SigmaTel\C-Major Audio\WDM\StacSV.exe
O23 - Service: Online Armor (SvcOnlineArmor) - Tall Emu - C:\Program Files\Tall Emu\Online Armor\oasrv.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe
O23 - Service: Intel(R) PROSet/Wireless SSO Service (WLANKEEPER) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\WLKeeper.exe

MWR 3 day Mod

June 7, 2009, 12:47 PM UTC

[3days:33jtalwe][/3days:33jtalwe]

Bio-Hazard

June 9, 2009, 9:07 AM UTC

Hello and Welcome to forums!

My name is Bio-Hazard and I will be helping you to remove any infection(s) that you may have.

Please observe these rules while we work:

I will be working on your Malware issues this may or may not solve other issues you have with your machine.
The fixes are specific to your problem and should only be used for this issue on this machine.
I f you don't know or understand something please don't hesitate to ask.
Please DO NOT run any other tools or scans whilst I am helping you.
It is important that you reply to this thread. Do not start a new topic.
Your security programs may give warnings for some of the tools I will ask you to use. Be assured, any links I give are safe.
Absence of symptoms does not mean that everything is clear.

No Reply Within 5 Days Will Result In Your Topic Being Closed!!

Bio-Hazard

June 9, 2009, 9:18 AM UTC

Use of P2P (Person to Person) file sharing programs

I notice there are signs of one or more P2P (Person to Person) File Sharing Programs on your computer.

BitTorrent DNA
BearShare

Please read the Guidelines for P2P Programs where we explain why it's not a good idea to have them. Please remove it before we can continue any further. Post back when you have done it so we can continue the cleaning process.

NOTE: Even if you are using a safe P2P program, it is only the program that is safe. You will be sharing files from uncertified sources, and these are often infected. The bad guys use P2P filesharing as a major conduit to spread their wares.

stevepereira

June 9, 2009, 1:42 PM UTC

I thought I had already removed them prior to posting on this forum. I have tried unsucceessfully to find them under the add/remove programs section on the control panel. Any other suggestions?

Bio-Hazard

June 9, 2009, 2:14 PM UTC

"stevepereira" wrote:I thought I had already removed them prior to posting on this forum. I have tried unsucceessfully to find them under the add/remove programs section on the control panel. Any other suggestions?

OK, they are most likely leftovers. We need to dig little bit deeper into your system.

STEP 1

Download DDS

Please download DDS by sUBs from one of the links below and save it to your desktop:

Download DDS and save it to your desktop from:

Link1
Link2
Link3

Please disable any anti-malware program that will block scripts from running before running DDS.

Double-Click on dds.scr and a command window will appear. This is normal.
Shortly after two logs will appear:
- DDS.txt
- Attach.txt
A window will open instructing you save & post the logs
Save the logs to a convenient place such as your desktop
Copy the contents of both logs & post in your next reply

STEP 2

RootRepeal - Rootkit Detector

Download RootRepeal.zip and unzip it to your Desktop.

Double click RootRepeal.exe to start the program
Click on the Report tab at the bottom of the program window
Clickthe Scan button
In the Select Scan dialog, check:
- Drivers
- Files
- Processes
- SSDT
- Stealth Objects
- Hidden Services
Click the OK button
In the next dialog, select all drives showing
Click OK to start the scan

The scan can take some time. DO NOT run any other programs while the scan is running
When the scan is complete, the Save Report button will become available
Click this and save the report to your Desktop as RootRepeal.txt
Go to File, then Exit to close the program

Next Reply

Please reply with:

DDS.txt
Attach.txt
RootRepeal.txt

stevepereira

June 9, 2009, 2:37 PM UTC

As requested!

DDS Log

DDS (Ver_09-05-14.01) - NTFSx86
Run by [removed] at 10:31:51.90 on Tue 06/09/2009
Internet Explorer: 7.0.5730.13
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2038.1315 [GMT -4:00]

AV: Symantec AntiVirus Corporate Edition *On-access scanning enabled* (Updated) {FB06448E-52B8-493A-90F3-E43226D3305C}
FW: Online Armor Firewall *enabled* {B797DAA0-7E2E-4711-8BB3-D12744F1922A}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\Program Files\Intel\WiFi\bin\S24EvMon.exe
svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Intel\WiFi\bin\EvtEng.exe
C:\WINDOWS\system32\svchost.exe -k hpdevmgmt
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32\svchost.exe -k HPZ12
C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
C:\Program Files\Tall Emu\Online Armor\oacat.exe
C:\WINDOWS\System32\svchost.exe -k HPZ12
C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
C:\Program Files\Symantec AntiVirus\SavRoam.exe
C:\Program Files\SigmaTel\C-Major Audio\WDM\StacSV.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\Program Files\Intel\WiFi\bin\WLKeeper.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\HP\ToolBoxFX\bin\HPTLBXFX.exe
C:\Program Files\HP\HP UT\bin\hppusg.exe
C:\Program Files\Intel\WiFi\bin\ZCfgSvc.exe
C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
C:\Program Files\DNA\btdna.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\WINDOWS\System32\svchost.exe -k HTTPFilter
C:\WINDOWS\system32\igfxpers .exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\system32\hkcmd .exe
C:\WINDOWS\system32\LVCOMSX .exe
C:\Program Files\Apoint\Apoint .exe
C:\Program Files\HP\HP Software Update\HPWuSchd2 .exe
C:\Program Files\Logitech\Video\LogiTray .exe
C:\Program Files\Apoint\HidFind.exe
C:\Program Files\Apoint\Apntex.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier .exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\HP\HP LaserJet M2727\Fax Driver\hppfaxprintersrv.exe
C:\Documents and Settings\A-02843\Desktop\dds.com

============== Pseudo HJT Report ===============

uStart Page = https://intranet.aecon.com/en-CA/Pages/default.aspx
uSearch Page = hxxp://www.google.com
uSearch Bar = hxxp://www.google.com/ie
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
uInternet Connection Wizard,ShellNext = hxxp://www.aecon.com/home.aspx
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
mSearchAssistant = hxxp://www.google.com/ie
mWinlogon: Userinit=c:\windows\system32\userinit.exe,c:\documents and settings\a-02843\iarv.exe \s
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Java(tm) Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre6\bin\ssv.dll
BHO: {7E853D72-626A-48EC-A868-BA8D5E23E045} - No File
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.1.1309.3572\swg.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [LogitechSoftwareUpdate] "c:\program files\logitech\video\ManifestEngine.exe" boot
uRun: [MsnMsgr] "c:\program files\windows live\messenger\MsnMsgr.Exe" /background
uRun: [swg] c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe
uRun: [ISUSPM] "c:\program files\common files\installshield\updateservice\ISUSPM.exe" -scheduler
uRun: [BitTorrent DNA] "c:\program files\dna\btdna.exe"
mRun: [IgfxTray] c:\windows\system32\igfxtray.exe
mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
mRun: [Persistence] c:\windows\system32\igfxpers.exe
mRun: [Dell QuickSet] c:\program files\dell\quickset\quickset .exe c:\program files\dell\quickset\quickset.exe .exe c:\program files\dell\quickset\quickset.exe .exe c:\program files\dell\quickset\quickset.exe .exe c:\program files\dell\quickset\quickset.exe .exe c:\program files\dell\quickset\quickset.exe
mRun: [Apoint] c:\program files\apoint\Apoint.exe
mRun: [SigmatelSysTrayApp] stsystra.exe
mRun: [PDVDDXSrv] "c:\program files\cyberlink\powerdvd dx\PDVDDXSrv.exe"
mRun: [LVCOMSX] c:\windows\system32\LVCOMSX.EXE
mRun: [LogitechVideoRepair] c:\program files\logitech\video\ISStart.exe
mRun: [LogitechVideoTray] c:\program files\logitech\video\LogiTray.exe
mRun: [ccApp] "c:\program files\common files\symantec shared\ccApp.exe"
mRun: [SunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe"
mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe
mRun: [ToolBoxFX] "c:\program files\hp\toolboxfx\bin\HPTLBXFX.exe" /enum:on /alerts:on /notifications:on /fl:on /fr:on /appData:on /tmcp:on
mRun: [<NO NAME>]
mRun: [HPUsageTracking] "c:\program files\hp\hp ut\bin\hppusg.exe" "c:\program files\hp\hp ut\"
mRun: [IntelZeroConfig] "c:\program files\intel\wifi\bin\ZCfgSvc.exe"
mRun: [IntelWireless] "c:\program files\common files\intel\wirelesscommon\iFrmewrk.exe" /tf Intel Wireless Tray
mRun: [RoxWatchTray] "c:\program files\common files\roxio shared\9.0\sharedcom\RoxWatchTray9.exe"
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [BearShare] "c:\program files\bearshare\BearShare.exe" /pause
mRun: [wihr] c:\windows\system32\wihr.exe \u
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL
Trusted Zone: aecon.com\citrix
Trusted Zone: aecon.com\helpdesk
Trusted Zone: aecon.com\support
DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} - hxxp://upload.facebook.com/controls/200 ... oader5.cab
DPF: {31435657-9980-0010-8000-00AA00389B71} - hxxp://download.microsoft.com/download/ ... vc1dmo.cab
DPF: {32505657-9980-0010-8000-00AA00389B71} - hxxp://download.microsoft.com/download/ ... mvadvd.cab
DPF: {3EA4FA88-E0BE-419A-A732-9B79B87A6ED0} - hxxp://dl.tvunetworks.com/TVUAx.cab
DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} - hxxp://gfx1.hotmail.com/mail/w3/pr01/re ... NPUpld.cab
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://www.update.microsoft.com/windows ... 0927746203
DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://www.update.microsoft.com/microso ... 0928151656
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/fl ... rashim.cab
DPF: {B9F79165-A264-4C4A-A211-133A5E8D647F} - hxxp://support.f-secure.com/enu/home/on ... /fscax.cab
DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload.macromedia.com/pub/sh ... wflash.cab
DPF: {DAF7E6E6-D53A-439A-B28D-12271406B8A9} - hxxp://mobileapps.blackberry.com/device ... Loader.cab
Notify: igfxcui - igfxdev.dll
Notify: NavLogon - c:\windows\system32\NavLogon.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll

============= SERVICES / DRIVERS ===============

R1 OADevice;OADriver;c:\windows\system32\drivers\OADriver.sys [2008-10-23 178376]
R1 OAmon;OAmon;c:\windows\system32\drivers\OAmon.sys [2008-10-23 30920]
R1 OAnet;OAnet;c:\windows\system32\drivers\OAnet.sys [2008-10-23 28872]
R1 SAVRT;SAVRT;c:\program files\symantec antivirus\savrt.sys [2006-9-6 337592]
R1 SAVRTPEL;SAVRTPEL;c:\program files\symantec antivirus\Savrtpel.sys [2006-9-6 54968]
R2 aawservice;Lavasoft Ad-Aware Service;c:\program files\lavasoft\ad-aware\aawservice.exe [2008-5-12 611664]
R2 ccEvtMgr;Symantec Event Manager;c:\program files\common files\symantec shared\ccEvtMgr.exe [2006-7-19 192160]
R2 ccSetMgr;Symantec Settings Manager;c:\program files\common files\symantec shared\ccSetMgr.exe [2006-7-19 169632]
R2 OAcat;Online Armor Helper Service;c:\program files\tall emu\online armor\oacat.exe [2008-10-23 1402568]
R2 SavRoam;SAVRoam;c:\program files\symantec antivirus\SavRoam.exe [2006-9-27 116464]
R2 Symantec AntiVirus;Symantec AntiVirus;c:\program files\symantec antivirus\Rtvscan.exe [2006-9-27 1813232]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\common files\symantec shared\eengine\EraserUtilRebootDrv.sys [2009-2-26 101936]
R3 NAVENG;NAVENG;c:\progra~1\common~1\symant~1\virusd~1\20090608.007\naveng.sys [2009-6-8 89104]
R3 NAVEX15;NAVEX15;c:\progra~1\common~1\symant~1\virusd~1\20090608.007\navex15.sys [2009-6-8 876144]
S3 SvcOnlineArmor;Online Armor;c:\program files\tall emu\online armor\oasrv.exe [2008-10-23 3321032]

=============== Created Last 30 ================

2009-05-27 13:09 10 a------- c:\windows\system32\kr_done1
2009-05-27 10:48 <DIR> --d----- c:\program files\DNA
2009-05-27 10:48 <DIR> --d----- c:\docume~1\a-02843\applic~1\DNA
2009-05-27 09:51 <DIR> --d----- c:\program files\Shareaza Applications
2009-05-27 08:41 <DIR> --d----- c:\program files\NCH Software
2009-05-27 07:55 <DIR> --d-h--- c:\windows\PIF
2009-05-26 18:57 483,328 a------- c:\windows\system32\actskn45.ocx
2009-05-24 20:55 <DIR> --d----- c:\program files\BearShare
2009-05-15 10:42 0 a------- C:\LOG26.tmp

==================== Find3M ====================

2009-06-09 06:44 23,052 a------- c:\windows\system32\lvcomsx.exe
2009-06-09 06:44 23,052 a------- c:\windows\system32\igfxpers.exe
2009-06-09 06:44 23,052 a------- c:\windows\system32\hkcmd.exe
2009-06-07 11:32 23,052 a------- c:\windows\system32\igfxtray.exe
2008-12-12 15:48 256 a------- c:\documents and settings\a-02843\pool.bin
2008-12-03 10:46 608 a--sh--- c:\windows\system32\winzvprt5.sys

============= FINISH: 10:31:59.20 ===============

Attach Log

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_09-05-14.01)

Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 9/25/2007 9:06:12 AM
System Uptime: 6/9/2009 6:41:56 AM (4 hours ago)

Motherboard: Dell Inc. | | 0KU184
Processor: Intel(R) Core(TM)2 Duo CPU T7500 @ 2.20GHz | Microprocessor | 2194/200mhz

==== Disk Partitions =========================

C: is FIXED (NTFS) - 112 GiB total, 96.024 GiB free.
D: is CDROM ()

==== Disabled Device Manager Items =============

==== System Restore Points ===================

RP88: 3/2/2009 2:19:21 PM - System Checkpoint
RP89: 3/4/2009 7:08:43 AM - System Checkpoint
RP90: 3/5/2009 7:30:49 AM - System Checkpoint
RP91: 3/12/2009 8:27:34 AM - System Checkpoint
RP92: 3/13/2009 9:47:37 AM - System Checkpoint
RP93: 3/16/2009 11:54:34 AM - System Checkpoint
RP94: 3/17/2009 2:26:52 PM - Software Distribution Service 3.0
RP95: 3/17/2009 2:31:27 PM - Installed Windows NLSDownlevelMapping.
RP96: 3/17/2009 2:31:53 PM - Installed Windows IDNMitigationAPIs.
RP97: 3/17/2009 2:33:13 PM - Installed Windows Internet Explorer 7.
RP98: 3/17/2009 2:33:49 PM - Software Distribution Service 3.0
RP99: 3/19/2009 8:05:25 AM - System Checkpoint
RP100: 3/23/2009 10:35:05 AM - Software Distribution Service 3.0
RP101: 3/24/2009 1:34:10 PM - System Checkpoint
RP102: 3/26/2009 7:10:50 AM - System Checkpoint
RP103: 3/27/2009 9:20:09 AM - System Checkpoint
RP104: 3/28/2009 2:52:47 PM - System Checkpoint
RP105: 3/31/2009 9:20:29 AM - System Checkpoint
RP106: 4/2/2009 9:32:07 AM - System Checkpoint
RP107: 4/3/2009 1:16:26 PM - System Checkpoint
RP108: 4/8/2009 10:37:57 AM - System Checkpoint
RP109: 4/9/2009 11:45:33 AM - System Checkpoint
RP110: 4/15/2009 2:16:27 PM - System Checkpoint
RP111: 4/17/2009 7:09:07 AM - System Checkpoint
RP112: 4/21/2009 8:48:35 AM - System Checkpoint
RP113: 4/23/2009 12:59:33 PM - System Checkpoint
RP114: 4/24/2009 1:19:11 PM - System Checkpoint
RP115: 4/25/2009 7:05:40 PM - System Checkpoint
RP116: 4/27/2009 7:29:19 AM - System Checkpoint
RP117: 4/30/2009 12:37:43 PM - System Checkpoint
RP118: 5/5/2009 1:25:25 PM - System Checkpoint
RP119: 5/8/2009 1:51:32 PM - System Checkpoint
RP120: 5/11/2009 8:44:29 AM - System Checkpoint
RP121: 5/12/2009 12:11:48 PM - System Checkpoint
RP122: 5/14/2009 1:35:04 PM - System Checkpoint
RP123: 5/15/2009 4:12:06 PM - System Checkpoint
RP124: 5/16/2009 9:14:05 PM - System Checkpoint
RP125: 5/18/2009 10:18:56 AM - System Checkpoint
RP126: 5/20/2009 9:36:49 AM - System Checkpoint
RP127: 5/22/2009 10:32:21 PM - System Checkpoint
RP128: 5/24/2009 8:57:07 AM - System Checkpoint
RP129: 5/25/2009 6:41:53 PM - Installed 32 Bit HP CIO Components Installer
RP130: 5/25/2009 6:42:11 PM - Removed 32 Bit HP CIO Components Installer
RP131: 5/29/2009 8:37:25 AM - System Checkpoint

==== Installed Programs ======================

32 Bit HP CIO Components Installer
Acrobat.com
Ad-Aware
Adobe AIR
Adobe Flash Player 10 ActiveX
Adobe Reader 9.1.1
BlackBerry Desktop Software 4.2.2
BlackBerry Device Software Updater
Broadcom Gigabit Integrated Controller
Citrix Presentation Server Client - Web Only
Conexant HDA D330 MDC V.92 Modem
CustomerResearchQFolder
Dell Resource CD
Dell Touchpad
Destination Component
DeviceDiscovery
DeviceManagementQFolder
DNA
FOX News Live
FOX News Live Stream
Google Earth
Google Updater
High Definition Audio Driver Package - KB835221
Hijackthis 1.99.1
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows Media Player 11 (KB939683)
Hotfix for Windows XP (KB952287)
HP Customer Participation Program 9.0
HP LaserJet M2727 MFP Series 5.0
HP Update
hppFaxDrvM2727
hppFaxUtility
hppFonts
hppLJM2727
hppManualsM2727
hppscanM2727
hppScanTo
hppSendFax
hppTLBXFXM2727
hppusgM2727
HPSSupply
hpzTLBXFX
Intel PROSet Wireless
Intel(R) Graphics Media Accelerator Driver
Intel(R) PROSet/Wireless WiFi Software
Java(TM) 6 Update 11
Java(TM) 6 Update 7
LiveUpdate 3.1 (Symantec Corporation)
Logitech QuickCam Software
Logitech® Camera Driver
MarketResearch
Microsoft .NET Framework 2.0
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Office Professional Edition 2003
Microsoft Silverlight
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 (KB954430)
MSXML 6.0 Parser (KB933579)
Octoshape add-in for Adobe Flash Player
Online Armor 3.0
OZ776 SCR Driver V1.1.3.9
PowerDVD
Product_Min_QFolder
QuickSet
Remote Desktop Connection
Roxio Media Manager
Scan
Security Status
Security Update for CAPICOM (KB931906)
Security Update for Windows Internet Explorer 7 (KB956390)
Security Update for Windows Internet Explorer 7 (KB961260)
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player 11 (KB936782)
Security Update for Windows Media Player 11 (KB954154)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows Media Player 9 (KB936782)
Security Update for Windows XP (KB923689)
Security Update for Windows XP (KB923789)
Security Update for Windows XP (KB938464)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB953838)
Security Update for Windows XP (KB953839)
Security Update for Windows XP (KB954211)
Security Update for Windows XP (KB954459)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956390)
Security Update for Windows XP (KB956391)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB957095)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958215)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB960714)
SigmaTel Audio
Symantec AntiVirus
Update for Windows XP (KB951072-v2)
Update for Windows XP (KB951978)
Update for Windows XP (KB955839)
WebFldrs XP
WebReg
Windows Genuine Advantage Notifications (KB905474)
Windows Genuine Advantage Validation Tool (KB892130)
Windows Internet Explorer 7
Windows Live installer
Windows Live Messenger
Windows Live Sign-in Assistant
Windows Live Upload Tool
Windows Media Format 11 runtime
Windows Media Player 11
Windows XP Service Pack 3

==== Event Viewer Messages From Past Week ========

6/4/2009 8:31:42 PM, error: Service Control Manager [7000] - The Parallel port driver service failed to start due to the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.
6/3/2009 6:35:44 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\ctfmon.exe. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
6/3/2009 6:33:39 AM, error: DCOM [10016] - The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID {A4199E55-EBB9-49E5-AF1A-7A5408B2E206} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20). This security permission can be modified using the Component Services administrative tool.

==== End Of File ===========================

Root Log
OOTREPEAL (c) AD, 2007-2009
==================================================
Scan Time: 2009/06/09 10:26
Program Version: Version 1.3.0.0
Windows Version: Windows XP SP3
==================================================

Drivers
-------------------
Name: dump_atapi.sys
Image Path: C:\WINDOWS\System32\Drivers\dump_atapi.sys
Address: 0xA7F1F000 Size: 98304 File Visible: No Signed: -
Status: -

Name: dump_WMILIB.SYS
Image Path: C:\WINDOWS\System32\Drivers\dump_WMILIB.SYS
Address: 0xBA5CA000 Size: 8192 File Visible: No Signed: -
Status: -

Name: rootrepeal.sys
Image Path: C:\WINDOWS\system32\drivers\rootrepeal.sys
Address: 0xA5FA1000 Size: 49152 File Visible: No Signed: -
Status: -

Hidden/Locked Files
-------------------
Path: C:\Documents and Settings\A-02843\Local Settings\Temp\Temporary Internet Files\Content.IE5\49QBWHIB\activity;src=1888070;met=1;v=1;pid=29440998;aid=207174090;ko=0;cid=29327332;rid=29345211;rv=1;×tamp=1228509588750;eid1=2;ecn1=1;etm1=10;eid2=12;ecn2=1;etm2=10;eid3=1[1].gif
Status: Locked to the Windows API!

Path: C:\Documents and Settings\A-02843\Local Settings\Temp\Temporary Internet Files\Content.IE5\49QBWHIB\activity;src=1888070;met=1;v=1;pid=29441003;aid=207174103;ko=0;cid=29327359;rid=29345238;rv=1;×tamp=1228509171125;eid1=2;ecn1=1;etm1=10;eid2=12;ecn2=1;etm2=10;eid3=1[1].gif
Status: Locked to the Windows API!

Path: C:\Documents and Settings\A-02843\Local Settings\Temp\Temporary Internet Files\Content.IE5\49QBWHIB\click,VaUDAN2kBgAOwRYAdh0HAAIAYAAAAP8AAAAGEAIABgLvDQcAwGgKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFuUOUkAAAAA,http%3A%2F%2Fca.ard.yahoo.com%2FSIG%3D14sbe3qld%2FM%3D655378[1].htm
Status: Locked to the Windows API!

Path: C:\Documents and Settings\A-02843\Local Settings\Temp\Temporary Internet Files\Content.IE5\SLMJW5Q7\activity;src=1888070;met=1;v=1;pid=29441003;aid=207174103;ko=0;cid=29327359;rid=29345238;rv=1;×tamp=1228506388265;eid1=2;ecn1=1;etm1=10;eid2=12;ecn2=1;etm2=10;eid3=1[1].gif
Status: Locked to the Windows API!

Path: C:\Documents and Settings\A-02843\Local Settings\Temp\Temporary Internet Files\Content.IE5\W0KAK3KZ\activity;src=1888070;met=1;v=1;pid=29440998;aid=207174090;ko=0;cid=29327332;rid=29345211;rv=1;×tamp=1228509598750;eid1=2;ecn1=0;etm1=10;eid2=12;ecn2=0;etm2=3;eid4=13[1].gif
Status: Locked to the Windows API!

Path: C:\Documents and Settings\A-02843\Local Settings\Temp\Temporary Internet Files\Content.IE5\W0KAK3KZ\activity;src=1888070;met=1;v=1;pid=29441003;aid=207174103;ko=0;cid=29327359;rid=29345238;rv=1;×tamp=1228509181125;eid1=2;ecn1=0;etm1=10;eid2=12;ecn2=0;etm2=4;eid5=13[1].gif
Status: Locked to the Windows API!

Path: C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\Messenger\[removed]\SharingMetadata\[removed]\DFSR\Staging\CS{2D849281-A973-4E3A-F61A-E924612AF473}\01\10-{2D849281-A973-4E3A-F61A-E924612AF473}-v1-{53D26FE6-5778-4F28-ADE6-6C4EB91F1F65}-v10-Downloaded.frx
Status: Locked to the Windows API!

Path: C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\include.classistatic.com\include\c3js\classifieds\rel1\FLASH\getMachId.swf\mach_data.sol:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
Status: Invisible to the Windows API!

SSDT
-------------------
#: 017 Function Name: NtAllocateVirtualMemory
Status: Hooked by "C:\WINDOWS\system32\drivers\OADriver.sys" at address 0xa80610f0

#: 019 Function Name: NtAssignProcessToJobObject
Status: Hooked by "C:\WINDOWS\system32\drivers\OADriver.sys" at address 0xa80616e0

#: 031 Function Name: NtConnectPort
Status: Hooked by "C:\WINDOWS\system32\drivers\OADriver.sys" at address 0xa8060370

#: 037 Function Name: NtCreateFile
Status: Hooked by "C:\WINDOWS\system32\drivers\OADriver.sys" at address 0xa806de80

#: 041 Function Name: NtCreateKey
Status: Hooked by "C:\WINDOWS\system32\drivers\OADriver.sys" at address 0xa806c1b0

#: 046 Function Name: NtCreatePort
Status: Hooked by "C:\WINDOWS\system32\drivers\OADriver.sys" at address 0xa80601d0

#: 047 Function Name: NtCreateProcess
Status: Hooked by "C:\WINDOWS\system32\drivers\OADriver.sys" at address 0xa805da10

#: 048 Function Name: NtCreateProcessEx
Status: Hooked by "C:\WINDOWS\system32\drivers\OADriver.sys" at address 0xa805dde0

#: 050 Function Name: NtCreateSection
Status: Hooked by "C:\WINDOWS\system32\drivers\OADriver.sys" at address 0xa805d520

#: 053 Function Name: NtCreateThread
Status: Hooked by "C:\WINDOWS\system32\drivers\OADriver.sys" at address 0xa805ec80

#: 057 Function Name: NtDebugActiveProcess
Status: Hooked by "C:\WINDOWS\system32\drivers\OADriver.sys" at address 0xa805f7b0

#: 062 Function Name: NtDeleteFile
Status: Hooked by "C:\WINDOWS\system32\drivers\OADriver.sys" at address 0xa806e9c0

#: 063 Function Name: NtDeleteKey
Status: Hooked by "C:\WINDOWS\system32\drivers\OADriver.sys" at address 0xa806c760

#: 065 Function Name: NtDeleteValueKey
Status: Hooked by "C:\Program Files\Symantec\SYMEVENT.SYS" at address 0xa8983350

#: 071 Function Name: NtEnumerateKey
Status: Hooked by "C:\WINDOWS\system32\drivers\OADriver.sys" at address 0xa806de20

#: 073 Function Name: NtEnumerateValueKey
Status: Hooked by "C:\WINDOWS\system32\drivers\OADriver.sys" at address 0xa806de50

#: 097 Function Name: NtLoadDriver
Status: Hooked by "C:\WINDOWS\system32\drivers\OADriver.sys" at address 0xa8060bc0

#: 116 Function Name: NtOpenFile
Status: Hooked by "C:\WINDOWS\system32\drivers\OADriver.sys" at address 0xa806e5d0

#: 119 Function Name: NtOpenKey
Status: Hooked by "C:\WINDOWS\system32\drivers\OADriver.sys" at address 0xa806c9a0

#: 122 Function Name: NtOpenProcess
Status: Hooked by "C:\WINDOWS\system32\drivers\OADriver.sys" at address 0xa805e780

#: 125 Function Name: NtOpenSection
Status: Hooked by "C:\WINDOWS\system32\drivers\OADriver.sys" at address 0xa805d7a0

#: 128 Function Name: NtOpenThread
Status: Hooked by "C:\WINDOWS\system32\drivers\OADriver.sys" at address 0xa805f140

#: 137 Function Name: NtProtectVirtualMemory
Status: Hooked by "C:\WINDOWS\system32\drivers\OADriver.sys" at address 0xa8061390

#: 160 Function Name: NtQueryKey
Status: Hooked by "C:\WINDOWS\system32\drivers\OADriver.sys" at address 0xa806ddc0

#: 177 Function Name: NtQueryValueKey
Status: Hooked by "C:\WINDOWS\system32\drivers\OADriver.sys" at address 0xa806ddf0

#: 193 Function Name: NtReplaceKey
Status: Hooked by "C:\WINDOWS\system32\drivers\OADriver.sys" at address 0xa806d8a0

#: 200 Function Name: NtRequestWaitReplyPort
Status: Hooked by "C:\WINDOWS\system32\drivers\OADriver.sys" at address 0xa8060750

#: 204 Function Name: NtRestoreKey
Status: Hooked by "C:\WINDOWS\system32\drivers\OADriver.sys" at address 0xa806db00

#: 206 Function Name: NtResumeThread
Status: Hooked by "C:\WINDOWS\system32\drivers\OADriver.sys" at address 0xa805fe80

#: 207 Function Name: NtSaveKey
Status: Hooked by "C:\WINDOWS\system32\drivers\OADriver.sys" at address 0xa806dda0

#: 213 Function Name: NtSetContextThread
Status: Hooked by "C:\WINDOWS\system32\drivers\OADriver.sys" at address 0xa805f5d0

#: 240 Function Name: NtSetSystemInformation
Status: Hooked by "C:\WINDOWS\system32\drivers\OADriver.sys" at address 0xa805f930

#: 247 Function Name: NtSetValueKey
Status: Hooked by "C:\Program Files\Symantec\SYMEVENT.SYS" at address 0xa8983580

#: 249 Function Name: NtShutdownSystem
Status: Hooked by "C:\WINDOWS\system32\drivers\OADriver.sys" at address 0xa8060ac0

#: 253 Function Name: NtSuspendProcess
Status: Hooked by "C:\WINDOWS\system32\drivers\OADriver.sys" at address 0xa8060030

#: 254 Function Name: NtSuspendThread
Status: Hooked by "C:\WINDOWS\system32\drivers\OADriver.sys" at address 0xa805fcb0

#: 255 Function Name: NtSystemDebugControl
Status: Hooked by "C:\WINDOWS\system32\drivers\OADriver.sys" at address 0xa805fb10

#: 257 Function Name: NtTerminateProcess
Status: Hooked by "C:\WINDOWS\system32\drivers\OADriver.sys" at address 0xa805eae0

#: 258 Function Name: NtTerminateThread
Status: Hooked by "C:\WINDOWS\system32\drivers\OADriver.sys" at address 0xa805f400

#: 262 Function Name: NtUnloadDriver
Status: Hooked by "C:\WINDOWS\system32\drivers\OADriver.sys" at address 0xa8060de0

#: 277 Function Name: NtWriteVirtualMemory
Status: Hooked by "C:\WINDOWS\system32\drivers\OADriver.sys" at address 0xa8061540

Stealth Objects
-------------------
Object: Hidden Module [Name: System.Runtime.Serialization.Formatters.Soap.dll]
Process: HPTLBXFX.exe (PID: 3196) Address: 0x03590000 Size: 143360

Object: Hidden Module [Name: HPToolkit.dll]
Process: HPTLBXFX.exe (PID: 3196) Address: 0x034c0000 Size: 135168

Object: Hidden Module [Name: HPTools.dll]
Process: HPTLBXFX.exe (PID: 3196) Address: 0x00cd0000 Size: 77824

Object: Hidden Module [Name: AppConstants.dll]
Process: HPTLBXFX.exe (PID: 3196) Address: 0x01200000 Size: 77824

Object: Hidden Module [Name: HPAppTools.dll]
Process: HPTLBXFX.exe (PID: 3196) Address: 0x03330000 Size: 602112

Object: Hidden Module [Name: Enumeration.dll]
Process: HPTLBXFX.exe (PID: 3196) Address: 0x03570000 Size: 53248

Object: Hidden Module [Name: HPFaxUtilities.dll]
Process: HPTLBXFX.exe (PID: 3196) Address: 0x03640000 Size: 110592

Object: Hidden Module [Name: Alerts.dll]
Process: HPTLBXFX.exe (PID: 3196) Address: 0x03a10000 Size: 561152

Object: Hidden Module [Name: System.Management.dll]
Process: HPTLBXFX.exe (PID: 3196) Address: 0x039b0000 Size: 380928

Object: Hidden Module [Name: System.Runtime.Remoting.dll]
Process: HPTLBXFX.exe (PID: 3196) Address: 0x03ea0000 Size: 307200

Object: Hidden Module [Name: HPUsageTracking.dll]
Process: hppusg.exe (PID: 3208) Address: 0x00cc0000 Size: 69632

Object: Hidden Module [Name: HPTools.dll]
Process: hppusg.exe (PID: 3208) Address: 0x011f0000 Size: 77824

Object: Hidden Module [Name: HPToolkit.dll]
Process: hppusg.exe (PID: 3208) Address: 0x01230000 Size: 126976

Object: Hidden Module [Name: interop.hpqusg.dll]
Process: hppusg.exe (PID: 3208) Address: 0x03470000 Size: 36864

Object: Hidden Module [Name: System.Runtime.Serialization.Formatters.Soap.dll]
Process: hppusg.exe (PID: 3208) Address: 0x036e0000 Size: 143360

Object: Hidden Module [Name: Enumeration.dll]
Process: hppusg.exe (PID: 3208) Address: 0x03730000 Size: 45056

Object: Hidden Module [Name: HPStreamsInterface.dll]
Process: hppusg.exe (PID: 3208) Address: 0x03860000 Size: 28672

==EOF==

Bio-Hazard

June 9, 2009, 6:22 PM UTC

I'd like you to check (a file/some files) for Viruses.

Go to VirusTotal or Jotti's

c:\windows\system32\wihr.exe

C:\Documents and Settings\A-02843\iarv.exe

Copy/Paste the first file on the list into the white Upload a file box.
Click Send/Submit, and the file will upload to VirusTotal/Jotti, where it will be scanned by several anti-virus programmes.
After a while, a window will open, with details of what the scans found.
Copy and Paste results in your next reply.
Repeat for all files on the list, and post me the details please

Malwarebytes' Anti-Malware

Please download Malwarebytes Anti-Malware and save it to your desktop.

Alternate download link 1

Alternate download link 2

Make sure you are connected to the Internet.
Double-click on mbam-setup.exe to install the application.
When the installation begins, follow the prompts and do not make any changes to default settings.
When installation has finished, make sure you leave both of these checked:
- Update Malwarebytes' Anti-Malware
- Launch Malwarebytes' Anti-Malware
Then click Finish.
MBAM will automatically start and you will be asked to update the program before performing a scan. If an update is found, the program will automatically update itself. Press the OK button to close that box and continue. If you encounter any problems while downloading the updates, manually download them from here and just double-click on mbam-rules.exe to install.
On the Scanner tab:
- Make sure the Perform Full Scan option is selected.
- Then click on the Scan button.
If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.
The scan will begin and Scan in progress will show at the top. It may take some time to complete so please be patient.
When the scan is finished, a message box will say The scan completed successfully. Click 'Show Results' to display all objects found.
Click OK to close the message box and continue with the removal process.
Back at the main Scanner screen, click on the Show Results button to see a list of any malware that was found.
Make sure that everything is checked, and click Remove Selected.
When removal is completed, a log report will open in Notepad and you may be prompted to restart your computer. (see Note below)
The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.
Copy and paste the contents of that report in your next reply and exit MBAM.

Note: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts. Click OK to either and let MBAM proceed with the disinfection process. If asked to restart the computer, please do so immediately. Failure to reboot will prevent MBAM from removing all the malware.

Logs/Information to Post in Next Reply

Please post the following logs/Information in your reply:

Jotti or Virustotal results
Malwarebytes Antimalware log
A fresh HijackThis Log ( after all the above has been done)
A description of how your computer is behaving

stevepereira

June 10, 2009, 11:28 AM UTC

The results I received from both Jotti and Virustotal were that 0 bytes were received from both files.

Here is the Malware Log

Malwarebytes' Anti-Malware 1.37
Database version: 2255
Windows 5.1.2600 Service Pack 3

6/9/2009 3:53:11 PM
mbam-log-2009-06-09 (15-53-11).txt

Scan type: Full Scan (C:\|D:\|)
Objects scanned: 181121
Time elapsed: 46 minute(s), 23 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 3
Registry Data Items Infected: 1
Folders Infected: 0
Files Infected: 2

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\igfxtray (Trojan.FakeAlert.H) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\persistence (Trojan.FakeAlert.H) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\kr_done1 (Malware.Trace) -> Quarantined and deleted successfully.

Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Hijack.UserInit) -> Bad: (C:\WINDOWS\system32\userinit.exe,C:\Documents and Settings\A-02843\iarv.exe \s) Good: (userinit.exe) -> Quarantined and deleted successfully.

Folders Infected:
(No malicious items detected)

Files Infected:
C:\WINDOWS\system32\igfxtray.exe (Trojan.FakeAlert.H) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\kr_done1 (Malware.Trace) -> Quarantined and deleted successfully.

Hijack Log
Logfile of HijackThis v1.99.1
Scan saved at 7:25:04 AM, on 6/10/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\WiFi\bin\S24EvMon.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\stsystra.exe
C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\HP\ToolBoxFX\bin\HPTLBXFX.exe
C:\Program Files\HP\HP UT\bin\hppusg.exe
C:\Program Files\Intel\WiFi\bin\ZCfgSvc.exe
C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Intel\WiFi\bin\EvtEng.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\DNA\btdna.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
C:\Program Files\Tall Emu\Online Armor\oacat.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
C:\Program Files\Symantec AntiVirus\SavRoam.exe
C:\Program Files\SigmaTel\C-Major Audio\WDM\StacSV.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\Program Files\Intel\WiFi\bin\WLKeeper.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\hkcmd .exe
C:\WINDOWS\system32\LVCOMSX .exe
C:\Program Files\Apoint\Apoint .exe
C:\Program Files\Logitech\Video\LogiTray .exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2 .exe
C:\Program Files\Apoint\HidFind.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier .exe
C:\Program Files\Apoint\Apntex.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://intranet.aecon.com/en-CA/Pages/default.aspx
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.aecon.com/home.aspx
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset .exe C:\Program Files\Dell\QuickSet\quickset.exe .exe C:\Program Files\Dell\QuickSet\quickset.exe .exe C:\Program Files\Dell\QuickSet\quickset.exe .exe C:\Program Files\Dell\QuickSet\quickset.exe .exe C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [PDVDDXSrv] "C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe"
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [ToolBoxFX] "C:\Program Files\HP\ToolBoxFX\bin\HPTLBXFX.exe" /enum:on /alerts:on /notifications:on /fl:on /fr:on /appData:on /tmcp:on
O4 - HKLM\..\Run: [HPUsageTracking] "C:\Program Files\HP\HP UT\bin\hppusg.exe" "C:\Program Files\HP\HP UT\"
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\WiFi\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" /tf Intel Wireless Tray
O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [BearShare] "C:\Program Files\BearShare\BearShare.exe" /pause
O4 - HKLM\..\Run: [wihr] C:\WINDOWS\system32\wihr.exe \u
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O15 - Trusted Zone: http://citrix.aecon.com
O15 - Trusted Zone: http://helpdesk.aecon.com
O15 - Trusted Zone: http://support.aecon.com
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
O16 - DPF: {3EA4FA88-E0BE-419A-A732-9B79B87A6ED0} (CTVUAxCtrl Object) - http://dl.tvunetworks.com/TVUAx.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1190927746203
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1190928151656
O16 - DPF: {B9F79165-A264-4C4A-A211-133A5E8D647F} (F-Secure Health Check 1.1) - http://support.f-secure.com/enu/home/on ... /fscax.cab
O16 - DPF: {DAF7E6E6-D53A-439A-B28D-12271406B8A9} (RIM AxLoader) - http://mobileapps.blackberry.com/devicesoftware/AxLoader.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WINDOW~4\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WINDOW~4\MESSEN~1\MSGRAP~1.DLL
O20 - Winlogon Notify: dimsntfy - %SystemRoot%\System32\dimsntfy.dll (file missing)
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Unknown owner - C:\Program Files\Java\jre6\bin\jqs.exe" -service -config "C:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf (file missing)
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
O23 - Service: Online Armor Helper Service (OAcat) - Tall Emu - C:\Program Files\Tall Emu\Online Armor\oacat.exe
O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: Roxio UPnP Renderer 9 - Sonic Solutions - C:\Program Files\Roxio\Digital Home 9\RoxioUPnPRenderer9.exe
O23 - Service: Roxio Upnp Server 9 - Sonic Solutions - C:\Program Files\Roxio\Digital Home 9\RoxioUpnpService9.exe
O23 - Service: LiveShare P2P Server 9 (RoxLiveShare9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxLiveShare9.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: Intel® PROSet/Wireless WiFi Service (S24EventMonitor) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\S24EvMon.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: SPBBCSvc - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: SigmaTel Audio Service (STacSV) - SigmaTel, Inc. - C:\Program Files\SigmaTel\C-Major Audio\WDM\StacSV.exe
O23 - Service: Online Armor (SvcOnlineArmor) - Tall Emu - C:\Program Files\Tall Emu\Online Armor\oasrv.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe
O23 - Service: Intel(R) PROSet/Wireless SSO Service (WLANKEEPER) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\WLKeeper.exe

The computer is still acting pretty funny with auto protect running but have not had any symantec pop ups for a few days.

Bio-Hazard

June 10, 2009, 12:27 PM UTC

Remove HijackThis entries

Run HijackThis
Click on the Scan button
Put a check beside all of the items listed below (if present):

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [BearShare] "C:\Program Files\BearShare\BearShare.exe" /pause
O4 - HKLM\..\Run: [wihr] C:\WINDOWS\system32\wihr.exe \u
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
Close all open windows and browsers/email etc...
Click on the Fix Checked button
When completed close the application.

Download and run OTM

Download OTM by Old Timer and save it to your Desktop.

Double-click OTM.exe to run it.
Paste the following code under the area. Do not include the word Code.
```
:Processes

explorer.exe



:Files

c:\windows\system32\wihr.exe

C:\Documents and Settings\A-02843

c:\program files\BearShare

C:\Program Files\DNA

c:\program files\Shareaza Applications

c:\docume~1\a-02843\applic~1\DNA

c:\windows\system32\kr_done1

c:\windows\system32\actskn45.ocx

C:\LOG26.tmp



:Commands

[emptytemp]

[start explorer]

[Reboot]
```
- Return to OTM, right click in the Paste List of Files/Folders to Move window (under the yellow bar) and choose Paste.
- Push the large button.
- OTM may ask to reboot the machine. Please do so if asked.
- Copy everything in the Results window (under the green bar), and paste it in your next reply.
NOTE: If you are unable to copy/paste from this window (as will be the case if the machine was rebooted), open Notepad (Start->All Programs->Accessories->Notepad), click File->Open, in the File Name box enter *.log and press the Enter key, navigate to the C:\_OTM\MovedFiles folder, and open the newest .log file present, and copy/paste the contents of that document back here in your next post.

Kaspersky Online Scan

You can use either Internet Explorer or Mozilla FireFox for this scan.

Note: If you are using Windows Vista, open your browser by right-clicking on its icon and select 'Run as administrator' to perform this scan.
- Please go to Kaspersky website and perform an online antivirus scan.
- Read through the requirements and privacy statement and click on Accept button.
- It will start downloading and installing the scanner and virus definitions. You will be prompted to install an application from Kaspersky. Click Run.
- When the downloads have finished, click on Settings.
- Make sure these boxes are checked (ticked). If they are not, please tick them and click on the Save button:
  - Spyware, Adware, Dialers, and other potentially dangerous programs
  - Archives
- Click on My Computer under Scan.
- Once the scan is complete, it will display the results. Click on View Scan Report.
- You will see a list of infected items there. Click on Save Report As....
- Save this report to a convenient place. Change the Files of type to Text file (.txt) before clicking on the Save button.
- Please post this log in your next reply along with a fresh HijackThis log.
Logs/Information to Post in Next Reply

Please post the following logs/Information in your reply:
- OTM log
- Kaspersky Log
- A fresh HijackThis Log ( after all the above has been done)
- A description of how your computer is behaving

stevepereira

June 10, 2009, 7:25 PM UTC

========== PROCESSES ==========
Process explorer.exe killed successfully.
========== FILES ==========
File/Folder c:\windows\system32\wihr.exe not found.
C:\Documents and Settings\A-02843\UserData\SPY3SDMV moved successfully.
C:\Documents and Settings\A-02843\UserData\KPMFW5A7 moved successfully.
C:\Documents and Settings\A-02843\UserData\CDI3WL2F moved successfully.
C:\Documents and Settings\A-02843\UserData\8HYR0LYR moved successfully.
C:\Documents and Settings\A-02843\UserData moved successfully.
C:\Documents and Settings\A-02843\Templates moved successfully.
C:\Documents and Settings\A-02843\Start Menu\Programs\Startup moved successfully.
C:\Documents and Settings\A-02843\Start Menu\Programs\Accessories\System Tools moved successfully.
C:\Documents and Settings\A-02843\Start Menu\Programs\Accessories\Entertainment moved successfully.
C:\Documents and Settings\A-02843\Start Menu\Programs\Accessories\Accessibility moved successfully.
C:\Documents and Settings\A-02843\Start Menu\Programs\Accessories moved successfully.
C:\Documents and Settings\A-02843\Start Menu\Programs moved successfully.
C:\Documents and Settings\A-02843\Start Menu moved successfully.
C:\Documents and Settings\A-02843\SendTo moved successfully.
C:\Documents and Settings\A-02843\Recent moved successfully.
C:\Documents and Settings\A-02843\PrintHood moved successfully.
C:\Documents and Settings\A-02843\NetHood\My Web Sites on MSN moved successfully.
C:\Documents and Settings\A-02843\NetHood moved successfully.
C:\Documents and Settings\A-02843\My Documents\My Videos moved successfully.
C:\Documents and Settings\A-02843\My Documents\My Scans moved successfully.
C:\Documents and Settings\A-02843\My Documents\My Received Files moved successfully.
C:\Documents and Settings\A-02843\My Documents\My Pictures\Picture moved successfully.
C:\Documents and Settings\A-02843\My Documents\My Pictures\My Logitech Pictures\Pictures and Videos moved successfully.
C:\Documents and Settings\A-02843\My Documents\My Pictures\My Logitech Pictures moved successfully.
C:\Documents and Settings\A-02843\My Documents\My Pictures moved successfully.
C:\Documents and Settings\A-02843\My Documents\My Music moved successfully.
C:\Documents and Settings\A-02843\My Documents\My Art moved successfully.
C:\Documents and Settings\A-02843\My Documents moved successfully.
C:\Documents and Settings\A-02843\LocalLow\TVU Networks\TVUPlayer\logo moved successfully.
C:\Documents and Settings\A-02843\LocalLow\TVU Networks\TVUPlayer moved successfully.
C:\Documents and Settings\A-02843\LocalLow\TVU Networks moved successfully.
C:\Documents and Settings\A-02843\LocalLow moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temporary Internet Files\IZF47FJ0\WMTSFNGM\Offline moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temporary Internet Files\IZF47FJ0\WMTSFNGM moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temporary Internet Files\IZF47FJ0 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temporary Internet Files\Content.Word moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temporary Internet Files\Content.MSO moved successfully.
Folder move failed. C:\Documents and Settings\A-02843\Local Settings\Temporary Internet Files\Content.IE5\ZKP8UUP9 scheduled to be moved on reboot.
C:\Documents and Settings\A-02843\Local Settings\Temporary Internet Files\Content.IE5\Z5NXQB5Z moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temporary Internet Files\Content.IE5\X39GM7X4 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temporary Internet Files\Content.IE5\U4SPH3UA moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temporary Internet Files\Content.IE5\T5KVYM8T moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temporary Internet Files\Content.IE5\SUY6KSVU moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temporary Internet Files\Content.IE5\SCF4LO6S moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temporary Internet Files\Content.IE5\QMFYUU73 moved successfully.
Folder move failed. C:\Documents and Settings\A-02843\Local Settings\Temporary Internet Files\Content.IE5\OTINU6O2 scheduled to be moved on reboot.
Folder move failed. C:\Documents and Settings\A-02843\Local Settings\Temporary Internet Files\Content.IE5\MZVY65Q7 scheduled to be moved on reboot.
C:\Documents and Settings\A-02843\Local Settings\Temporary Internet Files\Content.IE5\M9NCEM4W moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temporary Internet Files\Content.IE5\I7G6MDGT moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temporary Internet Files\Content.IE5\GCXSOI7N moved successfully.
Folder move failed. C:\Documents and Settings\A-02843\Local Settings\Temporary Internet Files\Content.IE5\GBVM4EIF scheduled to be moved on reboot.
Folder move failed. C:\Documents and Settings\A-02843\Local Settings\Temporary Internet Files\Content.IE5\FRTOMQID scheduled to be moved on reboot.
Folder move failed. C:\Documents and Settings\A-02843\Local Settings\Temporary Internet Files\Content.IE5\DWCTBPFO scheduled to be moved on reboot.
C:\Documents and Settings\A-02843\Local Settings\Temporary Internet Files\Content.IE5\DT460BGM moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temporary Internet Files\Content.IE5\AQJFB2GM moved successfully.
Folder move failed. C:\Documents and Settings\A-02843\Local Settings\Temporary Internet Files\Content.IE5\AKC4OSNQ scheduled to be moved on reboot.
C:\Documents and Settings\A-02843\Local Settings\Temporary Internet Files\Content.IE5\A005RW88 moved successfully.
Folder move failed. C:\Documents and Settings\A-02843\Local Settings\Temporary Internet Files\Content.IE5\99FSTHHQ scheduled to be moved on reboot.
C:\Documents and Settings\A-02843\Local Settings\Temporary Internet Files\Content.IE5\95ULTUYP moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temporary Internet Files\Content.IE5\90IBR469 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temporary Internet Files\Content.IE5\8YBN2UYI moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temporary Internet Files\Content.IE5\7K5K40Y3 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temporary Internet Files\Content.IE5\5YE53LLM moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temporary Internet Files\Content.IE5\4405GXAI moved successfully.
Folder move failed. C:\Documents and Settings\A-02843\Local Settings\Temporary Internet Files\Content.IE5\25KOH8Y9 scheduled to be moved on reboot.
C:\Documents and Settings\A-02843\Local Settings\Temporary Internet Files\Content.IE5\25K7OYRV moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temporary Internet Files\Content.IE5\01O4HBOQ moved successfully.
Folder move failed. C:\Documents and Settings\A-02843\Local Settings\Temporary Internet Files\Content.IE5 scheduled to be moved on reboot.
Folder move failed. C:\Documents and Settings\A-02843\Local Settings\Temporary Internet Files\AntiPhishing scheduled to be moved on reboot.
Folder move failed. C:\Documents and Settings\A-02843\Local Settings\Temporary Internet Files scheduled to be moved on reboot.
C:\Documents and Settings\A-02843\Local Settings\Temp\{3DFD44B2-2856-49C3-94A8-4743646F141B}\MsiStub moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\{3DFD44B2-2856-49C3-94A8-4743646F141B} moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TSFC.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TSF3.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TSE6.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TSDC.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TSCF.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TSCB.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TSC4.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TSC0.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TSAE.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TSAD.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TSAB.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TSA8.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TSA7.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TSA6.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TSA5.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS98.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS95.tmp\_TS1F.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS95.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS87.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS86.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS82.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS76.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS6D.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS6C.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS6B.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS6A.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS69.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS68.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS67.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS66.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS65.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS64.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS63.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS62.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS61.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS60.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS5F.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS5E.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS5D.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS5C.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS5B.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS5A.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS59.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS58.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS57.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS56.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS55.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS54.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS53.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS52.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS51.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS50.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS4F.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS4E.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS4D.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS4C.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS4B.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS4A.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS49.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS48.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS47.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS46.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS45.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS44.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS43.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS42.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS41.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS40.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS3F.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS3E.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS3D.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS3C.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS3B.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS3A.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS39.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS38.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS37.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS36.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS35.tmp\_TS8.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS35.tmp\_TS7.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS35.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS34.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS33.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS32.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS31.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS30.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS2F.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS2E.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS2D.tmp\_TSD.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS2D.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS2C.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS2B.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS2A.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS29.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS28.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS27.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS26.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS25.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS24.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS21.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS20.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS1E.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS1D.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS1C.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS1B.tmp\_TSC.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS1B.tmp\_TSB.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS1B.tmp\_TSA.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS1B.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS1A.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS19.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS15D.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS113.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\_TS102.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\WPDNSE moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\WLTB Custom Button Feeds moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\WER8b1b.dir00 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\VBE moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\Temporary Internet Files\Content.IE5\W0KAK3KZ moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\Temporary Internet Files\Content.IE5\SLMJW5Q7 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\Temporary Internet Files\Content.IE5\O9QZK16R moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\Temporary Internet Files\Content.IE5\49QBWHIB moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\Temporary Internet Files\Content.IE5 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\Temporary Internet Files moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\Temporary Directory 1 for best50_2008 (ENG).zip moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\TCD39.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\STOPzilla! moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\VCRedist moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\uiNPC\uiNPC\SYMTHM moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\uiNPC\uiNPC\SYMHTML moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\uiNPC\uiNPC\SPManfst moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\uiNPC\uiNPC\NPC\0901 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\uiNPC\uiNPC\NPC moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\uiNPC\uiNPC\Manifest moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\uiNPC\uiNPC\Gadget\frames moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\uiNPC\uiNPC\Gadget\buttons moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\uiNPC\uiNPC\Gadget\0901 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\uiNPC\uiNPC\Gadget moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\uiNPC\uiNPC\APP\SUPPSOFT moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\uiNPC\uiNPC\APP moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\uiNPC\uiNPC moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\uiNPC moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\SymNet\SymNet\Manifest moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\SymNet\SymNet\Drivers moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\SymNet\SymNet moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\SymNet moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\SymMCEAI\SymMCEAI\SYMSHARE\XP moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\SymMCEAI\SymMCEAI\SYMSHARE\Vista moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\SymMCEAI\SymMCEAI\SYMSHARE\0901 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\SymMCEAI\SymMCEAI\SYMSHARE moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\SymMCEAI\SymMCEAI moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\SymMCEAI moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\SymLnch moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\SRTSP\SRTSP\System32\Drivers moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\SRTSP\SRTSP\System32 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\SRTSP\SRTSP\SYMSHARE\SRTSP moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\SRTSP\SRTSP\SYMSHARE\Manifest moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\SRTSP\SRTSP\SYMSHARE moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\SRTSP\SRTSP moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\SRTSP moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\SPBBC\SPBBC32\SYMSHARE\SPBBC moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\SPBBC\SPBBC32\SYMSHARE\MANIFEST moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\SPBBC\SPBBC32\SYMSHARE moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\SPBBC\SPBBC32\LUpdate\LUMfests moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\SPBBC\SPBBC32\LUpdate moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\SPBBC\SPBBC32 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\SPBBC moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\SEVINST moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\Reporter\09\01 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\Reporter\09 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\Reporter moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\Remover moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\PreScan\09\01 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\PreScan\09 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\PreScan moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\NISTools moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\MSI moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\LUpdate\WLUEX\SYSTEM32 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\LUpdate\WLUEX\SPMANI~1 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\LUpdate\WLUEX\0901 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\LUpdate\WLUEX moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\LUpdate moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\HelpMSI\External\0901 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\HelpMSI\External moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\HelpMSI moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\CF\cfCore\MANIFEST moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\CF\cfCore\CFMan moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\CF\cfCore moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\CF moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\ccCommon\ccCommon\0901 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\ccCommon\ccCommon moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\ccCommon moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\AppCore\AppCore moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support\AppCore moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Support moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Suport64\uiNPC\uiNPC64\NPC moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Suport64\uiNPC\uiNPC64\Gadget\frames moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Suport64\uiNPC\uiNPC64\Gadget\buttons moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Suport64\uiNPC\uiNPC64\Gadget\0901 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Suport64\uiNPC\uiNPC64\Gadget moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Suport64\uiNPC\uiNPC64 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Suport64\uiNPC moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Suport64\SymNet\SND_x64\Drivers moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Suport64\SymNet\SND_x64 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Suport64\SymNet moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Suport64\SRTSP\SRTSPx64\System32\Drivers moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Suport64\SRTSP\SRTSPx64\System32 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Suport64\SRTSP\SRTSPx64\SYMSHARE\SRTSP moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Suport64\SRTSP\SRTSPx64\SYMSHARE\Manifest moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Suport64\SRTSP\SRTSPx64\SYMSHARE moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Suport64\SRTSP\SRTSPx64 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Suport64\SRTSP moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Suport64\SPBBC\SPBBC64\SYMSHARE\SPBBC moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Suport64\SPBBC\SPBBC64\SYMSHARE moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Suport64\SPBBC\SPBBC64\LUpdate\LUMfests moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Suport64\SPBBC\SPBBC64\LUpdate moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Suport64\SPBBC\SPBBC64 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Suport64\SPBBC moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Suport64\SEVINST moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Suport64\ccCommon\ccCmn64 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Suport64\ccCommon moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Suport64 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Setup\VAData\Dict moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Setup\VAData moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Setup\Setup\SYMSHARE\VASCAN64 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Setup\Setup\SYMSHARE\VASCAN\0901 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Setup\Setup\SYMSHARE\VASCAN moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Setup\Setup\SYMSHARE\SPBBC moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Setup\Setup\SYMSHARE\SecHist moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Setup\Setup\SYMSHARE\Options moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Setup\Setup\SYMSHARE\OPC moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Setup\Setup\SYMSHARE\ncwHyPEX moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Setup\Setup\SYMSHARE\MANIFEST moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Setup\Setup\SYMSHARE\IDS moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Setup\Setup\SYMSHARE\CF\CFMan moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Setup\Setup\SYMSHARE\CF moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Setup\Setup\SYMSHARE\CCPD-LC moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Setup\Setup\SYMSHARE\0901 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Setup\Setup\SYMSHARE moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Setup\Setup\PIF_96E2\0901 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Setup\Setup\PIF_96E2 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Setup\Setup\OPC\0901 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Setup\Setup\OPC moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Setup\Setup\HTEC moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Setup\Setup\Dist moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Setup\Setup\CF moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Setup\Setup\App\IDSDefs moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Setup\Setup\App moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Setup\Setup\0901 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Setup\Setup moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Setup moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\NAV\External\VirusDef moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\NAV\External\VirusD64 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\NAV\External\System32\COH64 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\NAV\External\System32\COH32 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\NAV\External\System32 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\NAV\External\Symantec\NORTON\Tasks moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\NAV\External\Symantec\NORTON moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\NAV\External\Symantec moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\NAV\External\NORTON\MUI\0901 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\NAV\External\NORTON\MUI moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\NAV\External\NORTON\APP moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\NAV\External\NORTON\0901 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\NAV\External\NORTON moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\NAV\External\CommonFi\SYMSHARE\SPBBC moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\NAV\External\CommonFi\SYMSHARE\MANIFEST moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\NAV\External\CommonFi\SYMSHARE\0901 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\NAV\External\CommonFi\SYMSHARE moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\NAV\External\CommonFi\COH64 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\NAV\External\CommonFi\COH32 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\NAV\External\CommonFi\0901 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\NAV\External\CommonFi moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\NAV\External\COH64 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\NAV\External\COH32 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\NAV\External moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\NAV moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Lang\09\01 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Lang\09 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0\Lang moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\SOSNSO_Y15.0 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\RarSFX0 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\PCHC_1_1\updates\vuln_db moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\PCHC_1_1\updates\pchc_10_bin moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\PCHC_1_1\updates\opswat_bin moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\PCHC_1_1\updates\mlcwin moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\PCHC_1_1\updates\0 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\PCHC_1_1\updates moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\PCHC_1_1\Anti-Virus\Opswat moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\PCHC_1_1\Anti-Virus moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\PCHC_1_1 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\outlook logging moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\OIS\temp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\OIS\cacheFiles moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\OIS moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\OHotfix moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\msohtml1\01 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\msohtml1 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\msohtml moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\MessengerCache moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\Logitech-LSU moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\ImageUploader_Temp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\ImageDebug moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\hsperfdata_A-02843 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\HPSUR9GO.44K moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\HPSUKKN_.KH6 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\HPSU8VVE.N0V moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\HPSU-$S0.V1D moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\HpScan moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\History\History.IE5 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\History moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\Google Toolbar moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\FSICON moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\Excel8.0 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\dpinst_x32 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\Cookies moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\BearShareInstaller moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\7zS983.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\7zS4.tmp\setup\DPInst_x32_Vista moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\7zS4.tmp\setup\DPInst_x32 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\7zS4.tmp\setup moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\7zS4.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\7zS3.tmp\setup\DPInst_x32_Vista moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\7zS3.tmp\setup\DPInst_x32 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\7zS3.tmp\setup moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\7zS3.tmp moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\406Ewrd.~lk\9723wrdata.~lk moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp\406Ewrd.~lk moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Temp moved successfully.
Folder move failed. C:\Documents and Settings\A-02843\Local Settings\History\History.IE5\MSHist012009061020090611 scheduled to be moved on reboot.
C:\Documents and Settings\A-02843\Local Settings\History\History.IE5\MSHist012009060920090610 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\History\History.IE5\MSHist012009060820090609 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\History\History.IE5\MSHist012009060120090608 moved successfully.
Folder move failed. C:\Documents and Settings\A-02843\Local Settings\History\History.IE5 scheduled to be moved on reboot.
Folder move failed. C:\Documents and Settings\A-02843\Local Settings\History scheduled to be moved on reboot.
C:\Documents and Settings\A-02843\Local Settings\Apps\2.0\WCDK48B0.PYC\KPRGEL2G.RKD\manifests moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Apps\2.0\WCDK48B0.PYC\KPRGEL2G.RKD moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Apps\2.0\WCDK48B0.PYC moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Apps\2.0 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Apps moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\WMA-MP3.com\Protected Music Converter moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\WMA-MP3.com moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\TVU Networks\TVUPlayer moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\TVU Networks moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Logs moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Symantec\Symantec AntiVirus Corporate Edition moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Symantec moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\PowerDVD DX\IEPG moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\PowerDVD DX\Extra moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\PowerDVD DX moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\Windows Media\9.0 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\Windows Media\11.0 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\Windows Media moved successfully.
Folder move failed. C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow scheduled to be moved on reboot.
Folder move failed. C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\real scheduled to be moved on reboot.
Folder move failed. C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed] scheduled to be moved on reboot.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\real moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed] moved successfully.
Folder move failed. C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\Windows Live Contacts scheduled to be moved on reboot.
Folder move failed. C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\Windows scheduled to be moved on reboot.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\Terminal Server Client\Cache moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\Terminal Server Client moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\Silverlight moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\Portable Devices moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\Outlook moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\OIS\thumbnails moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\OIS moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\Office\ONetConfig moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\Office moved successfully.
Folder move failed. C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\Messenger\[removed]\SharingMetadata\Working\database_D618_88CB_1888_ABD5 scheduled to be moved on reboot.
Folder move failed. C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\Messenger\[removed]\SharingMetadata\Working scheduled to be moved on reboot.
Folder move failed. C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\Messenger\[removed]\SharingMetadata\Logs scheduled to be moved on reboot.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\Messenger\[removed]\SharingMetadata\[removed]\DFSR\Staging\CS{2D849281-A973-4E3A-F61A-E924612AF473}\01 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\Messenger\[removed]\SharingMetadata\[removed]\DFSR\Staging\CS{2D849281-A973-4E3A-F61A-E924612AF473} moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\Messenger\[removed]\SharingMetadata\[removed]\DFSR\Staging moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\Messenger\[removed]\SharingMetadata\[removed]\DFSR moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\Messenger\[removed]\SharingMetadata\[removed] moved successfully.
Folder move failed. C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\Messenger\[removed]\SharingMetadata scheduled to be moved on reboot.
Folder move failed. C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\Messenger\[removed]\Sharing Folders scheduled to be moved on reboot.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\Messenger\[removed]\ObjectStore\Winks3 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\Messenger\[removed]\ObjectStore\UserTile moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\Messenger\[removed]\ObjectStore\DynamicBackgrounds moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\Messenger\[removed]\ObjectStore\Backgrounds moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\Messenger\[removed]\ObjectStore moved successfully.
Folder move failed. C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\Messenger\[removed] scheduled to be moved on reboot.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\Messenger\Brands\en-CA moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\Messenger\Brands moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\Messenger\[removed]\SharingMetadata\Working\database_D618_88CB_1888_ABD5 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\Messenger\[removed]\SharingMetadata\Working moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\Messenger\[removed]\SharingMetadata\Logs moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\Messenger\[removed]\SharingMetadata moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\Messenger\[removed]\ObjectStore\Winks3 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\Messenger\[removed]\ObjectStore\UserTile moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\Messenger\[removed]\ObjectStore\DynamicBackgrounds moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\Messenger\[removed]\ObjectStore\Backgrounds moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\Messenger\[removed]\ObjectStore moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\Messenger\[removed] moved successfully.
Folder move failed. C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\Messenger scheduled to be moved on reboot.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\Media Player\Art Cache\LocalMLS moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\Media Player\Art Cache moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\Media Player moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\Internet Explorer moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\FORMS moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\Feeds Cache\J64MQVQE moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\Feeds Cache\H8P4Q26S moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\Feeds Cache\H1IX8HXX moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\Feeds Cache\7JM98K14 moved successfully.
Folder move failed. C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\Feeds Cache scheduled to be moved on reboot.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\Feeds\Microsoft Feeds~ moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\Feeds moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\Credentials\S-1-5-21-343818398-884357618-839522115-1005 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\Credentials moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft\CD Burning moved successfully.
Folder move failed. C:\Documents and Settings\A-02843\Local Settings\Application Data\Microsoft scheduled to be moved on reboot.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Logitech-LS moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Identities\{F285ADAA-8DCF-4F49-A2CD-8CEAD334C260}\Microsoft\Outlook Express moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Identities\{F285ADAA-8DCF-4F49-A2CD-8CEAD334C260}\Microsoft moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Identities\{F285ADAA-8DCF-4F49-A2CD-8CEAD334C260} moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Identities moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Help moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Google\GoogleEarth\models moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Google\GoogleEarth\images moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Google\GoogleEarth\icons moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Google\GoogleEarth moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Google\Custom Buttons moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Google moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\DNA\Cache moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\DNA moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Adobe\Updater6\Install\AdobeUpdater moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Adobe\Updater6\Install moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Adobe\Updater6\Data moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Adobe\Updater6 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Adobe\ESD moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Adobe\Color moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Adobe\Acrobat\9.0\Updater moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Adobe\Acrobat\9.0\Cache moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Adobe\Acrobat\9.0 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Adobe\Acrobat\7.0\Cache\Search70 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Adobe\Acrobat\7.0\Cache moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Adobe\Acrobat\7.0 moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Adobe\Acrobat moved successfully.
C:\Documents and Settings\A-02843\Local Settings\Application Data\Adobe moved successfully.
Folder move failed. C:\Documents and Settings\A-02843\Local Settings\Application Data scheduled to be moved on reboot.
Folder move failed. C:\Documents and Settings\A-02843\Local Settings scheduled to be moved on reboot.
C:\Documents and Settings\A-02843\Favorites\Soccer moved successfully.
C:\Documents and Settings\A-02843\Favorites\Personal moved successfully.
C:\Documents and Settings\A-02843\Favorites\Microsoft Websites moved successfully.
C:\Documents and Settings\A-02843\Favorites\Links moved successfully.
C:\Documents and Settings\A-02843\Favorites\Aecon moved successfully.
C:\Documents and Settings\A-02843\Favorites moved successfully.
C:\Documents and Settings\A-02843\Desktop\Equipment Utilization moved successfully.
C:\Documents and Settings\A-02843\Desktop\Correspondence moved successfully.
C:\Documents and Settings\A-02843\Desktop\Adobe Reader 9 Installer\READER9 moved successfully.
C:\Documents and Settings\A-02843\Desktop\Adobe Reader 9 Installer\AIR moved successfully.
C:\Documents and Settings\A-02843\Desktop\Adobe Reader 9 Installer moved successfully.
C:\Documents and Settings\A-02843\Desktop\2081 Heritage Road\Time Sheets moved successfully.
C:\Documents and Settings\A-02843\Desktop\2081 Heritage Road\Templates moved successfully.
C:\Documents and Settings\A-02843\Desktop\2081 Heritage Road\Sub Contracts moved successfully.
C:\Documents and Settings\A-02843\Desktop\2081 Heritage Road\Purchase Orders moved successfully.
C:\Documents and Settings\A-02843\Desktop\2081 Heritage Road\Productions moved successfully.
C:\Documents and Settings\A-02843\Desktop\2081 Heritage Road\Payment Certificates moved successfully.
C:\Documents and Settings\A-02843\Desktop\2081 Heritage Road\Job Catalogue moved successfully.
C:\Documents and Settings\A-02843\Desktop\2081 Heritage Road\Invoices moved successfully.
C:\Documents and Settings\A-02843\Desktop\2081 Heritage Road\Granular moved successfully.
C:\Documents and Settings\A-02843\Desktop\2081 Heritage Road\Grade Sheets moved successfully.
C:\Documents and Settings\A-02843\Desktop\2081 Heritage Road\Cost Control moved successfully.
C:\Documents and Settings\A-02843\Desktop\2081 Heritage Road\Correspondence moved successfully.
C:\Documents and Settings\A-02843\Desktop\2081 Heritage Road moved successfully.
C:\Documents and Settings\A-02843\Desktop\2080 4th Line Recon\Productions moved successfully.
C:\Documents and Settings\A-02843\Desktop\2080 4th Line Recon\Payment Certificates moved successfully.
C:\Documents and Settings\A-02843\Desktop\2080 4th Line Recon\Correspondence moved successfully.
C:\Documents and Settings\A-02843\Desktop\2080 4th Line Recon\Catalogue moved successfully.
C:\Documents and Settings\A-02843\Desktop\2080 4th Line Recon moved successfully.
C:\Documents and Settings\A-02843\Desktop\2078 Ebenezer Road\Time Sheets moved successfully.
C:\Documents and Settings\A-02843\Desktop\2078 Ebenezer Road\Removals moved successfully.
C:\Documents and Settings\A-02843\Desktop\2078 Ebenezer Road\Quantities moved successfully.
C:\Documents and Settings\A-02843\Desktop\2078 Ebenezer Road\Productions moved successfully.
C:\Documents and Settings\A-02843\Desktop\2078 Ebenezer Road\Payment Certificates moved successfully.
C:\Documents and Settings\A-02843\Desktop\2078 Ebenezer Road\Correspondence moved successfully.
C:\Documents and Settings\A-02843\Desktop\2078 Ebenezer Road\Catalogue moved successfully.
C:\Documents and Settings\A-02843\Desktop\2078 Ebenezer Road moved successfully.
Folder move failed. C:\Documents and Settings\A-02843\Desktop scheduled to be moved on reboot.
Folder move failed. C:\Documents and Settings\A-02843\Cookies scheduled to be moved on reboot.
C:\Documents and Settings\A-02843\Contacts\[removed] moved successfully.
C:\Documents and Settings\A-02843\Contacts\[removed] moved successfully.
C:\Documents and Settings\A-02843\Contacts moved successfully.
C:\Documents and Settings\A-02843\Application Data\Yahoo!\YUMs moved successfully.
C:\Documents and Settings\A-02843\Application Data\Yahoo! moved successfully.
C:\Documents and Settings\A-02843\Application Data\WinPatrol\vault moved successfully.
C:\Documents and Settings\A-02843\Application Data\WinPatrol moved successfully.
C:\Documents and Settings\A-02843\Application Data\U3\temp moved successfully.
C:\Documents and Settings\A-02843\Application Data\U3 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\jre1.6.0_12 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\jre1.6.0_11 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\tmp\si moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\tmp moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\security moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\log moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\ext moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\tmp moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\muffin moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\host moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\9 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\8 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\7 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\63 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\62 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\61 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\60 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\6 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\59 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\58 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\57 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\56 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\55 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\54 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\53 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\52 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\51 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\50 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\5 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\49 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\48 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\47 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\46 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\45 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\44 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\43 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\42 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\41 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\40 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\4 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\39 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\38 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\37 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\36 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\35 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\34 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\33 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\32 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\31 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\30 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\3 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\29 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\28 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\27 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\26 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\25 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\24 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\23 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\22 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\21 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\20 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\2 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\19 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\18 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\17 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\16 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\15 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\14 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\13 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\12 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\11 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\10 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\1 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0\0 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache\6.0 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment\cache moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java\Deployment moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun\Java moved successfully.
C:\Documents and Settings\A-02843\Application Data\Sun moved successfully.
C:\Documents and Settings\A-02843\Application Data\Samsung moved successfully.
C:\Documents and Settings\A-02843\Application Data\Roxio\MediaManager9 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Roxio moved successfully.
C:\Documents and Settings\A-02843\Application Data\Research In Motion\BlackBerry\Loader History moved successfully.
C:\Documents and Settings\A-02843\Application Data\Research In Motion\BlackBerry\Loader Cache\bdfe265a5751752d158667ac0feb017f8a27bed9\Java moved successfully.
C:\Documents and Settings\A-02843\Application Data\Research In Motion\BlackBerry\Loader Cache\bdfe265a5751752d158667ac0feb017f8a27bed9\GPRS moved successfully.
C:\Documents and Settings\A-02843\Application Data\Research In Motion\BlackBerry\Loader Cache\bdfe265a5751752d158667ac0feb017f8a27bed9 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Research In Motion\BlackBerry\Loader Cache moved successfully.
C:\Documents and Settings\A-02843\Application Data\Research In Motion\BlackBerry\Intellisync\B401C8D1.CFG\10A31DA68BF947679C2EE4C4F4FF2310 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Research In Motion\BlackBerry\Intellisync\B401C8D1.CFG moved successfully.
C:\Documents and Settings\A-02843\Application Data\Research In Motion\BlackBerry\Intellisync\B401C8D1\10A31DA68BF947679C2EE4C4F4FF2310 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Research In Motion\BlackBerry\Intellisync\B401C8D1 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Research In Motion\BlackBerry\Intellisync\208c8212.CFG\10A31DA68BF947679C2EE4C4F4FF2310 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Research In Motion\BlackBerry\Intellisync\208c8212.CFG moved successfully.
C:\Documents and Settings\A-02843\Application Data\Research In Motion\BlackBerry\Intellisync\208c8212\10A31DA68BF947679C2EE4C4F4FF2310 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Research In Motion\BlackBerry\Intellisync\208c8212 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Research In Motion\BlackBerry\Intellisync moved successfully.
C:\Documents and Settings\A-02843\Application Data\Research In Motion\BlackBerry moved successfully.
C:\Documents and Settings\A-02843\Application Data\Research In Motion moved successfully.
C:\Documents and Settings\A-02843\Application Data\OnlineArmor moved successfully.
C:\Documents and Settings\A-02843\Application Data\NCH Swift Sound\Switch\Logs moved successfully.
C:\Documents and Settings\A-02843\Application Data\NCH Swift Sound\Switch moved successfully.
C:\Documents and Settings\A-02843\Application Data\NCH Swift Sound moved successfully.
C:\Documents and Settings\A-02843\Application Data\Microsoft\Word\STARTUP moved successfully.
C:\Documents and Settings\A-02843\Application Data\Microsoft\Word moved successfully.
C:\Documents and Settings\A-02843\Application Data\Microsoft\WLTB Custom Buttons\microsoft.windowslive.news.btn moved successfully.
C:\Documents and Settings\A-02843\Application Data\Microsoft\WLTB Custom Buttons\microsoft.windowslive.addbtn.btn moved successfully.
C:\Documents and Settings\A-02843\Application Data\Microsoft\WLTB Custom Buttons\microsoft.msn.mymsn.btn moved successfully.
C:\Documents and Settings\A-02843\Application Data\Microsoft\WLTB Custom Buttons moved successfully.
C:\Documents and Settings\A-02843\Application Data\Microsoft\Windows\Themes moved successfully.
C:\Documents and Settings\A-02843\Application Data\Microsoft\Windows moved successfully.
C:\Documents and Settings\A-02843\Application Data\Microsoft\Templates moved successfully.
C:\Documents and Settings\A-02843\Application Data\Microsoft\SystemCertificates\My\CTLs moved successfully.
C:\Documents and Settings\A-02843\Application Data\Microsoft\SystemCertificates\My\CRLs moved successfully.
C:\Documents and Settings\A-02843\Application Data\Microsoft\SystemCertificates\My\Certificates moved successfully.
C:\Documents and Settings\A-02843\Application Data\Microsoft\SystemCertificates\My moved successfully.
C:\Documents and Settings\A-02843\Application Data\Microsoft\SystemCertificates moved successfully.
C:\Documents and Settings\A-02843\Application Data\Microsoft\Publisher moved successfully.
C:\Documents and Settings\A-02843\Application Data\Microsoft\Protect\S-1-5-21-343818398-884357618-839522115-1005 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Microsoft\Protect moved successfully.
C:\Documents and Settings\A-02843\Application Data\Microsoft\Proof moved successfully.
C:\Documents and Settings\A-02843\Application Data\Microsoft\Outlook moved successfully.
C:\Documents and Settings\A-02843\Application Data\Microsoft\OIS moved successfully.
C:\Documents and Settings\A-02843\Application Data\Microsoft\Office\Recent moved successfully.
C:\Documents and Settings\A-02843\Application Data\Microsoft\Office moved successfully.
C:\Documents and Settings\A-02843\Application Data\Microsoft\MSNLiveFav moved successfully.
C:\Documents and Settings\A-02843\Application Data\Microsoft\MSN Messenger\2597824475 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Microsoft\MSN Messenger\2466305555 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Microsoft\MSN Messenger\1607545163 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Microsoft\MSN Messenger moved successfully.
C:\Documents and Settings\A-02843\Application Data\Microsoft\MMC moved successfully.
C:\Documents and Settings\A-02843\Application Data\Microsoft\Media Player moved successfully.
C:\Documents and Settings\A-02843\Application Data\Microsoft\Internet Explorer\Quick Launch moved successfully.
C:\Documents and Settings\A-02843\Application Data\Microsoft\Internet Explorer moved successfully.
C:\Documents and Settings\A-02843\Application Data\Microsoft\Installer\{1A0F7DFF-6F13-458C-8EC3-5386E8C251C6} moved successfully.
C:\Documents and Settings\A-02843\Application Data\Microsoft\Installer moved successfully.
C:\Documents and Settings\A-02843\Application Data\Microsoft\IdentityCRL\Production moved successfully.
C:\Documents and Settings\A-02843\Application Data\Microsoft\IdentityCRL moved successfully.
C:\Documents and Settings\A-02843\Application Data\Microsoft\HTML Help moved successfully.
C:\Documents and Settings\A-02843\Application Data\Microsoft\Forms moved successfully.
C:\Documents and Settings\A-02843\Application Data\Microsoft\Excel\XLSTART moved successfully.
C:\Documents and Settings\A-02843\Application Data\Microsoft\Excel moved successfully.
C:\Documents and Settings\A-02843\Application Data\Microsoft\Crypto\RSA\S-1-5-21-343818398-884357618-839522115-1005 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Microsoft\Crypto\RSA moved successfully.
C:\Documents and Settings\A-02843\Application Data\Microsoft\Crypto moved successfully.
C:\Documents and Settings\A-02843\Application Data\Microsoft\CryptnetUrlCache\MetaData moved successfully.
C:\Documents and Settings\A-02843\Application Data\Microsoft\CryptnetUrlCache\Content moved successfully.
C:\Documents and Settings\A-02843\Application Data\Microsoft\CryptnetUrlCache moved successfully.
C:\Documents and Settings\A-02843\Application Data\Microsoft\Credentials\S-1-5-21-343818398-884357618-839522115-1005 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Microsoft\Credentials moved successfully.
C:\Documents and Settings\A-02843\Application Data\Microsoft\Clip Organizer moved successfully.
C:\Documents and Settings\A-02843\Application Data\Microsoft\Address Book moved successfully.
C:\Documents and Settings\A-02843\Application Data\Microsoft\AddIns moved successfully.
C:\Documents and Settings\A-02843\Application Data\Microsoft moved successfully.
C:\Documents and Settings\A-02843\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine moved successfully.
C:\Documents and Settings\A-02843\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs moved successfully.
C:\Documents and Settings\A-02843\Application Data\Malwarebytes\Malwarebytes' Anti-Malware moved successfully.
C:\Documents and Settings\A-02843\Application Data\Malwarebytes moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\octoshape moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\www.macromedia.com\bin moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\www.macromedia.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#wwwstatic.megavideo.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www1.uefa.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.youtube.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.xatech.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.wwlp.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.wwe.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.weather.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.veoh.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.ustream.tv moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.thenewsroom.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.suncruzcasino.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.people.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.paypal.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.pampers.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.nufc.premiumtv.co.uk moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.myheritage.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.misronet.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.longtailvideo.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.liveleak.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.justin.tv moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.ireport.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.hooters.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.goltv.ca moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.frappr.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.foxnews.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.ford.ca moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.flickr.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.fancast.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.dominos.ca moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.ctv.ca moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.cbs.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.blackberrysolutionscatalog.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www-cdn.justin.tv moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#widgets.clearspring.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#widget-f5.slide.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#widget-cdn.meebo.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#web.mlsnet.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#vortex.accuweather.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#vizu.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#vitamine.networldmedia.net moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#vfmii.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#usllive.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#ui.tudou.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#udn.specificclick.net moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#twitter.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#torontosun.feedroom.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#toronto.fc.mlsnet.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#tmz.vo.llnwd.net moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#swfs.ilike.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#static.youku.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#static.wix.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#static.bstage.ca moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#spe.atdmt.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#slide.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#secureinclude.ebaystatic.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#s7d4.scene7.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#s7d2.scene7.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#s3.amazonaws.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#s.ytimg.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#s.mcstatic.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#resources-p3.imeem.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#resources-p2.imeem.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#resources-p1.imeem.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#redir.adap.tv moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#pub.widgetserver.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#pub.widgetbox.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#privatecamz.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#player.cdn.targetspot.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#piximedia.fr moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#opinionworld.ca moved successfully.

stevepereira

June 10, 2009, 7:26 PM UTC

C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#objects.tremormedia.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#news.bbc.co.uk moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#neulion.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#natalie.feedroom.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#msntest.serving-sys.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#msnpremads.edgesuite.net moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#msn.foxsports.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#mogulus-system.s3.amazonaws.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#mochibot.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#mochiads.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#media1.break.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#media01.kyte.tv moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#media.thewb.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#media.tattomedia.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#media.scanscout.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#media.resulthost.org moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#media.jambocast.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#mail.google.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#login.yahoo.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#local moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#lads.myspace.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#l.yimg.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#js.tudouui.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#interclick.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#interactive.foxnews.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#include.ebaystatic.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#include.classistatic.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#images.video.msn.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#images.soapbox.msn.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#image.com.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#i.cdn.turner.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#i.123g.us moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#guestdesk.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#googleads.g.doubleclick.net moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#gannett.a.mms.mavenapps.net moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#foxnews1.a.mms.mavenapps.net moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#flash.quantserve.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#flash.gydget.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#farm.sproutbuilder.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#edgesuite.net moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#downloads.canoe.com.edgesuite.net moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#d.yimg.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#core.videoegg.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#common.scrippsnetworks.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#cdn1.ustream.tv moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#cdn.widgetserver.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#cdn.taboolasyndication.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#cdn.lookery.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#cbc.a.mms.mavenapps.net moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#canwest.a.mms.mavenapps.net moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#camz.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#cache.dominos.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#ca.mg3.mail.yahoo.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#c.123g.us moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#bmo.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#bin.clearspring.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#assets.espn.go.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#as1.suitesmart.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#ads1.msn.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#admonkey.dapper.net moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#admin.brightcove.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#adimages.scrippsnetworks.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#aac.a.mms.mavenapps.net moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#a.alimama.cn moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#a.abclocal.go.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#a.abc.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#2mdn.net moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com\support moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\macromedia.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\edgesuite.net moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\wwwstatic.megavideo.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www1.uefa.com\imgml\applet\mc\ucl\mc186.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www1.uefa.com\imgml\applet\mc\ucl\mc184.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www1.uefa.com\imgml\applet\mc\ucl\mc183.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www1.uefa.com\imgml\applet\mc\ucl\mc181.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www1.uefa.com\imgml\applet\mc\ucl\mc177.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www1.uefa.com\imgml\applet\mc\ucl\mc170.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www1.uefa.com\imgml\applet\mc\ucl\mc162.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www1.uefa.com\imgml\applet\mc\ucl\mc161.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www1.uefa.com\imgml\applet\mc\ucl\mc160.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www1.uefa.com\imgml\applet\mc\ucl\mc145.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www1.uefa.com\imgml\applet\mc\ucl moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www1.uefa.com\imgml\applet\mc moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www1.uefa.com\imgml\applet moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www1.uefa.com\imgml moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www1.uefa.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.youtube.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.xatech.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.wwlp.com\video\videoplayer.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.wwlp.com\video moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.wwlp.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.wwe.com\swf\pg-main.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.wwe.com\swf\ep\player.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.wwe.com\swf\ep moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.wwe.com\swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.wwe.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.weather.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.veoh.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.ustream.tv moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.thenewsroom.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.suncruzcasino.com\SWFfiles\OceansLogo.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.suncruzcasino.com\SWFfiles moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.suncruzcasino.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.people.com\people\static\i\video\player\people.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.people.com\people\static\i\video\player moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.people.com\people\static\i\video moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.people.com\people\static\i moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.people.com\people\static moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.people.com\people moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.people.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.paypal.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.pampers.com\en_US\ltpt\home\SWF\mainIntro.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.pampers.com\en_US\ltpt\home\SWF moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.pampers.com\en_US\ltpt\home moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.pampers.com\en_US\ltpt moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.pampers.com\en_US moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.pampers.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.nufc.premiumtv.co.uk\ptvFlash\newcastle\player\newcastle_player.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.nufc.premiumtv.co.uk\ptvFlash\newcastle\player moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.nufc.premiumtv.co.uk\ptvFlash\newcastle moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.nufc.premiumtv.co.uk\ptvFlash moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.nufc.premiumtv.co.uk moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.myheritage.com\FP\Flash\lookAlikeMeter\lookAlikeWizard_v_2_39.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.myheritage.com\FP\Flash\lookAlikeMeter moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.myheritage.com\FP\Flash moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.myheritage.com\FP\Company\FaceRecognize\flash\faceRecognition19_38.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.myheritage.com\FP\Company\FaceRecognize\flash moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.myheritage.com\FP\Company\FaceRecognize moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.myheritage.com\FP\Company moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.myheritage.com\FP\Assets\Flash\Shuffler\shuffler2.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.myheritage.com\FP\Assets\Flash\Shuffler moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.myheritage.com\FP\Assets\Flash moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.myheritage.com\FP\Assets moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.myheritage.com\FP moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.myheritage.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.misronet.com\speakeron.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.misronet.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.longtailvideo.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.liveleak.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.justin.tv\widgets\jtv_player.r3e909b04e5ea385fb0f532a9b60e12fd897ce406.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.justin.tv\widgets moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.justin.tv moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.ireport.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.hooters.com\_modules\news.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.hooters.com\_modules\events_calendar.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.hooters.com\_modules\events.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.hooters.com\_modules moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.hooters.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.goltv.ca moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.frappr.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.foxnews.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.ford.ca moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.flickr.com\apps\slideshow\show.swf.v70933 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.flickr.com\apps\slideshow\show.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.flickr.com\apps\slideshow moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.flickr.com\apps moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.flickr.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.fancast.com\swf\playback.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.fancast.com\swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.fancast.com\static-16447\swf\FCVidContainerInit.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.fancast.com\static-16447\swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.fancast.com\static-16447 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.fancast.com\static-16353\swf\FCVidContainerInit.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.fancast.com\static-16353\swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.fancast.com\static-16353 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.fancast.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.dominos.ca\homeca\swf\dominos.ca.home.holidayfeast.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.dominos.ca\homeca\swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.dominos.ca\homeca moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.dominos.ca moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.ctv.ca\mar\images\bbpromo\240_CTVBroadband061123.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.ctv.ca\mar\images\bbpromo moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.ctv.ca\mar\images moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.ctv.ca\mar moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.ctv.ca moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.cbs.com\thunder\swf30can10\playback.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.cbs.com\thunder\swf30can10 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.cbs.com\thunder\swf\playback.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.cbs.com\thunder\swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.cbs.com\thunder moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.cbs.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www.blackberrysolutionscatalog.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\www-cdn.justin.tv moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\widgets.clearspring.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\widget-f5.slide.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\widget-cdn.meebo.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\web.mlsnet.com\flash\mediawall\y2007\mediawall_panel.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\web.mlsnet.com\flash\mediawall\y2007 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\web.mlsnet.com\flash\mediawall moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\web.mlsnet.com\flash moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\web.mlsnet.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\vortex.accuweather.com\includes\flash\favoritelocations\fav.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\vortex.accuweather.com\includes\flash\favoritelocations moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\vortex.accuweather.com\includes\flash moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\vortex.accuweather.com\includes moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\vortex.accuweather.com\adc2004\pub\flash\brightcoveAdTranslator-RightRail.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\vortex.accuweather.com\adc2004\pub\flash moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\vortex.accuweather.com\adc2004\pub moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\vortex.accuweather.com\adc2004 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\vortex.accuweather.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\vizu.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\vitamine.networldmedia.net moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\vfmii.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\usllive.com\usl\console.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\usllive.com\usl moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\usllive.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\ui.tudou.com\bin\player_online\TudouVideoPlayer_Homer_22.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\ui.tudou.com\bin\player_online moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\ui.tudou.com\bin moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\ui.tudou.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\udn.specificclick.net moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\twitter.com\flash\twitter_badge.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\twitter.com\flash moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\twitter.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\torontosun.feedroom.com\lso.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\torontosun.feedroom.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\toronto.fc.mlsnet.com\flash\mediaplayer\y2006\media_player.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\toronto.fc.mlsnet.com\flash\mediaplayer\y2006 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\toronto.fc.mlsnet.com\flash\mediaplayer moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\toronto.fc.mlsnet.com\flash moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\toronto.fc.mlsnet.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\tmz.vo.llnwd.net\o28\player\rightrail\rightrail.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\tmz.vo.llnwd.net\o28\player\rightrail\playlist.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\tmz.vo.llnwd.net\o28\player\rightrail moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\tmz.vo.llnwd.net\o28\player moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\tmz.vo.llnwd.net\o28 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\tmz.vo.llnwd.net moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\swfs.ilike.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\static.youku.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\static.wix.com\client\app.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\static.wix.com\client moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\static.wix.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\static.bstage.ca\mindgames\flash\Sudoku_RC9.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\static.bstage.ca\mindgames\flash\Sudoku_RC8.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\static.bstage.ca\mindgames\flash\Sudoku_RC7.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\static.bstage.ca\mindgames\flash\Sudoku_RC6.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\static.bstage.ca\mindgames\flash\Sudoku_RC5.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\static.bstage.ca\mindgames\flash\Sudoku_RC20.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\static.bstage.ca\mindgames\flash\Sudoku_RC19.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\static.bstage.ca\mindgames\flash\Sudoku_RC18.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\static.bstage.ca\mindgames\flash\Sudoku_RC16.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\static.bstage.ca\mindgames\flash\Sudoku_RC15.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\static.bstage.ca\mindgames\flash\Sudoku_RC13.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\static.bstage.ca\mindgames\flash\Sudoku_RC12.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\static.bstage.ca\mindgames\flash\Sudoku_RC11.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\static.bstage.ca\mindgames\flash\Sudoku_RC10.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\static.bstage.ca\mindgames\flash\SudokuPreloader_RC20.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\static.bstage.ca\mindgames\flash\SudokuPreloader_RC19.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\static.bstage.ca\mindgames\flash\Mastermind_RC7.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\static.bstage.ca\mindgames\flash\Concentration_RC9.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\static.bstage.ca\mindgames\flash\Concentration_RC8.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\static.bstage.ca\mindgames\flash\Concentration_RC7.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\static.bstage.ca\mindgames\flash\Concentration_RC6.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\static.bstage.ca\mindgames\flash\Concentration_RC5.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\static.bstage.ca\mindgames\flash\Concentration_RC21.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\static.bstage.ca\mindgames\flash\Concentration_RC20.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\static.bstage.ca\mindgames\flash\Concentration_RC18.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\static.bstage.ca\mindgames\flash\Concentration_RC17.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\static.bstage.ca\mindgames\flash\Concentration_RC16.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\static.bstage.ca\mindgames\flash\Concentration_RC15.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\static.bstage.ca\mindgames\flash\Concentration_RC13.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\static.bstage.ca\mindgames\flash\Concentration_RC12.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\static.bstage.ca\mindgames\flash\Concentration_RC11.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\static.bstage.ca\mindgames\flash\Concentration_RC10.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\static.bstage.ca\mindgames\flash\ConcentrationPreloader_RC21.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\static.bstage.ca\mindgames\flash\Betokened_RC9.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\static.bstage.ca\mindgames\flash\Betokened_RC8.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\static.bstage.ca\mindgames\flash\Betokened_RC7.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\static.bstage.ca\mindgames\flash\Betokened_RC6.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\static.bstage.ca\mindgames\flash\Betokened_RC5.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\static.bstage.ca\mindgames\flash\Betokened_RC20.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\static.bstage.ca\mindgames\flash\Betokened_RC19.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\static.bstage.ca\mindgames\flash\Betokened_RC18.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\static.bstage.ca\mindgames\flash\Betokened_RC16.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\static.bstage.ca\mindgames\flash\Betokened_RC15.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\static.bstage.ca\mindgames\flash\Betokened_RC14.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\static.bstage.ca\mindgames\flash\Betokened_RC12.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\static.bstage.ca\mindgames\flash\Betokened_RC10.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\static.bstage.ca\mindgames\flash\BetokenedPreloader_RC20.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\static.bstage.ca\mindgames\flash\BetokenedPreloader_RC19.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\static.bstage.ca\mindgames\flash moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\static.bstage.ca\mindgames moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\static.bstage.ca moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\spe.atdmt.com\ds\VOVONVNGEVOS\adroit_geo_v3\JAN_Adroit_Geo__15s_v3_160x600_.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\spe.atdmt.com\ds\VOVONVNGEVOS\adroit_geo_v3 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\spe.atdmt.com\ds\VOVONVNGEVOS\adroit_content3\JAN_Vonage_Adroit_Current_News_300x250_ID_583.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\spe.atdmt.com\ds\VOVONVNGEVOS\adroit_content3\JAN_Vonage_Adroit_Content_300x250_ID_572.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\spe.atdmt.com\ds\VOVONVNGEVOS\adroit_content3 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\spe.atdmt.com\ds\VOVONVNGEVOS moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\spe.atdmt.com\ds moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\spe.atdmt.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\slide.com\widgets\packages\com.slide.prod.ratings.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\slide.com\widgets\packages moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\slide.com\widgets moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\slide.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\secureinclude.ebaystatic.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\s7d4.scene7.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\s7d2.scene7.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\s3.amazonaws.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\s.ytimg.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\s.mcstatic.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\resources-p3.imeem.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\resources-p2.imeem.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\resources-p1.imeem.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\redir.adap.tv\redir\client\AdPlayer8-19.3_011739.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\redir.adap.tv\redir\client\AdPlayer8\AdPlayer8-24.5_015606.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\redir.adap.tv\redir\client\AdPlayer8\AdPlayer8-24.4_015462.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\redir.adap.tv\redir\client\AdPlayer8\AdPlayer8-24.3_015421.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\redir.adap.tv\redir\client\AdPlayer8\AdPlayer8-22.5_013713.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\redir.adap.tv\redir\client\AdPlayer8\AdPlayer8-22.3_013572.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\redir.adap.tv\redir\client\AdPlayer8\AdPlayer8-21.10_013237.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\redir.adap.tv\redir\client\AdPlayer8 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\redir.adap.tv\redir\client moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\redir.adap.tv\redir moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\redir.adap.tv moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\pub.widgetserver.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\pub.widgetbox.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\privatecamz.com\tools\group\GroupAppPlugin.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\privatecamz.com\tools\group moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\privatecamz.com\tools moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\privatecamz.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\player.cdn.targetspot.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\piximedia.fr moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\opinionworld.ca\ow\Sites\b2c_en_uk\counter.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\opinionworld.ca\ow\Sites\b2c_en_uk moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\opinionworld.ca\ow\Sites moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\opinionworld.ca\ow moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\opinionworld.ca moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\objects.tremormedia.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\news.bbc.co.uk\player\emp\2_6_5222\player.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\news.bbc.co.uk\player\emp\2_6_5222 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\news.bbc.co.uk\player\emp moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\news.bbc.co.uk\player moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\news.bbc.co.uk moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\neulion.com\team\console.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\neulion.com\team moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\neulion.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\natalie.feedroom.com\cineplex\natoneclip\Player.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\natalie.feedroom.com\cineplex\natoneclip moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\natalie.feedroom.com\cineplex moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\natalie.feedroom.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\msntest.serving-sys.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\msnpremads.edgesuite.net moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\msn.foxsports.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\mogulus-system.s3.amazonaws.com\web\grid\PlayerV2.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\mogulus-system.s3.amazonaws.com\web\grid moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\mogulus-system.s3.amazonaws.com\web moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\mogulus-system.s3.amazonaws.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\mochibot.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\mochiads.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\media1.break.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\media01.kyte.tv\flash\MarbachLoader.swf\#KytePersist moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\media01.kyte.tv\flash\MarbachLoader.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\media01.kyte.tv\flash moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\media01.kyte.tv moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\media.thewb.com\thewb\swf\tmz-adblock\adBlock.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\media.thewb.com\thewb\swf\tmz-adblock moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\media.thewb.com\thewb\swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\media.thewb.com\thewb moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\media.thewb.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\media.tattomedia.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\media.scanscout.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\media.resulthost.org moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\media.jambocast.com\jcp\JamboPlayer.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\media.jambocast.com\jcp moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\media.jambocast.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\mail.google.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\login.yahoo.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\localhost moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\lads.myspace.com\videos\vplayer.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\lads.myspace.com\videos\Main.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\lads.myspace.com\videos moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\lads.myspace.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\l.yimg.com\cosmos.bcst.yahoo.com\ver\268.0\embed-2008-08-14-1438\swf\yup_embed_module.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\l.yimg.com\cosmos.bcst.yahoo.com\ver\268.0\embed-2008-08-14-1438\swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\l.yimg.com\cosmos.bcst.yahoo.com\ver\268.0\embed-2008-08-14-1438 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\l.yimg.com\cosmos.bcst.yahoo.com\ver\268.0 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\l.yimg.com\cosmos.bcst.yahoo.com\ver moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\l.yimg.com\cosmos.bcst.yahoo.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\l.yimg.com\a\a\1-\flash\promotions\us\general_motors\081113\container.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\l.yimg.com\a\a\1-\flash\promotions\us\general_motors\081113 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\l.yimg.com\a\a\1-\flash\promotions\us\general_motors moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\l.yimg.com\a\a\1-\flash\promotions\us moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\l.yimg.com\a\a\1-\flash\promotions moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\l.yimg.com\a\a\1-\flash moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\l.yimg.com\a\a\1- moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\l.yimg.com\a\a moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\l.yimg.com\a moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\l.yimg.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\js.tudouui.com\bin\player_online\TudouVideoPlayer_Homer_23.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\js.tudouui.com\bin\player_online moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\js.tudouui.com\bin moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\js.tudouui.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\interclick.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\interactive.foxnews.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\include.ebaystatic.com\aw\pics\c3js\classifieds\rel1\FLASH\getMachId.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\include.ebaystatic.com\aw\pics\c3js\classifieds\rel1\FLASH moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\include.ebaystatic.com\aw\pics\c3js\classifieds\rel1 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\include.ebaystatic.com\aw\pics\c3js\classifieds moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\include.ebaystatic.com\aw\pics\c3js moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\include.ebaystatic.com\aw\pics moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\include.ebaystatic.com\aw moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\include.ebaystatic.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\include.classistatic.com\include\c3js\classifieds\rel1\FLASH\getMachId.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\include.classistatic.com\include\c3js\classifieds\rel1\FLASH moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\include.classistatic.com\include\c3js\classifieds\rel1 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\include.classistatic.com\include\c3js\classifieds moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\include.classistatic.com\include\c3js moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\include.classistatic.com\include moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\include.classistatic.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\images.video.msn.com\flash\soapbox1_1.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\images.video.msn.com\flash moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\images.video.msn.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\images.soapbox.msn.com\flash\soapbox1_1.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\images.soapbox.msn.com\flash moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\images.soapbox.msn.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\image.com.com\gamespot\images\cne_flash\production\media_player\proteus\one\proteus2.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\image.com.com\gamespot\images\cne_flash\production\media_player\proteus\one moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\image.com.com\gamespot\images\cne_flash\production\media_player\proteus moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\image.com.com\gamespot\images\cne_flash\production\media_player moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\image.com.com\gamespot\images\cne_flash\production moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\image.com.com\gamespot\images\cne_flash moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\image.com.com\gamespot\images moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\image.com.com\gamespot moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\image.com.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\i.cdn.turner.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\i.123g.us\c\birth_happybirthday\card\102876.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\i.123g.us\c\birth_happybirthday\card moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\i.123g.us\c\birth_happybirthday moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\i.123g.us\c\birth_bronsis\card\110153.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\i.123g.us\c\birth_bronsis\card moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\i.123g.us\c\birth_bronsis moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\i.123g.us\c moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\i.123g.us moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\guestdesk.com\FlashMovies\reservations\reservationsV2.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\guestdesk.com\FlashMovies\reservations moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\guestdesk.com\FlashMovies moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\guestdesk.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\googleads.g.doubleclick.net\pagead\googleadplayer.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\googleads.g.doubleclick.net\pagead moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\googleads.g.doubleclick.net moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\gannett.a.mms.mavenapps.net moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\foxnews1.a.mms.mavenapps.net moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\flash.quantserve.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\flash.gydget.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\farm.sproutbuilder.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\earth.google.com\datastore.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\earth.google.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\downloads.canoe.com.edgesuite.net\feedroom\canoe\teaser\Player.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\downloads.canoe.com.edgesuite.net\feedroom\canoe\teaser moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\downloads.canoe.com.edgesuite.net\feedroom\canoe\canoe.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\downloads.canoe.com.edgesuite.net\feedroom\canoe moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\downloads.canoe.com.edgesuite.net\feedroom moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\downloads.canoe.com.edgesuite.net moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\d.yimg.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\core.videoegg.com\#ve moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\core.videoegg.com\#com\videoegg moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\core.videoegg.com\#com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\core.videoegg.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\common.scrippsnetworks.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\cdn1.ustream.tv moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\cdn.widgetserver.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\cdn.taboolasyndication.com\libtrc\cnn\rplayer-during.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\cdn.taboolasyndication.com\libtrc\cnn moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\cdn.taboolasyndication.com\libtrc moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\cdn.taboolasyndication.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\cdn.lookery.com\f\pub\lcid.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\cdn.lookery.com\f\pub moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\cdn.lookery.com\f moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\cdn.lookery.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\cbc.a.mms.mavenapps.net moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\canwest.a.mms.mavenapps.net moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\camz.com\flash_clients\ciChatBase.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\camz.com\flash_clients moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\camz.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\cache.dominos.com\homev7\swf\dominos.home.555-v1.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\cache.dominos.com\homev7\swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\cache.dominos.com\homev7 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\cache.dominos.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\ca.mg3.mail.yahoo.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\c.123g.us\flash\CardShell.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\c.123g.us\flash moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\c.123g.us moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\bmo.com\pmfso.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\bmo.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\bin.clearspring.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\assets.espn.go.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\as1.suitesmart.com\_f5e.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\as1.suitesmart.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\ads1.msn.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\admonkey.dapper.net\adkitchen\expedia\expedia-300x250-cpa1.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\admonkey.dapper.net\adkitchen\expedia moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\admonkey.dapper.net\adkitchen moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\admonkey.dapper.net moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\admin.brightcove.com\[[IMPORT]]\o.aolcdn.com\videoplayer\aolbc\aol_lightningcast_translator.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\admin.brightcove.com\[[IMPORT]]\o.aolcdn.com\videoplayer\aolbc moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\admin.brightcove.com\[[IMPORT]]\o.aolcdn.com\videoplayer moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\admin.brightcove.com\[[IMPORT]]\o.aolcdn.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\admin.brightcove.com\[[IMPORT]]\en.canoe.ca\generix\CanoeAnalytics.swf moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\admin.brightcove.com\[[IMPORT]]\en.canoe.ca\generix moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\admin.brightcove.com\[[IMPORT]]\en.canoe.ca moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\admin.brightcove.com\[[IMPORT]] moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\admin.brightcove.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\adimages.scrippsnetworks.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\aac.a.mms.mavenapps.net moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\a.alimama.cn moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\a.abclocal.go.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\a.abc.com moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2\2mdn.net moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects\WHTATSR2 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#SharedObjects moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#Security\FlashPlayerTrust moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player\#Security moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia\Flash Player moved successfully.
C:\Documents and Settings\A-02843\Application Data\Macromedia moved successfully.
C:\Documents and Settings\A-02843\Application Data\Intel\Wireless\WLANProfiles moved successfully.
C:\Documents and Settings\A-02843\Application Data\Intel\Wireless\Settings moved successfully.
C:\Documents and Settings\A-02843\Application Data\Intel\Wireless moved successfully.
C:\Documents and Settings\A-02843\Application Data\Intel moved successfully.
C:\Documents and Settings\A-02843\Application Data\InstallShield\UpdateService\Database moved successfully.
C:\Documents and Settings\A-02843\Application Data\InstallShield\UpdateService moved successfully.
C:\Documents and Settings\A-02843\Application Data\InstallShield moved successfully.
C:\Documents and Settings\A-02843\Application Data\Identities\{F285ADAA-8DCF-4F49-A2CD-8CEAD334C260} moved successfully.
C:\Documents and Settings\A-02843\Application Data\Identities moved successfully.
C:\Documents and Settings\A-02843\Application Data\ICAClient\Cache\zlcache moved successfully.
C:\Documents and Settings\A-02843\Application Data\ICAClient\Cache moved successfully.
C:\Documents and Settings\A-02843\Application Data\ICAClient moved successfully.
C:\Documents and Settings\A-02843\Application Data\HP\Kodiak\4.9.140.0 moved successfully.
C:\Documents and Settings\A-02843\Application Data\HP\Kodiak moved successfully.
C:\Documents and Settings\A-02843\Application Data\HP moved successfully.
C:\Documents and Settings\A-02843\Application Data\Help moved successfully.
C:\Documents and Settings\A-02843\Application Data\Google\Local Search History moved successfully.
C:\Documents and Settings\A-02843\Application Data\Google\GoogleEarth moved successfully.
C:\Documents and Settings\A-02843\Application Data\Google moved successfully.
C:\Documents and Settings\A-02843\Application Data\FoxPlayerAIR.01F2E49DE175CC541F416F2DF78BDD5E63AD0096.1\Local Store\#SharedObjects moved successfully.
C:\Documents and Settings\A-02843\Application Data\FoxPlayerAIR.01F2E49DE175CC541F416F2DF78BDD5E63AD0096.1\Local Store\#ApplicationUpdater moved successfully.
C:\Documents and Settings\A-02843\Application Data\FoxPlayerAIR.01F2E49DE175CC541F416F2DF78BDD5E63AD0096.1\Local Store moved successfully.
C:\Documents and Settings\A-02843\Application Data\FoxPlayerAIR.01F2E49DE175CC541F416F2DF78BDD5E63AD0096.1 moved successfully.
C:\Documents and Settings\A-02843\Application Data\DNA moved successfully.
C:\Documents and Settings\A-02843\Application Data\Dell\QuickSet moved successfully.
C:\Documents and Settings\A-02843\Application Data\Dell moved successfully.
C:\Documents and Settings\A-02843\Application Data\CyberLink\PowerDVD moved successfully.
C:\Documents and Settings\A-02843\Application Data\CyberLink\PowerCinema\Extension moved successfully.
C:\Documents and Settings\A-02843\Application Data\CyberLink\PowerCinema moved successfully.
C:\Documents and Settings\A-02843\Application Data\CyberLink moved successfully.
C:\Documents and Settings\A-02843\Application Data\Blackberry Desktop\Transaction Manager\ComponentData\TraceLogs moved successfully.
C:\Documents and Settings\A-02843\Application Data\Blackberry Desktop\Transaction Manager\ComponentData moved successfully.
C:\Documents and Settings\A-02843\Application Data\Blackberry Desktop\Transaction Manager moved successfully.
C:\Documents and Settings\A-02843\Application Data\Blackberry Desktop\Outlook Express Connector moved successfully.
C:\Documents and Settings\A-02843\Application Data\Blackberry Desktop\MS Oulook Connector moved successfully.
C:\Documents and Settings\A-02843\Application Data\Blackberry Desktop\GroupWise Translator moved successfully.
C:\Documents and Settings\A-02843\Application Data\Blackberry Desktop\GroupWise 6.5.x Connector moved successfully.
C:\Documents and Settings\A-02843\Application Data\Blackberry Desktop\Act companion moved successfully.
C:\Documents and Settings\A-02843\Application Data\Blackberry Desktop moved successfully.
C:\Documents and Settings\A-02843\Application Data\AdobeUM moved successfully.
C:\Documents and Settings\A-02843\Application Data\Adobe\Linguistics\Dictionaries\Adobe Custom Dictionary\eng moved successfully.
C:\Documents and Settings\A-02843\Application Data\Adobe\Linguistics\Dictionaries\Adobe Custom Dictionary\can moved successfully.
C:\Documents and Settings\A-02843\Application Data\Adobe\Linguistics\Dictionaries\Adobe Custom Dictionary\brt moved successfully.
C:\Documents and Settings\A-02843\Application Data\Adobe\Linguistics\Dictionaries\Adobe Custom Dictionary\all moved successfully.
C:\Documents and Settings\A-02843\Application Data\Adobe\Linguistics\Dictionaries\Adobe Custom Dictionary moved successfully.
C:\Documents and Settings\A-02843\Application Data\Adobe\Linguistics\Dictionaries moved successfully.
C:\Documents and Settings\A-02843\Application Data\Adobe\Linguistics moved successfully.
C:\Documents and Settings\A-02843\Application Data\Adobe\Flash Player\AssetCache\TEN8FNMQ moved successfully.
C:\Documents and Settings\A-02843\Application Data\Adobe\Flash Player\AssetCache moved successfully.
C:\Documents and Settings\A-02843\Application Data\Adobe\Flash Player moved successfully.
C:\Documents and Settings\A-02843\Application Data\Adobe\AIR\Updater\Background\full moved successfully.
C:\Documents and Settings\A-02843\Application Data\Adobe\AIR\Updater\Background\1.0 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Adobe\AIR\Updater\Background moved successfully.
C:\Documents and Settings\A-02843\Application Data\Adobe\AIR\Updater moved successfully.
C:\Documents and Settings\A-02843\Application Data\Adobe\AIR\CRLCache moved successfully.
C:\Documents and Settings\A-02843\Application Data\Adobe\AIR moved successfully.
C:\Documents and Settings\A-02843\Application Data\Adobe\Acrobat\9.0\JavaScripts moved successfully.
C:\Documents and Settings\A-02843\Application Data\Adobe\Acrobat\9.0\Forms moved successfully.
C:\Documents and Settings\A-02843\Application Data\Adobe\Acrobat\9.0 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Adobe\Acrobat\7.0\Updater moved successfully.
C:\Documents and Settings\A-02843\Application Data\Adobe\Acrobat\7.0\Preferences moved successfully.
C:\Documents and Settings\A-02843\Application Data\Adobe\Acrobat\7.0\JavaScripts moved successfully.
C:\Documents and Settings\A-02843\Application Data\Adobe\Acrobat\7.0\Collab moved successfully.
C:\Documents and Settings\A-02843\Application Data\Adobe\Acrobat\7.0 moved successfully.
C:\Documents and Settings\A-02843\Application Data\Adobe\Acrobat moved successfully.
C:\Documents and Settings\A-02843\Application Data\Adobe moved successfully.
C:\Documents and Settings\A-02843\Application Data moved successfully.
C:\Documents and Settings\A-02843 moved successfully.
c:\program files\BearShare\Logs moved successfully.
c:\program files\BearShare\db moved successfully.
c:\program files\BearShare moved successfully.
C:\Program Files\DNA\plugins moved successfully.
C:\Program Files\DNA moved successfully.
c:\program files\Shareaza Applications\Shareaza moved successfully.
c:\program files\Shareaza Applications moved successfully.
File/Folder c:\docume~1\a-02843\applic~1\DNA not found.
File/Folder c:\windows\system32\kr_done1 not found.
c:\windows\system32\actskn45.ocx unregistered successfully.
c:\windows\system32\actskn45.ocx moved successfully.
C:\LOG26.tmp moved successfully.

stevepereira

June 10, 2009, 7:26 PM UTC

========== COMMANDS ==========
User's Internet Explorer cache folder emptied.
File delete failed. C:\Documents and Settings\A-02843\Local Settings\Temporary Internet Files\Content.IE5\ZKP8UUP9\st[7] scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\A-02843\Local Settings\Temporary Internet Files\Content.IE5\ZKP8UUP9\st[8] scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\A-02843\Local Settings\Temporary Internet Files\Content.IE5\OTINU6O2\st[3] scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\A-02843\Local Settings\Temporary Internet Files\Content.IE5\OTINU6O2\st[4] scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\A-02843\Local Settings\Temporary Internet Files\Content.IE5\MZVY65Q7\express_rogers_yahoo_com[1].htm scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\A-02843\Local Settings\Temporary Internet Files\Content.IE5\MZVY65Q7\iframe3[1].htm scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\A-02843\Local Settings\Temporary Internet Files\Content.IE5\GBVM4EIF\iframe3[2].htm scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\A-02843\Local Settings\Temporary Internet Files\Content.IE5\FRTOMQID\md[1].htm scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\A-02843\Local Settings\Temporary Internet Files\Content.IE5\DWCTBPFO\iframe3[1].htm scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\A-02843\Local Settings\Temporary Internet Files\Content.IE5\AKC4OSNQ\viewtopic[1].htm scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\A-02843\Local Settings\Temporary Internet Files\Content.IE5\99FSTHHQ\st[1] scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\A-02843\Local Settings\Temporary Internet Files\Content.IE5\99FSTHHQ\st[2] scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\A-02843\Local Settings\Temporary Internet Files\Content.IE5\25KOH8Y9\aceUAC[1].htm scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\A-02843\Local Settings\Temporary Internet Files\Content.IE5\25KOH8Y9\welcome[1].htm scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\A-02843\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\A-02843\Local Settings\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat scheduled to be deleted on reboot.
User's Temporary Internet Files folder emptied.
Local Service Temp folder emptied.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
Local Service Temporary Internet Files folder emptied.
Network Service Temp folder emptied.
File delete failed. C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
Network Service Temporary Internet Files folder emptied.
File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_50c.dat scheduled to be deleted on reboot.
Windows Temp folder emptied.
Temp folders emptied.
Explorer started successfully

OTM by OldTimer - Version 2.1.0.1 log created on 06102009_132350
Kaspersky Log

--------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER 7.0 REPORT
Wednesday, June 10, 2009
Operating System: Microsoft Windows XP Professional Service Pack 3 (build 2600)
Kaspersky Online Scanner version: 7.0.26.13
Program database last update: Wednesday, June 10, 2009 19:24:45
Records in database: 2335082
--------------------------------------------------------------------------------

Scan settings:
Scan using the following database: extended
Scan archives: yes
Scan mail databases: yes

Scan area - My Computer:
C:\
D:\

Scan statistics:
Files scanned: 67956
Threat name: 3
Infected objects: 3
Suspicious objects: 0
Duration of the scan: 01:10:24

File name / Threat name / Threats count
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0B740000\4B7DE914.VBN Infected: Exploit.Win32.Pidief.awt 1
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0C5C0001\4E5D7464.VBN Infected: Packed.Win32.PolyCrypt.d 1
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0C5C0003\4E5D7494.VBN Infected: Trojan-Downloader.Win32.Agent.nze 1

The selected area was scanned.

Hijack Log

Logfile of HijackThis v1.99.1
Scan saved at 3:15:55 PM, on 6/10/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\WiFi\bin\S24EvMon.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Intel\WiFi\bin\EvtEng.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
C:\Program Files\Tall Emu\Online Armor\oacat.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
C:\Program Files\Symantec AntiVirus\SavRoam.exe
C:\Program Files\SigmaTel\C-Major Audio\WDM\StacSV.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\Program Files\Intel\WiFi\bin\WLKeeper.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\HP\ToolBoxFX\bin\HPTLBXFX.exe
C:\Program Files\HP\HP UT\bin\hppusg.exe
C:\Program Files\Intel\WiFi\bin\ZCfgSvc.exe
C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2 .exe
C:\WINDOWS\system32\hkcmd .exe
C:\Program Files\Apoint\Apoint .exe
C:\WINDOWS\system32\LVCOMSX .exe
C:\Program Files\Logitech\Video\LogiTray .exe
C:\Program Files\Apoint\HidFind.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier .exe
C:\Program Files\Apoint\Apntex.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Java\jre6\bin\java.exe
C:\Program Files\Common Files\Adobe\Updater6\Adobe_Updater.exe
C:\Program Files\Hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://intranet.aecon.com/en-CA/Pages/default.aspx
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.aecon.com/home.aspx
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset .exe C:\Program Files\Dell\QuickSet\quickset.exe .exe C:\Program Files\Dell\QuickSet\quickset.exe .exe C:\Program Files\Dell\QuickSet\quickset.exe .exe C:\Program Files\Dell\QuickSet\quickset.exe .exe C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [PDVDDXSrv] "C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe"
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [ToolBoxFX] "C:\Program Files\HP\ToolBoxFX\bin\HPTLBXFX.exe" /enum:on /alerts:on /notifications:on /fl:on /fr:on /appData:on /tmcp:on
O4 - HKLM\..\Run: [HPUsageTracking] "C:\Program Files\HP\HP UT\bin\hppusg.exe" "C:\Program Files\HP\HP UT\"
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\WiFi\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" /tf Intel Wireless Tray
O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O15 - Trusted Zone: http://citrix.aecon.com
O15 - Trusted Zone: http://helpdesk.aecon.com
O15 - Trusted Zone: http://support.aecon.com
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
O16 - DPF: {3EA4FA88-E0BE-419A-A732-9B79B87A6ED0} (CTVUAxCtrl Object) - http://dl.tvunetworks.com/TVUAx.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1190927746203
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1190928151656
O16 - DPF: {B9F79165-A264-4C4A-A211-133A5E8D647F} (F-Secure Health Check 1.1) - http://support.f-secure.com/enu/home/on ... /fscax.cab
O16 - DPF: {DAF7E6E6-D53A-439A-B28D-12271406B8A9} (RIM AxLoader) - http://mobileapps.blackberry.com/devicesoftware/AxLoader.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WINDOW~4\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WINDOW~4\MESSEN~1\MSGRAP~1.DLL
O20 - Winlogon Notify: dimsntfy - %SystemRoot%\System32\dimsntfy.dll (file missing)
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Unknown owner - C:\Program Files\Java\jre6\bin\jqs.exe" -service -config "C:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf (file missing)
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
O23 - Service: Online Armor Helper Service (OAcat) - Tall Emu - C:\Program Files\Tall Emu\Online Armor\oacat.exe
O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: Roxio UPnP Renderer 9 - Sonic Solutions - C:\Program Files\Roxio\Digital Home 9\RoxioUPnPRenderer9.exe
O23 - Service: Roxio Upnp Server 9 - Sonic Solutions - C:\Program Files\Roxio\Digital Home 9\RoxioUpnpService9.exe
O23 - Service: LiveShare P2P Server 9 (RoxLiveShare9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxLiveShare9.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: Intel® PROSet/Wireless WiFi Service (S24EventMonitor) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\S24EvMon.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: SPBBCSvc - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: SigmaTel Audio Service (STacSV) - SigmaTel, Inc. - C:\Program Files\SigmaTel\C-Major Audio\WDM\StacSV.exe
O23 - Service: Online Armor (SvcOnlineArmor) - Tall Emu - C:\Program Files\Tall Emu\Online Armor\oasrv.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe
O23 - Service: Intel(R) PROSet/Wireless SSO Service (WLANKEEPER) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\WLKeeper.exe

The computer seems ok. Although all of my bookmarks are gone and even some very important work files but I am sure you already know that. I notice they are in a backup on the otm file.

Steve

stevepereira

June 11, 2009, 11:18 AM UTC

Just started up pc this morning and am getting crazy pop ups from Windows saying spyware and adware detected. It redirects me to a website. Really weird!

Bio-Hazard

June 11, 2009, 11:24 AM UTC

Hello!

I am working on a solution to bring back your files. I am sorry. it was my mistake the folder looked so suspicious. I should have asked before. Now regarding about the popups. We will continue cleaning once we have been able to restore your files back. Once again my sincere apologies.

Regards,

Bio-Hazard