[Resolved] Random Popups, Infected explorer.exe

Welcome to What the Tech! Register for a free account, or login > How does it work? We specialize in the removal of malicious software (malware),
but here you'll find free help and support for all your tech questions. We invite you to ask questions, share experiences, and learn.

Spyware, Virus, Trojan, Rootkit? Remove malware -> Read this before posting a hijackthis log • Need help starting a new topic?

To avoid confusion, please do not post your question in someone else's topic. Start your own. Stay with your original topic when posting a follow up.

What the Tech > Spyware / Malware / Virus Removal > Virus, Spyware & Malware Removal

2 Pages

1 2 >

[Resolved] Random Popups, Infected explorer.exe

Options

TheDeciever1 View Member Profile	Nov 23 2008, 03:35 PM Post #1
New Member Group: Authentic Member Posts: 9 Joined: 23-November 08 Member No.: 82,541 Operating System: Windows XP Media Center Edition	popup to {url.adtrgt.com}, {http://automated-search.com}, {http://angleinteractive.directtrack.com/}, {http://76.12.125.60/} This is an old post: QUOTE It started yesterday after rebooting, my taskbar, start, and all those buttons didn't show up. I Ctrl+Alt+Del just fine. I logged out, logged into another account, and everything was fine. I did a AVG scan and multiple trojans were found and quarantined. Only about 8 would repeatedly show up on numerous re scans. I had them all written up here, along with the HiJackThis log, and (stupid me) was on the infected computer and it decided to crash to "www.freespywareremover.com"" or something like that then open about 15 tabs in firefox for "singles" and related. It then prompted that Internet Explorer was working offline and I needed to continue (I don't use I.E.) so I was forced to shutdown. Ironically it did this right at this point in my post where I talked about how I tried the online free scan and it closed firefox and opened a site that had a similar name but was obviously not it. I'm still paranoid a guy had a keylogger and recorded my logins for email, etc. I feel like I'm being watched right now too.... Anyways this is the first time I really let my guard down (I got into gaming, antivirus programs slowed me down too much) and now I'm regretting it. I have the hijackthis: The files that come up infected are C:\WINDOWS\system32\winlogon.exe <508> C:\WINDOWS\system32\lsass.exe <592> C:\WINDOWS\Explorer.exe C:\WINDOWS\qohwbt.dll C:\WINDOWS\rqRheCut.dll C:\WINDOWS\yaywVpMf.dll Each infected with a Trojan Horse Generic11.BIEA The extension differs slightly for each one, winlogon.exe being a .BIKC, qohwbt.dll .BIKC, rqRheCut.dll .BICH, ------------------------------------------------- Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 6:43:16 AM, on 10/23/2008 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512) Boot mode: Safe mode with network support Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\Explorer.EXE C:\Documents and Settings\jtp\Desktop\HiJackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.atcomet.com/b/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://global.acer.com R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://global.acer.com/ R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = .local R3 - URLSearchHook: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - (no file) O3 - Toolbar: Browster - {2EF39867-654F-48b6-8F93-B4FC3E8C6844} - C:\Program Files\Browster\Browster.dll O3 - Toolbar: Dealio - {E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} - C:\Program Files\Dealio\kb127\Dealio.dll O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\WINDOWS\system32\eDStoolbar.dll O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE O4 - HKLM\..\Run: [KTPWare] C:\Program Files\Elantech\ktp.exe O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE O4 - HKLM\..\Run: [ePower_DMC] C:\Acer\Empowering Technology\ePower\ePower_DMC.exe O4 - HKLM\..\Run: [itype] "C:\Program Files\Microsoft IntelliType Pro\itype.exe" O4 - HKLM\..\Run: [au] C:\Program Files\Dealio\DealioAU.exe O4 - HKLM\..\Run: [SearchSettings] C:\Program Files\Search Settings\SearchSettings.exe O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Adobe Photoshop Lightroom 1.3\apdproxy.exe" O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes2\iTunesHelper.exe" O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe 1 O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\jtp\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O8 - Extra context menu item: Compare Prices with &Dealio - C:\Documents and Settings\jtp\Application Data\Dealio\kb127\res\DealioSearch.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb127\Dealio.dll O9 - Extra 'Tools' menuitem: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb127\Dealio.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O10 - Unknown file in Winsock LSP: c:\windows\system32\prxernsp.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\prxerdrv.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\prxerdrv.dll O16 - DPF: vzTCPConfig - http://www2.verizon.net/help/fios_se...zTCPConfig.CAB O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll O16 - DPF: {BDEE1959-AB6B-4745-A29B-F492861102CC} - O16 - DPF: {BF985246-09BF-11D2-BE62-006097DF57F6} (SimCityX Control) - http://simcity.ea.com/play/classic/SimCityX.cab O16 - DPF: {E87F6C8E-16C0-11D3-BEF7-009027438003} (Persits Software XUpload) - http://upload-v5.streamload.com/Upload/XUpload.ocx O17 - HKLM\System\CCS\Services\Tcpip\..\{4AD2D21C-5561-46F8-A2A4-B1A9623DBF8E}: NameServer = 192.168.1.1,68.238.64.12 O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll O20 - AppInit_DLLs: avgrsstx.dll qohwbt.dll O23 - Service: Memory Check Service (AcerMemUsageCheckService) - Acer Inc. - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe O23 - Service: BlackICE - Unknown owner - H:\blackice\blackd.exe (file missing) O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe O23 - Service: Imapi Helper - Alex Feinman - C:\Program Files\Alex Feinman\ISO Recorder\ImapiHelper.exe O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe O23 - Service: Viewpoint Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe -- End of file - 6484 bytes So it ends up explorer.exe was infected, but i fixed that (I think) and did a couple of AVG scans in safe mode, and that got rid of the trojans. I'm still getting popups though. They take keywords of the website I'm on and direct me to corresponding popups. Here is the new HiJackThis log: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 1:30:33 PM, on 11/23/2008 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Acer\Empowering Technology\ePerformance\MemCheck.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\WINDOWS\eHome\ehRecvr.exe C:\WINDOWS\eHome\ehSched.exe C:\Program Files\CDBurnerXP\NMSAccessU.exe C:\WINDOWS\system32\PnkBstrA.exe C:\PROGRA~1\AVG\AVG8\avgrsx.exe C:\WINDOWS\system32\PnkBstrB.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Viewpoint\Common\ViewpointService.exe C:\PROGRA~1\AVG\AVG8\avgemc.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\WINDOWS\RTHDCPL.EXE C:\Acer\Empowering Technology\ePower\ePower_DMC.exe C:\Program Files\Microsoft IntelliType Pro\itype.exe C:\Program Files\Adobe\Adobe Photoshop Lightroom 1.3\apdproxy.exe C:\Program Files\Common Files\Real\Update_OB\realsched.exe C:\Program Files\iTunes2\iTunesHelper.exe C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe C:\Program Files\Microsoft IntelliType Pro\dpupdchk.exe C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2G1.EXE C:\Program Files\DAEMON Tools Lite\daemon.exe C:\Documents and Settings\jtp\Local Settings\Application Data\Google\Update\GoogleUpdate.exe C:\WINDOWS\system32\wbem\wmiapsrv.exe C:\WINDOWS\system32\dllhost.exe C:\Program Files\iPod\bin\iPodService.exe C:\WINDOWS\system32\wbem\unsecapp.exe C:\WINDOWS\system32\rundll32.exe C:\Documents and Settings\jtp\Desktop\HiJackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.atcomet.com/b/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://global.acer.com R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://global.acer.com/ R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = .local R3 - URLSearchHook: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - (no file) O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll O2 - BHO: {5315e134-5e67-b1f9-da44-22903e126173} - {371621e3-0922-44ad-9f1b-76e5431e5135} - C:\WINDOWS\system32\ampdqu.dll (file missing) O2 - BHO: (no name) - {48a618ab-a4ab-4535-b6f7-f18e9ab57fa2} - C:\WINDOWS\system32\fehojipa.dll O2 - BHO: (no name) - {6177FF5D-CA39-46D1-8CEE-F14360BE35EE} - C:\WINDOWS\system32\yaywVpMf.dll (file missing) O2 - BHO: DealioBHO Class - {6A87B991-A31F-4130-AE72-6D0C294BF082} - C:\Program Files\Dealio\kb127\Dealio.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll O2 - BHO: (no name) - {DD153FDB-E2FB-40D2-8E36-F21C36B51DAD} - C:\WINDOWS\system32\rqRheCuT.dll (file missing) O3 - Toolbar: Browster - {2EF39867-654F-48b6-8F93-B4FC3E8C6844} - C:\Program Files\Browster\Browster.dll O3 - Toolbar: Dealio - {E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} - C:\Program Files\Dealio\kb127\Dealio.dll O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\WINDOWS\system32\eDStoolbar.dll O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE O4 - HKLM\..\Run: [KTPWare] C:\Program Files\Elantech\ktp.exe O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE O4 - HKLM\..\Run: [ePower_DMC] C:\Acer\Empowering Technology\ePower\ePower_DMC.exe O4 - HKLM\..\Run: [itype] "C:\Program Files\Microsoft IntelliType Pro\itype.exe" O4 - HKLM\..\Run: [au] C:\Program Files\Dealio\DealioAU.exe O4 - HKLM\..\Run: [SearchSettings] C:\Program Files\Search Settings\SearchSettings.exe O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Adobe Photoshop Lightroom 1.3\apdproxy.exe" O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes2\iTunesHelper.exe" O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe 1 O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKLM\..\Run: [Auto EPSON Stylus CX5400 on DELL] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2G1.EXE /P32 "Auto EPSON Stylus CX5400 on DELL" /O14 "\\DELL\Printer" /M "Stylus CX5400" O4 - HKLM\..\Run: [gitulitoki] Rundll32.exe "C:\WINDOWS\system32\hefasobo.dll",s O4 - HKLM\..\Run: [dfc8b358] rundll32.exe "C:\WINDOWS\system32\nuvameje.dll",b O4 - HKLM\..\Run: [CPMdcfb80c4] Rundll32.exe "c:\windows\system32\sibofuda.dll",a O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\jtp\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O8 - Extra context menu item: Compare Prices with &Dealio - C:\Documents and Settings\jtp\Application Data\Dealio\kb127\res\DealioSearch.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb127\Dealio.dll O9 - Extra 'Tools' menuitem: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb127\Dealio.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O10 - Unknown file in Winsock LSP: c:\windows\system32\prxernsp.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\prxerdrv.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\prxerdrv.dll O16 - DPF: vzTCPConfig - http://www2.verizon.net/help/fios_settings...vzTCPConfig.CAB O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll O16 - DPF: {BDEE1959-AB6B-4745-A29B-F492861102CC} - O16 - DPF: {BF985246-09BF-11D2-BE62-006097DF57F6} (SimCityX Control) - http://simcity.ea.com/play/classic/SimCityX.cab O16 - DPF: {E87F6C8E-16C0-11D3-BEF7-009027438003} (Persits Software XUpload) - http://upload-v5.streamload.com/Upload/XUpload.ocx O17 - HKLM\System\CCS\Services\Tcpip\..\{4AD2D21C-5561-46F8-A2A4-B1A9623DBF8E}: NameServer = 192.168.1.1,68.238.64.12 O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll O20 - AppInit_DLLs: avgrsstx.dll ampdqu.dll C:\WINDOWS\system32\nibaniyu.dll c:\windows\system32\sibofuda.dll O20 - Winlogon Notify: rqRheCuT - rqRheCuT.dll (file missing) O21 - SSODL: SSODL - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\sibofuda.dll O22 - SharedTaskScheduler: STS - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\sibofuda.dll O23 - Service: Memory Check Service (AcerMemUsageCheckService) - Acer Inc. - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe O23 - Service: BlackICE - Unknown owner - H:\blackice\blackd.exe (file missing) O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe O23 - Service: Imapi Helper - Alex Feinman - C:\Program Files\Alex Feinman\ISO Recorder\ImapiHelper.exe O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe O23 - Service: Viewpoint Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe -- End of file - 9603 bytes This post has been edited by TheDeciever1*: Nov 23 2008, 03:41 PM

Rorschach112 View Member Profile	Nov 23 2008, 03:51 PM Post #2
SuperMember Group: Authentic Member Posts: 3,651 Joined: 29-September 07 Member No.: 73,164 Operating System: Windows XP	Hello Disable resident protections (Antivirus...); you'll re-enable them after the scan Download Lop S&D < here Double-click Lop S&D.exe Choose the language, then choose Option 1 (Search) Wait till the end of the scan Post the log which is created: (%SystemDrive%\lopR.txt)

TheDeciever1 View Member Profile	Nov 23 2008, 05:31 PM Post #3
New Member Group: Authentic Member Posts: 9 Joined: 23-November 08 Member No.: 82,541 Operating System: Windows XP Media Center Edition	OK I disabled Resident Shield. Its been 2 hours. How long does the scan take? All it says is please wait. This post has been edited by TheDeciever1: Nov 23 2008, 05:34 PM

Rorschach112 View Member Profile	Nov 23 2008, 05:36 PM Post #4
SuperMember Group: Authentic Member Posts: 3,651 Joined: 29-September 07 Member No.: 73,164 Operating System: Windows XP	Shouldn't take longer than 15minutes Try it in safe mode, if it goes on that long then do this Download OTScanIt2.exe to your Desktop and double-click on it to extract the files. It will create a folder named OTScanIt2 on your desktop. Open the OTScanIt2 folder and double-click on OTScanIt.exe to start the program. Under File Age at the top, change it from 30 days to 90 days Under Additional Scans check the boxes beside Reg - ColumnHandlers, Reg - Desktop Components, Reg - Disabled MS Config Items, Reg - File Associations, Reg - NetSvcs, Reg - Protocol Filters, Reg - Protocol Handlers, Reg - Session Manager Settings, Reg - Winsock2 Catalogs, File - Lop Check, File - Purity Scan, Files - Signature Check, and Evnt - EventViewer Logs ( Last 10 Errors). Under Rootkit Search change it to Yes Now click the Run Scan button on the toolbar. When the scan is complete Notepad will open with the report file loaded in it. Click the Format menu and make sure that Wordwrap is not checked. If it is then click on it to uncheck it. Use the Add Reply button and post the information back here in an attachment. I will review it when it comes in. The last line is < End of Report >, so make sure that is the last line in the attached report. Make sure you attach the report in your reply. If it is too big to upload, then zip the text file and upload it that way

TheDeciever1 View Member Profile	Nov 23 2008, 06:12 PM Post #5
New Member Group: Authentic Member Posts: 9 Joined: 23-November 08 Member No.: 82,541 Operating System: Windows XP Media Center Edition	OK. The other one didn't work, so here is the OTscanit2: Attached File(s) OTScanIt.zip ( 37.85K ) Number of downloads: 251

Rorschach112 View Member Profile	Nov 23 2008, 06:25 PM Post #6
SuperMember Group: Authentic Member Posts: 3,651 Joined: 29-September 07 Member No.: 73,164 Operating System: Windows XP	Hello Start OTScanIt2. Copy/Paste the information in the quotebox below into the panel where it says "Paste fix here" and then click the Run Fix button. QUOTE [Kill Explorer] [Unregister Dlls] [Registry - Safe List] < Internet Explorer Settings [HKEY_CURRENT_USER\] > -> YN -> HKEY_CURRENT_USER\: URLSearchHooks\\"{E312764E-7706-43F1-8DAB-FCDD2B1E416D}" [HKLM] -> Reg Error: Key does not exist or could not be opened. [Reg Error: Key does not exist or could not be opened.] < BHO's [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\ YN -> {371621e3-0922-44ad-9f1b-76e5431e5135} [HKLM] -> %SystemRoot%\system32\ampdqu.dll [Reg Error: Value does not exist or could not be read.] YY -> {48a618ab-a4ab-4535-b6f7-f18e9ab57fa2} [HKLM] -> %SystemRoot%\system32\fehojipa.dll [Reg Error: Value does not exist or could not be read.] YN -> {6177FF5D-CA39-46D1-8CEE-F14360BE35EE} [HKLM] -> %SystemRoot%\system32\yaywVpMf.dll [Reg Error: Value does not exist or could not be read.] YN -> {DD153FDB-E2FB-40D2-8E36-F21C36B51DAD} [HKLM] -> %SystemRoot%\system32\rqRheCuT.dll [Reg Error: Value does not exist or could not be read.] < Internet Explorer ToolBars [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\ YN -> ShellBrowser\\"{2318C2B1-4965-11D4-9B18-009027A5CD4F}" [HKLM] -> Reg Error: Key does not exist or could not be opened. [Reg Error: Key does not exist or could not be opened.] YN -> WebBrowser\\"{EF99BD32-C1FB-11D2-892F-0090271D4F88}" [HKLM] -> Reg Error: Key does not exist or could not be opened. [Yahoo! Toolbar] < Run [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run YN -> "Alcmtr" -> %SystemRoot%\ALCMTR.EXE [ALCMTR.EXE] YY -> "CPMdcfb80c4" -> %SystemRoot%\system32\sibofuda.DLL [Rundll32.exe "c:\windows\system32\sibofuda.dll",a] YY -> "dfc8b358" -> %SystemRoot%\system32\nuvameje.DLL [rundll32.exe "C:\WINDOWS\system32\nuvameje.dll",b] YY -> "gitulitoki" -> %SystemRoot%\system32\hefasobo.DLL [Rundll32.exe "C:\WINDOWS\system32\hefasobo.dll",s] YN -> "KernelFaultCheck" -> [%systemroot%\system32\dumprep 0 -k] < Internet Explorer Extensions [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Extensions\ YN -> CmdMapping\\"{D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A}" [HKLM] -> [Reg Error: Key does not exist or could not be opened.] < Downloaded Program Files > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\ YN -> {BDEE1959-AB6B-4745-A29B-F492861102CC} [HKLM] -> [Reg Error: Key does not exist or could not be opened.] < AppInit_DLLs [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs AppInit_DLLs -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls YN -> ampdqu.dll -> YY -> C:\WINDOWS\system32\nibaniyu.dll -> %SystemRoot%\system32\nibaniyu.dll YY -> c:\windows\system32\sibofuda.dll -> %SystemRoot%\system32\sibofuda.dll < AppInit_DLLs [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs < Winlogon\Notify settings [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ YN -> rqRheCuT -> YN -> WgaLogon -> < SSODL [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad YN -> "{F5DF91F9-15E9-416B-A7C3-7519B11ECBFC}" [HKLM] -> Reg Error: Key does not exist or could not be opened. [0aMCPClient] YY -> "{EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4}" [HKLM] -> %SystemRoot%\system32\sibofuda.dll [SSODL] < SharedTaskScheduler [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler YY -> "{EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4}" [HKLM] -> %SystemRoot%\system32\sibofuda.dll [STS] < ShellExecuteHooks [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks YN -> "{DD153FDB-E2FB-40D2-8E36-F21C36B51DAD}" [HKLM] -> %SystemRoot%\system32\rqRheCuT.dll [] < LSA Authentication Packages [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\\Authentication Packages LSA Authentication Packages -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\\Authentication Packages YY -> C:\WINDOWS\system32\yaywVpMf -> < LSA Authentication Packages [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\\Authentication Packages < MountPoints2 [HKEY_CURRENT_USER] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2 YN -> \{8751cc36-5cc7-11db-b766-0016d41452ba}\Shell\AutoRun\command\\"" -> I:\LaunchU3.exe [I:\LaunchU3.exe] [Registry - Additional Scans - Safe List] < Disabled MSConfig Folder Items [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\ YN -> C:^Documents and Settings^All Users^Start Menu^Programs^Startup^BlackICE PC Protection.lnk -> YN -> C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Ralink Wireless Utility.lnk -> %SystemDrive%\PROGRA~1\RALINK\Common\RaUI.exe YN -> C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Run Google Web Accelerator.lnk -> YY -> C:^Documents and Settings^owner^Start Menu^Programs^Startup^SysTool (2).lnk -> %SystemDrive%\PROGRA~1\SysTool\SysTool.exe < Disabled MSConfig Registry Items [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\ YN -> !AVG Anti-Spyware hkey=HKLM key=SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> YN -> Alcmtr hkey=HKLM key=SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> %SystemRoot%\ALCMTR.EXE YN -> amd_dc_opt hkey=HKLM key=SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> %ProgramFiles%\AMD\Dual-Core Optimizer\amd_dc_opt.exe YN -> AtiTrayTools hkey=HKCU key=SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> YN -> ccApp hkey=HKLM key=SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> YN -> iTunesHelper hkey=HKLM key=SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> F:\Itunes\iTunesHelper.exe YN -> KernelFaultCheck hkey=HKLM key=SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> YN -> LaunchApp hkey=HKLM key=SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> YN -> msnmsgr hkey=HKCU key=SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> YN -> My Web Search Bar hkey=HKLM key=SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> YN -> MyWebSearch Email Plugin hkey=HKLM key=SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> YN -> PcThrust hkey=HKLM key=SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> YN -> PowerStrip hkey=HKLM key=SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> %ProgramFiles%\powerstrip\pstrip.exe YN -> SpySweeper hkey=HKLM key=SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> YN -> StartCCC hkey=HKCU key=SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> %ProgramFiles%\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe YN -> STYLEXP hkey=HKCU key=SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> %ProgramFiles%\TGTSoft\StyleXP\StyleXP.exe YN -> SugarSync hkey=HKCU key=SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> YN -> swg hkey=HKCU key=SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> %ProgramFiles%\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe YN -> Uniblue SpyEraser hkey=HKCU key=SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> [Files/Folders - Created Within 90 Days] NY -> 88 C:\WINDOWS\System32\.tmp files -> C:\WINDOWS\System32\.tmp NY -> 6 C:\WINDOWS\.tmp files -> C:\WINDOWS\.tmp NY -> Lop SD -> %SystemDrive%\Lop SD NY -> LopSD.exe -> %UserProfile%\Desktop\LopSD.exe NY -> ejemavun.ini -> %SystemRoot%\System32\ejemavun.ini NY -> eyajizaz.ini -> %SystemRoot%\System32\eyajizaz.ini NY -> rldrynhd.ini -> %SystemRoot%\System32\rldrynhd.ini NY -> dhnyrdlr.dll -> %SystemRoot%\System32\dhnyrdlr.dll NY -> HiJackThis.exe -> %UserProfile%\Desktop\HiJackThis.exe NY -> thqhqncg.ini -> %SystemRoot%\System32\thqhqncg.ini NY -> junyjubu.ini -> %SystemRoot%\System32\junyjubu.ini NY -> fMpVwyay.ini2 -> %SystemRoot%\System32\fMpVwyay.ini2 NY -> fMpVwyay.ini -> %SystemRoot%\System32\fMpVwyay.ini [File - Lop Check] NY -> SecTaskMan -> C:\Documents and Settings\All Users\Application Data\SecTaskMan NY -> Viewpoint -> C:\Documents and Settings\All Users\Application Data\Viewpoint [Empty Temp Folders] [Start Explorer] [Reboot] The fix should only take a very short time. When the fix is completed a message box will popup telling you that it is finished. Click the Ok button and Notepad will open with a log of actions taken during the fix. Post that information back here I will review the information when it comes back in.

TheDeciever1 View Member Profile	Nov 23 2008, 06:49 PM Post #7
New Member Group: Authentic Member Posts: 9 Joined: 23-November 08 Member No.: 82,541 Operating System: Windows XP Media Center Edition	OK, it kinda froze when it came out of the fix, but then prompted me to restart so I did. Then the log came up, and also errors: error loading C:\WINDOWS\system32\hefasobo.dll and sibofuda.dll showed up. Explorer killed successfully [Registry - Safe List] Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{E312764E-7706-43F1-8DAB-FCDD2B1E416D} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}\ not found. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{371621e3-0922-44ad-9f1b-76e5431e5135}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{371621e3-0922-44ad-9f1b-76e5431e5135}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{48a618ab-a4ab-4535-b6f7-f18e9ab57fa2}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{48a618ab-a4ab-4535-b6f7-f18e9ab57fa2}\ deleted successfully. DllUnregisterServer procedure not found in C:\WINDOWS\system32\fehojipa.dll C:\WINDOWS\system32\fehojipa.dll NOT unregistered. C:\WINDOWS\system32\fehojipa.dll moved successfully. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6177FF5D-CA39-46D1-8CEE-F14360BE35EE}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6177FF5D-CA39-46D1-8CEE-F14360BE35EE}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DD153FDB-E2FB-40D2-8E36-F21C36B51DAD}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DD153FDB-E2FB-40D2-8E36-F21C36B51DAD}\ deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F}\ not found. Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{EF99BD32-C1FB-11D2-892F-0090271D4F88} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88}\ deleted successfully. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\Alcmtr deleted successfully. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\CPMdcfb80c4 deleted successfully. DllUnregisterServer procedure not found in C:\WINDOWS\system32\sibofuda.DLL C:\WINDOWS\system32\sibofuda.DLL NOT unregistered. C:\WINDOWS\system32\sibofuda.DLL moved successfully. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\dfc8b358 deleted successfully. DllUnregisterServer procedure not found in C:\WINDOWS\system32\nuvameje.DLL C:\WINDOWS\system32\nuvameje.DLL NOT unregistered. C:\WINDOWS\system32\nuvameje.DLL moved successfully. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\gitulitoki deleted successfully. DllUnregisterServer procedure not found in C:\WINDOWS\system32\hefasobo.DLL C:\WINDOWS\system32\hefasobo.DLL NOT unregistered. C:\WINDOWS\system32\hefasobo.DLL moved successfully. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\KernelFaultCheck deleted successfully. Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Extensions\CmdMapping\\{D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A}\ not found. Starting removal of ActiveX control {BDEE1959-AB6B-4745-A29B-F492861102CC} Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{BDEE1959-AB6B-4745-A29B-F492861102CC}\Contains\Files\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{BDEE1959-AB6B-4745-A29B-F492861102CC}\DownloadInformation\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{BDEE1959-AB6B-4745-A29B-F492861102CC}\ not found. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls:ampdqu.dll deleted successfully. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls:C:\WINDOWS\system32\nibaniyu.dll deleted successfully. DllUnregisterServer procedure not found in C:\WINDOWS\system32\nibaniyu.dll C:\WINDOWS\system32\nibaniyu.dll NOT unregistered. C:\WINDOWS\system32\nibaniyu.dll moved successfully. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls:c:\windows\system32\sibofuda.dll deleted successfully. File C:\WINDOWS\system32\sibofuda.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\rqRheCuT\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon\ deleted successfully. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\0aMCPClient deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\"{F5DF91F9-15E9-416B-A7C3-7519B11ECBFC}"\ not found. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\SSODL deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\"{EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4}"\ not found. File C:\WINDOWS\system32\sibofuda.dll not found. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\\{EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4}\ deleted successfully. File C:\WINDOWS\system32\sibofuda.dll not found. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\\{DD153FDB-E2FB-40D2-8E36-F21C36B51DAD} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DD153FDB-E2FB-40D2-8E36-F21C36B51DAD}\ not found. Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\\Authentication Packages:C:\WINDOWS\system32\yaywVpMf deleted successfully. File not found. Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{8751cc36-5cc7-11db-b766-0016d41452ba}\Shell\AutoRun\command\\ deleted successfully. [Registry - Additional Scans - Safe List] Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^BlackICE PC Protection.lnk\ deleted successfully. File not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Ralink Wireless Utility.lnk\ deleted successfully. File C:\WINDOWS\pss\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Run Google Web Accelerator.lnk\ deleted successfully. File not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^Documents and Settings^owner^Start Menu^Programs^Startup^SysTool (2).lnk\ deleted successfully. File C:\WINDOWS\pss\ not found. C:\PROGRA~1\SysTool\SysTool.exe moved successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\!AVG Anti-Spyware hkey=HKLM key=SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ not found. File not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Alcmtr hkey=HKLM key=SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ not found. File not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\amd_dc_opt hkey=HKLM key=SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ not found. File not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\AtiTrayTools hkey=HKCU key=SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ not found. File not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\ccApp hkey=HKLM key=SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ not found. File not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\iTunesHelper hkey=HKLM key=SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ not found. File not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\KernelFaultCheck hkey=HKLM key=SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ not found. File not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\LaunchApp hkey=HKLM key=SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ not found. File not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\msnmsgr hkey=HKCU key=SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ not found. File not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\My Web Search Bar hkey=HKLM key=SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ not found. File not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\MyWebSearch Email Plugin hkey=HKLM key=SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ not found. File not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\PcThrust hkey=HKLM key=SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ not found. File not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\PowerStrip hkey=HKLM key=SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ not found. File not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\SpySweeper hkey=HKLM key=SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ not found. File not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\StartCCC hkey=HKCU key=SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ not found. File not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\STYLEXP hkey=HKCU key=SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ not found. File not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\SugarSync hkey=HKCU key=SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ not found. File not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\swg hkey=HKCU key=SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ not found. File not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Uniblue SpyEraser hkey=HKCU key=SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ not found. File not found. [Files/Folders - Created Within 90 Days] C:\Lop SD folder moved successfully. C:\Documents and Settings\jtp\Desktop\LopSD.exe moved successfully. C:\WINDOWS\System32\ejemavun.ini moved successfully. C:\WINDOWS\System32\eyajizaz.ini moved successfully. C:\WINDOWS\System32\rldrynhd.ini moved successfully. DllUnregisterServer procedure not found in C:\WINDOWS\System32\dhnyrdlr.dll C:\WINDOWS\System32\dhnyrdlr.dll NOT unregistered. C:\WINDOWS\System32\dhnyrdlr.dll moved successfully. C:\Documents and Settings\jtp\Desktop\HiJackThis.exe moved successfully. C:\WINDOWS\System32\thqhqncg.ini moved successfully. C:\WINDOWS\System32\junyjubu.ini moved successfully. C:\WINDOWS\System32\fMpVwyay.ini2 moved successfully. C:\WINDOWS\System32\fMpVwyay.ini moved successfully. [File - Lop Check] C:\Documents and Settings\All Users\Application Data\SecTaskMan folder moved successfully. C:\Documents and Settings\All Users\Application Data\Viewpoint folder moved successfully. [Empty Temp Folders] User's Temp folder emptied. User's Temporary Internet Files folder emptied. User's Internet Explorer cache folder emptied. Local Service Temp folder emptied. File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot. Local Service Temporary Internet Files folder emptied. File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_6fc.dat scheduled to be deleted on reboot. File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_c08.dat scheduled to be deleted on reboot. Windows Temp folder emptied. Java cache emptied. FireFox cache emptied. RecycleBin -> emptied. Explorer started successfully < End of fix log > OTScanIt2 by OldTimer - Version 1.0.0.35b fix logfile created on 11232008_163103 Files moved on Reboot... File move failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be moved on reboot. C:\WINDOWS\temp\Perflib_Perfdata_6fc.dat moved successfully. C:\WINDOWS\temp\Perflib_Perfdata_c08.dat moved successfully.

Rorschach112 View Member Profile	Nov 23 2008, 06:52 PM Post #8
SuperMember Group: Authentic Member Posts: 3,651 Joined: 29-September 07 Member No.: 73,164 Operating System: Windows XP	Hello Please download Malwarebytes' Anti-Malware from Here or Here Double Click mbam-setup.exe to install the application. Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish. If an update is found, it will download and install the latest version. Once the program has loaded, select "Perform Quick Scan", then click Scan. The scan may take some time to finish,so please be patient. When the scan is complete, click OK, then Show Results to view the results. Make sure that everything is checked, and click Remove Selected. When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note) The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM. Copy&Paste the entire report in your next reply. Extra Note: If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediatly. Go to Kaspersky website and perform an online antivirus scan. Read through the requirements and privacy statement and click on Accept button. It will start downloading and installing the scanner and virus definitions. You will be prompted to install an application from Kaspersky. Click Run. When the downloads have finished, click on Settings. Make sure these boxes are checked (ticked). If they are not, please tick them and click on the Save button: Spyware, Adware, Dialers, and other potentially dangerous programs Archives Mail databases Click on My Computer under Scan. Once the scan is complete, it will display the results. Click on View Scan Report. You will see a list of infected items there. Click on Save Report As.... Save this report to a convenient place. Change the Files of type to Text file (.txt) before clicking on the Save button.

TheDeciever1 View Member Profile	Nov 23 2008, 11:50 PM Post #9
New Member Group: Authentic Member Posts: 9 Joined: 23-November 08 Member No.: 82,541 Operating System: Windows XP Media Center Edition	Thanks my computer is already booting faster, and I assume you want me to include the kaspersky log as well. Malwarebytes' Anti-Malware 1.30 Database version: 1419 Windows 5.1.2600 Service Pack 3 11/23/2008 5:03:01 PM mbam-log-2008-11-23 (17-03-01).txt Scan type: Quick Scan Objects scanned: 72659 Time elapsed: 5 minute(s), 47 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 24 Registry Values Infected: 4 Registry Data Items Infected: 0 Folders Infected: 13 Files Infected: 135 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: HKEY_CLASSES_ROOT\dnscache.dnscacheobj (Trojan.BHO) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\dnscache.dnscacheobj.1 (Trojan.BHO) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{2e9937fc-cf2f-4f56-af54-5a6a3dd375cc} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{741de825-a6f0-4497-9aa6-8023cf9b0fff} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{ec43e3fd-5c60-46a6-97d7-e0b85dbdd6c4} (Trojan.BHO) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{376892ae-1825-4e5f-9f85-23f9640051cc} (Trojan.BHO) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{147a976f-eee1-4377-8ea7-4716e4cdd239} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{dd153fdb-e2fb-40d2-8e36-f21c36b51dad} (Trojan.Vundo) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{5b4c3b43-49b6-42a7-a602-f7acdca0d409} (Adware.OneStepSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256a51-b582-467e-b8d4-7786eda79ae0} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\onestepsearch (Adware.OneStepSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Juan (Malware.Trace) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\OneStepSearch (Adware.OneStepSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ONESTEP_SEARCH_SERVICE (Adware.OneStepSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\OneStep Search Service (Adware.OneStepSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\contim (Trojan.Vundo) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Track System (Trojan.Vundo) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\rdfa (Trojan.Vundo) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\FCOVM (Trojan.Vundo) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemoveRP (Trojan.Vundo) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\MyWebSearch (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Fun Web Products (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\FocusInteractive (Adware.MyWebSearch) -> Quarantined and deleted successfully. Registry Values Infected: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{ec43e3fd-5c60-46a6-97d7-e0b85dbdd6c4} (Trojan.BHO) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\ssodl (Trojan.BHO) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\cpmdcfb80c4 (Trojan.Agent) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\gitulitoki (Trojan.Agent) -> Quarantined and deleted successfully. Registry Data Items Infected: (No malicious items detected) Folders Infected: C:\Program Files\MyWebSearch (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\History (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\MyWebSearch\bar\Settings (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\FunWebProducts (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\FunWebProducts\Shared (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\FunWebProducts\ScreenSaver (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\FunWebProducts\ScreenSaver\Images (Adware.MyWebSearch) -> Quarantined and deleted successfully. C:\Program Files\OneStepSearch (Adware.OneStepSearch) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Help (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. Files Infected: C:\WINDOWS\system32\jiyeleka.dll (Trojan.Vundo) -> Quarantined and deleted successfully. C:\WINDOWS\system32\zazijaye.dll (Trojan.Vundo) -> Quarantined and deleted successfully. C:\Documents and Settings\jtp\Local Settings\Temporary Internet Files\Content.IE5\8XMV0HE7\upd105320[1] (Trojan.Vundo) -> Quarantined and deleted successfully. C:\Program Files\OneStepSearch\uninstall.exe (Adware.OneStepSearch) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\License.txt (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\ReadMe.txt (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\INSTALL.LOG (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Help\ee.chm (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Config.dat (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Files.dat (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\FilesContents.dat (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Folders.dat (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\FolderScans.dat (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\PlugInSelections.dat (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\ScanMasks.dat (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Drives.dat (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\IECookiesKeep.dat (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\IEDownloadedKeep.dat (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\NSN4CookiesKeep.dat (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\OE5ChoiceList.dat (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\TBChoiceList.dat (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\AbsoluteFTP.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\ACDSEE Photo Viewer v3.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Adaptec Easy CD Creator v4.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Adobe Acrobat Reader v3.0.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Adobe Acrobat Reader v3.1.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Adobe Acrobat Reader v4.0.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Adobe Acrobat Reader v5.0.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Adobe Acrobat Reader v5.1.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Adobe Acrobat Reader v6.0.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Adobe Acrobat Reader v7.0.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Adobe Acrobat v6.0.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Adobe Photoshop v5.0 LE.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Adobe Photoshop v5.5.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Adobe Photoshop v5.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Adobe Photoshop v6.0.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Adobe Photoshop v7.0.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Adobe Photoshop v8.0.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Adobe Photoshop v9.0.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\ASPack.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Avant Browser.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Cabinet Manager.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Copernic 2000 Pro.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Copernic 2000.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Copernic Agent.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Corel Paintshop Pro v10.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Cute FTP v3.0.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Cute FTP v4.0.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Cute FTP v7.0.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Delphi v3.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Delphi v4.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Delphi v5.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\DiskKeeper v5.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\DivXPlayer.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Download Accelerator.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Eudora Mail.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\EventLog.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\FTP Explorer.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\GetRight ExplorerBar.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\GetRight v4.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\GoogleBar.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\GoogleNavigation.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\GoZilla.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Helios TextPad v3.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Helios TextPad v4.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\HelpWriter.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Icon Extractor.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\ICQ 2000a.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\InstallShield Express.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\J2 Messenger.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\JASC Paintshop Pro v5.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\JASC Paintshop Pro v6.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\JASC Paintshop Pro v7.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\JASC Paintshop Pro v8.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Jet PhotoShell v1.2.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Kazaa.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Limewire v4.0.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Macromedia Flash v4.0.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\MasterSplitter v2.1.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\McAfee Virus Scan v4.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Microangelo 98.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Micrografx Picture Publisher v7.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Micrografx Picture Publisher v8.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Microsoft FrontPage Express.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Microsoft FrontPage.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Microsoft Help Workshop.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Microsoft HTML Help.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Microsoft Office.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Microsoft Publisher 2000.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Microsoft Send-To Extensions.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Microsoft Windows Paint.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Microsoft Windows WordPad.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\My Network Places.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Napster Music Community.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\NEATO Labels.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\NeoPlanet v5.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Norton AntiVirus 2000 (v6).eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Norton Antivirus 2003.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Norton File Manager.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Norton Internet Security 2004.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Norton Personal Firewall.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Norton Utilities 2000.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\NoteTab Pro.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Opera Browser.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\PackageForTheWeb.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Personal Ancestral File.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Quicktime.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Real Audio Player v6 v7 v8.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Real Download v4.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Real Player v10.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\RealOne Player.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\RemoteDesktop.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Roxio Easy CD Creator v6.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\SureThing CD Labeler.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Telnet.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Ulead Gif Animator v4.0.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Ulead Photo Explorer v4.2.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Ulead Photo Viewer v4.0.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Ulead PhotoImpact v10.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Ulead PhotoImpact v5.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Ulead PhotoImpact Viewer v4.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\UltraEdit v4.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\UltraEdit v7.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Web Ferret v3.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\WinOnCD.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\WinRar v2.6.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\WinRar v2.70.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\WinRar v3.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\WinZip v7.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\WinZip v8.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Wise Installer.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Yahoo Player.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\YahooMessenger.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\ZipMagic 2000.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. C:\Program Files\Evidence Eliminator\Data\Plug-Ins\Zone Alarm.eep (Rogue.EvidenceEliminator) -> Quarantined and deleted successfully. -------------------------------------------------------------------------------- KASPERSKY ONLINE SCANNER 7 REPORT Sunday, November 23, 2008 Operating System: Microsoft Windows XP Professional Service Pack 3 (build 2600) Kaspersky Online Scanner 7 version: 7.0.25.0 Program database last update: Sunday, November 23, 2008 23:24:08 Records in database: 1406366 -------------------------------------------------------------------------------- Scan settings: Scan using the following database: extended Scan archives: yes Scan mail databases: yes Scan area - My Computer: C:\ D:\ E:\ F:\ G:\ Scan statistics: Files scanned: 152768 Threat name: 9 Infected objects: 20 Suspicious objects: 0 Duration of the scan: 03:54:18 File name / Threat name / Threats count C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\172359FD.exe Infected: P2P-Worm.Win32.VB.dw 1 C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\38243DD8.exe Infected: not-a-virus:PSWTool.Win32.Brutus 1 C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\38D00E87.exe Infected: not-a-virus:PSWTool.Win32.Brutus 1 C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\734B5676.exe Infected: not-a-virus:PSWTool.Win32.Brutus 1 C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\35C43272.exe Infected: not-a-virus:PSWTool.Win32.Brutus 1 C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\4AEE4928.tmp Infected: not-a-virus:PSWTool.Win32.Brutus 1 C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\6C1F08A2.exe Infected: not-a-virus:PSWTool.Win32.Brutus 1 C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\200F1CF0.dll Infected: not-a-virus:AdWare.Win32.NewDotNet 1 C:\Documents and Settings\owner\My Documents\My Documents\Other\Misc\sspsetup1.exe Infected: Backdoor.Win32.Delf.jgi 1 C:\Documents and Settings\owner\My Documents\My Documents\Other\Misc\sspsetup1_.exe Infected: Backdoor.Win32.Delf.jgi 1 C:\Documents and Settings\owner\My Documents\My Documents\My Widgets\SpeedFan Temperature Monitor.widget Infected: Exploit.Win32.SQLexp.s 1 C:\Documents and Settings\owner\My Documents\My Documents\Misc\sspsetup1.exe Infected: Backdoor.Win32.Delf.jgi 1 C:\Documents and Settings\owner\My Documents\My Documents\Misc\sspsetup1_.exe Infected: Backdoor.Win32.Delf.jgi 1 C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\180564.exe Infected: not-a-virus:AdWare.Win32.OneStep.c 1 C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\180564.exe Infected: not-a-virus:AdWare.Win32.Relevant.a 1 C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\180564.exe Infected: not-a-virus:WebToolbar.Win32.WhenU.a 1 C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\93179.exe Infected: not-a-virus:AdWare.Win32.NewDotNet 1 C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\93179.exe Infected: not-a-virus:WebToolbar.Win32.WhenU.a 1 C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\93179.exe Infected: not-a-virus:AdWare.Win32.Relevant.a 1 C:\_OTScanIt\MovedFiles\11232008_163103\C_WINDOWS\system32\dhnyrdlr.dll Infected: Trojan.Win32.Monderb.wlv 1 The selected area was scanned.

Rorschach112 View Member Profile	Nov 24 2008, 08:50 AM Post #10
SuperMember Group: Authentic Member Posts: 3,651 Joined: 29-September 07 Member No.: 73,164 Operating System: Windows XP	Hello Please download the OTMoveIt3 by OldTimer or from here. Save it to your desktop. Please double-click OTMoveIt3.exe to run it. (Note: If you are running on Vista, right-click on the file and choose Run As Administrator). Copy the lines in the codebox below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy): CODE :Processes explorer.exe :Services :Reg :Files C:\Documents and Settings\owner\My Documents\My Documents\Other\Misc\sspsetup1.exe C:\Documents and Settings\owner\My Documents\My Documents\Other\Misc\sspsetup1_.exe C:\Documents and Settings\owner\My Documents\My Documents\My Widgets\SpeedFan Temperature Monitor.widget C:\Documents and Settings\owner\My Documents\My Documents\Misc\sspsetup1.exe C:\Documents and Settings\owner\My Documents\My Documents\Misc\sspsetup1_.exe C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07 :Commands [purity] [emptytemp] [start explorer] [Reboot] Return to OTMoveIt3, right click in the "Paste Instructions for Items to be Moved" window (under the yellow bar) and choose Paste. Click the red Moveit! button. Copy everything in the Results window (under the green bar) to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy), and paste it in your next reply. Close OTMoveIt3 Note: If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes. In this case, after the reboot, open Notepad (Start->All Programs->Accessories->Notepad), click File->Open, in the File Name box enter .log and press the Enter key, navigate to the C:\_OTMoveIt\MovedFiles* folder, and open the newest .log file present, and copy/paste the contents of that document back here in your next post. Download random's system information tool (RSIT) by random/random from here and save it to your desktop. Double click on RSIT.exe to run RSIT. Click Continue at the disclaimer screen. Once it has finished, two logs will open. Please post the contents of both log.txt (<<will be maximized) and info.txt (<<will be minimized)

TheDeciever1 View Member Profile	Nov 24 2008, 11:43 AM Post #11
New Member Group: Authentic Member Posts: 9 Joined: 23-November 08 Member No.: 82,541 Operating System: Windows XP Media Center Edition	========== PROCESSES ========== Process explorer.exe killed successfully. ========== SERVICES/DRIVERS ========== ========== REGISTRY ========== ========== FILES ========== C:\Documents and Settings\owner\My Documents\My Documents\Other\Misc\sspsetup1.exe moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\Other\Misc\sspsetup1_.exe moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\My Widgets\SpeedFan Temperature Monitor.widget moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\Misc\sspsetup1.exe moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\Misc\sspsetup1_.exe moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\Ipod Pics\iPod Photo Cache\F00 moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\Ipod Pics\iPod Photo Cache\F01 moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\Ipod Pics\iPod Photo Cache\F02 moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\Ipod Pics\iPod Photo Cache\F03 moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\Ipod Pics\iPod Photo Cache\F04 moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\Ipod Pics\iPod Photo Cache\F05 moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\Ipod Pics\iPod Photo Cache\F06 moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\Ipod Pics\iPod Photo Cache\F07 moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\Ipod Pics\iPod Photo Cache\F08 moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\Ipod Pics\iPod Photo Cache\F09 moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\Ipod Pics\iPod Photo Cache\F10 moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\Ipod Pics\iPod Photo Cache\F11 moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\Ipod Pics\iPod Photo Cache\F12 moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\Ipod Pics\iPod Photo Cache\F13 moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\Ipod Pics\iPod Photo Cache\F14 moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\Ipod Pics\iPod Photo Cache\F15 moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\Ipod Pics\iPod Photo Cache\F16 moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\Ipod Pics\iPod Photo Cache\F17 moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\Ipod Pics\iPod Photo Cache\F18 moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\Ipod Pics\iPod Photo Cache\F19 moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\Ipod Pics\iPod Photo Cache\F20 moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\Ipod Pics\iPod Photo Cache\F21 moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\Ipod Pics\iPod Photo Cache\F22 moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\Ipod Pics\iPod Photo Cache\F23 moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\Ipod Pics\iPod Photo Cache\F24 moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\Ipod Pics\iPod Photo Cache\F25 moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\Ipod Pics\iPod Photo Cache\F26 moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\Ipod Pics\iPod Photo Cache\F27 moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\Ipod Pics\iPod Photo Cache\F28 moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\Ipod Pics\iPod Photo Cache\F29 moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\Ipod Pics\iPod Photo Cache\F30 moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\Ipod Pics\iPod Photo Cache\F31 moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\Ipod Pics\iPod Photo Cache\F32 moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\Ipod Pics\iPod Photo Cache\F33 moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\Ipod Pics\iPod Photo Cache\F34 moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\Ipod Pics\iPod Photo Cache\F35 moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\Ipod Pics\iPod Photo Cache\F36 moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\Ipod Pics\iPod Photo Cache\F37 moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\Ipod Pics\iPod Photo Cache\F38 moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\Ipod Pics\iPod Photo Cache\F39 moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\Ipod Pics\iPod Photo Cache\F40 moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\Ipod Pics\iPod Photo Cache\F41 moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\Ipod Pics\iPod Photo Cache\F42 moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\Ipod Pics\iPod Photo Cache\F43 moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\Ipod Pics\iPod Photo Cache\F44 moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\Ipod Pics\iPod Photo Cache\F45 moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\Ipod Pics\iPod Photo Cache\F46 moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\Ipod Pics\iPod Photo Cache\F47 moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\Ipod Pics\iPod Photo Cache\F48 moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\Ipod Pics\iPod Photo Cache\F49 moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\Ipod Pics\iPod Photo Cache\F50 moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\Ipod Pics\iPod Photo Cache moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\Ipod Pics moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\airsoft\bmx animation moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\airsoft\Chat Airsoft_files moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\airsoft\Glock Corporation Website_files\body_home_files moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\airsoft\Glock Corporation Website_files\header_e1_files moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\airsoft\Glock Corporation Website_files\left_home_files moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\airsoft\Glock Corporation Website_files moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\airsoft\New Folder moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\airsoft moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.rcp.source_3.2.2.r322_v20070104-8pcviKVqd8J7C1U\src moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.rcp.source_3.2.2.r322_v20070104-8pcviKVqd8J7C1U moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.sdk_3.2.2.r322_v20070212\META-INF moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.sdk_3.2.2.r322_v20070212 moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.tomcat_4.1.130.v20060601\about_files moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.tomcat_4.1.130.v20060601\conf moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.tomcat_4.1.130.v20060601\META-INF moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.tomcat_4.1.130.v20060601\webapps\ROOT\WEB-INF moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.tomcat_4.1.130.v20060601\webapps\ROOT moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.tomcat_4.1.130.v20060601\webapps moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.tomcat_4.1.130.v20060601 moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\icons\full\elcl16 moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\icons\full\obj16 moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\icons\full moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\icons moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\META-INF moved successfully. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\contentpage scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\icons\ctool scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\icons\obj48 scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\icons scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\launchbar scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\rootpage scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\standby scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\html scheduled to be moved on reboot. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\swt moved successfully. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\contentpage scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\icons\ctool scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\icons\dtool scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\icons\etool scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\icons\obj48 scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\icons scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\launchbar scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\root scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\swt scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\html scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\swt scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\shared\graphics\contentpage scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\shared\graphics\icons\ctool scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\shared\graphics\icons scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\shared\graphics scheduled to be moved on reboot. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\shared\html moved successfully. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\shared scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905 scheduled to be moved on reboot. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.workbench.compatibility_3.2.0.I20060605-1400\META-INF moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.workbench.compatibility_3.2.0.I20060605-1400 moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.junit4_4.1.0.1\META-INF moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.junit4_4.1.0.1 moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.junit_3.8.1\META-INF moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.junit_3.8.1 moved successfully. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins scheduled to be moved on reboot. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\readme moved successfully. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2) scheduled to be moved on reboot. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\example01\example01\Project1.NET moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\example01\example01 moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\example01 moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\EXT5410_Atheros_WLAN_v5.1.1.9\802ABG_Atheros_v5_1_1_9 moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\EXT5410_Atheros_WLAN_v5.1.1.9 moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\Flame\Flame\Common moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\Flame\Flame\Popup moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\Flame\Flame moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\Flame moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\Fusion moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\generic_theme moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\index2_files moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\index_files moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\Make-Web-Browser.aspx_files\ads_data moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\Make-Web-Browser.aspx_files moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\VolumeId\D Drive ID=F885-AFF2 moved successfully. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\VolumeId moved successfully. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07 scheduled to be moved on reboot. ========== COMMANDS ========== File delete failed. C:\DOCUME~1\jtp\LOCALS~1\Temp\etilqs_QvYszWC1r5LyKctAMiXV scheduled to be deleted on reboot. User's Temp folder emptied. User's Temporary Internet Files folder emptied. User's Internet Explorer cache folder emptied. Local Service Temp folder emptied. File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot. Local Service Temporary Internet Files folder emptied. File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_188.dat scheduled to be deleted on reboot. File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_920.dat scheduled to be deleted on reboot. Windows Temp folder emptied. Java cache emptied. File delete failed. C:\Documents and Settings\jtp\Local Settings\Application Data\Mozilla\Firefox\Profiles\q55r9s7p.default\Cache\_CACHE_MAP_ scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\jtp\Local Settings\Application Data\Mozilla\Firefox\Profiles\q55r9s7p.default\Cache\_CACHE_001_ scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\jtp\Local Settings\Application Data\Mozilla\Firefox\Profiles\q55r9s7p.default\Cache\_CACHE_002_ scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\jtp\Local Settings\Application Data\Mozilla\Firefox\Profiles\q55r9s7p.default\Cache\_CACHE_003_ scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\jtp\Local Settings\Application Data\Mozilla\Firefox\Profiles\q55r9s7p.default\XUL.mfl scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\jtp\Local Settings\Application Data\Mozilla\Firefox\Profiles\q55r9s7p.default\urlclassifier3.sqlite scheduled to be deleted on reboot. FireFox cache emptied. Temp folders emptied. Explorer started successfully OTMoveIt3 by OldTimer - Version 1.0.7.1 log created on 11242008_093140 Files moved on Reboot... Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\contentpage scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\icons\ctool scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\icons\obj48 scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\icons\ctool scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\icons\obj48 scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\icons scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\launchbar scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\rootpage scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\standby scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\contentpage scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\icons\ctool scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\icons\obj48 scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\icons scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\launchbar scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\rootpage scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\standby scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\html scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\contentpage scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\icons\ctool scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\icons\obj48 scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\icons scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\launchbar scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\rootpage scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\standby scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\html scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\contentpage scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\icons\ctool scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\icons\dtool scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\icons\etool scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\icons\obj48 scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\icons\ctool scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\icons\dtool scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\icons\etool scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\icons\obj48 scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\icons scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\launchbar scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\root scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\swt scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\contentpage scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\icons\ctool scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\icons\dtool scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\icons\etool scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\icons\obj48 scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\icons scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\launchbar scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\root scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\swt scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\html scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\swt scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\contentpage scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\icons\ctool scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\icons\dtool scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\icons\etool scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\icons\obj48 scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\icons scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\launchbar scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\root scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\swt scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\html scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\swt scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\shared\graphics\contentpage scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\shared\graphics\icons\ctool scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\shared\graphics\icons\ctool scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\shared\graphics\icons scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\shared\graphics\contentpage scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\shared\graphics\icons\ctool scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\shared\graphics\icons scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\shared\graphics scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\shared\graphics\contentpage scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\shared\graphics\icons\ctool scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\shared\graphics\icons scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\shared\graphics scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\shared scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\contentpage scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\icons\ctool scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\icons\obj48 scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\icons scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\launchbar scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\rootpage scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\standby scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\html scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\contentpage scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\icons\ctool scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\icons\dtool scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\icons\etool scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\icons\obj48 scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\icons scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\launchbar scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\root scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\swt scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\html scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\swt scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\shared\graphics\contentpage scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\shared\graphics\icons\ctool scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\shared\graphics\icons scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\shared\graphics scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\shared scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\contentpage scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\icons\ctool scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\icons\obj48 scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\icons scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\launchbar scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\rootpage scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\standby scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\html scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\contentpage scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\icons\ctool scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\icons\dtool scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\icons\etool scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\icons\obj48 scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\icons scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\launchbar scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\root scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\swt scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\html scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\swt scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\shared\graphics\contentpage scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\shared\graphics\icons\ctool scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\shared\graphics\icons scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\shared\graphics scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\shared scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905 scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\contentpage scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\icons\ctool scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\icons\obj48 scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\icons scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\launchbar scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\rootpage scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\standby scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\html scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\contentpage scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\icons\ctool scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\icons\dtool scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\icons\etool scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\icons\obj48 scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\icons scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\launchbar scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\root scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\swt scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\html scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\swt scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\shared\graphics\contentpage scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\shared\graphics\icons\ctool scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\shared\graphics\icons scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\shared\graphics scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\shared scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905 scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\contentpage scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\icons\ctool scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\icons\obj48 scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\icons scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\launchbar scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\rootpage scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\standby scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\html scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\contentpage scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\icons\ctool scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\icons\dtool scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\icons\etool scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\icons\obj48 scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\icons scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\launchbar scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\root scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\swt scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\html scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\swt scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\shared\graphics\contentpage scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\shared\graphics\icons\ctool scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\shared\graphics\icons scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\shared\graphics scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\shared scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905 scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\contentpage scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\icons\ctool scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\icons\obj48 scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\icons scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\launchbar scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\rootpage scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\standby scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\html scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\contentpage scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\icons\ctool scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\icons\dtool scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\icons\etool scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\icons\obj48 scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\icons scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\launchbar scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\root scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\swt scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\html scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\swt scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\shared\graphics\contentpage scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\shared\graphics\icons\ctool scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\shared\graphics\icons scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\shared\graphics scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\shared scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905 scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2) scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\contentpage scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\icons\ctool scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\icons\obj48 scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\icons scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\launchbar scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\rootpage scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics\standby scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\graphics scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles\html scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\circles scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\contentpage scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\icons\ctool scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\icons\dtool scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\icons\etool scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\icons\obj48 scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\icons scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\launchbar scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\root scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics\swt scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\graphics scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\html scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh\swt scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\purpleMesh scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\shared\graphics\contentpage scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\shared\graphics\icons\ctool scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\shared\graphics\icons scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\shared\graphics scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes\shared scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905\themes scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins\org.eclipse.ui.intro.universal_3.2.1.R321_v20060905 scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse\plugins scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2)\eclipse scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\eclipse-SDK-3.2.2-win32(2) scheduled to be moved on reboot. Folder move failed. C:\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07 scheduled to be moved on reboot. File C:\DOCUME~1\jtp\LOCALS~1\Temp\etilqs_QvYszWC1r5LyKctAMiXV not found! C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat moved successfully. C:\WINDOWS\temp\Perflib_Perfdata_188.dat moved successfully. C:\WINDOWS\temp\Perflib_Perfdata_920.dat moved successfully. C:\Documents and Settings\jtp\Local Settings\Application Data\Mozilla\Firefox\Profiles\q55r9s7p.default\Cache\_CACHE_MAP_ moved successfully. C:\Documents and Settings\jtp\Local Settings\Application Data\Mozilla\Firefox\Profiles\q55r9s7p.default\Cache\_CACHE_001_ moved successfully. C:\Documents and Settings\jtp\Local Settings\Application Data\Mozilla\Firefox\Profiles\q55r9s7p.default\Cache\_CACHE_002_ moved successfully. C:\Documents and Settings\jtp\Local Settings\Application Data\Mozilla\Firefox\Profiles\q55r9s7p.default\Cache\_CACHE_003_ moved successfully. C:\Documents and Settings\jtp\Local Settings\Application Data\Mozilla\Firefox\Profiles\q55r9s7p.default\XUL.mfl moved successfully. C:\Documents and Settings\jtp\Local Settings\Application Data\Mozilla\Firefox\Profiles\q55r9s7p.default\urlclassifier3.sqlite moved successfully. Logfile of random's system information tool 1.04 (written by random/random) Run by jtp at 2008-11-24 09:39:50 Microsoft Windows XP Professional Service Pack 3 System drive C: has 2 GB (4%) free of 54 GB Total RAM: 1790 MB (72% free) Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 9:39:56 AM, on 11/24/2008 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\notepad.exe C:\Acer\Empowering Technology\ePerformance\MemCheck.exe C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\WINDOWS\eHome\ehRecvr.exe C:\WINDOWS\eHome\ehSched.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\CDBurnerXP\NMSAccessU.exe C:\WINDOWS\system32\PnkBstrA.exe C:\WINDOWS\RTHDCPL.EXE C:\WINDOWS\system32\PnkBstrB.exe C:\Acer\Empowering Technology\ePower\ePower_DMC.exe C:\PROGRA~1\AVG\AVG8\avgrsx.exe C:\Program Files\Microsoft IntelliType Pro\itype.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Search Settings\SearchSettings.exe C:\Program Files\Adobe\Adobe Photoshop Lightroom 1.3\apdproxy.exe C:\Program Files\Viewpoint\Common\ViewpointService.exe C:\Program Files\Microsoft IntelliType Pro\dpupdchk.exe C:\Program Files\Common Files\Real\Update_OB\realsched.exe C:\Program Files\iTunes2\iTunesHelper.exe C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2G1.EXE C:\Program Files\DAEMON Tools Lite\daemon.exe C:\PROGRA~1\AVG\AVG8\avgemc.exe C:\Documents and Settings\jtp\Local Settings\Application Data\Google\Update\GoogleUpdate.exe C:\WINDOWS\system32\wbem\wmiapsrv.exe C:\Program Files\iPod\bin\iPodService.exe C:\WINDOWS\system32\wbem\unsecapp.exe C:\WINDOWS\system32\dllhost.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Documents and Settings\jtp\Desktop\RSIT.exe C:\Program Files\trend micro\jtp.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.atcomet.com/b/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://global.acer.com R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://global.acer.com/ R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = .local R3 - URLSearchHook: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - (no file) O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll O2 - BHO: (no name) - {48a618ab-a4ab-4535-b6f7-f18e9ab57fa2} - C:\WINDOWS\system32\fehojipa.dll (file missing) O2 - BHO: DealioBHO Class - {6A87B991-A31F-4130-AE72-6D0C294BF082} - C:\Program Files\Dealio\kb127\Dealio.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll O3 - Toolbar: Browster - {2EF39867-654F-48b6-8F93-B4FC3E8C6844} - C:\Program Files\Browster\Browster.dll O3 - Toolbar: Dealio - {E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} - C:\Program Files\Dealio\kb127\Dealio.dll O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\WINDOWS\system32\eDStoolbar.dll O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE O4 - HKLM\..\Run: [KTPWare] C:\Program Files\Elantech\ktp.exe O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [ePower_DMC] C:\Acer\Empowering Technology\ePower\ePower_DMC.exe O4 - HKLM\..\Run: [itype] "C:\Program Files\Microsoft IntelliType Pro\itype.exe" O4 - HKLM\..\Run: [au] C:\Program Files\Dealio\DealioAU.exe O4 - HKLM\..\Run: [SearchSettings] C:\Program Files\Search Settings\SearchSettings.exe O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Adobe Photoshop Lightroom 1.3\apdproxy.exe" O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes2\iTunesHelper.exe" O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe 1 O4 - HKLM\..\Run: [Auto EPSON Stylus CX5400 on DELL] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2G1.EXE /P32 "Auto EPSON Stylus CX5400 on DELL" /O14 "\\DELL\Printer" /M "Stylus CX5400" O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\jtp\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O8 - Extra context menu item: Compare Prices with &Dealio - C:\Documents and Settings\jtp\Application Data\Dealio\kb127\res\DealioSearch.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb127\Dealio.dll O9 - Extra 'Tools' menuitem: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb127\Dealio.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O10 - Unknown file in Winsock LSP: c:\windows\system32\prxernsp.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\prxerdrv.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\prxerdrv.dll O16 - DPF: vzTCPConfig - http://www2.verizon.net/help/fios_settings...vzTCPConfig.CAB O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll O16 - DPF: {BF985246-09BF-11D2-BE62-006097DF57F6} (SimCityX Control) - http://simcity.ea.com/play/classic/SimCityX.cab O16 - DPF: {E87F6C8E-16C0-11D3-BEF7-009027438003} (Persits Software XUpload) - http://upload-v5.streamload.com/Upload/XUpload.ocx O17 - HKLM\System\CCS\Services\Tcpip\..\{4AD2D21C-5561-46F8-A2A4-B1A9623DBF8E}: NameServer = 192.168.1.1,68.238.64.12 O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll O20 - AppInit_DLLs: avgrsstx.dll ES%aooD ???D?CHINE\SOFTWARE\Microsoft\Code Store Dat,C:\WINDOWS\system32\nibaniyu.dll c:\windows\system32\sibofuda.dll O23 - Service: Memory Check Service (AcerMemUsageCheckService) - Acer Inc. - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe O23 - Service: BlackICE - Unknown owner - H:\blackice\blackd.exe (file missing) O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe O23 - Service: Imapi Helper - Alex Feinman - C:\Program Files\Alex Feinman\ISO Recorder\ImapiHelper.exe O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe O23 - Service: Viewpoint Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe -- End of file - 8749 bytes ======Scheduled tasks folder====== C:\WINDOWS\tasks\Critical Battery Alarm Program.job C:\WINDOWS\tasks\MP Scheduled Scan.job C:\WINDOWS\tasks\Microsoft_Hardware_Launch_IType_exe.job C:\WINDOWS\tasks\GoogleUpdateTaskUser.job ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}] RealPlayer Download and Record Plugin for Internet Explorer - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll [2008-09-20 308856] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{48a618ab-a4ab-4535-b6f7-f18e9ab57fa2}] C:\WINDOWS\system32\fehojipa.dll [] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6A87B991-A31F-4130-AE72-6D0C294BF082}] DealioBHO Class - C:\Program Files\Dealio\kb127\Dealio.dll [2008-05-26 3170144] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] SSVHelper Class - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll [2007-07-12 501136] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] {2EF39867-654F-48b6-8F93-B4FC3E8C6844} - Browster - C:\Program Files\Browster\Browster.dll [2006-08-11 1540096] {E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} - Dealio - C:\Program Files\Dealio\kb127\Dealio.dll [2008-05-26 3170144] {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - Acer eDataSecurity Management - C:\WINDOWS\system32\eDStoolbar.dll [2006-03-08 106496] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "SkyTel"=C:\WINDOWS\SkyTel.EXE [2006-05-16 2879488] "KTPWare"=C:\Program Files\Elantech\ktp.exe [2006-03-28 512000] "SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2006-10-22 815104] "RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2006-06-28 16248320] "ePower_DMC"=C:\Acer\Empowering Technology\ePower\ePower_DMC.exe [2006-05-30 421888] "itype"=C:\Program Files\Microsoft IntelliType Pro\itype.exe [2007-08-31 988584] "au"=C:\Program Files\Dealio\DealioAU.exe [2008-05-26 595296] "SearchSettings"=C:\Program Files\Search Settings\SearchSettings.exe [2008-06-12 991584] "Adobe Photo Downloader"=C:\Program Files\Adobe\Adobe Photoshop Lightroom 1.3\apdproxy.exe [2007-12-04 61440] "TkBellExe"=C:\Program Files\Common Files\Real\Update_OB\realsched.exe [2008-09-20 185896] "AppleSyncNotifier"=C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe [2008-10-01 111936] "QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2008-09-06 413696] "iTunesHelper"=C:\Program Files\iTunes2\iTunesHelper.exe [2008-10-01 289576] "eDataSecurity Loader"=C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe [2006-03-17 345088] "Auto EPSON Stylus CX5400 on DELL"=C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2G1.EXE [2003-05-26 99840] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\daemon.exe [2008-07-24 490952] "Google Update"=C:\Documents and Settings\jtp\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2008-10-18 133104] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\!AVG Anti-Spyware] [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acer ePresentation HPD] C:\Acer\Empowering Technology\ePresentation\ePresentation.exe [2006-03-31 204800] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr] C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\amd_dc_opt] C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AMD_Display] C:\Program Files\AMD\AMD Power Monitor\AMD_PwrMon.exe [2008-05-05 1449984] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATICCC] C:\Program Files\ATI Technologies\ATI.ACE\cli.exe [2006-01-02 45056] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AtiTrayTools] [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe [2008-07-04 1232152] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe [2006-04-15 53248] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Boot] C:\Acer\Empowering Technology\ePower\Boot.exe [2006-03-15 579584] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ccApp] [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EA Core] C:\Program Files\Electronic Arts\EA Link\Core.exe [2007-04-17 2887680] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe [2006-03-17 345088] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ehTray] C:\WINDOWS\ehome\ehtray.exe [2005-08-05 64512] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ePower_DMC] C:\Acer\Empowering Technology\ePower\ePower_DMC.exe [2006-05-30 421888] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\eRecoveryService] C:\Acer\Empowering Technology\eRecovery\eRAgent.exe [2006-06-01 413696] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\hcsystray] C:\Program Files\Kuma Games\hcsystray\hc_tray.exe [2006-11-01 30928] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IMJPMIG8.1] C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE [2004-08-10 208952] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper] F:\Itunes\iTunesHelper.exe [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KernelFaultCheck] C:\WINDOWS\system32\dumprep 0 -k [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LaunchApp] [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe [2006-06-23 602112] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS] C:\Program Files\Messenger\msmsgs.exe [2008-04-13 1695232] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr] [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe [2004-08-10 59392] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\My Web Search Bar] [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MyWebSearch Email Plugin] [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nmctxth] C:\Program Files\Common Files\Pure Networks Shared\Platform\nmctxth.exe [2008-01-08 451896] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ntiMUI] C:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe [2005-05-11 45056] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PcThrust] [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2004-08-10 455168] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2004-08-10 455168] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PowerStrip] c:\program files\powerstrip\pstrip.exe [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] C:\Program Files\QuickTime\qttask.exe [2008-09-06 413696] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL] C:\WINDOWS\RTHDCPL.EXE [2006-06-28 16248320] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SkyTel] C:\WINDOWS\SkyTel.EXE [2006-05-16 2879488] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpySweeper] [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\STYLEXP] C:\Program Files\TGTSoft\StyleXP\StyleXP.exe -Hide [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SugarSync] [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe [2007-07-12 132496] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2006-10-22 815104] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Uniblue SpyEraser] [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\updateMgr] c:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe [2006-03-30 313472] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Acer Empowering Technology.lnk] C:\Acer\EMPOWE~1\ACEREM~1.EXE [2006-03-27 45056] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Gamma Loader.lnk] C:\PROGRA~1\COMMON~1\Adobe\CALIBR~1\ADOBEG~1.EXE [1999-11-04 113664] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk] C:\PROGRA~1\Adobe\ACROBA~1.0\Reader\READER~1.EXE [2008-04-23 29696] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^owner^Start Menu^Programs^Startup^OpenOffice.org 2.2.lnk] C:\PROGRA~1\OPENOF~1.2\program\QUICKS~1.EXE [2007-02-02 393216] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services] "AVG Anti-Spyware Guard"=2 "Automatic LiveUpdate Scheduler"=2 "ATI Smart"=2 "Ati HotKey Poller"=2 "Apple Mobile Device"=2 "Adobe LM Service"=3 "WebrootSpySweeperService"=2 "Symantec Core LC"=2 "SPBBCSvc"=2 "SNDSrvc"=2 "SAVScan"=3 "RapApp"=3 "OneStep Search Service"=2 "NSCService"=3 "nmservice"=2 "nmraapache"=3 "navapsvc"=2 "LiveUpdate"=3 "LightScribeService"=2 "ccSetMgr"=2 "ccProxy"=2 "ccISPwdSvc"=3 "ccEvtMgr"=2 C:\Documents and Settings\jtp\Start Menu\Programs\Startup Adobe Gamma.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLS"="avgrsstx.dll ES%aooD ???D?CHINE\SOFTWARE\Microsoft\Code Store Dat,C:\WINDOWS\system32\nibaniyu.dll c:\windows\system32\sibofuda.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent] C:\WINDOWS\system32\Ati2evxx.dll [2006-04-27 61440] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa] "notification packages"=scecli C:\WINDOWS\system32\nibaniyu.dll [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 "InstallVisualStyle"=C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles "InstallTheme"=C:\WINDOWS\Resources\Themes\Royale.theme [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveTypeAutoRun"=145 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe::enabled:@xpsp2res.dll,-22019" "C:\Program Files\Messenger\MSMSGS.EXE"="C:\Program Files\Messenger\MSMSGS.EXE::Enabled:Windows Messenger" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe::Enabled:@xpsp3res.dll,-20000" "C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe::Enabled:iTunes" "C:\Program Files\LimeWire2\LimeWire.exe"="C:\Program Files\LimeWire2\LimeWire.exe::Enabled:LimeWire" "C:\Program Files\AVG\AVG8\avgupd.exe"="C:\Program Files\AVG\AVG8\avgupd.exe::Enabled:avgupd.exe" "C:\Program Files\AVG\AVG8\avgemc.exe"="C:\Program Files\AVG\AVG8\avgemc.exe::Enabled:avgemc.exe" "C:\Program Files\FrostWire\FrostWire.exe"="C:\Program Files\FrostWire\FrostWire.exe::Enabled:LimeWire" "C:\Program Files\DNA\btdna.exe"="C:\Program Files\DNA\btdna.exe::Enabled:DNA" "C:\Program Files\BitTorrent\bittorrent.exe"="C:\Program Files\BitTorrent\bittorrent.exe::Enabled:BitTorrent" "C:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe"="C:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe:LocalSubNet:Enabled:Pure Networks Platform Service" "C:\WINDOWS\System32\PnkBstrA.exe"="C:\WINDOWS\System32\PnkBstrA.exe::Enabled:PnkBstrA" "C:\WINDOWS\System32\PnkBstrB.exe"="C:\WINDOWS\System32\PnkBstrB.exe::Enabled:PnkBstrB" "C:\Program Files\EA GAMES\Battlefield 2\BF2.exe"="C:\Program Files\EA GAMES\Battlefield 2\BF2.exe::Enabled:Battlefield 2" "C:\Documents and Settings\All Users\Application Data\NexonUS\NGM\NGM.exe"="C:\Documents and Settings\All Users\Application Data\NexonUS\NGM\NGM.exe::Enabled:Nexon Game Manager" "C:\Nexon\Combat Arms\NMService.exe"="C:\Nexon\Combat Arms\NMService.exe::Enabled:Nexon Messenger Core" "C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe::Enabled:Bonjour" "C:\Program Files\iTunes2\iTunes.exe"="C:\Program Files\iTunes2\iTunes.exe::Enabled:iTunes" "C:\WINDOWS\System32\spool\drivers\W32X86\3\SAGENT4.EXE"="C:\WINDOWS\System32\spool\drivers\W32X86\3\SAGENT4.EXE::Disabled:SAgent4" "C:\Program Files\Ufasoft\SocksChain\SocksChain.exe"="C:\Program Files\Ufasoft\SocksChain\SocksChain.exe::Enabled:SocksChain GUI" "C:\WINDOWS\EXPLORER.EXE"="C:\WINDOWS\EXPLORER.EXE::Enabled:Explorer" "C:\WINDOWS\System32\winlogon.exe"="C:\WINDOWS\System32\winlogon.exe::Enabled:winlogon" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe::enabled:@xpsp2res.dll,-22019" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe::Enabled:@xpsp3res.dll,-20000" ======List of files/folders created in the last 1 months====== 2008-11-24 09:39:50 ----D---- C:\rsit 2008-11-24 09:39:50 ----D---- C:\Program Files\trend micro 2008-11-24 09:31:40 ----D---- C:\_OTMoveIt 2008-11-23 16:53:41 ----D---- C:\Documents and Settings\jtp\Application Data\Malwarebytes 2008-11-23 16:53:36 ----D---- C:\Program Files\Malwarebytes' Anti-Malware 2008-11-23 16:53:36 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes 2008-11-23 16:31:03 ----D---- C:\_OTScanIt 2008-11-23 14:00:11 ----A---- C:\lopR.txt 2008-11-17 19:46:01 ----D---- C:\WINDOWS\Logs 2008-11-12 20:00:04 ----HD---- C:\WINDOWS\$NtUninstallKB957097$ 2008-11-12 19:59:54 ----HD---- C:\WINDOWS\$NtUninstallKB954459$ 2008-11-12 19:59:42 ----HD---- C:\WINDOWS\$NtUninstallKB955069$ 2008-11-10 21:55:50 ----D---- C:\Documents and Settings\jtp\Application Data\PowerSHAPE 2008-11-10 21:54:57 ----A---- C:\logunstdll.txt 2008-11-10 21:53:53 ----D---- C:\Program Files\Common Files\Delcam 2008-11-10 21:53:52 ----D---- C:\Program Files\Delcam 2008-11-10 21:50:24 ----D---- C:\temp 2008-11-02 21:50:12 ----D---- C:\Program Files\IDoser v4 2008-10-31 23:33:20 ----A---- C:\WINDOWS\OEWABLog.txt 2008-10-29 22:08:47 ----A---- C:\WINDOWS\system32\TweakUI.exe 2008-10-29 20:37:07 ----D---- C:\Program Files\Microsoft Synchronization Services 2008-10-29 20:37:06 ----D---- C:\Program Files\Microsoft SQL Server Compact Edition ======List of files/folders modified in the last 1 months====== 2008-11-24 09:35:12 ----A---- C:\WINDOWS\SchedLgU.Txt 2008-11-23 16:48:56 ----A---- C:\trace.txt 2008-11-23 15:44:12 ----A---- C:\WINDOWS\ntbtlog.txt 2008-11-17 16:34:58 ----A---- C:\WINDOWS\system32\PnkBstrB.exe 2008-11-12 20:00:00 ----A---- C:\WINDOWS\imsins.BAK 2008-11-11 21:41:28 ----A---- C:\WINDOWS\ModemLog_LG CDMA USB Modem.txt ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R1 amdtools;AMD Special Tools Driver; C:\WINDOWS\system32\DRIVERS\amdtools.sys [2003-10-22 20480] R1 AvgLdx86;AVG AVI Loader Driver x86; C:\WINDOWS\System32\Drivers\avgldx86.sys [2008-07-04 96520] R1 AvgMfx86;AVG On-access Scanner Minifilter Driver x86; C:\WINDOWS\System32\Drivers\avgmfx86.sys [2008-07-04 26824] R1 SysTool;SysTool Overclocking Utility; C:\WINDOWS\system32\DRIVERS\SysTool.sys [2006-11-10 24064] R1 truecrypt;truecrypt; \??\C:\WINDOWS\system32\Drivers\truecrypt.sys [] R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-13 8832] R1 WS2IFSL;Windows Socket 2.0 Non-IFS Service Provider Support Environment; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2004-08-10 12032] R2 AvgTdiX;AVG8 Network Redirector; C:\WINDOWS\System32\Drivers\avgtdix.sys [2008-07-04 76040] R2 DritekPortIO;Dritek General Port I/O; \??\C:\PROGRA~1\LAUNCH~1\DPortIO.sys [] R2 int15;int15; \??\C:\WINDOWS\system32\drivers\int15.sys [] R2 irda;IrDA Protocol; C:\WINDOWS\system32\DRIVERS\irda.sys [2008-04-13 88192] R2 pnarp;Pure Networks Device Discovery Driver; C:\WINDOWS\system32\DRIVERS\pnarp.sys [2008-01-08 23992] R2 purendis;Pure Networks Wireless Driver; C:\WINDOWS\system32\DRIVERS\purendis.sys [2008-01-08 25272] R2 tvicport;tvicport; \??\C:\WINDOWS\system32\drivers\tvicport.sys [] R2 windrvNT;windrvNT; \??\C:\WINDOWS\system32\windrvNT.sys [] R2 zntport;zntport; \??\C:\WINDOWS\system32\drivers\zntport.sys [] R3 AmdLLD;AMD Low Level Device Driver; C:\WINDOWS\system32\DRIVERS\AmdLLD.sys [2007-06-29 34304] R3 AR5211;Atheros Wireless Network Adapter Service; C:\WINDOWS\system32\DRIVERS\ar5211.sys [2007-07-26 547904] R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2006-04-27 1540096] R3 Cam5603D;Acer OrbiCam; C:\WINDOWS\System32\Drivers\BisonCam.sys [2006-05-12 806272] R3 CmBatt;Microsoft ACPI Control Method Battery Driver; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2008-04-13 13952] R3 DKbFltr;Dritek Keyboard Filter Driver; C:\WINDOWS\system32\DRIVERS\DKbFltr.sys [2004-12-07 16896] R3 EMSCR;EMSCR; C:\WINDOWS\system32\DRIVERS\EMS7SK.sys [2006-05-25 61056] R3 ESDCR;ESDCR; C:\WINDOWS\system32\DRIVERS\ESD7SK.sys [2006-05-25 40064] R3 ESMCR;ESMCR; C:\WINDOWS\system32\DRIVERS\ESM7SK.sys [2006-05-25 74752] R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\System32\Drivers\GEARAspiWDM.sys [2008-04-17 15464] R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-06-28 4304384] R3 NTIDrvr;Upper Class Filter Driver; C:\WINDOWS\system32\DRIVERS\NTIDrvr.sys [2006-06-01 6144] R3 psdfilter;psdfilter; \??\C:\WINDOWS\system32\Drivers\psdfilter.sys [] R3 psdvdisk;psdvdisk; \??\C:\WINDOWS\system32\Drivers\psdvdisk.sys [] R3 Rasirda;WAN Miniport (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584] R3 sdbus;sdbus; C:\WINDOWS\system32\DRIVERS\sdbus.sys [2008-04-13 79232] R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2006-10-22 199776] R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208] R3 usbhub;USB2 Enabled Hub; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520] R3 usbohci;Microsoft USB Open Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-13 17152] S1 AmdK8;AMD Processor Driver; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2006-05-10 36864] S1 ATITool;ATITool Overclocking Utility; C:\WINDOWS\system32\DRIVERS\ATITool.sys [2006-11-10 24064] S2 ASInsHelp;ASInsHelp; \??\C:\WINDOWS\system32\drivers\AsInsHelp32.sys [] S2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [] S2 Sentinel;Sentinel; C:\WINDOWS\System32\Drivers\SENTINEL.SYS [] S3 aqci6q98;aqci6q98; C:\WINDOWS\system32\drivers\aqci6q98.sys [] S3 Arp1394;1394 ARP Client Protocol; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800] S3 btaudio;Bluetooth Audio Device; C:\WINDOWS\system32\drivers\btaudio.sys [] S3 BTDriver;Bluetooth Virtual Communications Driver; C:\WINDOWS\system32\DRIVERS\btport.sys [] S3 BTKRNL;Bluetooth Bus Enumerator; C:\WINDOWS\system32\DRIVERS\btkrnl.sys [] S3 BTWDNDIS;Bluetooth LAN Access Server; C:\WINDOWS\system32\DRIVERS\btwdndis.sys [] S3 CCDECODE;Closed Caption Decoder; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024] S3 cpuz126;cpuz126; \??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\cpuz.sys [] S3 EagleNT;EagleNT; \??\C:\WINDOWS\system32\drivers\EagleNT.sys [] S3 ENTECH;ENTECH; \??\C:\WINDOWS\system32\DRIVERS\ENTECH.sys [] S3 HidUsb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368] S3 HSF_DPV;HSF_DPV; C:\WINDOWS\system32\DRIVERS\HSX_DPV.sys [] S3 HSXHWAZL;HSXHWAZL; C:\WINDOWS\system32\DRIVERS\HSXHWAZL.sys [] S3 irsir;Microsoft Serial Infrared Driver; C:\WINDOWS\system32\DRIVERS\irsir.sys [2001-08-17 18688] S3 jeEYRZGouF;jeEYRZGouF; \??\C:\Documents and Settings\jtp\Desktop\mhs\IFTH [] S3 Ktp;Elantech Touchpad; C:\WINDOWS\system32\DRIVERS\Ktp.sys [2006-03-17 27904] S3 lgatbus;LG USB Composite Device driver (WDM); C:\WINDOWS\system32\DRIVERS\lgatbus.sys [2006-05-19 43024] S3 lgatmdm;LG CDMA USB Modem Drivers; C:\WINDOWS\system32\DRIVERS\lgatmdm.sys [2006-05-19 77104] S3 lgatserd;LG CDMA USB Modem Diagnostic Serial Port Drivers (WDM); C:\WINDOWS\system32\DRIVERS\lgatserd.sys [2006-05-19 60816] S3 MHNDRV;MHN driver; C:\WINDOWS\system32\DRIVERS\mhndrv.sys [2004-08-10 11008] S3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-17 12160] S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504] S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248] S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880] S3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824] S3 NSNDIS5;NSNDIS5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\NSNDIS5.SYS [] S3 PnkBstrK;PnkBstrK; \??\C:\WINDOWS\system32\drivers\PnkBstrK.sys [] S3 RapDrv;RapDrv; \??\C:\WINDOWS\system32\drivers\RapDrv.sys [] S3 RapFile;RapFile; \??\C:\WINDOWS\system32\drivers\RapFile.sys [] S3 RapNet;RapNet; \??\C:\WINDOWS\system32\drivers\RapNet.sys [] S3 RivaTuner32;RivaTuner32; \??\C:\Program Files\RivaTuner v2.09\RivaTuner32.sys [] S3 RT2500;RT2500 Wireless Driver; C:\WINDOWS\system32\DRIVERS\RT2500.sys [] S3 RT73;Belkin USB Network Adapter; C:\WINDOWS\system32\DRIVERS\rt73.sys [2005-08-02 232192] S3 RTL8023xp;Realtek 10/100/1000 NIC Family all in one NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys [2005-09-30 78720] S3 SjdhYlN;SjdhYlN; \??\C:\Documents and Settings\jtp\Desktop\mhs\BUIJ [] S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136] S3 SMCIRDA;SMSC IrCC Miniport Device Driver; C:\WINDOWS\system32\DRIVERS\smcirda.sys [2004-12-09 46592] S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232] S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [2008-10-01 32000] S3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-10 31616] S3 usbprint;Microsoft USB PRINTER Class; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856] S3 usbser;Motorola USB Modem Driver; C:\WINDOWS\system32\DRIVERS\usbser.sys [2008-04-13 26112] S3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368] S3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSX_CNXT.sys [] S3 WpdUsb;WpdUsb; C:\WINDOWS\System32\Drivers\wpdusb.sys [2006-10-18 38528] S3 WSTCODEC;World Standard Teletext Codec; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200] S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568] S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944] S4 black;black; C:\WINDOWS\System32\drivers\BlackDrv.sys [2005-03-30 229331] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AcerMemUsageCheckService;Memory Check Service; C:\Acer\Empowering Technology\ePerformance\MemCheck.exe [2006-03-29 28672] R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2008-10-01 116040] R2 avg8emc;AVG8 E-mail Scanner; C:\PROGRA~1\AVG\AVG8\avgemc.exe [2008-07-04 873752] R2 avg8wd;AVG8 WatchDog; C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2008-07-04 231192] R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2008-08-29 238888] R2 ehRecvr;Media Center Receiver Service; C:\WINDOWS\eHome\ehRecvr.exe [2005-12-15 237568] R2 ehSched;Media Center Scheduler Service; C:\WINDOWS\eHome\ehSched.exe [2005-08-05 102912] R2 Irmon;Infrared Monitor; C:\WINDOWS\system32\svchost.exe [2008-04-13 14336] R2 McrdSvc;Media Center Extender Service; C:\WINDOWS\ehome\mcrdsvc.exe [2005-08-05 99328] R2 NMSAccessU;NMSAccessU; C:\Program Files\CDBurnerXP\NMSAccessU.exe [2008-06-15 71096] R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2008-07-28 66872] R2 PnkBstrB;PnkBstrB; C:\WINDOWS\system32\PnkBstrB.exe [2008-11-17 203272] R2 Viewpoint Service;Viewpoint Service; C:\Program Files\Viewpoint\Common\ViewpointService.exe [2008-04-04 30152] R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2008-10-01 536872] S2 BlackICE;BlackICE; H:\blackice\blackd.exe [] S2 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2008-04-13 267776] S3 Adobe LM Service;Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2008-09-09 72704] S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312] S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632] S3 Dmiord;Dmiord; C:\WINDOWS\system32\gdi.exe [2004-08-10 24576] S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104] S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [2005-11-14 69632] S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664] S3 Imapi Helper;Imapi Helper; C:\Program Files\Alex Feinman\ISO Recorder\ImapiHelper.exe [2006-01-05 163840] S3 MHN;MHN; C:\WINDOWS\System32\svchost.exe [2008-04-13 14336] S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-10-18 913408] S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-13 14336] S4 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2006-04-27 405504] S4 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2006-02-17 73728] S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096] S4 nmraapache;Pure Networks Net2Go Service; C:\Program Files\Pure Networks\Network Magic\WebServer\bin\nmraapache.exe [2008-01-18 12800] S4 nmservice;Pure Networks Platform Service; C:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe [2008-01-08 451896] S4 RapApp;RapApp; H:\blackice\rapapp.exe [] -----------------EOF----------------- info.txt logfile of random's system information tool 1.04 2008-11-24 09:40:00 ======Uninstall list====== -->C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks\|RealPlayer\|6.0 -->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Acer Inc.\Acer English Online Help Creator\Uninst.isu" -->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf 181692-->MsiExec.exe /X{CF7F1A5A-2417-4EEE-91F3-2347C481DC81} 181949-->MsiExec.exe /X{440609EF-C38F-48EE-84B7-5AB670D7E49B} 7-Zip 4.44 beta-->"C:\Program Files\7-Zip\Uninstall.exe" Abexo Defragmenter Pro Plus-->C:\Program Files\Abexo\adpp\uninst.exe Abexo Free Registry Cleaner-->C:\Program Files\Abexo\afrc\uninst.exe Acer eDataSecurity Management 2.0.3076-->C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\1150\INTEL3~1\IDriver.exe /M{4AD13F68-CADA-4C6B-9759-C33753F89908} /l1033 Acer eDataSecurity Management-->C:\Acer\Empowering Technology\eDataSecurity\eDStbmngr.exe UNINSTALL 1 Acer Empowering Technology-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AB6097D9-D722-4987-BD9E-A076E2848EE2}\setup.exe" -l0x9 -removeonly Acer ePerformance Management-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7057702F-6D71-4F30-8000-9E72BC771887}\setup.exe" -l0x9 -removeonly Acer ePower Management-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{58E5844B-7CE2-413D-83D1-99294BF6C74F}\Setup.exe" -l0x9 Acer ePresentation Management-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{BF839132-BD43-4056-ACBF-4377F4A88E2A}\Setup.exe" -l0x9 Acer eSettings Management-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1F2C8256-2773-46C7-9ABA-3E39C24ABB51}\setup.exe" -l0x9 -removeonly Acer GridVista-->C:\WINDOWS\UnInst32.exe GridV.UNI Acer OrbiCam-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{4A57592C-FF92-4083-97A9-92783BD5AFB4}\Setup.EXE" -l0x9 Acer Screensaver-->MsiExec.exe /I{D458BBDC-0363-42E0-8FF9-4736E3CB3CA2} Adobe Bridge 1.0-->MsiExec.exe /I{B74D4E10-1033-0000-0000-000000000001} Adobe Common File Installer-->MsiExec.exe /I{8EDBA74D-0686-4C99-BFDD-F894678E5B39} Adobe Download Manager 2.2 (Remove Only)-->"C:\Program Files\Common Files\Adobe\ESD\uninst.exe" Adobe Flash Player ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe Adobe Flash Player Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe Adobe Help Center 1.0-->MsiExec.exe /I{E9787678-1033-0000-8E67-000000000001} Adobe Photoshop CS-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EFB21DE7-8C19-4A88-BB28-A766E16493BC}\setup.exe" -l0x9 Adobe Photoshop CS2-->msiexec /I {236BB7C4-4419-42FD-0409-1E257A25E34D} Adobe Reader 7.1.0-->MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A71000000002} Adobe Shockwave Player-->C:\WINDOWS\system32\MACROMED\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\MACROMED\SHOCKW~1\INSTALL.LOG Adobe Stock Photos 1.0-->MsiExec.exe /I{786C5747-1033-0000-B58E-000000000001} AMD CPUInfo-->MsiExec.exe /X{3E8EDCF6-4B62-42CF-A4DD-49700E93134F} AMD Power Monitor-->MsiExec.exe /X{EA1A669B-302B-4E6E-BD23-FA5572A7A85C} AMD PowerNow! DashBoard-->MsiExec.exe /X{125EC603-A758-464D-9604-57E84EBBAAA5} AMUST Disk Cleaner 1.0-->"C:\Program Files\AMUST\Disk Cleaner\unins000.exe" AMUST Registry Cleaner-->"C:\Program Files\AMUST\Registry Cleaner\unins000.exe" Anywhere PE Viewer 0.1.7-->"C:\Program Files\Anywhere PE Viewer 0.1.7\unins000.exe" Apple Mobile Device Support-->MsiExec.exe /I{976C2B2A-CE59-4AB3-83FB-BF895E28F2E6} Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033} Atheros for Acer Driver 5.3.0.67_Foxconn Installation Program-->C:\Program Files\InstallShield Installation Information\{F70D5D8C-C1AF-40B3-9E47-3BB5F19EEA3A}\setup.exe -runfromtemp -l0x0009 -removeonly Atheros Wireless LAN-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D70DE630-0D13-4394-A15B-5ACE6CF2A18D}\Setup.exe" -l0x9 UNINSTALL ATI - Software Uninstall Utility-->C:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exe ATI Catalyst Control Center-->MsiExec.exe /I{79B05AF4-8894-49A1-9FF4-53F0142D85E1} ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean ATI Parental Control & Encoder-->MsiExec.exe /I{8D70145A-3BD3-4DBF-9CBF-223EF4A43257} Audacity 1.2.6-->"C:\Program Files\Audacity\unins000.exe" Audio Converter-->C:\Program Files\Audio Converter\uninstall.exe Audio Editor Pro 2.70-->"C:\Program Files\Mightsoft\Audio Editor Pro\unins000.exe" AutoHotkey 1.0.47.06-->C:\Program Files\AutoHotkey\uninst.exe AVG Free 8.0-->C:\Program Files\AVG\AVG8\setup.exe /UNINSTALL AVI Movie Player-->C:\Program Files\AVI Movie Player\uninstall.exe AVS DVDMenu Editor 1.2.1.19-->"C:\Program Files\Common Files\AVSMedia\AVS DVDMenu Editor\unins000.exe" AVS Video Converter 5.6-->"C:\Program Files\AVS4YOU\AVSVideoConverter\unins000.exe" AVS4YOU Software Navigator 1.2-->"C:\Program Files\AVS4YOU\AVSSoftwareNavigator\unins000.exe" Backup To DVD/CD version 5.1-->"C:\Program Files\Willow Creek Software\unins000.exe" Battlefield 2™-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{04858915-9F49-4B2A-AED4-DC49A7DE6A7B}\setup.exe" -l0x9 -removeonly BF2 Editor-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{24E85B9C-6E60-4723-89CC-71B66881A020}\setup.exe" -l0x9 -removeonly Bink and Smacker-->C:\PROGRA~1\RADVIDEO\UNWISE.EXE C:\PROGRA~1\RADVIDEO\INSTALL.LOG BitPim 1.0.5-->"C:\Program Files\BitPim\unins000.exe" BlackICE-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{76542EE3-5849-11D2-9C18-00609707C0FF}\Setup.exe" -l0x9 Bonjour-->MsiExec.exe /I{8A25392D-C5D2-4E79-A2BD-C15DDC5B0959} Browster-->C:\PROGRA~1\BROWSTER\UNBROW~1.EXE /U "C:\PROGRA~1\BROWSTER\INSTALL.LOG" Canon i960-->C:\WINDOWS\system32\CNMCP5c.exe "-PRINTERNAMECanon i960" "-HELPERDLLC:\BJPrinter\CNMWINDOWS\Canon i960 Installer\Inst2\cnmis.dll" "-RCDLLC:\BJPrinter\CNMWINDOWS\Canon i960 Installer\Inst2\cnmi0409.dll" Canon MP830-->"C:\WINDOWS\system32\CanonIJ Uninstaller Information\{0D25F7CC-B99C-44ee-9945-B14532B2BB7B}\DelDrv.exe" /U:{0D25F7CC-B99C-44ee-9945-B14532B2BB7B} /L0x0009 CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe" CDBurnerXP-->"C:\Program Files\CDBurnerXP\unins000.exe" Cheat Engine 5.4-->"C:\Program Files\Cheat Engine\unins000.exe" DCE Tools 1.0-->"C:\Program Files\DCETools\unins000.exe" Dealio Toolbar 3.4-->MsiExec.exe /X{6105648C-0C3C-481D-8C11-1F4952D6FB53} Delcam PowerSHAPEe8080 SP1-->MsiExec.exe /I{40B970D4-D47C-4BD4-AA39-7E079CFEAC04} Desktop Video Recorder 2.2.3-->"C:\Program Files\Mediaccurate\Desktop Video Recorder\unins000.exe" Dev-C++ 5 beta 9 release (4.9.9.2)-->"C:\Dev-Cpp\uninstall.exe" DVD Decrypter (Remove Only)-->"C:\Program Files\DVD Decrypter\uninstall.exe" Dynamic-Photo HDR (Trial/Showcase 2.3)-->"C:\Program Files\DynamicPhotoHDR\unins000.exe" EA Link-->C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe /M{F5577101-33CC-4711-8235-3A95BCD49DB0} /l1033 Easy Audio Editor-->"C:\Program Files\Easy Audio Editor\unins000.exe" EVEREST Corporate Edition v4.00-->"C:\Program Files\Lavalys\EVEREST Corporate Edition\unins000.exe" EZ Macros-->C:\WINDOWS\amuninst.exe -fC:\WINDOWS\unezmac.ini Fraps-->"C:\Fraps\uninstall.exe" Free 3GP Video Converter version 2.4-->"C:\Program Files\DVDVideoSoft\Free 3GP Video Converter\unins000.exe" Free Easy Burner V 3.8-->"C:\Program Files\Free Easy Burner\unins000.exe" FrostWire 4.13.5-->C:\Program Files\FrostWire\Uninstall.exe Google Earth-->MsiExec.exe /I{1E04F83B-2AB9-4301-9EF7-E86307F79C72} Google SketchUp 6-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{98736A65-3C79-49EC-B7E9-A3C77774B0E6}\setup.exe" -l0x9 -removeonly Google SketchUp 6-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B3D8B2F8-3C2C-45BC-933E-8B60E78F6684}\setup.exe" -l0x9 -removeonly HHD Software Free Hex Editor 3.12-->"C:\Program Files\HHD Software\Hex Editor 3.x\Uninstaller.exe" High Definition Audio Driver Package - KB888111-->"C:\WINDOWS\$NtUninstallKB888111WXPSP2$\spuninst\spuninst.exe" HijackThis 2.0.2-->"C:\Documents and Settings\jtp\Desktop\HijackThis.exe" /uninstall Hot CPU Tester Pro 4.4-->"C:\Program Files\Hot CPU Tester Pro 4 LE\unins000.exe" Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT="" Hotfix for Microsoft Visual Basic 2008 Express Edition with SP1 - ENU (KB945282)-->C:\WINDOWS\system32\msiexec.exe /package {DD622B1D-A78E-3FE8-9C8C-246F5764B0D0} /uninstall /qb+ REBOOTPROMPT="" Hotfix for Microsoft Visual Basic 2008 Express Edition with SP1 - ENU (KB946040)-->C:\WINDOWS\system32\msiexec.exe /package {DD622B1D-A78E-3FE8-9C8C-246F5764B0D0} /uninstall /qb+ REBOOTPROMPT="" Hotfix for Microsoft Visual Basic 2008 Express Edition with SP1 - ENU (KB946308)-->C:\WINDOWS\system32\msiexec.exe /package {DD622B1D-A78E-3FE8-9C8C-246F5764B0D0} /uninstall /qb+ REBOOTPROMPT="" Hotfix for Microsoft Visual Basic 2008 Express Edition with SP1 - ENU (KB946344)-->C:\WINDOWS\system32\msiexec.exe /package {DD622B1D-A78E-3FE8-9C8C-246F5764B0D0} /uninstall /qb+ REBOOTPROMPT="" Hotfix for Microsoft Visual Basic 2008 Express Edition with SP1 - ENU (KB947540)-->C:\WINDOWS\system32\msiexec.exe /package {DD622B1D-A78E-3FE8-9C8C-246F5764B0D0} /uninstall /qb+ REBOOTPROMPT="" Hotfix for Microsoft Visual Basic 2008 Express Edition with SP1 - ENU (KB947789)-->C:\WINDOWS\system32\msiexec.exe /package {DD622B1D-A78E-3FE8-9C8C-246F5764B0D0} /uninstall /qb+ REBOOTPROMPT="" Hotfix for Microsoft Visual Basic 2008 Express Edition with SP1 - ENU (KB948127)-->C:\WINDOWS\system32\msiexec.exe /package {DD622B1D-A78E-3FE8-9C8C-246F5764B0D0} /uninstall /qb+ REBOOTPROMPT="" Hotfix for Microsoft Visual Basic 2008 Express Edition with SP1 - ENU (KB951708)-->C:\WINDOWS\system32\msiexec.exe /package {DD622B1D-A78E-3FE8-9C8C-246F5764B0D0} /uninstall /qb+ REBOOTPROMPT="" Hotfix for Microsoft Visual C++ 2008 Express Edition with SP1 - ENU (KB945282)-->C:\WINDOWS\system32\msiexec.exe /package {D8087907-E255-3A41-A46D-D0F798709C71} /uninstall /qb+ REBOOTPROMPT="" Hotfix for Microsoft Visual C++ 2008 Express Edition with SP1 - ENU (KB946040)-->C:\WINDOWS\system32\msiexec.exe /package {D8087907-E255-3A41-A46D-D0F798709C71} /uninstall /qb+ REBOOTPROMPT="" Hotfix for Microsoft Visual C++ 2008 Express Edition with SP1 - ENU (KB946308)-->C:\WINDOWS\system32\msiexec.exe /package {D8087907-E255-3A41-A46D-D0F798709C71} /uninstall /qb+ REBOOTPROMPT="" Hotfix for Microsoft Visual C++ 2008 Express Edition with SP1 - ENU (KB947540)-->C:\WINDOWS\system32\msiexec.exe /package {D8087907-E255-3A41-A46D-D0F798709C71} /uninstall /qb+ REBOOTPROMPT="" Hotfix for Microsoft Visual C++ 2008 Express Edition with SP1 - ENU (KB947789)-->C:\WINDOWS\system32\msiexec.exe /package {D8087907-E255-3A41-A46D-D0F798709C71} /uninstall /qb+ REBOOTPROMPT="" Hotfix for Microsoft Visual C++ 2008 Express Edition with SP1 - ENU (KB948127)-->C:\WINDOWS\system32\msiexec.exe /package {D8087907-E255-3A41-A46D-D0F798709C71} /uninstall /qb+ REBOOTPROMPT="" Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe" Hotfix for Windows Media Player 10 (KB903157)-->"C:\WINDOWS\$NtUninstallKB903157$\spuninst\spuninst.exe" Hotfix for Windows Media Player 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe" Hotfix for Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe" IDA Pro Free v4.9-->"C:\Program Files\IDA Free\unins000.exe" Image Resizer Powertoy for Windows XP-->MsiExec.exe /I{1CB92574-96F2-467B-B793-5CEB35C40C29} InfraRecorder-->C:\Program Files\InfraRecorder\uninstall.exe ISO Recorder-->MsiExec.exe /I{DFC6573E-124D-4026-BFA4-B433C9D3FF21} iTunes-->MsiExec.exe /I{DDDE0BE3-0CBE-4BF6-B75A-E3F69C947843} J2SE Runtime Environment 5.0 Update 3-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150030} Java™ 6 Update 2-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160020} Java™ SE Development Kit 6 Update 1-->MsiExec.exe /I{32A3A4F4-B792-11D6-A78A-00B0D0160010} Java™ SE Runtime Environment 6 Update 1-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160010} Java™ SE Runtime Environment 6-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160000} KRISTAL Audio Engine-->C:\Program Files\Kreatives.org\KRISTAL Audio Engine\Uninstall.exe KTP Ware PS/2-WDM 5.0.3.6-->rundll32.exe "C:\Program Files\Elantech\KTUninst.dll",KTech_Uninstall 0 Launch Manager-->C:\WINDOWS\UnInst32.exe LManager.UNI Lightroom-->MsiExec.exe /I{6297F8EC-D821-4B33-B845-8A8D1A0DF472} Magic ISO Maker v5.5 (build 0272)-->C:\PROGRA~1\MAGICISO\UNWISE.EXE C:\PROGRA~1\MAGICISO\INSTALL.LOG Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe" ManageEngine OpManager 7.0-->C:\Program Files\InstallShield Installation Information\{D6AFA160-5CF3-4C84-A2E6-18615BE014D9}\Setup.exe Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp" Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F} Microsoft .NET Framework 3.0 Service Pack 2-->MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7} Microsoft .NET Framework 3.5 SP1-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe" Microsoft GIF Animator-->C:\Program Files\Microsoft GIF Animator\setup\GifACME.exe Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe" Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe" Microsoft Office XP Media Content-->MsiExec.exe /I{90300409-6000-11D3-8CFE-0050048383C9} Microsoft Office XP Pro Step by Step Interactive-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9FC7D8E1-F14F-11D4-943A-00E02950B496}\setup.exe" Microsoft Office XP Professional with FrontPage-->MsiExec.exe /I{90280409-6000-11D3-8CFE-0050048383C9} Microsoft RAW Image Thumbnailer and Viewer for Windows XP Version 1.0 (Build 50)-->MsiExec.exe /X{2E5A5B57-57FC-4C79-A239-9DB280ADEC2A} Microsoft Silverlight-->MsiExec.exe /I{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} Microsoft SQL Server 2008 Management Objects-->MsiExec.exe /I{F5E87B12-3C27-452F-8E78-21D42164FD83} Microsoft SQL Server Compact 3.5 SP1 Design Tools English-->MsiExec.exe /X{0C19D563-5F25-4621-BF10-01F741BD283F} Microsoft SQL Server Compact 3.5 SP1 English-->MsiExec.exe /I{E59113EB-0285-4BFD-A37A-B79EAC6B8F4B} Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe" Microsoft Visual Basic 2005 Express Edition - ENU-->C:\Program Files\Microsoft Visual Studio 8\Microsoft Visual Basic 2005 Express Edition - ENU\setup.exe Microsoft Visual Basic 2005 Express Edition - ENU-->MsiExec.exe /X{577AD794-8B34-40B4-9E7A-BE4CFFE396E6} Microsoft Visual Basic 2008 Express Edition with SP1 - ENU-->C:\Program Files\Microsoft Visual Studio 9.0\Microsoft Visual Basic 2008 Express Edition with SP1 - ENU\setup.exe Microsoft Visual Basic 2008 Express Edition with SP1 - ENU-->MsiExec.exe /X{DD622B1D-A78E-3FE8-9C8C-246F5764B0D0} Microsoft Visual Basic 6.0 Working Model Edition-->"C:\Program Files\Microsoft Visual Studio\VB98\Setup\1033\Setup.exe" Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d} Microsoft Visual C++ 2008 Express Edition with SP1 - ENU-->C:\Program Files\Microsoft Visual Studio 9.0\Microsoft Visual C++ 2008 Express Edition with SP1 - ENU\setup.exe Microsoft Visual C++ 2008 Express Edition with SP1 - ENU-->MsiExec.exe /X{D8087907-E255-3A41-A46D-D0F798709C71} Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022-->MsiExec.exe /X{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4} Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729-->MsiExec.exe /X{3C3D696B-0DB7-3C6D-A356-3DB8CE541918} Microsoft Web Publishing Wizard 1.53-->RunDll32 ADVPACK.DLL,LaunchINFSection C:\WINDOWS\INF\wpie3x86.inf,WebPostUninstall Microsoft Windows SDK for Visual Studio 2008 Headers and Libraries-->MsiExec.exe /X{842FAF7C-50EF-4463-9B8F-6222E1384D7D} Microsoft Windows SDK for Visual Studio 2008 SP1 Express Tools for .NET Framework - enu-->MsiExec.exe /X{5BE1E709-30E4-3D6D-A708-96CE8D5E5E8D} Microsoft Windows SDK for Visual Studio 2008 SP1 Express Tools for Win32-->MsiExec.exe /X{044F9133-B8D7-4d11-BF39-803FA20F5C8B} MobileMe Control Panel-->MsiExec.exe /I{2604C0F9-BFD3-4BA0-9EB5-22537C648F03} Motorola Driver Installation-->MsiExec.exe /I{0D442113-1F96-40DE-948C-5850CE7B8005} Motorola USB Drivers-->C:\PROGRA~1\MOTORO~1\UNWISE.EXE C:\PROGRA~1\MOTORO~1\INSTALL.LOG Mozilla Firefox (3.0.4)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe MP3 WAV WMA Converter-->C:\PROGRA~1\MP3WAV~1\UNWISE.EXE C:\PROGRA~1\MP3WAV~1\INSTALL.LOG MSN-->C:\Program Files\MSN\MsnInstaller\msninst.exe /Action:ARP MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF} MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71} MultiExtractor-->"C:\Program Files\MultiExtractor\uninstall.exe" MuvAudio2-->"C:\Program Files\MuvAudio2\uninstall.exe" Network Magic-->C:\Documents and Settings\All Users\Application Data\Pure Networks\Setup\nmsetup.exe /uninstall Network Stumbler 0.4.0 (remove only)-->"C:\Program Files\Network Stumbler\uninst.exe" nLite 1.4.7-->"C:\Program Files\nLite\unins000.exe" NTI Backup NOW! 4-->C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{385979FE-DC4F-4140-8EAD-A59625000D72} /l1033 BUN4 NTI CD & DVD-Maker-->C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{1577A05B-EE62-4BBC-9DB7-FE748FA44EC2} /l1033 CDM7 NVIDIA Photoshop Plug-ins-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{23F79416-CAD1-41BF-99A3-040F6C814AAA}\setup.exe" -l0x9 OpenOffice.org 2.2-->MsiExec.exe /I{3CCBC9FF-7F35-4220-B66D-B60E2E7AB4E2} PaperlessPrinter version 3.0-->"C:\Program Files\RareFind\PaperlessPrinter\unins000.exe" PeerGuardian 2.0-->"C:\Program Files\PeerGuardian2\unins000.exe" Photomatix Pro version 3.0.3RC2-->"C:\Program Files\PhotomatixPro3\unins000.exe" PowerDVD-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\Setup.EXE" -uninstall PowerProducer-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B7A0CE06-068E-11D6-97FD-0050BACBF861}\setup.exe" -uninstall Proxifier version 2.7-->"C:\Program Files\Proxifier\unins000.exe" PunkBuster Services-->C:\WINDOWS\system32\pbsvc.exe -u QuickTime-->MsiExec.exe /I{8DC42D05-680B-41B0-8878-6C14D24602DB} RawShooter essentials 2006-->C:\PROGRA~1\PIXMAN~1\RAWSHO~1.0\UNWISE.EXE C:\PROGRA~1\PIXMAN~1\RAWSHO~1.0\INSTALL.LOG RealPlayer-->C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks\|RealPlayer\|6.0 Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\Setup.exe" -l0x9 -removeonly RivaTuner v2.09-->"C:\Program Files\RivaTuner v2.09\uninstall.exe" Screen Movie Studio-->C:\PROGRA~1\SCREEN~1\UNWISE.EXE C:\PROGRA~1\SCREEN~1\INSTALL.LOG Search Settings 1.2-->MsiExec.exe /X{D0C73318-7B4A-4D16-A0C4-3B83F075EA88} Security Update for Microsoft .NET Framework 2.0 (KB928365)-->C:\WINDOWS\system32\msiexec.exe /promptrestart /uninstall {8056AC9E-49C5-4375-9ADE-B2F862C9DF51} /package {7131646D-CD3C-40F4-97B9-CD9E4E6262EF} Security Update for Windows Media Player 10 (KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP10$\spuninst\spuninst.exe" Security Update for Windows Media Player 10 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP10$\spuninst\spuninst.exe" Security Update for Windows Media Player 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe" Security Update for Windows Media Player 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe" Security Update for Windows XP (KB913433)-->C:\WINDOWS\system32\MacroMed\Flash\genuinst.exe C:\WINDOWS\system32\MacroMed\Flash\KB913433.inf Security Update for Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe" Security Update for Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe" Security Update for Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe" Security Update for Windows XP (KB950759)-->"C:\WINDOWS\$NtUninstallKB950759$\spuninst\spuninst.exe" Security Update for Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe" Security Update for Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe" Security Update for Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe" Security Update for Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe" Security Update for Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe" Security Update for Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe" Security Update for Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe" Security Update for Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe" Security Update for Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe" Security Update for Windows XP (KB953838)-->"C:\WINDOWS\$NtUninstallKB953838$\spuninst\spuninst.exe" Security Update for Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe" Security Update for Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe" Security Update for Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe" Security Update for Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe" Security Update for Windows XP (KB956390)-->"C:\WINDOWS\$NtUninstallKB956390$\spuninst\spuninst.exe" Security Update for Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe" Security Update for Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe" Security Update for Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe" Security Update for Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe" Security Update for Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe" Security Update for Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe" ShadowScan 2.07-->C:\WINDOWS\UnGins.exe "H:\shdow\install.log" SMSC IrCC V5.1.3600.7-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0700\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F1B8DB67-D30E-4FF9-A85F-3CEE51825AA2}\setup.exe" -l0x9 UNINSTALL Sonic Encoders-->MsiExec.exe /I{9941F0AA-B903-4AF4-A055-83A9815CC011} Speed Meter Pro-->MsiExec.exe /X{2AC0C86C-D456-4BA0-AE3B-2A60D378DBAC} SpeedFan (remove only)-->"C:\Program Files\SpeedFan\uninstall.exe" SpywareBlaster v3.5.1-->"C:\Program Files\SpywareBlaster\unins000.exe" SQL Server System CLR Types-->MsiExec.exe /I{342D4AD7-EC4C-4EC8-AEA6-E70F5905A490} Switch-->C:\Program Files\NCH Swift Sound\Switch\uninst.exe Synaptics Pointing Device Driver-->rundll32.exe "C:\Program Files\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall System Requirements Lab-->C:\Program Files\SystemRequirementsLab\Uninstall.exe SysTool Overclocking Utility-->"C:\Program Files\SysTool\Uninstall.exe" TeamSpeak 2 RC2-->"C:\Program Files\Teamspeak2_RC2\unins000.exe" Theme Manager-->C:\PROGRA~1\STARDOCK\OBJECT~1\THEMEM~1\UNWISE.EXE C:\PROGRA~1\STARDOCK\OBJECT~1\THEMEM~1\INSTALL.LOG TotalBF2 Map Pack 3-->C:\Program Files\EA GAMES\Battlefield 2\Uninstal.exe TrueCrypt-->C:\WINDOWS\TrueCrypt Setup.exe /u C:\Program Files\TrueCrypt Tweak UI-->"C:\WINDOWS\system32\mshta.exe" "res://C:\WINDOWS\system32\TweakUI.exe/uninstall.hta" Uniblue ProcessScanner-->"C:\Program Files\Uniblue\ProcessScanner\unins000.exe" Uninstall 1.0.0.0-->"C:\Program Files\Common Files\DVDVideoSoft\unins000.exe" Uninstall DreamSuite Bonus-->C:\WINDOWS\unvise32.exe C:\Program Files\Adobe\Adobe Photoshop CS2\Plug-Ins\DreamSuite Bonus\DreamSuite Bonus Uninstall.log Update for Windows Media Player 10 (KB913800)-->"C:\WINDOWS\$NtUninstallKB913800$\spuninst\spuninst.exe" Update for Windows Media Player 10 (KB926251)-->"C:\WINDOWS\$NtUninstallKB926251$\spuninst\spuninst.exe" Update for Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe" Update for Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe" Update Rollup 2 for Windows XP Media Center Edition 2005-->C:\WINDOWS\$NtUninstallKB900325$\spuninst\spuninst.exe Ventrilo Client-->MsiExec.exe /I{789289CA-F73A-4A16-A331-54D498CE069F} Viewpoint Media Player-->C:\Program Files\Viewpoint\Viewpoint Media Player\MtsAxInstaller.exe /u VZAccess Manager-->C:\PROGRA~1\VERIZO~1\VZACCE~1\UNWISE.EXE C:\PROGRA~1\VERIZO~1\VZACCE~1\INSTALL.LOG Windows Driver Package - Advanced Micro Devices (AmdK8) Processor (04/28/2006 1.3.1.0)-->C:\PROGRA~1\DIFX\7B44739871F4D539FA473F57A832EA4B6A59EF06\DPINST.EXE /d /u C:\WINDOWS\system32\DRVSTORE\amdk8_9EA6D2FA46FEFFB7011ED0B6015B626D07F1EEF7\amdk8.inf Windows Driver Package - Advanced Micro Devices (AmdK8) Processor (05/27/2006 1.3.2.0)-->C:\PROGRA~1\DIFX\7B44739871F4D539FA473F57A832EA4B6A59EF06\DPINST.EXE /d /u C:\WINDOWS\system32\DRVSTORE\amdk8_C074F64CC74B03BC354BB5DC973CCF768D5A7194\amdk8.inf Windows Installer Clean Up-->MsiExec.exe /X{121634B0-2F4B-11D3-ADA3-00C04F52DD52} Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe" Windows Media Player 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe" Windows Media Player Firefox Plugin-->MsiExec.exe /I{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4} Windows Support Tools-->MsiExec.exe /I{89B078C4-50B0-453E-BF53-3A7E6A0D85FA} Windows XP Media Center Edition 2005 KB925766-->"C:\WINDOWS\$NtUninstallKB925766$\spuninst\spuninst.exe" Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe" WinRAR archiver-->C:\Program Files\WinRAR\uninstall.exe Xfire (remove only)-->"C:\Program Files\Xfire\uninst.exe" Yawcam v0.3.0-->"C:\Program Files\Yawcam\unins000.exe" Zan Image Printer-->C:\Program Files\zvprt50\uninstall.exe ======Hosts File====== 127.0.0.1 www.007guard.com 127.0.0.1 007guard.com 127.0.0.1 008i.com 127.0.0.1 www.008k.com 127.0.0.1 008k.com 127.0.0.1 www.00hq.com 127.0.0.1 00hq.com 127.0.0.1 010402.com 127.0.0.1 www.032439.com 127.0.0.1 032439.com ======Security center information====== AV: AVG Anti-Virus Free (disabled) (outdated) FW: Norton Internet Worm Protection (disabled) ======Environment variables====== "ComSpec"=%SystemRoot%\system32\cmd.exe "Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\ATI Technologies\ATI.ACE\Core-Static;C:\Program Files\Support Tools\;C:\Program Files\ATI Technologies\ATI.ACE\;C:\Program Files\Common Files\Adobe\AGL;C:\Program Files\QuickTime\QTSystem\ "windir"=%SystemRoot% "FP_NO_HOST_CHECK"=NO "OS"=Windows_NT "PROCESSOR_ARCHITECTURE"=x86 "PROCESSOR_LEVEL"=15 "PROCESSOR_IDENTIFIER"=x86 Family 15 Model 72 Stepping 2, AuthenticAMD "PROCESSOR_REVISION"=4802 "NUMBER_OF_PROCESSORS"=2 "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH "TEMP"=%SystemRoot%\TEMP "TMP"=%SystemRoot%\TEMP "CLASSPATH"=.;C:\Program Files\Java\jre1.6.0_02\lib\ext\QTJava.zip "QTJAVA"=C:\Program Files\Java\jre1.6.0_02\lib\ext\QTJava.zip "VS90COMNTOOLS"=C:\Program Files\Microsoft Visual Studio 9.0\Common7\Tools\ -----------------EOF-----------------

Rorschach112 View Member Profile	Nov 24 2008, 11:51 AM Post #12
SuperMember Group: Authentic Member Posts: 3,651 Joined: 29-September 07 Member No.: 73,164 Operating System: Windows XP	Hello 1. Please re-open HiJackThis and choose do a system scan only. Check the boxes next to ONLY the entries listed below(if present): R3 - URLSearchHook: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - (no file) O2 - BHO: (no name) - {48a618ab-a4ab-4535-b6f7-f18e9ab57fa2} - C:\WINDOWS\system32\fehojipa.dll (file missing) O20 - AppInit_DLLs: avgrsstx.dll ES%aooD ???D?CHINE\SOFTWARE\Microsoft\Code Store Dat,C:\WINDOWS\system32\nibaniyu.dll c:\windows\system32\sibofuda.dll 2. Now close all windows other than HiJackThis, including browsers, so that nothing other than HijackThis is open, then click Fix Checked. A box will pop up asking you if you wish to fix the selected items. Please choose YES. Once it has fixed them, please exit/close HijackThis. Please download the OTMoveIt3 by OldTimer or from here. Save it to your desktop. Please double-click OTMoveIt3.exe to run it. (Note: If you are running on Vista, right-click on the file and choose Run As Administrator). Copy the lines in the codebox below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy): CODE :Processes explorer.exe :Services aqci6q98 :Reg [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\My Web Search Bar] [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MyWebSearch Email Plugin] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa] "notification packages"=scecli :Files :Commands [purity] [emptytemp] [start explorer] [Reboot] Return to OTMoveIt3, right click in the "Paste Instructions for Items to be Moved" window (under the yellow bar) and choose Paste. Click the red Moveit! button. Copy everything in the Results window (under the green bar) to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy), and paste it in your next reply. Close OTMoveIt3 Note: If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes. In this case, after the reboot, open Notepad (Start->All Programs->Accessories->Notepad), click File->Open, in the File Name box enter .log and press the Enter key, navigate to the C:\_OTMoveIt\MovedFiles* folder, and open the newest .log file present, and copy/paste the contents of that document back here in your next post. Also post a new Rsit log

TheDeciever1 View Member Profile	Nov 24 2008, 12:45 PM Post #13
New Member Group: Authentic Member Posts: 9 Joined: 23-November 08 Member No.: 82,541 Operating System: Windows XP Media Center Edition	Only one log came up when I ran Rsit ========== PROCESSES ========== Process explorer.exe killed successfully. ========== SERVICES/DRIVERS ========== Unable to stop service aqci6q98 . ========== REGISTRY ========== Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\My Web Search Bar\\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MyWebSearch Email Plugin\\ deleted successfully. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\\"notification packages"\|scecli /E : value set successfully! ========== FILES ========== ========== COMMANDS ========== File delete failed. C:\DOCUME~1\jtp\LOCALS~1\Temp\etilqs_a3EdqG0OMaoWQQqSiJy2 scheduled to be deleted on reboot. User's Temp folder emptied. User's Temporary Internet Files folder emptied. User's Internet Explorer cache folder emptied. Local Service Temp folder emptied. File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot. Local Service Temporary Internet Files folder emptied. File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_7b0.dat scheduled to be deleted on reboot. File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_ea0.dat scheduled to be deleted on reboot. Windows Temp folder emptied. Java cache emptied. File delete failed. C:\Documents and Settings\jtp\Local Settings\Application Data\Mozilla\Firefox\Profiles\q55r9s7p.default\Cache\_CACHE_MAP_ scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\jtp\Local Settings\Application Data\Mozilla\Firefox\Profiles\q55r9s7p.default\Cache\_CACHE_001_ scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\jtp\Local Settings\Application Data\Mozilla\Firefox\Profiles\q55r9s7p.default\Cache\_CACHE_002_ scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\jtp\Local Settings\Application Data\Mozilla\Firefox\Profiles\q55r9s7p.default\Cache\_CACHE_003_ scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\jtp\Local Settings\Application Data\Mozilla\Firefox\Profiles\q55r9s7p.default\urlclassifier3.sqlite scheduled to be deleted on reboot. FireFox cache emptied. Temp folders emptied. Explorer started successfully OTMoveIt3 by OldTimer - Version 1.0.7.1 log created on 11242008_103238 Files moved on Reboot... File C:\DOCUME~1\jtp\LOCALS~1\Temp\etilqs_a3EdqG0OMaoWQQqSiJy2 not found! C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat moved successfully. C:\WINDOWS\temp\Perflib_Perfdata_7b0.dat moved successfully. C:\WINDOWS\temp\Perflib_Perfdata_ea0.dat moved successfully. C:\Documents and Settings\jtp\Local Settings\Application Data\Mozilla\Firefox\Profiles\q55r9s7p.default\Cache\_CACHE_MAP_ moved successfully. C:\Documents and Settings\jtp\Local Settings\Application Data\Mozilla\Firefox\Profiles\q55r9s7p.default\Cache\_CACHE_001_ moved successfully. C:\Documents and Settings\jtp\Local Settings\Application Data\Mozilla\Firefox\Profiles\q55r9s7p.default\Cache\_CACHE_002_ moved successfully. C:\Documents and Settings\jtp\Local Settings\Application Data\Mozilla\Firefox\Profiles\q55r9s7p.default\Cache\_CACHE_003_ moved successfully. C:\Documents and Settings\jtp\Local Settings\Application Data\Mozilla\Firefox\Profiles\q55r9s7p.default\urlclassifier3.sqlite moved successfully. Logfile of random's system information tool 1.04 (written by random/random) Run by jtp at 2008-11-24 10:44:32 Microsoft Windows XP Professional Service Pack 3 System drive C: has 2 GB (4%) free of 54 GB Total RAM: 1790 MB (71% free) Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 10:44:33 AM, on 11/24/2008 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Acer\Empowering Technology\ePerformance\MemCheck.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\WINDOWS\RTHDCPL.EXE C:\Acer\Empowering Technology\ePower\ePower_DMC.exe C:\Program Files\Microsoft IntelliType Pro\itype.exe C:\Program Files\Adobe\Adobe Photoshop Lightroom 1.3\apdproxy.exe C:\Program Files\Microsoft IntelliType Pro\dpupdchk.exe C:\Program Files\Common Files\Real\Update_OB\realsched.exe C:\Program Files\iTunes2\iTunesHelper.exe C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2G1.EXE C:\Program Files\DAEMON Tools Lite\daemon.exe C:\Documents and Settings\jtp\Local Settings\Application Data\Google\Update\GoogleUpdate.exe C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\WINDOWS\eHome\ehRecvr.exe C:\WINDOWS\eHome\ehSched.exe C:\Program Files\CDBurnerXP\NMSAccessU.exe C:\WINDOWS\system32\PnkBstrA.exe C:\WINDOWS\system32\PnkBstrB.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Viewpoint\Common\ViewpointService.exe C:\PROGRA~1\AVG\AVG8\avgrsx.exe C:\PROGRA~1\AVG\AVG8\avgemc.exe C:\WINDOWS\system32\wbem\wmiapsrv.exe C:\Program Files\iPod\bin\iPodService.exe C:\WINDOWS\system32\wbem\unsecapp.exe C:\WINDOWS\system32\dllhost.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Documents and Settings\jtp\Desktop\RSIT.exe C:\Program Files\trend micro\jtp.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.atcomet.com/b/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://global.acer.com R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://global.acer.com/ R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = .local R3 - URLSearchHook: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - (no file) O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll O2 - BHO: DealioBHO Class - {6A87B991-A31F-4130-AE72-6D0C294BF082} - C:\Program Files\Dealio\kb127\Dealio.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll O3 - Toolbar: Browster - {2EF39867-654F-48b6-8F93-B4FC3E8C6844} - C:\Program Files\Browster\Browster.dll O3 - Toolbar: Dealio - {E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} - C:\Program Files\Dealio\kb127\Dealio.dll O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\WINDOWS\system32\eDStoolbar.dll O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE O4 - HKLM\..\Run: [KTPWare] C:\Program Files\Elantech\ktp.exe O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [ePower_DMC] C:\Acer\Empowering Technology\ePower\ePower_DMC.exe O4 - HKLM\..\Run: [itype] "C:\Program Files\Microsoft IntelliType Pro\itype.exe" O4 - HKLM\..\Run: [au] C:\Program Files\Dealio\DealioAU.exe O4 - HKLM\..\Run: [SearchSettings] C:\Program Files\Search Settings\SearchSettings.exe O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Adobe Photoshop Lightroom 1.3\apdproxy.exe" O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes2\iTunesHelper.exe" O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe 1 O4 - HKLM\..\Run: [Auto EPSON Stylus CX5400 on DELL] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2G1.EXE /P32 "Auto EPSON Stylus CX5400 on DELL" /O14 "\\DELL\Printer" /M "Stylus CX5400" O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\jtp\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O8 - Extra context menu item: Compare Prices with &Dealio - C:\Documents and Settings\jtp\Application Data\Dealio\kb127\res\DealioSearch.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb127\Dealio.dll O9 - Extra 'Tools' menuitem: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb127\Dealio.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O10 - Unknown file in Winsock LSP: c:\windows\system32\prxernsp.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\prxerdrv.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\prxerdrv.dll O16 - DPF: vzTCPConfig - http://www2.verizon.net/help/fios_settings...vzTCPConfig.CAB O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll O16 - DPF: {BF985246-09BF-11D2-BE62-006097DF57F6} (SimCityX Control) - http://simcity.ea.com/play/classic/SimCityX.cab O16 - DPF: {E87F6C8E-16C0-11D3-BEF7-009027438003} (Persits Software XUpload) - http://upload-v5.streamload.com/Upload/XUpload.ocx O17 - HKLM\System\CCS\Services\Tcpip\..\{4AD2D21C-5561-46F8-A2A4-B1A9623DBF8E}: NameServer = 192.168.1.1,68.238.64.12 O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll O23 - Service: Memory Check Service (AcerMemUsageCheckService) - Acer Inc. - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe O23 - Service: BlackICE - Unknown owner - H:\blackice\blackd.exe (file missing) O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe O23 - Service: Imapi Helper - Alex Feinman - C:\Program Files\Alex Feinman\ISO Recorder\ImapiHelper.exe O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe O23 - Service: Viewpoint Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe -- End of file - 8399 bytes ======Scheduled tasks folder====== C:\WINDOWS\tasks\Critical Battery Alarm Program.job C:\WINDOWS\tasks\MP Scheduled Scan.job C:\WINDOWS\tasks\Microsoft_Hardware_Launch_IType_exe.job C:\WINDOWS\tasks\GoogleUpdateTaskUser.job ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}] RealPlayer Download and Record Plugin for Internet Explorer - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll [2008-09-20 308856] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6A87B991-A31F-4130-AE72-6D0C294BF082}] DealioBHO Class - C:\Program Files\Dealio\kb127\Dealio.dll [2008-05-26 3170144] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] SSVHelper Class - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll [2007-07-12 501136] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] {2EF39867-654F-48b6-8F93-B4FC3E8C6844} - Browster - C:\Program Files\Browster\Browster.dll [2006-08-11 1540096] {E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} - Dealio - C:\Program Files\Dealio\kb127\Dealio.dll [2008-05-26 3170144] {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - Acer eDataSecurity Management - C:\WINDOWS\system32\eDStoolbar.dll [2006-03-08 106496] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "SkyTel"=C:\WINDOWS\SkyTel.EXE [2006-05-16 2879488] "KTPWare"=C:\Program Files\Elantech\ktp.exe [2006-03-28 512000] "SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2006-10-22 815104] "RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2006-06-28 16248320] "ePower_DMC"=C:\Acer\Empowering Technology\ePower\ePower_DMC.exe [2006-05-30 421888] "itype"=C:\Program Files\Microsoft IntelliType Pro\itype.exe [2007-08-31 988584] "au"=C:\Program Files\Dealio\DealioAU.exe [2008-05-26 595296] "SearchSettings"=C:\Program Files\Search Settings\SearchSettings.exe [2008-06-12 991584] "Adobe Photo Downloader"=C:\Program Files\Adobe\Adobe Photoshop Lightroom 1.3\apdproxy.exe [2007-12-04 61440] "TkBellExe"=C:\Program Files\Common Files\Real\Update_OB\realsched.exe [2008-09-20 185896] "AppleSyncNotifier"=C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe [2008-10-01 111936] "QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2008-09-06 413696] "iTunesHelper"=C:\Program Files\iTunes2\iTunesHelper.exe [2008-10-01 289576] "eDataSecurity Loader"=C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe [2006-03-17 345088] "Auto EPSON Stylus CX5400 on DELL"=C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I2G1.EXE [2003-05-26 99840] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\daemon.exe [2008-07-24 490952] "Google Update"=C:\Documents and Settings\jtp\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2008-10-18 133104] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\!AVG Anti-Spyware] [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acer ePresentation HPD] C:\Acer\Empowering Technology\ePresentation\ePresentation.exe [2006-03-31 204800] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr] C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\amd_dc_opt] C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AMD_Display] C:\Program Files\AMD\AMD Power Monitor\AMD_PwrMon.exe [2008-05-05 1449984] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATICCC] C:\Program Files\ATI Technologies\ATI.ACE\cli.exe [2006-01-02 45056] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AtiTrayTools] [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe [2008-07-04 1232152] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe [2006-04-15 53248] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Boot] C:\Acer\Empowering Technology\ePower\Boot.exe [2006-03-15 579584] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ccApp] [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EA Core] C:\Program Files\Electronic Arts\EA Link\Core.exe [2007-04-17 2887680] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe [2006-03-17 345088] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ehTray] C:\WINDOWS\ehome\ehtray.exe [2005-08-05 64512] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ePower_DMC] C:\Acer\Empowering Technology\ePower\ePower_DMC.exe [2006-05-30 421888] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\eRecoveryService] C:\Acer\Empowering Technology\eRecovery\eRAgent.exe [2006-06-01 413696] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\hcsystray] C:\Program Files\Kuma Games\hcsystray\hc_tray.exe [2006-11-01 30928] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IMJPMIG8.1] C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE [2004-08-10 208952] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper] F:\Itunes\iTunesHelper.exe [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KernelFaultCheck] C:\WINDOWS\system32\dumprep 0 -k [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LaunchApp] [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe [2006-06-23 602112] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS] C:\Program Files\Messenger\msmsgs.exe [2008-04-13 1695232] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr] [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe [2004-08-10 59392] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nmctxth] C:\Program Files\Common Files\Pure Networks Shared\Platform\nmctxth.exe [2008-01-08 451896] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ntiMUI] C:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe [2005-05-11 45056] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PcThrust] [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2004-08-10 455168] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2004-08-10 455168] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PowerStrip] c:\program files\powerstrip\pstrip.exe [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] C:\Program Files\QuickTime\qttask.exe [2008-09-06 413696] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL] C:\WINDOWS\RTHDCPL.EXE [2006-06-28 16248320] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SkyTel] C:\WINDOWS\SkyTel.EXE [2006-05-16 2879488] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpySweeper] [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\STYLEXP] C:\Program Files\TGTSoft\StyleXP\StyleXP.exe -Hide [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SugarSync] [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe [2007-07-12 132496] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2006-10-22 815104] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Uniblue SpyEraser] [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\updateMgr] c:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe [2006-03-30 313472] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Acer Empowering Technology.lnk] C:\Acer\EMPOWE~1\ACEREM~1.EXE [2006-03-27 45056] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Gamma Loader.lnk] C:\PROGRA~1\COMMON~1\Adobe\CALIBR~1\ADOBEG~1.EXE [1999-11-04 113664] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk] C:\PROGRA~1\Adobe\ACROBA~1.0\Reader\READER~1.EXE [2008-04-23 29696] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^owner^Start Menu^Programs^Startup^OpenOffice.org 2.2.lnk] C:\PROGRA~1\OPENOF~1.2\program\QUICKS~1.EXE [2007-02-02 393216] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services] "AVG Anti-Spyware Guard"=2 "Automatic LiveUpdate Scheduler"=2 "ATI Smart"=2 "Ati HotKey Poller"=2 "Apple Mobile Device"=2 "Adobe LM Service"=3 "WebrootSpySweeperService"=2 "Symantec Core LC"=2 "SPBBCSvc"=2 "SNDSrvc"=2 "SAVScan"=3 "RapApp"=3 "OneStep Search Service"=2 "NSCService"=3 "nmservice"=2 "nmraapache"=3 "navapsvc"=2 "LiveUpdate"=3 "LightScribeService"=2 "ccSetMgr"=2 "ccProxy"=2 "ccISPwdSvc"=3 "ccEvtMgr"=2 C:\Documents and Settings\jtp\Start Menu\Programs\Startup Adobe Gamma.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent] C:\WINDOWS\system32\Ati2evxx.dll [2006-04-27 61440] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 "InstallVisualStyle"=C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles "InstallTheme"=C:\WINDOWS\Resources\Themes\Royale.theme [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveTypeAutoRun"=145 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe::enabled:@xpsp2res.dll,-22019" "C:\Program Files\Messenger\MSMSGS.EXE"="C:\Program Files\Messenger\MSMSGS.EXE::Enabled:Windows Messenger" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe::Enabled:@xpsp3res.dll,-20000" "C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe::Enabled:iTunes" "C:\Program Files\LimeWire2\LimeWire.exe"="C:\Program Files\LimeWire2\LimeWire.exe::Enabled:LimeWire" "C:\Program Files\AVG\AVG8\avgupd.exe"="C:\Program Files\AVG\AVG8\avgupd.exe::Enabled:avgupd.exe" "C:\Program Files\AVG\AVG8\avgemc.exe"="C:\Program Files\AVG\AVG8\avgemc.exe::Enabled:avgemc.exe" "C:\Program Files\FrostWire\FrostWire.exe"="C:\Program Files\FrostWire\FrostWire.exe::Enabled:LimeWire" "C:\Program Files\DNA\btdna.exe"="C:\Program Files\DNA\btdna.exe::Enabled:DNA" "C:\Program Files\BitTorrent\bittorrent.exe"="C:\Program Files\BitTorrent\bittorrent.exe::Enabled:BitTorrent" "C:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe"="C:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe:LocalSubNet:Enabled:Pure Networks Platform Service" "C:\WINDOWS\System32\PnkBstrA.exe"="C:\WINDOWS\System32\PnkBstrA.exe::Enabled:PnkBstrA" "C:\WINDOWS\System32\PnkBstrB.exe"="C:\WINDOWS\System32\PnkBstrB.exe::Enabled:PnkBstrB" "C:\Program Files\EA GAMES\Battlefield 2\BF2.exe"="C:\Program Files\EA GAMES\Battlefield 2\BF2.exe::Enabled:Battlefield 2" "C:\Documents and Settings\All Users\Application Data\NexonUS\NGM\NGM.exe"="C:\Documents and Settings\All Users\Application Data\NexonUS\NGM\NGM.exe::Enabled:Nexon Game Manager" "C:\Nexon\Combat Arms\NMService.exe"="C:\Nexon\Combat Arms\NMService.exe::Enabled:Nexon Messenger Core" "C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe::Enabled:Bonjour" "C:\Program Files\iTunes2\iTunes.exe"="C:\Program Files\iTunes2\iTunes.exe::Enabled:iTunes" "C:\WINDOWS\System32\spool\drivers\W32X86\3\SAGENT4.EXE"="C:\WINDOWS\System32\spool\drivers\W32X86\3\SAGENT4.EXE::Disabled:SAgent4" "C:\Program Files\Ufasoft\SocksChain\SocksChain.exe"="C:\Program Files\Ufasoft\SocksChain\SocksChain.exe::Enabled:SocksChain GUI" "C:\WINDOWS\EXPLORER.EXE"="C:\WINDOWS\EXPLORER.EXE::Enabled:Explorer" "C:\WINDOWS\System32\winlogon.exe"="C:\WINDOWS\System32\winlogon.exe::Enabled:winlogon" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe::enabled:@xpsp2res.dll,-22019" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe::Enabled:@xpsp3res.dll,-20000" ======List of files/folders created in the last 1 months====== 2008-11-24 09:39:50 ----D---- C:\rsit 2008-11-24 09:39:50 ----D---- C:\Program Files\trend micro 2008-11-24 09:31:40 ----D---- C:\_OTMoveIt 2008-11-23 16:53:41 ----D---- C:\Documents and Settings\jtp\Application Data\Malwarebytes 2008-11-23 16:53:36 ----D---- C:\Program Files\Malwarebytes' Anti-Malware 2008-11-23 16:53:36 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes 2008-11-23 16:31:03 ----D---- C:\_OTScanIt 2008-11-23 14:00:11 ----A---- C:\lopR.txt 2008-11-17 19:46:01 ----D---- C:\WINDOWS\Logs 2008-11-12 20:00:04 ----HD---- C:\WINDOWS\$NtUninstallKB957097$ 2008-11-12 19:59:54 ----HD---- C:\WINDOWS\$NtUninstallKB954459$ 2008-11-12 19:59:42 ----HD---- C:\WINDOWS\$NtUninstallKB955069$ 2008-11-10 21:55:50 ----D---- C:\Documents and Settings\jtp\Application Data\PowerSHAPE 2008-11-10 21:54:57 ----A---- C:\logunstdll.txt 2008-11-10 21:53:53 ----D---- C:\Program Files\Common Files\Delcam 2008-11-10 21:53:52 ----D---- C:\Program Files\Delcam 2008-11-10 21:50:24 ----D---- C:\temp 2008-11-02 21:50:12 ----D---- C:\Program Files\IDoser v4 2008-10-31 23:33:20 ----A---- C:\WINDOWS\OEWABLog.txt 2008-10-29 22:08:47 ----A---- C:\WINDOWS\system32\TweakUI.exe 2008-10-29 20:37:07 ----D---- C:\Program Files\Microsoft Synchronization Services 2008-10-29 20:37:06 ----D---- C:\Program Files\Microsoft SQL Server Compact Edition ======List of files/folders modified in the last 1 months====== 2008-11-24 10:32:56 ----A---- C:\WINDOWS\SchedLgU.Txt 2008-11-23 16:48:56 ----A---- C:\trace.txt 2008-11-23 15:44:12 ----A---- C:\WINDOWS\ntbtlog.txt 2008-11-17 16:34:58 ----A---- C:\WINDOWS\system32\PnkBstrB.exe 2008-11-12 20:00:00 ----A---- C:\WINDOWS\imsins.BAK 2008-11-11 21:41:28 ----A---- C:\WINDOWS\ModemLog_LG CDMA USB Modem.txt ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R1 amdtools;AMD Special Tools Driver; C:\WINDOWS\system32\DRIVERS\amdtools.sys [2003-10-22 20480] R1 AvgLdx86;AVG AVI Loader Driver x86; C:\WINDOWS\System32\Drivers\avgldx86.sys [2008-07-04 96520] R1 AvgMfx86;AVG On-access Scanner Minifilter Driver x86; C:\WINDOWS\System32\Drivers\avgmfx86.sys [2008-07-04 26824] R1 SysTool;SysTool Overclocking Utility; C:\WINDOWS\system32\DRIVERS\SysTool.sys [2006-11-10 24064] R1 truecrypt;truecrypt; \??\C:\WINDOWS\system32\Drivers\truecrypt.sys [] R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-13 8832] R1 WS2IFSL;Windows Socket 2.0 Non-IFS Service Provider Support Environment; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2004-08-10 12032] R2 AvgTdiX;AVG8 Network Redirector; C:\WINDOWS\System32\Drivers\avgtdix.sys [2008-07-04 76040] R2 DritekPortIO;Dritek General Port I/O; \??\C:\PROGRA~1\LAUNCH~1\DPortIO.sys [] R2 int15;int15; \??\C:\WINDOWS\system32\drivers\int15.sys [] R2 irda;IrDA Protocol; C:\WINDOWS\system32\DRIVERS\irda.sys [2008-04-13 88192] R2 pnarp;Pure Networks Device Discovery Driver; C:\WINDOWS\system32\DRIVERS\pnarp.sys [2008-01-08 23992] R2 purendis;Pure Networks Wireless Driver; C:\WINDOWS\system32\DRIVERS\purendis.sys [2008-01-08 25272] R2 tvicport;tvicport; \??\C:\WINDOWS\system32\drivers\tvicport.sys [] R2 windrvNT;windrvNT; \??\C:\WINDOWS\system32\windrvNT.sys [] R2 zntport;zntport; \??\C:\WINDOWS\system32\drivers\zntport.sys [] R3 AmdLLD;AMD Low Level Device Driver; C:\WINDOWS\system32\DRIVERS\AmdLLD.sys [2007-06-29 34304] R3 AR5211;Atheros Wireless Network Adapter Service; C:\WINDOWS\system32\DRIVERS\ar5211.sys [2007-07-26 547904] R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2006-04-27 1540096] R3 Cam5603D;Acer OrbiCam; C:\WINDOWS\System32\Drivers\BisonCam.sys [2006-05-12 806272] R3 CmBatt;Microsoft ACPI Control Method Battery Driver; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2008-04-13 13952] R3 DKbFltr;Dritek Keyboard Filter Driver; C:\WINDOWS\system32\DRIVERS\DKbFltr.sys [2004-12-07 16896] R3 EMSCR;EMSCR; C:\WINDOWS\system32\DRIVERS\EMS7SK.sys [2006-05-25 61056] R3 ESDCR;ESDCR; C:\WINDOWS\system32\DRIVERS\ESD7SK.sys [2006-05-25 40064] R3 ESMCR;ESMCR; C:\WINDOWS\system32\DRIVERS\ESM7SK.sys [2006-05-25 74752] R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\System32\Drivers\GEARAspiWDM.sys [2008-04-17 15464] R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-06-28 4304384] R3 NTIDrvr;Upper Class Filter Driver; C:\WINDOWS\system32\DRIVERS\NTIDrvr.sys [2006-06-01 6144] R3 psdfilter;psdfilter; \??\C:\WINDOWS\system32\Drivers\psdfilter.sys [] R3 psdvdisk;psdvdisk; \??\C:\WINDOWS\system32\Drivers\psdvdisk.sys [] R3 Rasirda;WAN Miniport (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584] R3 sdbus;sdbus; C:\WINDOWS\system32\DRIVERS\sdbus.sys [2008-04-13 79232] R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2006-10-22 199776] R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208] R3 usbhub;USB2 Enabled Hub; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520] R3 usbohci;Microsoft USB Open Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-13 17152] S1 AmdK8;AMD Processor Driver; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2006-05-10 36864] S1 ATITool;ATITool Overclocking Utility; C:\WINDOWS\system32\DRIVERS\ATITool.sys [2006-11-10 24064] S2 ASInsHelp;ASInsHelp; \??\C:\WINDOWS\system32\drivers\AsInsHelp32.sys [] S2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [] S2 Sentinel;Sentinel; C:\WINDOWS\System32\Drivers\SENTINEL.SYS [] S3 afp961g6;afp961g6; C:\WINDOWS\system32\drivers\afp961g6.sys [] S3 Arp1394;1394 ARP Client Protocol; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800] S3 btaudio;Bluetooth Audio Device; C:\WINDOWS\system32\drivers\btaudio.sys [] S3 BTDriver;Bluetooth Virtual Communications Driver; C:\WINDOWS\system32\DRIVERS\btport.sys [] S3 BTKRNL;Bluetooth Bus Enumerator; C:\WINDOWS\system32\DRIVERS\btkrnl.sys [] S3 BTWDNDIS;Bluetooth LAN Access Server; C:\WINDOWS\system32\DRIVERS\btwdndis.sys [] S3 CCDECODE;Closed Caption Decoder; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024] S3 cpuz126;cpuz126; \??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\cpuz.sys [] S3 EagleNT;EagleNT; \??\C:\WINDOWS\system32\drivers\EagleNT.sys [] S3 ENTECH;ENTECH; \??\C:\WINDOWS\system32\DRIVERS\ENTECH.sys [] S3 HidUsb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368] S3 HSF_DPV;HSF_DPV; C:\WINDOWS\system32\DRIVERS\HSX_DPV.sys [] S3 HSXHWAZL;HSXHWAZL; C:\WINDOWS\system32\DRIVERS\HSXHWAZL.sys [] S3 irsir;Microsoft Serial Infrared Driver; C:\WINDOWS\system32\DRIVERS\irsir.sys [2001-08-17 18688] S3 jeEYRZGouF;jeEYRZGouF; \??\C:\Documents and Settings\jtp\Desktop\mhs\IFTH [] S3 Ktp;Elantech Touchpad; C:\WINDOWS\system32\DRIVERS\Ktp.sys [2006-03-17 27904] S3 lgatbus;LG USB Composite Device driver (WDM); C:\WINDOWS\system32\DRIVERS\lgatbus.sys [2006-05-19 43024] S3 lgatmdm;LG CDMA USB Modem Drivers; C:\WINDOWS\system32\DRIVERS\lgatmdm.sys [2006-05-19 77104] S3 lgatserd;LG CDMA USB Modem Diagnostic Serial Port Drivers (WDM); C:\WINDOWS\system32\DRIVERS\lgatserd.sys [2006-05-19 60816] S3 MHNDRV;MHN driver; C:\WINDOWS\system32\DRIVERS\mhndrv.sys [2004-08-10 11008] S3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-17 12160] S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504] S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248] S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880] S3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824] S3 NSNDIS5;NSNDIS5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\NSNDIS5.SYS [] S3 PnkBstrK;PnkBstrK; \??\C:\WINDOWS\system32\drivers\PnkBstrK.sys [] S3 RapDrv;RapDrv; \??\C:\WINDOWS\system32\drivers\RapDrv.sys [] S3 RapFile;RapFile; \??\C:\WINDOWS\system32\drivers\RapFile.sys [] S3 RapNet;RapNet; \??\C:\WINDOWS\system32\drivers\RapNet.sys [] S3 RivaTuner32;RivaTuner32; \??\C:\Program Files\RivaTuner v2.09\RivaTuner32.sys [] S3 RT2500;RT2500 Wireless Driver; C:\WINDOWS\system32\DRIVERS\RT2500.sys [] S3 RT73;Belkin USB Network Adapter; C:\WINDOWS\system32\DRIVERS\rt73.sys [2005-08-02 232192] S3 RTL8023xp;Realtek 10/100/1000 NIC Family all in one NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys [2005-09-30 78720] S3 SjdhYlN;SjdhYlN; \??\C:\Documents and Settings\jtp\Desktop\mhs\BUIJ [] S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136] S3 SMCIRDA;SMSC IrCC Miniport Device Driver; C:\WINDOWS\system32\DRIVERS\smcirda.sys [2004-12-09 46592] S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232] S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [2008-10-01 32000] S3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-10 31616] S3 usbprint;Microsoft USB PRINTER Class; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856] S3 usbser;Motorola USB Modem Driver; C:\WINDOWS\system32\DRIVERS\usbser.sys [2008-04-13 26112] S3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368] S3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSX_CNXT.sys [] S3 WpdUsb;WpdUsb; C:\WINDOWS\System32\Drivers\wpdusb.sys [2006-10-18 38528] S3 WSTCODEC;World Standard Teletext Codec; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200] S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568] S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944] S4 black;black; C:\WINDOWS\System32\drivers\BlackDrv.sys [2005-03-30 229331] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AcerMemUsageCheckService;Memory Check Service; C:\Acer\Empowering Technology\ePerformance\MemCheck.exe [2006-03-29 28672] R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2008-10-01 116040] R2 avg8emc;AVG8 E-mail Scanner; C:\PROGRA~1\AVG\AVG8\avgemc.exe [2008-07-04 873752] R2 avg8wd;AVG8 WatchDog; C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2008-07-04 231192] R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2008-08-29 238888] R2 ehRecvr;Media Center Receiver Service; C:\WINDOWS\eHome\ehRecvr.exe [2005-12-15 237568] R2 ehSched;Media Center Scheduler Service; C:\WINDOWS\eHome\ehSched.exe [2005-08-05 102912] R2 Irmon;Infrared Monitor; C:\WINDOWS\system32\svchost.exe [2008-04-13 14336] R2 McrdSvc;Media Center Extender Service; C:\WINDOWS\ehome\mcrdsvc.exe [2005-08-05 99328] R2 NMSAccessU;NMSAccessU; C:\Program Files\CDBurnerXP\NMSAccessU.exe [2008-06-15 71096] R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2008-07-28 66872] R2 PnkBstrB;PnkBstrB; C:\WINDOWS\system32\PnkBstrB.exe [2008-11-17 203272] R2 Viewpoint Service;Viewpoint Service; C:\Program Files\Viewpoint\Common\ViewpointService.exe [2008-04-04 30152] R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2008-10-01 536872] S2 BlackICE;BlackICE; H:\blackice\blackd.exe [] S2 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2008-04-13 267776] S3 Adobe LM Service;Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2008-09-09 72704] S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312] S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632] S3 Dmiord;Dmiord; C:\WINDOWS\system32\gdi.exe [2004-08-10 24576] S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104] S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [2005-11-14 69632] S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664] S3 Imapi Helper;Imapi Helper; C:\Program Files\Alex Feinman\ISO Recorder\ImapiHelper.exe [2006-01-05 163840] S3 MHN;MHN; C:\WINDOWS\System32\svchost.exe [2008-04-13 14336] S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-10-18 913408] S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-13 14336] S4 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2006-04-27 405504] S4 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2006-02-17 73728] S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096] S4 nmraapache;Pure Networks Net2Go Service; C:\Program Files\Pure Networks\Network Magic\WebServer\bin\nmraapache.exe [2008-01-18 12800] S4 nmservice;Pure Networks Platform Service; C:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe [2008-01-08 451896] S4 RapApp;RapApp; H:\blackice\rapapp.exe [] -----------------EOF-----------------

Rorschach112 View Member Profile	Nov 24 2008, 12:47 PM Post #14
SuperMember Group: Authentic Member Posts: 3,651 Joined: 29-September 07 Member No.: 73,164 Operating System: Windows XP	Hello Please download Malwarebytes' Anti-Malware from Here or Here Double Click mbam-setup.exe to install the application. Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish. If an update is found, it will download and install the latest version. Once the program has loaded, select "Perform Quick Scan", then click Scan. The scan may take some time to finish,so please be patient. When the scan is complete, click OK, then Show Results to view the results. Make sure that everything is checked, and click Remove Selected. When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note) The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM. Copy&Paste the entire report in your next reply. Extra Note: If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediatly. Go to Kaspersky website and perform an online antivirus scan. Read through the requirements and privacy statement and click on Accept button. It will start downloading and installing the scanner and virus definitions. You will be prompted to install an application from Kaspersky. Click Run. When the downloads have finished, click on Settings. Make sure these boxes are checked (ticked). If they are not, please tick them and click on the Save button: Spyware, Adware, Dialers, and other potentially dangerous programs Archives Mail databases Click on My Computer under Scan. Once the scan is complete, it will display the results. Click on View Scan Report. You will see a list of infected items there. Click on Save Report As.... Save this report to a convenient place. Change the Files of type to Text file (.txt) before clicking on the Save button.

TheDeciever1 View Member Profile	Nov 24 2008, 07:59 PM Post #15
New Member Group: Authentic Member Posts: 9 Joined: 23-November 08 Member No.: 82,541 Operating System: Windows XP Media Center Edition	Malwarebytes' Anti-Malware 1.30 Database version: 1419 Windows 5.1.2600 Service Pack 3 11/24/2008 11:37:19 AM mbam-log-2008-11-24 (11-37-19).txt Scan type: Quick Scan Objects scanned: 72613 Time elapsed: 5 minute(s), 36 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: (No malicious items detected) -------------------------------------------------------------------------------- KASPERSKY ONLINE SCANNER 7 REPORT Monday, November 24, 2008 Operating System: Microsoft Windows XP Professional Service Pack 3 (build 2600) Kaspersky Online Scanner 7 version: 7.0.25.0 Program database last update: Monday, November 24, 2008 17:37:02 Records in database: 1409182 -------------------------------------------------------------------------------- Scan settings: Scan using the following database: extended Scan archives: yes Scan mail databases: yes Scan area - My Computer: C:\ D:\ E:\ F:\ G:\ Scan statistics: Files scanned: 153043 Threat name: 9 Infected objects: 20 Suspicious objects: 0 Duration of the scan: 03:53:44 File name / Threat name / Threats count C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\172359FD.exe Infected: P2P-Worm.Win32.VB.dw 1 C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\38243DD8.exe Infected: not-a-virus:PSWTool.Win32.Brutus 1 C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\38D00E87.exe Infected: not-a-virus:PSWTool.Win32.Brutus 1 C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\734B5676.exe Infected: not-a-virus:PSWTool.Win32.Brutus 1 C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\35C43272.exe Infected: not-a-virus:PSWTool.Win32.Brutus 1 C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\4AEE4928.tmp Infected: not-a-virus:PSWTool.Win32.Brutus 1 C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\6C1F08A2.exe Infected: not-a-virus:PSWTool.Win32.Brutus 1 C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\200F1CF0.dll Infected: not-a-virus:AdWare.Win32.NewDotNet 1 C:\_OTMoveIt\MovedFiles\11242008_093140\Documents and Settings\owner\My Documents\My Documents\Other\Misc\sspsetup1.exe Infected: Backdoor.Win32.Delf.jgi 1 C:\_OTMoveIt\MovedFiles\11242008_093140\Documents and Settings\owner\My Documents\My Documents\Other\Misc\sspsetup1_.exe Infected: Backdoor.Win32.Delf.jgi 1 C:\_OTMoveIt\MovedFiles\11242008_093140\Documents and Settings\owner\My Documents\My Documents\My Widgets\SpeedFan Temperature Monitor.widget Infected: Exploit.Win32.SQLexp.s 1 C:\_OTMoveIt\MovedFiles\11242008_093140\Documents and Settings\owner\My Documents\My Documents\Misc\sspsetup1.exe Infected: Backdoor.Win32.Delf.jgi 1 C:\_OTMoveIt\MovedFiles\11242008_093140\Documents and Settings\owner\My Documents\My Documents\Misc\sspsetup1_.exe Infected: Backdoor.Win32.Delf.jgi 1 C:\_OTMoveIt\MovedFiles\11242008_093140\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\180564.exe Infected: not-a-virus:AdWare.Win32.OneStep.c 1 C:\_OTMoveIt\MovedFiles\11242008_093140\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\180564.exe Infected: not-a-virus:AdWare.Win32.Relevant.a 1 C:\_OTMoveIt\MovedFiles\11242008_093140\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\180564.exe Infected: not-a-virus:WebToolbar.Win32.WhenU.a 1 C:\_OTMoveIt\MovedFiles\11242008_093140\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\93179.exe Infected: not-a-virus:AdWare.Win32.NewDotNet 1 C:\_OTMoveIt\MovedFiles\11242008_093140\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\93179.exe Infected: not-a-virus:WebToolbar.Win32.WhenU.a 1 C:\_OTMoveIt\MovedFiles\11242008_093140\Documents and Settings\owner\My Documents\My Documents\DOCUMENTS cLEAN uP\Old Desktop 10-21-07\93179.exe Infected: not-a-virus:AdWare.Win32.Relevant.a 1 C:\_OTScanIt\MovedFiles\11232008_163103\C_WINDOWS\system32\dhnyrdlr.dll Infected: Trojan.Win32.Monderb.wlv 1 The selected area was scanned.

« Next Oldest · Virus, Spyware & Malware Removal · Next Newest »

2 Pages

1 2 >

1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)

0 Members:

Display Mode: Standard · Switch to: Linear+ · Switch to: Outline

Track this topic · Email this topic · Print this topic · Subscribe to this forum

Time is now: 2nd September 2010 - 10:16 PM

Advertisements do not imply our endorsement of that product or service. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk.
Member site: Alliance of Security Analysis Professionals | UNITE Against Malware
Memory Forums | Auto Repair Forum
© Geeks to Go, Inc. | All Rights Reserved | Privacy Policy