What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

possible infection but not sure [Solved]

39 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #17
# AdwCleaner v2.106 - Logfile created 01/18/2013 at 20:56:47 # Updated 17/01/2013 by Xplode # Operating system : Microsoft Windows XP Service Pack 3 (32 bits) # User : P Compton - EDITMACHINE # Boot Mode : Normal # Running from : C:\Documents and Settings\P Compton\Desktop\adwcleaner.exe # Option [Search] ***** [Services] ***** ***** [Files / Folders] ***** ***** [Registry] ***** ***** [Internet Browsers] ***** -\\ Internet Explorer v8.0.6001.18702 [OK] Registry is clean. ************************* AdwCleaner[R1].txt - [9873 octets] - [18/01/2013 20:45:15] AdwCleaner[R2].txt - [9933 octets] - [18/01/2013 20:45:47] AdwCleaner[R3].txt - [661 octets] - [18/01/2013 20:56:47] AdwCleaner[S1].txt - [9985 octets] - [18/01/2013 20:46:35] ########## EOF - C:\AdwCleaner[R3].txt - [780 octets] ########## hope this is good ? regards phil c
Post #18
Hi philcamera ;)

Please read through these instructions to familarize yourself with what to expect when this tool runs

Refer to the ComboFix User's Guide

Download ComboFix from one of these locations:

Link 1
Link 2


* IMPORTANT- Save ComboFix.exe to your Desktop

====================================================

Disable your AntiVirus and AntiSpyware applications as they will interfere with our tools and the removal. If you are unsure how to do this, please refer to our sticky topic How to disable your security applications

====================================================


Double click on ComboFix.exe & follow the prompts.

  • As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.

  • Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.

**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.


[external image: Posted Image]


Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:


[external image: Posted Image]


Click on Yes, to continue scanning for malware.

When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply for further review.
Post #19
hi robybel,
heres the combo fix log
ComboFix 13-01-17.04 - P Compton 19/01/2013 17:43:22.8.2 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.44.1033.18.3070.2259 [GMT 0:00]
Running from: c:\documents and settings\[removed]\Desktop\ComboFix.exe
AV: AVG *Disabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
AV: Microsoft Security Essentials *Disabled/Updated* {BCF43643-A118-4432-AEDE-D861FCBCFCDF}
AV: Microsoft Security Essentials *Disabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\All Users\Application Data\TEMP
c:\documents and settings\P Compton\Application Data\Canopus\QuickTitler\1.50\Style\Image\rcimlby.exe
c:\windows\EventSystem.log
c:\windows\system32\cseDVH.dll
c:\windows\system32\drivers\etc\hosts.ics
c:\windows\system32\roboot.exe
c:\windows\system32\URTTemp
c:\windows\system32\URTTemp\fusion.dll
c:\windows\system32\URTTemp\mscoree.dll
c:\windows\system32\URTTemp\mscoree.dll.local
c:\windows\system32\URTTemp\mscorsn.dll
c:\windows\system32\URTTemp\mscorwks.dll
c:\windows\system32\URTTemp\msvcr71.dll
c:\windows\system32\URTTemp\regtlib.exe
.
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
——-\Legacy_AMSERVICE
.
.
((((((((((((((((((((((((( Files Created from 2012-12-19 to 2013-01-19 )))))))))))))))))))))))))))))))
.
.
2013-01-18 15:01 . 2013-01-08 04:57 6991832 —-a-w- c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{0CAFFB0E-30E1-4776-8A09-9B6E3EF97C4F}\mpengine.dll
2013-01-18 14:23 . 2013-01-08 04:57 6991832 —-a-w- c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2013-01-17 16:46 . 2013-01-17 16:46 ——– d—–w- c:\windows\ERUNT
2013-01-17 16:46 . 2013-01-18 10:15 ——– d—–w- C:\JRT
2013-01-09 15:46 . 2013-01-09 15:46 ——– d—–w- c:\windows\system32\wbem\Repository
2013-01-06 22:41 . 2013-01-06 22:41 ——– d—–w- c:\windows\system32\NtmsData
2012-12-20 18:06 . 2012-12-20 18:08 ——– d—–w- c:\documents and settings\All Users\Application Data\188F1432-103A-4ffb-80F1-36B633C5C9E1
2012-12-20 17:59 . 2012-12-20 17:59 159744 —-a-w- c:\program files\Internet Explorer\Plugins\npqtplugin7.dll
2012-12-20 17:59 . 2012-12-20 17:59 159744 —-a-w- c:\program files\Internet Explorer\Plugins\npqtplugin6.dll
2012-12-20 17:59 . 2012-12-20 17:59 159744 —-a-w- c:\program files\Internet Explorer\Plugins\npqtplugin5.dll
2012-12-20 17:59 . 2012-12-20 17:59 159744 —-a-w- c:\program files\Internet Explorer\Plugins\npqtplugin4.dll
2012-12-20 17:59 . 2012-12-20 17:59 159744 —-a-w- c:\program files\Internet Explorer\Plugins\npqtplugin3.dll
2012-12-20 17:59 . 2012-12-20 17:59 159744 —-a-w- c:\program files\Internet Explorer\Plugins\npqtplugin2.dll
2012-12-20 17:59 . 2012-12-20 17:59 159744 —-a-w- c:\program files\Internet Explorer\Plugins\npqtplugin.dll
2012-12-20 17:58 . 2012-12-20 17:59 ——– d—–w- c:\program files\QuickTime
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-01-15 11:48 . 2012-04-10 15:14 697864 —-a-w- c:\windows\system32\FlashPlayerApp.exe
2013-01-15 11:48 . 2011-05-21 17:28 74248 —-a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-12-16 12:23 . 2008-04-14 12:00 290560 —-a-w- c:\windows\system32\atmfd.dll
2012-11-13 01:25 . 2008-04-14 12:00 1866368 —-a-w- c:\windows\system32\win32k.sys
2012-11-06 02:01 . 2008-04-14 12:00 1371648 —-a-w- c:\windows\system32\msxml6.dll
2012-11-02 02:02 . 2008-04-14 12:00 375296 —-a-w- c:\windows\system32\dpnet.dll
2012-11-01 12:17 . 2008-04-14 12:00 916992 —-a-w- c:\windows\system32\wininet.dll
2012-11-01 12:17 . 2008-04-14 12:00 43520 —-a-w- c:\windows\system32\licmgr10.dll
2012-11-01 12:17 . 2008-04-14 12:00 1469440 —-a-w- c:\windows\system32\inetcpl.cpl
2012-11-01 00:35 . 2008-04-14 12:00 385024 —-a-w- c:\windows\system32\html.iec
2012-10-25 03:12 . 2012-10-25 03:12 94208 —-a-w- c:\windows\system32\QuickTimeVR.qtx
2012-10-25 03:12 . 2012-10-25 03:12 69632 —-a-w- c:\windows\system32\QuickTime.qts
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"KTPWare"="c:\program files\Elantech\ktp.exe" [2009-01-14 512000]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-02-28 786521]
"ATICCC"="c:\program files\ATI Technologies\ATI.ACE\CLIStart.exe" [2006-05-10 90112]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2012-09-12 947176]
"RTHDCPL"="RTHDCPL.EXE" [2007-10-16 16855552]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2012-10-25 421888]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-12-03 946352]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"DWQueuedReporting"="c:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2007-02-26 437160]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"tscuninstall"="c:\windows\system32\tscupgrd.exe" [2007-07-27 44544]
.
c:\documents and settings\P Compton\Start Menu\Programs\Startup\
ERUNT AutoBackup.lnk - c:\program files\ERUNT\AUTOBACK.EXE [2005-10-20 38912]
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-24 304128]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
2010-04-10 16:01 12464 —-a-w- c:\windows\system32\avgrsstx.dll
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0lsdelete\0sprestrt
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2012-10-25 03:12 421888 —-a-w- c:\program files\QuickTime\QTTask.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
"FirewallOverride"=dword:00000001
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\TVAnts\\Tvants.exe"=
"c:\\Program Files\\SopCast\\adv\\SopAdver.exe"=
"c:\\Program Files\\SopCast\\SopCast.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\TVUPlayer\\TVUPlayer.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"d:\\Azureus Downloads\\NOT ERASE\\Azureus\\Azureus.exe"=
"c:\\Program Files\\Common Files\\Apple\\Apple Application Support\\WebKit2WebProcess.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\WINDOWS\\system32\\msfeedssync.exe"=
"c:\\Program Files\\Yahoo!\\SoftwareUpdate\\YahooAUService.exe"=
"c:\\WINDOWS\\system32\\ati2evxx.exe"=
.
R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [10/04/2010 16:01 216200]
R1 AvgTdiX;AVG Free Network Redirector;c:\windows\system32\drivers\avgtdix.sys [10/04/2010 16:01 242896]
R1 cdrport;cdrport;c:\windows\system32\drivers\cdrport.sys [21/11/2007 11:45 4608]
R2 AutoExNT;AutoExNT;c:\windows\system32\Autoexnt.exe [10/04/2010 17:21 5904]
R2 hasplms;Sentinel HASP License Manager;c:\windows\system32\hasplms.exe -run –> c:\windows\system32\hasplms.exe -run [?]
R2 SXSUDFMF;SXSUDFMF;c:\windows\system32\drivers\SXSUDFMF.sys [26/09/2011 16:21 4352]
R4 SXSUDFS;SXSUDFS;c:\windows\system32\drivers\SXSUDFS.sys [26/09/2011 16:21 792576]
S0 Lbd;Lbd;c:\windows\system32\DRIVERS\Lbd.sys –> c:\windows\system32\DRIVERS\Lbd.sys [?]
S1 cdrblock;cdrblock;c:\windows\system32\drivers\cdrblock.sys [21/11/2007 11:45 20992]
S1 MpKsl3c795d11;MpKsl3c795d11;\??\c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{0CAFFB0E-30E1-4776-8A09-9B6E3EF97C4F}\MpKsl3c795d11.sys –> c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{0CAFFB0E-30E1-4776-8A09-9B6E3EF97C4F}\MpKsl3c795d11.sys [?]
S1 SASDIFSV;SASDIFSV;\??\c:\program files\SUPERAntiSpyware\SASDIFSV.SYS –> c:\program files\SUPERAntiSpyware\SASDIFSV.SYS [?]
S1 SASKUTIL;SASKUTIL;\??\c:\program files\SUPERAntiSpyware\SASKUTIL.sys –> c:\program files\SUPERAntiSpyware\SASKUTIL.sys [?]
S2 Fun4IM Coordinator;Fun4IM Coordinator;"c:\progra~1\Fun4IM\Bandoo.exe" –> c:\progra~1\Fun4IM\Bandoo.exe [?]
S3 MotDev;Motorola Inc. USB Device;c:\windows\system32\drivers\motodrv.sys [21/06/2008 19:05 42112]
S3 SASENUM;SASENUM;\??\c:\program files\SUPERAntiSpyware\SASENUM.SYS –> c:\program files\SUPERAntiSpyware\SASENUM.SYS [?]
S3 SxSmemcd;SxS Memory Card;c:\windows\system32\drivers\SxSmemcd.sys [09/02/2010 04:06 45056]
.
— Other Services/Drivers In Memory —
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{A509B1FF-37FF-4bFF-8CFF-4F3A747040FF}]
2009-03-08 03:32 128512 —-a-w- c:\windows\system32\advpack.dll
.
Contents of the 'Scheduled Tasks' folder
.
2013-01-15 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2009-10-22 16:57]
.
2013-01-19 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-01-05 16:35]
.
2013-01-19 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-01-05 16:35]
.
2013-01-19 c:\windows\Tasks\Microsoft Antimalware Scheduled Scan.job
- c:\program files\Microsoft Security Client\MpCmdRun.exe [2012-09-12 16:25]
.
2013-01-19 c:\windows\Tasks\User_Feed_Synchronization-{682B6A91-0EC6-4D3F-A3F5-E62BA9D4F6B4}.job
- c:\windows\system32\msfeedssync.exe [2007-08-13 03:31]
.
.
——- Supplementary Scan ——-
.
uStart Page = hxxp://yahoo.com/
uInternet Settings,ProxyOverride = ;*.local
uSearchURL,(Default) = hxxp://uk.rd.yahoo.com/customize/ie/defaults/su/msgr8/*http://uk.search.yahoo.com
TCP: DhcpNameServer = [removed] [removed]
TCP: Interfaces\{334DD321-EAAD-426D-9B43-B84F29A77B65}: NameServer = 194.168.4.100,194.168.8.100
.
- - - - ORPHANS REMOVED - - - -
.
Toolbar-Locked - (no file)
HKCU-Run-{AA2E44DC-C75C-8564-A94D-657515D06542} - c:\documents and settings\P Compton\Application Data\Canopus\QuickTitler\1.50\Style\Image\rcimlby.exe
AddRemove-8461-7759-5462-8226 - d:\azureus downloads\Azureus\uninstall.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2013-01-19 17:55
Windows 5.1.2600 Service Pack 3 NTFS
.
scanning hidden processes …
.
scanning hidden autostart entries …
.
scanning hidden files …
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
——————— LOCKED REGISTRY KEYS ———————
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_5_502_146_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_5_502_146_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
——————— DLLs Loaded Under Running Processes ———————
.
- - - - - - - > 'winlogon.exe'(1036)
c:\windows\system32\Ati2evxx.dll
.
- - - - - - - > 'explorer.exe'(1392)
c:\windows\system32\WININET.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
———————— Other Running Processes ————————
.
c:\windows\system32\Ati2evxx.exe
c:\program files\Microsoft Security Client\MsMpEng.exe
c:\windows\system32\Ati2evxx.exe
c:\program files\ATI Technologies\ATI.ACE\CLI.EXE
c:\windows\RTHDCPL.EXE
c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files\IVT Corporation\BlueSoleil\BTNtService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\windows\system32\hasplms.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\windows\system32\SearchIndexer.exe
c:\program files\Yahoo!\SoftwareUpdate\YahooAUService.exe
c:\program files\ATI Technologies\ATI.ACE\cli.exe
c:\windows\system32\SearchProtocolHost.exe
c:\windows\system32\SearchFilterHost.exe
.
**************************************************************************
.
Completion time: 2013-01-19 18:02:10 - machine was rebooted
ComboFix-quarantined-files.txt 2013-01-19 18:02
.
Pre-Run: 7,274,524,672 bytes free
Post-Run: 7,447,224,320 bytes free
.
- - End Of File - - F773004E7FCC3BC950C3906D4B0BE470
Post #20
Hi philcamera ;)

Good job ;)

Please download Malwarebytes' Anti-Malware to your desktop.

  • Double-click mbam-setup.exe and follow the prompts to install the program.
  • At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select Perform quick scan, then click Scan.
    [external image: Posted Image]
  • When the scan is complete, click OK, then Show Results to view the results.
  • Be sure that everything is checked, and click Remove Selected .
  • When completed, a log will open in Notepad. Please save it to a convenient location and post the results.
  • Note: If you receive a notice that some of the items couldn't be removed, that they have been added to the delete on reboot list, please reboot.

=============================== Next =======================================



ESET Online Scanner
I'd like us to scan your machine with ESET OnlineScan

Note: If you are using Windows Vista/7, open your browser by right-clicking on its icon and select 'Run as administrator' to perform this scan.

*Note
It is recommended to disable onboard antivirus program and antispyware programs while performing scans so there are no conflicts and it will speed up scan time.
Please don't go surfing while your resident protection is disabled!
Once the scan is finished remember to re-enable your antivirus along with your antispyware programs.


  • Hold down Control and click on the following link to open ESET OnlineScan in a new window.
    ESET OnlineScan
  • Click the [external image: Posted Image] button.
  • For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
    • Click on [external image: Posted Image] to download the ESET Smart Installer. Save it to your desktop.
    • Double click on the [external image: Posted Image] icon on your desktop.
  • Check [external image: Posted Image]
  • Click the [external image: Posted Image] button.
  • Accept any security warnings from your browser.
  • Check [external image: Posted Image]
  • Make sure that the option "Remove found threats" is Unchecked
  • Push the Start button.
  • ESET will then download updates for itself, install itself, and begin
    scanning your computer. Please be patient as this can take some time.
  • When the scan completes, push [external image: Posted Image]
  • Push [external image: Posted Image], and save the file to your desktop using a unique name, such as MyEsetScan. Alternatively, look for report in C:\Program Files\ESET\ESET Online Scanner\log.txt. Include the contents of this report in your next reply.
  • Push the Back button.
  • Select Uninstall application on close check box and push [external image: Posted Image]

Please let me know how your machine is running and if there are any outstanding issues

On your next reply please post :
  • Malwarebytes log
  • Eset report

Let me know if you have any problems in performing with the steps above or any questions you may have.

Good Day!
Post #21
Malwarebytes Anti-Malware 1.70.0.1100 www.malwarebytes.org Database version: v2013.01.20.07 Windows XP Service Pack 3 x86 NTFS Internet Explorer 8.0.6001.18702 P Compton :: EDITMACHINE [administrator] 20/01/2013 19:54:08 mbam-log-2013-01-20 (19-54-08).txt Scan type: Quick scan Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM Scan options disabled: P2P Objects scanned: 231626 Time elapsed: 6 minute(s), 43 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 1 HKCU\SOFTWARE\D1T2EUR7FZ (Trojan.FakeAlert.SA) -> Quarantined and deleted successfully. Registry Values Detected: 0 (No malicious items detected) Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 0 (No malicious items detected) (end) and the est text file C:\Documents and Settings\P Compton\My Documents\Adobe\Adobe Media Encoder\ 4.0.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\Adobe\After Effects CS4\ Media Cache Files.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\Adobe\ Adobe Media Encoder.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\Adobe\ After Effects CS4.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\Adobe\ Premiere.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\CyberLink\ PowerDVD.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\GRETSCH HOUSE\RATES AND WELCOME.doc.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\jokes\1_GeorgeW1.pps.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\jokes\arsen about about says it all.doc.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\jokes\beer joke site.doc.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\jokes\DICTIONARYFORWOMEN.doc.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\jokes\homer_simpson-sings_the_joker.zip.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\jokes\INSTALLING A HUSBAND.doc.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\jokes\microsoft2008.pps.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\jokes\work1.pps.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Music\iTunes\Album Artwork\Cache\ B705786DE0C6E875.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Music\iTunes\Album Artwork\ Cache.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Music\iTunes\Album Artwork\ Download.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Music\iTunes\iTunes Media\Books\ Jo Nesbø.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Music\iTunes\iTunes Media\Books\ Lonely Planet.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Music\iTunes\iTunes Media\Books\ Yann Martel.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Music\iTunes\iTunes Media\Music\The Beatles\ LOVE.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Music\iTunes\iTunes Media\Music\ The Beatles.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Music\iTunes\iTunes Media\Podcasts\ Tight Lines.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Music\iTunes\iTunes Media\TV Shows\ Doctor Who.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Music\iTunes\iTunes Media\TV Shows\ Father Ted.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Music\iTunes\iTunes Media\ Books.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Music\iTunes\iTunes Media\ Downloads.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Music\iTunes\iTunes Media\ Mobile Applications.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Music\iTunes\iTunes Media\ Music.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Music\iTunes\iTunes Media\ Podcasts.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Music\iTunes\iTunes Media\ TV Shows.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Music\iTunes\ Album Artwork.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Music\iTunes\ iTunes Media.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Music\iTunes\ Previous iTunes Libraries.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Music\ iTunes.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Music\ LOVE.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Music\ Sound Files.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F00.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F01.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F02.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F03.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F04.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F05.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F06.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F07.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F08.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F09.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F10.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F11.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F12.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F13.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F14.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F15.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F16.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F17.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F18.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F19.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F20.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F21.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F22.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F23.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F24.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F25.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F26.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F27.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F28.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F29.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F30.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F31.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F32.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F33.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F34.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F35.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F36.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F37.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F38.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F39.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F40.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F41.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F42.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F43.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F44.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F45.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F46.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F47.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F48.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F49.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F50.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\ iPod Photo Cache.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\ImageStudio\Album\ Animations.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\ImageStudio\Album\ Motion Images.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\ImageStudio\Album\ Pictures and Videos.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\ImageStudio\ Album.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F00.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F01.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F02.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F03.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F04.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F05.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F06.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F07.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F08.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F09.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F10.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F11.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F12.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F13.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F14.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F15.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F16.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F17.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F18.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F19.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F20.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F21.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F22.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F23.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F24.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F25.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F26.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F27.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F28.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F29.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F30.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F31.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F32.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F33.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F34.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F35.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F36.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F37.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F38.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F39.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F40.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F41.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F42.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F43.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F44.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F45.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F46.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F47.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F48.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F49.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F50.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\ iPod Photo Cache.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\ cameraman.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\ EROTICA 07.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\ HOLS 2010.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\ ImageStudio.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\ iPod Photo Cache.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Pictures\ me in steadicam rig.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\My Videos\ Media Cache Files.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\NETWORK KEY\fluers key\6CBF95C936FC8AFBA556C7703C.doc.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\NETWORK KEY\ fluers key.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\NETWORK KEY\ linksys router.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\NETWORK KEY\ VIRGIN BOX IDENT 3963633.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\PIXEL FIX\PIXEL FIX.doc.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\QUOTES\04\adam norris jack morton quote.doc.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\QUOTES\04\ANNIMEDIA QUOTE.doc.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\QUOTES\04\BLANK LETTERHEAD AND WATERMARK.doc.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\QUOTES\04\CARL MARTIN ASPECT QUOTE QUOTE.doc.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\QUOTES\04\DANS CROWN QUOTE.doc.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\QUOTES\04\EWANS ZURICH QUOTE QUOTE 1.doc.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\QUOTES\04\EXTENDED LIST OF PRICES.doc.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\QUOTES\04\GEOFF KERSHAW THE CHALLENGE FACTOR.doc.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\QUOTES\04\LES P.S.H. QUOTE.doc.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\QUOTES\04\PATSY ERU QUOTE 1.doc.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\QUOTES\04\PATSY ERU QUOTE 2.doc.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\QUOTES\04\PAULS CATALYSM FOR CANNES.doc.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\QUOTES\04\PAULS CATALYSM FOR PRAGUE 2.doc.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\QUOTES\04\PAULS CAYTLSM QUOTE FOR PRAGUE.doc.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\QUOTES\04\PUMPHOUSE QUOTE.doc.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\QUOTES\04\QUOTE FOR GEORGIE HERLIHY ACUMOTIVE.doc.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\QUOTES\04\QUOTE FOR MARC SORRENTINO.doc.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\QUOTES\04\Quote for night train.doc.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\QUOTES\04\QUOTE FOR NOEL FLETCHER GEMINI PROD.doc.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\QUOTES\04\QUOTE FOR PENGUINS STEVE DAVIS.doc.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\QUOTES\04\quote for SARAH LOMAX (LIVE).doc.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\QUOTES\04\quote for tom conlon KALIDESCOPE GERMANY.doc.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\QUOTES\04\quote for tom conlon.doc.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\QUOTES\04\REFLEX ATHENS QUOTE.doc.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\QUOTES\04\SIMONS QUOTE BASILDON.doc.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\QUOTES\04\VIDEO PRODUCTION WORKSHOP LIST OF PRICES.doc.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\QUOTES\05 quotes\DAN BURGESS QUOTE SEPT 20 05.doc.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\QUOTES\05 quotes\luis fidels quote.doc.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\QUOTES\06 QUOTES\dave macintyre live quote.doc.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\QUOTES\07 quotes\KATIES live JAN 15 quote.doc.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\QUOTES\08\QUOTE FOR KARYN AT GPJ FOR IBM TC0C.doc.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\QUOTES\08\QUOTE FOR OLIVE 360 STEVE DAVIS FEB 08.doc.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\QUOTES\08\TOM CONLON P.P. 15 AND 16 TH JAN 08.doc.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\QUOTES\ 04.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\QUOTES\ 05 quotes.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\QUOTES\ 06 QUOTES.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\QUOTES\ 07 quotes.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\QUOTES\ 08.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\QUOTES\ 09.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\QUOTES\ 2010.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\Red Kawa\ Audio.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\Red Kawa\ Downloads.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\Red Kawa\ Videos.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\Regensoft\ Downloads.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\Sony\ XDCAMBrowser.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\ Adobe.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\ CyberLink.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\ jokes.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\ My Music.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\ My Pictures.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\ My Videos.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\ NETWORK KEY.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\ PIXEL FIX.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\ QUOTES.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\ Regensoft.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\ sja.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\ Sony.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\ tube map.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\ Vuze Downloads.lnk Win32/Caphaw.J trojan C:\Documents and Settings\P Compton\My Documents\ring tones.lnk Win32/Caphaw.J trojan
Post #22
hi robybel, my machine seems to be running ok, but it never really was running badly in the first place . myoriginal problem with the" my doccuments " does not seem to have cured itself all the folders in there seem to have lost there memory about what they are still. if i try to open a file that i know was a word doc ,for example, it come up with windows cannot find \\EDITMACHINE\\MYDOCUMENTS, editmachine is the name of my computer btw. if i go into properties it sees almost every folder there as a shortcut and it looks like theyve all lost there file designation programmes with which they open up, i cant even change them back to what there are supposed to be !!!!
Post #23
hi robybel, had a minor problem this morning when i booted up my computer it came up with a blue screen saying a windows critical error occured and advised me to shut my computer down and restart and if it occured again uninstall recent hardware / software that i may have installed very recently. ive done nothing except start it up again and at the present it seems to be fine , but it was for 5mins when i started it up the first time ,the blue screen took a while to come up?????
Post #24
Hi philcamera ;)


CKScanner
  • Download CKScanner from here
  • Important - Save it to your desktop.
  • Doubleclick CKScanner.exe (Right click and "Run as administrator" in Vista/Win7).
  • Give permission if necessary, and click Search For Files.
  • After a very short time, when the cursor hourglass disappears, click Save List To File.
  • A message box will verify the file saved.
  • Double-click the CKFiles.txt icon on your desktop and copy/paste the contents in your next reply.
Post #25
CKScanner 2.1 - Additional Security Risks - These are not necessarily bad scanner sequence 3.RP.11.CWNADE —– EOF —– thanks robybel
Post #26
hi robybel, i think ive discovered the blue screen problem, its something to do with the ati catalyst control centre i have installed on my desktop and my ati mobility x1600 gfx card , all works ok until i try to open catalyst control centre, it then trys to install using windows installer then blue screen, dont know why it trys to install as its already installed and works ok if you shut down the installer quickly the ccc eventually opens and is fine , find it strange that it tries to install every time though when its installed already? have you seen the ck scan log yet? and is there anyway i can get my docs folder contents back to normal? regards phil c
Post #27
Hi philcamera ;)

and is there anyway i can get my docs folder contents back to normal?


Please download Unhide.exe to your desktop:
  • Double-click on the Unhide.exe icon on your desktop and allow the program to run.
  • This program will remove the hidden attributes from all the files on your system.
  • Note: If you had purposely hidden any files, then you will need to hide them again after this tool has run.


Let me know if you see the My Document folder now
Post #28
hi robybel, i have run unhide and yes its brought everything back , it says there wasnt a problem either. !! along side the proper folders are a duplicate of files and folders with thw shortcut file designation on them , i opened one and immeadiatley my anti virus kicks in and tells me its cleaning a found virus in history on mse it has four of something called backdoor;win32/caphaw.D. It says its severe and its in quarrantine. is this a problem and what should i do about these shortcut duplicates they are in every folder. thanks robybel , i appreciate your work thank you.
Post #29
Hi philcamera ;)

Open a new Notepad session
  • Click the Start button, click run
  • in the run box type notepad
  • click ok
  • In the notepad, Click "Format" and be certain that Word Wrap is not checked.
  • Copy and paste all the text in the code box below into the Notepad. Do Not copy the word CODE

File::
C:\Documents and Settings\P Compton\My Documents\Adobe\Adobe Media Encoder\ 4.0.lnk 
C:\Documents and Settings\P Compton\My Documents\Adobe\After Effects CS4\ Media Cache Files.lnk 
C:\Documents and Settings\P Compton\My Documents\Adobe\ Adobe Media Encoder.lnk 
C:\Documents and Settings\P Compton\My Documents\Adobe\ After Effects CS4.lnk 
C:\Documents and Settings\P Compton\My Documents\Adobe\ Premiere.lnk 
C:\Documents and Settings\P Compton\My Documents\CyberLink\ PowerDVD.lnk 
C:\Documents and Settings\P Compton\My Documents\GRETSCH HOUSE\RATES AND WELCOME.doc.lnk 
C:\Documents and Settings\P Compton\My Documents\jokes\1_GeorgeW1.pps.lnk 
C:\Documents and Settings\P Compton\My Documents\jokes\arsen about about says it all.doc.lnk 
C:\Documents and Settings\P Compton\My Documents\jokes\beer joke site.doc.lnk 
C:\Documents and Settings\P Compton\My Documents\jokes\DICTIONARYFORWOMEN.doc.lnk 
C:\Documents and Settings\P Compton\My Documents\jokes\homer_simpson-sings_the_joker.zip.lnk 
C:\Documents and Settings\P Compton\My Documents\jokes\INSTALLING A HUSBAND.doc.lnk 
C:\Documents and Settings\P Compton\My Documents\jokes\microsoft2008.pps.lnk 
C:\Documents and Settings\P Compton\My Documents\jokes\work1.pps.lnk 
C:\Documents and Settings\P Compton\My Documents\My Music\iTunes\Album Artwork\Cache\ B705786DE0C6E875.lnk 
C:\Documents and Settings\P Compton\My Documents\My Music\iTunes\Album Artwork\ Cache.lnk 
C:\Documents and Settings\P Compton\My Documents\My Music\iTunes\Album Artwork\ Download.lnk 
C:\Documents and Settings\P Compton\My Documents\My Music\iTunes\iTunes Media\Books\ Jo Nesbø.lnk 
C:\Documents and Settings\P Compton\My Documents\My Music\iTunes\iTunes Media\Books\ Lonely Planet.lnk 
C:\Documents and Settings\P Compton\My Documents\My Music\iTunes\iTunes Media\Books\ Yann Martel.lnk 
C:\Documents and Settings\P Compton\My Documents\My Music\iTunes\iTunes Media\Music\The Beatles\ LOVE.lnk 
C:\Documents and Settings\P Compton\My Documents\My Music\iTunes\iTunes Media\Music\ The Beatles.lnk 
C:\Documents and Settings\P Compton\My Documents\My Music\iTunes\iTunes Media\Podcasts\ Tight Lines.lnk 
C:\Documents and Settings\P Compton\My Documents\My Music\iTunes\iTunes Media\TV Shows\ Doctor Who.lnk 
C:\Documents and Settings\P Compton\My Documents\My Music\iTunes\iTunes Media\TV Shows\ Father Ted.lnk 
C:\Documents and Settings\P Compton\My Documents\My Music\iTunes\iTunes Media\ Books.lnk 
C:\Documents and Settings\P Compton\My Documents\My Music\iTunes\iTunes Media\ Downloads.lnk 
C:\Documents and Settings\P Compton\My Documents\My Music\iTunes\iTunes Media\ Mobile Applications.lnk 
C:\Documents and Settings\P Compton\My Documents\My Music\iTunes\iTunes Media\ Music.lnk 
C:\Documents and Settings\P Compton\My Documents\My Music\iTunes\iTunes Media\ Podcasts.lnk 
C:\Documents and Settings\P Compton\My Documents\My Music\iTunes\iTunes Media\ TV Shows.lnk 
C:\Documents and Settings\P Compton\My Documents\My Music\iTunes\ Album Artwork.lnk 
C:\Documents and Settings\P Compton\My Documents\My Music\iTunes\ iTunes Media.lnk 
C:\Documents and Settings\P Compton\My Documents\My Music\iTunes\ Previous iTunes Libraries.lnk 
C:\Documents and Settings\P Compton\My Documents\My Music\ iTunes.lnk 
C:\Documents and Settings\P Compton\My Documents\My Music\ LOVE.lnk 
C:\Documents and Settings\P Compton\My Documents\My Music\ Sound Files.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F00.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F01.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F02.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F03.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F04.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F05.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F06.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F07.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F08.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F09.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F10.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F11.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F12.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F13.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F14.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F15.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F16.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F17.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F18.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F19.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F20.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F21.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F22.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F23.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F24.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F25.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F26.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F27.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F28.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F29.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F30.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F31.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F32.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F33.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F34.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F35.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F36.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F37.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F38.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F39.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F40.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F41.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F42.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F43.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F44.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F45.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F46.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F47.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F48.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F49.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F50.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\cameraman\ iPod Photo Cache.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\ImageStudio\Album\ Animations.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\ImageStudio\Album\ Motion Images.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\ImageStudio\Album\ Pictures and Videos.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\ImageStudio\ Album.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F00.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F01.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F02.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F03.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F04.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F05.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F06.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F07.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F08.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F09.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F10.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F11.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F12.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F13.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F14.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F15.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F16.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F17.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F18.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F19.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F20.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F21.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F22.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F23.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F24.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F25.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F26.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F27.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F28.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F29.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F30.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F31.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F32.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F33.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F34.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F35.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F36.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F37.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F38.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F39.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F40.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F41.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F42.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F43.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F44.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F45.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F46.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F47.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F48.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F49.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F50.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\iPod Photo Cache\ iPod Photo Cache.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\ cameraman.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\ EROTICA 07.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\ HOLS 2010.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\ ImageStudio.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\ iPod Photo Cache.lnk 
C:\Documents and Settings\P Compton\My Documents\My Pictures\ me in steadicam rig.lnk 
C:\Documents and Settings\P Compton\My Documents\My Videos\ Media Cache Files.lnk 
C:\Documents and Settings\P Compton\My Documents\NETWORK KEY\fluers key\6CBF95C936FC8AFBA556C7703C.doc.lnk 
C:\Documents and Settings\P Compton\My Documents\NETWORK KEY\ fluers key.lnk 
C:\Documents and Settings\P Compton\My Documents\NETWORK KEY\ linksys router.lnk 
C:\Documents and Settings\P Compton\My Documents\NETWORK KEY\ VIRGIN BOX IDENT 3963633.lnk 
C:\Documents and Settings\P Compton\My Documents\PIXEL FIX\PIXEL FIX.doc.lnk 
C:\Documents and Settings\P Compton\My Documents\QUOTES\04\adam norris jack morton quote.doc.lnk 
C:\Documents and Settings\P Compton\My Documents\QUOTES\04\ANNIMEDIA QUOTE.doc.lnk 
C:\Documents and Settings\P Compton\My Documents\QUOTES\04\BLANK LETTERHEAD AND WATERMARK.doc.lnk 
C:\Documents and Settings\P Compton\My Documents\QUOTES\04\CARL MARTIN ASPECT QUOTE QUOTE.doc.lnk 
C:\Documents and Settings\P Compton\My Documents\QUOTES\04\DANS CROWN QUOTE.doc.lnk 
C:\Documents and Settings\P Compton\My Documents\QUOTES\04\EWANS ZURICH QUOTE QUOTE 1.doc.lnk 
C:\Documents and Settings\P Compton\My Documents\QUOTES\04\EXTENDED LIST OF PRICES.doc.lnk 
C:\Documents and Settings\P Compton\My Documents\QUOTES\04\GEOFF KERSHAW THE CHALLENGE FACTOR.doc.lnk 
C:\Documents and Settings\P Compton\My Documents\QUOTES\04\LES P.S.H. QUOTE.doc.lnk 
C:\Documents and Settings\P Compton\My Documents\QUOTES\04\PATSY ERU QUOTE 1.doc.lnk 
C:\Documents and Settings\P Compton\My Documents\QUOTES\04\PATSY ERU QUOTE 2.doc.lnk 
C:\Documents and Settings\P Compton\My Documents\QUOTES\04\PAULS CATALYSM FOR CANNES.doc.lnk 
C:\Documents and Settings\P Compton\My Documents\QUOTES\04\PAULS CATALYSM FOR PRAGUE 2.doc.lnk 
C:\Documents and Settings\P Compton\My Documents\QUOTES\04\PAULS CAYTLSM QUOTE FOR PRAGUE.doc.lnk 
C:\Documents and Settings\P Compton\My Documents\QUOTES\04\PUMPHOUSE QUOTE.doc.lnk 
C:\Documents and Settings\P Compton\My Documents\QUOTES\04\QUOTE FOR GEORGIE HERLIHY ACUMOTIVE.doc.lnk 
C:\Documents and Settings\P Compton\My Documents\QUOTES\04\QUOTE FOR MARC SORRENTINO.doc.lnk 
C:\Documents and Settings\P Compton\My Documents\QUOTES\04\Quote for night train.doc.lnk 
C:\Documents and Settings\P Compton\My Documents\QUOTES\04\QUOTE FOR NOEL FLETCHER GEMINI PROD.doc.lnk 
C:\Documents and Settings\P Compton\My Documents\QUOTES\04\QUOTE FOR PENGUINS STEVE DAVIS.doc.lnk 
C:\Documents and Settings\P Compton\My Documents\QUOTES\04\quote for SARAH LOMAX (LIVE).doc.lnk 
C:\Documents and Settings\P Compton\My Documents\QUOTES\04\quote for tom conlon KALIDESCOPE GERMANY.doc.lnk 
C:\Documents and Settings\P Compton\My Documents\QUOTES\04\quote for tom conlon.doc.lnk 
C:\Documents and Settings\P Compton\My Documents\QUOTES\04\REFLEX ATHENS QUOTE.doc.lnk 
C:\Documents and Settings\P Compton\My Documents\QUOTES\04\SIMONS QUOTE BASILDON.doc.lnk 
C:\Documents and Settings\P Compton\My Documents\QUOTES\04\VIDEO PRODUCTION WORKSHOP LIST OF PRICES.doc.lnk 
C:\Documents and Settings\P Compton\My Documents\QUOTES\05 quotes\DAN BURGESS QUOTE SEPT 20 05.doc.lnk 
C:\Documents and Settings\P Compton\My Documents\QUOTES\05 quotes\luis fidels quote.doc.lnk 
C:\Documents and Settings\P Compton\My Documents\QUOTES\06 QUOTES\dave macintyre live quote.doc.lnk 
C:\Documents and Settings\P Compton\My Documents\QUOTES\07 quotes\KATIES live JAN 15 quote.doc.lnk 
C:\Documents and Settings\P Compton\My Documents\QUOTES\08\QUOTE FOR KARYN AT GPJ FOR IBM TC0C.doc.lnk 
C:\Documents and Settings\P Compton\My Documents\QUOTES\08\QUOTE FOR OLIVE 360 STEVE DAVIS FEB 08.doc.lnk 
C:\Documents and Settings\P Compton\My Documents\QUOTES\08\TOM CONLON P.P. 15 AND 16 TH JAN 08.doc.lnk 
C:\Documents and Settings\P Compton\My Documents\QUOTES\ 04.lnk 
C:\Documents and Settings\P Compton\My Documents\QUOTES\ 05 quotes.lnk 
C:\Documents and Settings\P Compton\My Documents\QUOTES\ 06 QUOTES.lnk 
C:\Documents and Settings\P Compton\My Documents\QUOTES\ 07 quotes.lnk 
C:\Documents and Settings\P Compton\My Documents\QUOTES\ 08.lnk 
C:\Documents and Settings\P Compton\My Documents\QUOTES\ 09.lnk 
C:\Documents and Settings\P Compton\My Documents\QUOTES\ 2010.lnk 
C:\Documents and Settings\P Compton\My Documents\Red Kawa\ Audio.lnk 
C:\Documents and Settings\P Compton\My Documents\Red Kawa\ Downloads.lnk 
C:\Documents and Settings\P Compton\My Documents\Red Kawa\ Videos.lnk 
C:\Documents and Settings\P Compton\My Documents\Regensoft\ Downloads.lnk 
C:\Documents and Settings\P Compton\My Documents\Sony\ XDCAMBrowser.lnk 
C:\Documents and Settings\P Compton\My Documents\ Adobe.lnk 
C:\Documents and Settings\P Compton\My Documents\ CyberLink.lnk 
C:\Documents and Settings\P Compton\My Documents\ jokes.lnk 
C:\Documents and Settings\P Compton\My Documents\ My Music.lnk 
C:\Documents and Settings\P Compton\My Documents\ My Pictures.lnk 
C:\Documents and Settings\P Compton\My Documents\ My Videos.lnk 
C:\Documents and Settings\P Compton\My Documents\ NETWORK KEY.lnk 
C:\Documents and Settings\P Compton\My Documents\ PIXEL FIX.lnk 
C:\Documents and Settings\P Compton\My Documents\ QUOTES.lnk 
C:\Documents and Settings\P Compton\My Documents\ Regensoft.lnk 
C:\Documents and Settings\P Compton\My Documents\ sja.lnk 
C:\Documents and Settings\P Compton\My Documents\ Sony.lnk 
C:\Documents and Settings\P Compton\My Documents\ tube map.lnk 
C:\Documents and Settings\P Compton\My Documents\ Vuze Downloads.lnk 
C:\Documents and Settings\P Compton\My Documents\ring tones.lnk 
c:\progra~1\Fun4IM\Bandoo.exe 

Driver::
Fun4IM Coordinator


In the notepad
  • Click File, Save as…, and set the Save in to your Desktop
  • In the filename box, type (including quotation marks) as the filename: "CFScript.txt"
  • Click save
Using your mouse left button, drag the new file CFscript.txt and drop it on the ComboFix.exe icon as shown below.

This will start ComboFix again.Close all browser/windows first.

**Note: Do not mouseclick combofix's window while it's running. That may cause it to stall**

[external image: Posted Image]
Post #30
ComboFix 13-01-17.04 - P Compton 25/01/2013 17:33:16.9.2 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.44.1033.18.3070.2152 [GMT 0:00]
Running from: c:\documents and settings\[removed]\Desktop\ComboFix.exe
Command switches used :: c:\documents and settings\P Compton\Desktop\CFScript.txt
AV: AVG *Disabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
AV: Microsoft Security Essentials *Disabled/Updated* {BCF43643-A118-4432-AEDE-D861FCBCFCDF}
AV: Microsoft Security Essentials *Enabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}
.
FILE ::
"c:\documents and settings\P Compton\My Documents\ Adobe.lnk"
"c:\documents and settings\P Compton\My Documents\ CyberLink.lnk"
"c:\documents and settings\P Compton\My Documents\ jokes.lnk"
"c:\documents and settings\P Compton\My Documents\ My Music.lnk"
"c:\documents and settings\P Compton\My Documents\ My Pictures.lnk"
"c:\documents and settings\P Compton\My Documents\ My Videos.lnk"
"c:\documents and settings\P Compton\My Documents\ NETWORK KEY.lnk"
"c:\documents and settings\P Compton\My Documents\ PIXEL FIX.lnk"
"c:\documents and settings\P Compton\My Documents\ QUOTES.lnk"
"c:\documents and settings\P Compton\My Documents\ Regensoft.lnk"
"c:\documents and settings\P Compton\My Documents\ sja.lnk"
"c:\documents and settings\P Compton\My Documents\ Sony.lnk"
"c:\documents and settings\P Compton\My Documents\ tube map.lnk"
"c:\documents and settings\P Compton\My Documents\ Vuze Downloads.lnk"
"c:\documents and settings\P Compton\My Documents\Adobe\ Adobe Media Encoder.lnk"
"c:\documents and settings\P Compton\My Documents\Adobe\ After Effects CS4.lnk"
"c:\documents and settings\P Compton\My Documents\Adobe\ Premiere.lnk"
"c:\documents and settings\P Compton\My Documents\Adobe\Adobe Media Encoder\ 4.0.lnk"
"c:\documents and settings\P Compton\My Documents\Adobe\After Effects CS4\ Media Cache Files.lnk"
"c:\documents and settings\P Compton\My Documents\CyberLink\ PowerDVD.lnk"
"c:\documents and settings\P Compton\My Documents\GRETSCH HOUSE\RATES AND WELCOME.doc.lnk"
"c:\documents and settings\P Compton\My Documents\jokes\1_GeorgeW1.pps.lnk"
"c:\documents and settings\P Compton\My Documents\jokes\arsen about about says it all.doc.lnk"
"c:\documents and settings\P Compton\My Documents\jokes\beer joke site.doc.lnk"
"c:\documents and settings\P Compton\My Documents\jokes\DICTIONARYFORWOMEN.doc.lnk"
"c:\documents and settings\P Compton\My Documents\jokes\homer_simpson-sings_the_joker.zip.lnk"
"c:\documents and settings\P Compton\My Documents\jokes\INSTALLING A HUSBAND.doc.lnk"
"c:\documents and settings\P Compton\My Documents\jokes\microsoft2008.pps.lnk"
"c:\documents and settings\P Compton\My Documents\jokes\work1.pps.lnk"
"c:\documents and settings\P Compton\My Documents\My Music\ iTunes.lnk"
"c:\documents and settings\P Compton\My Documents\My Music\ LOVE.lnk"
"c:\documents and settings\P Compton\My Documents\My Music\ Sound Files.lnk"
"c:\documents and settings\P Compton\My Documents\My Music\iTunes\ Album Artwork.lnk"
"c:\documents and settings\P Compton\My Documents\My Music\iTunes\ iTunes Media.lnk"
"c:\documents and settings\P Compton\My Documents\My Music\iTunes\ Previous iTunes Libraries.lnk"
"c:\documents and settings\P Compton\My Documents\My Music\iTunes\Album Artwork\ Cache.lnk"
"c:\documents and settings\P Compton\My Documents\My Music\iTunes\Album Artwork\ Download.lnk"
"c:\documents and settings\P Compton\My Documents\My Music\iTunes\Album Artwork\Cache\ B705786DE0C6E875.lnk"
"c:\documents and settings\P Compton\My Documents\My Music\iTunes\iTunes Media\ Books.lnk"
"c:\documents and settings\P Compton\My Documents\My Music\iTunes\iTunes Media\ Downloads.lnk"
"c:\documents and settings\P Compton\My Documents\My Music\iTunes\iTunes Media\ Mobile Applications.lnk"
"c:\documents and settings\P Compton\My Documents\My Music\iTunes\iTunes Media\ Music.lnk"
"c:\documents and settings\P Compton\My Documents\My Music\iTunes\iTunes Media\ Podcasts.lnk"
"c:\documents and settings\P Compton\My Documents\My Music\iTunes\iTunes Media\ TV Shows.lnk"
"c:\documents and settings\P Compton\My Documents\My Music\iTunes\iTunes Media\Books\ Jo Nesbø.lnk"
"c:\documents and settings\P Compton\My Documents\My Music\iTunes\iTunes Media\Books\ Lonely Planet.lnk"
"c:\documents and settings\P Compton\My Documents\My Music\iTunes\iTunes Media\Books\ Yann Martel.lnk"
"c:\documents and settings\P Compton\My Documents\My Music\iTunes\iTunes Media\Music\ The Beatles.lnk"
"c:\documents and settings\P Compton\My Documents\My Music\iTunes\iTunes Media\Music\The Beatles\ LOVE.lnk"
"c:\documents and settings\P Compton\My Documents\My Music\iTunes\iTunes Media\Podcasts\ Tight Lines.lnk"
"c:\documents and settings\P Compton\My Documents\My Music\iTunes\iTunes Media\TV Shows\ Doctor Who.lnk"
"c:\documents and settings\P Compton\My Documents\My Music\iTunes\iTunes Media\TV Shows\ Father Ted.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\ cameraman.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\ EROTICA 07.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\ HOLS 2010.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\ ImageStudio.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\ iPod Photo Cache.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\ me in steadicam rig.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\ iPod Photo Cache.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F00.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F01.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F02.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F03.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F04.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F05.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F06.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F07.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F08.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F09.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F10.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F11.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F12.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F13.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F14.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F15.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F16.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F17.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F18.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F19.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F20.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F21.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F22.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F23.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F24.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F25.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F26.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F27.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F28.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F29.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F30.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F31.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F32.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F33.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F34.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F35.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F36.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F37.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F38.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F39.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F40.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F41.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F42.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F43.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F44.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F45.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F46.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F47.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F48.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F49.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F50.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\ImageStudio\ Album.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\ImageStudio\Album\ Animations.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\ImageStudio\Album\ Motion Images.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\ImageStudio\Album\ Pictures and Videos.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\ iPod Photo Cache.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F00.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F01.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F02.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F03.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F04.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F05.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F06.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F07.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F08.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F09.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F10.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F11.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F12.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F13.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F14.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F15.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F16.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F17.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F18.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F19.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F20.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F21.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F22.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F23.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F24.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F25.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F26.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F27.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F28.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F29.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F30.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F31.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F32.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F33.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F34.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F35.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F36.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F37.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F38.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F39.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F40.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F41.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F42.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F43.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F44.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F45.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F46.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F47.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F48.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F49.lnk"
"c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F50.lnk"
"c:\documents and settings\P Compton\My Documents\My Videos\ Media Cache Files.lnk"
"c:\documents and settings\P Compton\My Documents\NETWORK KEY\ fluers key.lnk"
"c:\documents and settings\P Compton\My Documents\NETWORK KEY\ linksys router.lnk"
"c:\documents and settings\P Compton\My Documents\NETWORK KEY\ VIRGIN BOX IDENT 3963633.lnk"
"c:\documents and settings\P Compton\My Documents\NETWORK KEY\fluers key\6CBF95C936FC8AFBA556C7703C.doc.lnk"
"c:\documents and settings\P Compton\My Documents\PIXEL FIX\PIXEL FIX.doc.lnk"
"c:\documents and settings\P Compton\My Documents\QUOTES\ 04.lnk"
"c:\documents and settings\P Compton\My Documents\QUOTES\ 05 quotes.lnk"
"c:\documents and settings\P Compton\My Documents\QUOTES\ 06 QUOTES.lnk"
"c:\documents and settings\P Compton\My Documents\QUOTES\ 07 quotes.lnk"
"c:\documents and settings\P Compton\My Documents\QUOTES\ 08.lnk"
"c:\documents and settings\P Compton\My Documents\QUOTES\ 09.lnk"
"c:\documents and settings\P Compton\My Documents\QUOTES\ 2010.lnk"
"c:\documents and settings\P Compton\My Documents\QUOTES\04\adam norris jack morton quote.doc.lnk"
"c:\documents and settings\P Compton\My Documents\QUOTES\04\ANNIMEDIA QUOTE.doc.lnk"
"c:\documents and settings\P Compton\My Documents\QUOTES\04\BLANK LETTERHEAD AND WATERMARK.doc.lnk"
"c:\documents and settings\P Compton\My Documents\QUOTES\04\CARL MARTIN ASPECT QUOTE QUOTE.doc.lnk"
"c:\documents and settings\P Compton\My Documents\QUOTES\04\DANS CROWN QUOTE.doc.lnk"
"c:\documents and settings\P Compton\My Documents\QUOTES\04\EWANS ZURICH QUOTE QUOTE 1.doc.lnk"
"c:\documents and settings\P Compton\My Documents\QUOTES\04\EXTENDED LIST OF PRICES.doc.lnk"
"c:\documents and settings\P Compton\My Documents\QUOTES\04\GEOFF KERSHAW THE CHALLENGE FACTOR.doc.lnk"
"c:\documents and settings\P Compton\My Documents\QUOTES\04\LES P.S.H. QUOTE.doc.lnk"
"c:\documents and settings\P Compton\My Documents\QUOTES\04\PATSY ERU QUOTE 1.doc.lnk"
"c:\documents and settings\P Compton\My Documents\QUOTES\04\PATSY ERU QUOTE 2.doc.lnk"
"c:\documents and settings\P Compton\My Documents\QUOTES\04\PAULS CATALYSM FOR CANNES.doc.lnk"
"c:\documents and settings\P Compton\My Documents\QUOTES\04\PAULS CATALYSM FOR PRAGUE 2.doc.lnk"
"c:\documents and settings\P Compton\My Documents\QUOTES\04\PAULS CAYTLSM QUOTE FOR PRAGUE.doc.lnk"
"c:\documents and settings\P Compton\My Documents\QUOTES\04\PUMPHOUSE QUOTE.doc.lnk"
"c:\documents and settings\P Compton\My Documents\QUOTES\04\QUOTE FOR GEORGIE HERLIHY ACUMOTIVE.doc.lnk"
"c:\documents and settings\P Compton\My Documents\QUOTES\04\QUOTE FOR MARC SORRENTINO.doc.lnk"
"c:\documents and settings\P Compton\My Documents\QUOTES\04\Quote for night train.doc.lnk"
"c:\documents and settings\P Compton\My Documents\QUOTES\04\QUOTE FOR NOEL FLETCHER GEMINI PROD.doc.lnk"
"c:\documents and settings\P Compton\My Documents\QUOTES\04\QUOTE FOR PENGUINS STEVE DAVIS.doc.lnk"
"c:\documents and settings\P Compton\My Documents\QUOTES\04\quote for SARAH LOMAX (LIVE).doc.lnk"
"c:\documents and settings\P Compton\My Documents\QUOTES\04\quote for tom conlon KALIDESCOPE GERMANY.doc.lnk"
"c:\documents and settings\P Compton\My Documents\QUOTES\04\quote for tom conlon.doc.lnk"
"c:\documents and settings\P Compton\My Documents\QUOTES\04\REFLEX ATHENS QUOTE.doc.lnk"
"c:\documents and settings\P Compton\My Documents\QUOTES\04\SIMONS QUOTE BASILDON.doc.lnk"
"c:\documents and settings\P Compton\My Documents\QUOTES\04\VIDEO PRODUCTION WORKSHOP LIST OF PRICES.doc.lnk"
"c:\documents and settings\P Compton\My Documents\QUOTES\05 quotes\DAN BURGESS QUOTE SEPT 20 05.doc.lnk"
"c:\documents and settings\P Compton\My Documents\QUOTES\05 quotes\luis fidels quote.doc.lnk"
"c:\documents and settings\P Compton\My Documents\QUOTES\06 QUOTES\dave macintyre live quote.doc.lnk"
"c:\documents and settings\P Compton\My Documents\QUOTES\07 quotes\KATIES live JAN 15 quote.doc.lnk"
"c:\documents and settings\P Compton\My Documents\QUOTES\08\QUOTE FOR KARYN AT GPJ FOR IBM TC0C.doc.lnk"
"c:\documents and settings\P Compton\My Documents\QUOTES\08\QUOTE FOR OLIVE 360 STEVE DAVIS FEB 08.doc.lnk"
"c:\documents and settings\P Compton\My Documents\QUOTES\08\TOM CONLON P.P. 15 AND 16 TH JAN 08.doc.lnk"
"c:\documents and settings\P Compton\My Documents\Red Kawa\ Audio.lnk"
"c:\documents and settings\P Compton\My Documents\Red Kawa\ Downloads.lnk"
"c:\documents and settings\P Compton\My Documents\Red Kawa\ Videos.lnk"
"c:\documents and settings\P Compton\My Documents\Regensoft\ Downloads.lnk"
"c:\documents and settings\P Compton\My Documents\ring tones.lnk"
"c:\documents and settings\P Compton\My Documents\Sony\ XDCAMBrowser.lnk"
"c:\progra~1\Fun4IM\Bandoo.exe"
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\P Compton\Application Data\LimeWire\.NetworkShare\redir.exe
c:\documents and settings\P Compton\My Documents\ Adobe.lnk
c:\documents and settings\P Compton\My Documents\ CyberLink.lnk
c:\documents and settings\P Compton\My Documents\ jokes.lnk
c:\documents and settings\P Compton\My Documents\ My Music.lnk
c:\documents and settings\P Compton\My Documents\ My Pictures.lnk
c:\documents and settings\P Compton\My Documents\ My Videos.lnk
c:\documents and settings\P Compton\My Documents\ NETWORK KEY.lnk
c:\documents and settings\P Compton\My Documents\ PIXEL FIX.lnk
c:\documents and settings\P Compton\My Documents\ QUOTES.lnk
c:\documents and settings\P Compton\My Documents\ Regensoft.lnk
c:\documents and settings\P Compton\My Documents\ sja.lnk
c:\documents and settings\P Compton\My Documents\ Sony.lnk
c:\documents and settings\P Compton\My Documents\ tube map.lnk
c:\documents and settings\P Compton\My Documents\ Vuze Downloads.lnk
c:\documents and settings\P Compton\My Documents\Adobe\ Adobe Media Encoder.lnk
c:\documents and settings\P Compton\My Documents\Adobe\ After Effects CS4.lnk
c:\documents and settings\P Compton\My Documents\Adobe\ Premiere.lnk
c:\documents and settings\P Compton\My Documents\Adobe\Adobe Media Encoder\ 4.0.lnk
c:\documents and settings\P Compton\My Documents\Adobe\After Effects CS4\ Media Cache Files.lnk
c:\documents and settings\P Compton\My Documents\CyberLink\ PowerDVD.lnk
c:\documents and settings\P Compton\My Documents\GRETSCH HOUSE\RATES AND WELCOME.doc.lnk
c:\documents and settings\P Compton\My Documents\jokes\1_GeorgeW1.pps.lnk
c:\documents and settings\P Compton\My Documents\jokes\arsen about about says it all.doc.lnk
c:\documents and settings\P Compton\My Documents\jokes\beer joke site.doc.lnk
c:\documents and settings\P Compton\My Documents\jokes\DICTIONARYFORWOMEN.doc.lnk
c:\documents and settings\P Compton\My Documents\jokes\homer_simpson-sings_the_joker.zip.lnk
c:\documents and settings\P Compton\My Documents\jokes\INSTALLING A HUSBAND.doc.lnk
c:\documents and settings\P Compton\My Documents\jokes\microsoft2008.pps.lnk
c:\documents and settings\P Compton\My Documents\jokes\work1.pps.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\ cameraman.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\ EROTICA 07.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\ HOLS 2010.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\ ImageStudio.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\ iPod Photo Cache.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\ me in steadicam rig.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\ iPod Photo Cache.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F00.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F01.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F02.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F03.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F04.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F05.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F06.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F07.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F08.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F09.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F10.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F11.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F12.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F13.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F14.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F15.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F16.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F17.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F18.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F19.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F20.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F21.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F22.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F23.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F24.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F25.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F26.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F27.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F28.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F29.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F30.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F31.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F32.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F33.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F34.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F35.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F36.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F37.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F38.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F39.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F40.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F41.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F42.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F43.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F44.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F45.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F46.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F47.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F48.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F49.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\cameraman\iPod Photo Cache\ F50.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\ImageStudio\ Album.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\ImageStudio\Album\ Animations.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\ImageStudio\Album\ Motion Images.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\ImageStudio\Album\ Pictures and Videos.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\ iPod Photo Cache.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F00.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F01.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F02.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F03.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F04.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F05.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F06.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F07.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F08.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F09.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F10.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F11.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F12.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F13.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F14.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F15.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F16.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F17.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F18.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F19.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F20.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F21.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F22.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F23.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F24.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F25.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F26.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F27.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F28.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F29.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F30.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F31.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F32.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F33.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F34.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F35.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F36.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F37.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F38.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F39.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F40.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F41.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F42.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F43.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F44.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F45.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F46.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F47.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F48.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F49.lnk
c:\documents and settings\P Compton\My Documents\My Pictures\iPod Photo Cache\iPod Photo Cache\ F50.lnk
c:\documents and settings\P Compton\My Documents\NETWORK KEY\ fluers key.lnk
c:\documents and settings\P Compton\My Documents\NETWORK KEY\ linksys router.lnk
c:\documents and settings\P Compton\My Documents\NETWORK KEY\ VIRGIN BOX IDENT 3963633.lnk
c:\documents and settings\P Compton\My Documents\NETWORK KEY\fluers key\6CBF95C936FC8AFBA556C7703C.doc.lnk
c:\documents and settings\P Compton\My Documents\PIXEL FIX\PIXEL FIX.doc.lnk
c:\documents and settings\P Compton\My Documents\QUOTES\ 04.lnk
c:\documents and settings\P Compton\My Documents\QUOTES\ 05 quotes.lnk
c:\documents and settings\P Compton\My Documents\QUOTES\ 06 QUOTES.lnk
c:\documents and settings\P Compton\My Documents\QUOTES\ 07 quotes.lnk
c:\documents and settings\P Compton\My Documents\QUOTES\ 08.lnk
c:\documents and settings\P Compton\My Documents\QUOTES\ 09.lnk
c:\documents and settings\P Compton\My Documents\QUOTES\ 2010.lnk
c:\documents and settings\P Compton\My Documents\QUOTES\04\adam norris jack morton quote.doc.lnk
c:\documents and settings\P Compton\My Documents\QUOTES\04\ANNIMEDIA QUOTE.doc.lnk
c:\documents and settings\P Compton\My Documents\QUOTES\04\BLANK LETTERHEAD AND WATERMARK.doc.lnk
c:\documents and settings\P Compton\My Documents\QUOTES\04\CARL MARTIN ASPECT QUOTE QUOTE.doc.lnk
c:\documents and settings\P Compton\My Documents\QUOTES\04\EWANS ZURICH QUOTE QUOTE 1.doc.lnk
c:\documents and settings\P Compton\My Documents\QUOTES\04\EXTENDED LIST OF PRICES.doc.lnk
c:\documents and settings\P Compton\My Documents\QUOTES\04\GEOFF KERSHAW THE CHALLENGE FACTOR.doc.lnk
c:\documents and settings\P Compton\My Documents\QUOTES\04\LES P.S.H. QUOTE.doc.lnk
c:\documents and settings\P Compton\My Documents\QUOTES\04\PATSY ERU QUOTE 1.doc.lnk
c:\documents and settings\P Compton\My Documents\QUOTES\04\PATSY ERU QUOTE 2.doc.lnk
c:\documents and settings\P Compton\My Documents\QUOTES\04\PAULS CATALYSM FOR CANNES.doc.lnk
c:\documents and settings\P Compton\My Documents\QUOTES\04\PAULS CATALYSM FOR PRAGUE 2.doc.lnk
c:\documents and settings\P Compton\My Documents\QUOTES\04\PUMPHOUSE QUOTE.doc.lnk
c:\documents and settings\P Compton\My Documents\QUOTES\04\QUOTE FOR GEORGIE HERLIHY ACUMOTIVE.doc.lnk
c:\documents and settings\P Compton\My Documents\QUOTES\04\QUOTE FOR MARC SORRENTINO.doc.lnk
c:\documents and settings\P Compton\My Documents\QUOTES\04\Quote for night train.doc.lnk
c:\documents and settings\P Compton\My Documents\QUOTES\04\quote for SARAH LOMAX (LIVE).doc.lnk
c:\documents and settings\P Compton\My Documents\QUOTES\04\quote for tom conlon KALIDESCOPE GERMANY.doc.lnk
c:\documents and settings\P Compton\My Documents\QUOTES\04\quote for tom conlon.doc.lnk
c:\documents and settings\P Compton\My Documents\QUOTES\04\REFLEX ATHENS QUOTE.doc.lnk
c:\documents and settings\P Compton\My Documents\QUOTES\04\VIDEO PRODUCTION WORKSHOP LIST OF PRICES.doc.lnk
c:\documents and settings\P Compton\My Documents\QUOTES\05 quotes\luis fidels quote.doc.lnk
c:\documents and settings\P Compton\My Documents\QUOTES\08\TOM CONLON P.P. 15 AND 16 TH JAN 08.doc.lnk
c:\documents and settings\P Compton\My Documents\Red Kawa\ Audio.lnk
c:\documents and settings\P Compton\My Documents\Red Kawa\ Downloads.lnk
c:\documents and settings\P Compton\My Documents\Red Kawa\ Videos.lnk
c:\documents and settings\P Compton\My Documents\Regensoft\ Downloads.lnk
c:\documents and settings\P Compton\My Documents\ring tones.lnk
c:\documents and settings\P Compton\My Documents\Sony\ XDCAMBrowser.lnk
.
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
——-\Legacy_FUN4IM_COORDINATOR
——-\Service_Fun4IM Coordinator
.
.
((((((((((((((((((((((((( Files Created from 2012-12-25 to 2013-01-25 )))))))))))))))))))))))))))))))
.
.
2013-01-25 14:02 . 2013-01-08 04:57 6991832 —-a-w- c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{7AF93C10-70B9-4EA5-9A14-C5B01BE80B72}\mpengine.dll
2013-01-23 12:52 . 2013-01-08 04:57 6991832 —-a-w- c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2013-01-22 20:02 . 2013-01-22 20:02 114048 —-a-w- c:\windows\system32\drivers\snapman.sys
2013-01-22 20:02 . 2013-01-22 20:02 ——– d—–w- c:\program files\Acronis
2013-01-22 20:02 . 2013-01-22 20:02 ——– d—–w- c:\program files\Common Files\Acronis
2013-01-20 19:51 . 2013-01-20 19:51 ——– d—–w- C:\Malwarebytes' Anti-Malware
2013-01-17 16:46 . 2013-01-17 16:46 ——– d—–w- c:\windows\ERUNT
2013-01-17 16:46 . 2013-01-18 10:15 ——– d—–w- C:\JRT
2013-01-09 15:46 . 2013-01-09 15:46 ——– d—–w- c:\windows\system32\wbem\Repository
2013-01-06 22:41 . 2013-01-06 22:41 ——– d—–w- c:\windows\system32\NtmsData
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-01-15 11:48 . 2012-04-10 15:14 697864 —-a-w- c:\windows\system32\FlashPlayerApp.exe
2013-01-15 11:48 . 2011-05-21 17:28 74248 —-a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-12-16 12:23 . 2008-04-14 12:00 290560 —-a-w- c:\windows\system32\atmfd.dll
2012-12-14 16:49 . 2011-01-02 15:42 21104 —-a-w- c:\windows\system32\drivers\mbam.sys
2012-11-13 01:25 . 2008-04-14 12:00 1866368 —-a-w- c:\windows\system32\win32k.sys
2012-11-06 02:01 . 2008-04-14 12:00 1371648 —-a-w- c:\windows\system32\msxml6.dll
2012-11-02 02:02 . 2008-04-14 12:00 375296 —-a-w- c:\windows\system32\dpnet.dll
2012-11-01 12:17 . 2008-04-14 12:00 916992 —-a-w- c:\windows\system32\wininet.dll
2012-11-01 12:17 . 2008-04-14 12:00 43520 —-a-w- c:\windows\system32\licmgr10.dll
2012-11-01 12:17 . 2008-04-14 12:00 1469440 —-a-w- c:\windows\system32\inetcpl.cpl
2012-11-01 00:35 . 2008-04-14 12:00 385024 —-a-w- c:\windows\system32\html.iec
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"{AA2E44DC-C75C-8564-A94D-657515D06542}"="c:\documents and settings\P Compton\Application Data\LimeWire\.NetworkShare\redir.exe" [BU]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"KTPWare"="c:\program files\Elantech\ktp.exe" [2009-01-14 512000]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-02-28 786521]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2012-09-12 947176]
"RTHDCPL"="RTHDCPL.EXE" [2007-10-16 16855552]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2012-10-25 421888]
"OSSelectorReinstall"="c:\program files\Common Files\Acronis\Acronis Disk Director\oss_reinstall.exe" [2007-02-22 2209224]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"DWQueuedReporting"="c:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2007-02-26 437160]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"tscuninstall"="c:\windows\system32\tscupgrd.exe" [2007-07-27 44544]
.
c:\documents and settings\P Compton\Start Menu\Programs\Startup\
ERUNT AutoBackup.lnk - c:\program files\ERUNT\AUTOBACK.EXE [2005-10-20 38912]
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-24 304128]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
2010-04-10 16:01 12464 —-a-w- c:\windows\system32\avgrsstx.dll
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0lsdelete\0sprestrt
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2012-10-25 03:12 421888 —-a-w- c:\program files\QuickTime\QTTask.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
"FirewallOverride"=dword:00000001
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\TVAnts\\Tvants.exe"=
"c:\\Program Files\\SopCast\\adv\\SopAdver.exe"=
"c:\\Program Files\\SopCast\\SopCast.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\TVUPlayer\\TVUPlayer.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"d:\\Azureus Downloads\\NOT ERASE\\Azureus\\Azureus.exe"=
"c:\\Program Files\\Common Files\\Apple\\Apple Application Support\\WebKit2WebProcess.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\WINDOWS\\system32\\msfeedssync.exe"=
"c:\\Program Files\\Yahoo!\\SoftwareUpdate\\YahooAUService.exe"=
"c:\\WINDOWS\\system32\\ati2evxx.exe"=
.
R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [10/04/2010 16:01 216200]
R1 AvgTdiX;AVG Free Network Redirector;c:\windows\system32\drivers\avgtdix.sys [10/04/2010 16:01 242896]
R1 cdrport;cdrport;c:\windows\system32\drivers\cdrport.sys [21/11/2007 11:45 4608]
R2 AutoExNT;AutoExNT;c:\windows\system32\Autoexnt.exe [10/04/2010 17:21 5904]
R2 hasplms;Sentinel HASP License Manager;c:\windows\system32\hasplms.exe -run –> c:\windows\system32\hasplms.exe -run [?]
R2 SXSUDFMF;SXSUDFMF;c:\windows\system32\drivers\SXSUDFMF.sys [26/09/2011 16:21 4352]
R4 SXSUDFS;SXSUDFS;c:\windows\system32\drivers\SXSUDFS.sys [26/09/2011 16:21 792576]
S0 Lbd;Lbd;c:\windows\system32\DRIVERS\Lbd.sys –> c:\windows\system32\DRIVERS\Lbd.sys [?]
S1 cdrblock;cdrblock;c:\windows\system32\drivers\cdrblock.sys [21/11/2007 11:45 20992]
S1 MpKslcad026eb;MpKslcad026eb;\??\c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{7AF93C10-70B9-4EA5-9A14-C5B01BE80B72}\MpKslcad026eb.sys –> c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{7AF93C10-70B9-4EA5-9A14-C5B01BE80B72}\MpKslcad026eb.sys [?]
S1 SASDIFSV;SASDIFSV;\??\c:\program files\SUPERAntiSpyware\SASDIFSV.SYS –> c:\program files\SUPERAntiSpyware\SASDIFSV.SYS [?]
S1 SASKUTIL;SASKUTIL;\??\c:\program files\SUPERAntiSpyware\SASKUTIL.sys –> c:\program files\SUPERAntiSpyware\SASKUTIL.sys [?]
S3 MotDev;Motorola Inc. USB Device;c:\windows\system32\drivers\motodrv.sys [21/06/2008 19:05 42112]
S3 SASENUM;SASENUM;\??\c:\program files\SUPERAntiSpyware\SASENUM.SYS –> c:\program files\SUPERAntiSpyware\SASENUM.SYS [?]
S3 SxSmemcd;SxS Memory Card;c:\windows\system32\drivers\SxSmemcd.sys [09/02/2010 04:06 45056]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{A509B1FF-37FF-4bFF-8CFF-4F3A747040FF}]
2009-03-08 03:32 128512 —-a-w- c:\windows\system32\advpack.dll
.
Contents of the 'Scheduled Tasks' folder
.
2013-01-22 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2009-10-22 16:57]
.
2013-01-25 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-01-05 16:35]
.
2013-01-25 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-01-05 16:35]
.
2013-01-25 c:\windows\Tasks\Microsoft Antimalware Scheduled Scan.job
- c:\program files\Microsoft Security Client\MpCmdRun.exe [2012-09-12 16:25]
.
2013-01-25 c:\windows\Tasks\User_Feed_Synchronization-{682B6A91-0EC6-4D3F-A3F5-E62BA9D4F6B4}.job
- c:\windows\system32\msfeedssync.exe [2007-08-13 03:31]
.
.
——- Supplementary Scan ——-
.
uStart Page = hxxp://yahoo.com/
uInternet Settings,ProxyOverride = ;*.local
uSearchURL,(Default) = hxxp://uk.rd.yahoo.com/customize/ie/defaults/su/msgr8/*http://uk.search.yahoo.com
TCP: DhcpNameServer = [removed] [removed]
TCP: Interfaces\{334DD321-EAAD-426D-9B43-B84F29A77B65}: NameServer = 194.168.4.100,194.168.8.100
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2013-01-25 17:50
Windows 5.1.2600 Service Pack 3 NTFS
.
scanning hidden processes …
.
scanning hidden autostart entries …
.
scanning hidden files …
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
——————— LOCKED REGISTRY KEYS ———————
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_5_502_146_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_5_502_146_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
——————— DLLs Loaded Under Running Processes ———————
.
- - - - - - - > 'winlogon.exe'(1112)
c:\windows\system32\Ati2evxx.dll
.
- - - - - - - > 'explorer.exe'(208)
c:\windows\system32\WININET.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
c:\program files\Nero\Nero 7\Nero BackItUp\NBShell.dll
c:\program files\Nero\Nero 7\Nero BackItUp\MSVCR71.dll
c:\malwarebytes' anti-malware\mbamext.dll
c:\program files\WinRAR\rarext.dll
c:\progra~1\MICROS~4\shellext.dll
c:\program files\7-Zip\7-zip.dll
c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll
c:\program files\Microsoft Office\Office10\msohev.dll
c:\program files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll
.
———————— Other Running Processes ————————
.
c:\windows\system32\Ati2evxx.exe
c:\program files\Microsoft Security Client\MsMpEng.exe
c:\windows\system32\Ati2evxx.exe
c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files\IVT Corporation\BlueSoleil\BTNtService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\windows\RTHDCPL.EXE
c:\windows\system32\hasplms.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\windows\system32\SearchIndexer.exe
c:\program files\Yahoo!\SoftwareUpdate\YahooAUService.exe
c:\windows\system32\SearchProtocolHost.exe
.
**************************************************************************
.
Completion time: 2013-01-25 17:55:38 - machine was rebooted
ComboFix-quarantined-files.txt 2013-01-25 17:55
ComboFix2.txt 2013-01-19 18:02
.
Pre-Run: 14,537,351,168 bytes free
Post-Run: 14,694,920,192 bytes free
.
- - End Of File - - A2B7B9787D6B778327C557A92D68060F
thats the new combo fix log
all those shortcuts have now gone, am i good now?
regards phil c

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI