Hello JonTom
Eset took about 4 hours.
C:\Documents and Settings\Denno\My Documents\01 My Sites\Sonny and Perley\public_html\agency.htm JS/Tivso.Gen trojan
C:\Documents and Settings\Denno\My Documents\01 My Sites\Sonny and Perley\public_html\album.htm JS/Tivso.Gen trojan
C:\Documents and Settings\Denno\My Documents\01 My Sites\Sonny and Perley\public_html\bio.htm JS/Tivso.Gen trojan
C:\Documents and Settings\Denno\My Documents\01 My Sites\Sonny and Perley\public_html\booking.htm JS/Tivso.Gen trojan
C:\Documents and Settings\Denno\My Documents\01 My Sites\Sonny and Perley\public_html\bookingX.htm JS/Tivso.Gen trojan
C:\Documents and Settings\Denno\My Documents\01 My Sites\Sonny and Perley\public_html\house.htm JS/Tivso.Gen trojan
C:\Documents and Settings\Denno\My Documents\01 My Sites\Sonny and Perley\public_html\index.htm JS/Tivso.Gen trojan
C:\Documents and Settings\Denno\My Documents\01 My Sites\Sonny and Perley\public_html\theme.htm JS/Tivso.Gen trojan
C:\Documents and Settings\Denno\My Documents\01 My Sites\Sonny and Perley\public_html\weddings.htm JS/Tivso.Gen trojan
C:\Documents and Settings\Denno\My Documents\01 My Sites\Sonny and Perley\public_html\Xlinks.htm JS/Tivso.Gen trojan
C:\Documents and Settings\Denno\My Documents\01 My Sites\Sonny and Perley\public_html\Library\webmasters.lbi JS/Tivso.Gen trojan
C:\Documents and Settings\Denno\My Documents\01 My Sites\Sonny and Perley\public_html\mp3\agency.htm JS/Tivso.Gen trojan
C:\Documents and Settings\Denno\My Documents\01 My Sites\Spontaneous\index.html JS/Tivso.Gen trojan
C:\Documents and Settings\Denno\My Documents\01 My Sites\Spontaneous\notes\indexA.html JS/Tivso.Gen trojan
C:\Documents and Settings\Denno\My Documents\01 My Sites\Spontaneous\notes\indexOLD.html JS/Tivso.Gen trojan
C:\Documents and Settings\Denno\My Documents\Documents and Settings\Denno\Application Data\AVG\Rescue\PC Tuneup 2011\110809125420468.rsc Win32/Adware.Yontoo.A application
C:\Documents and Settings\Denno\My Documents\Documents and Settings\Denno\Local Settings\Application Data\Mozilla\Firefox\Profiles\bagfegyi.default\Cache\1\F1\4CBFBd01 JS/Tivso.Gen trojan
C:\Documents and Settings\Denno\My Documents\Documents and Settings\Denno\Local Settings\Application Data\Mozilla\Firefox\Profiles\bagfegyi.default\Cache\2\F0\C7B74d01 JS/Tivso.Gen trojan
C:\Documents and Settings\Denno\My Documents\Documents and Settings\Denno\Local Settings\Application Data\Mozilla\Firefox\Profiles\bagfegyi.default\Cache\3\17\26183d01 JS/Tivso.Gen trojan
C:\Documents and Settings\Denno\My Documents\Documents and Settings\Denno\Local Settings\Application Data\Mozilla\Firefox\Profiles\bagfegyi.default\Cache\5\94\0B1E5d01 JS/Tivso.Gen trojan
C:\Documents and Settings\Denno\My Documents\Documents and Settings\Denno\Local Settings\Application Data\Mozilla\Firefox\Profiles\bagfegyi.default\Cache\8\6A\F06D1d01 JS/Tivso.Gen trojan
C:\Documents and Settings\Denno\My Documents\Documents and Settings\Denno\Local Settings\Application Data\Mozilla\Firefox\Profiles\bagfegyi.default\Cache\B\C2\5B50Dd01 JS/Tivso.Gen trojan
C:\Documents and Settings\Denno\My Documents\Documents and Settings\Denno\My Documents\Documents and Settings\Denno\Application Data\AVG\Rescue\PC Tuneup 2011\110809125420468.rsc Win32/Adware.Yontoo.A application
C:\Documents and Settings\Denno\My Documents\My Documents\Documents and Settings\Denno\Application Data\AVG\Rescue\PC Tuneup 2011\110809125420468.rsc Win32/Adware.Yontoo.A application
C:\Documents and Settings\Denno\My Documents\New Folder\New Folder\susan-busting-tits-1.jpg HTML/Agent.E trojan
C:\Documents and Settings\Denno\My Documents\New Folder\New Folder\susan-busting-tits-3.jpg HTML/Agent.E trojan
C:\Documents and Settings\Denno\My Documents\New Folder\New Folder\misty\James_McQuade_-_The_Adventures_Of_Misty_1.rar.exe a variant of Win32/Adware.MediaFinder.D application
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\dasaro.org\index.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\dennisdasaro.com\bandindex.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\dennisdasaro.com\bandindexAAA.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\dennisdasaro.com\CDMP3.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\dennisdasaro.com\CDorder.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\dennisdasaro.com\contact.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\dennisdasaro.com\mailinglist.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\dennisdasaro.com\shakespeareband.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\dennisdasaro.com\backup\01 My Sites\NBwater\mainwebsite_html\index.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\lullabologist 2007\Library\navbar.lbi JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\lullabologist 2007\Library\navbat.lbi JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\lullabologist 2007\lullabologist.com\www\Brooklyn.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\lullabologist 2007\lullabologist.com\www\CD.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\lullabologist 2007\lullabologist.com\www\Chinatown.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\lullabologist 2007\lullabologist.com\www\EastVillage.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\lullabologist 2007\lullabologist.com\www\EastVillage1.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\lullabologist 2007\lullabologist.com\www\EastVillage2.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\lullabologist 2007\lullabologist.com\www\index.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\lullabologist 2007\lullabologist.com\www\julia.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\lullabologist 2007\lullabologist.com\www\LowerEast.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\lullabologist 2007\lullabologist.com\www\LowerEast1.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\lullabologist 2007\lullabologist.com\www\LowerEast2.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\lullabologist 2007\lullabologist.com\www\lullabies.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\lullabologist 2007\lullabologist.com\www\Nav.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\lullabologist 2007\lullabologist.com\www\Starting.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\lullabologist 2007\lullabologist.com\www\Stuyvesant.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\lullabologist 2007\lullabologist.com\www\UpperWest.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\lullabologist 2007\lullabologist.com\www\UpperWest1.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\lullabologist 2007\lullabologist.com\www\UpperWest2.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\lullabologist 2007\lullabologist.com\www\UpperWest3.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\lullabologist 2007\lullabologist.com\www\UpperWest4.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\lullabologist 2007\lullabologist.com\www\WestVillage.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\lullabologist 2007\lullabologist.com\www\Writings.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\lullabologist 2007\lullabologist.com\www\x.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\NBwater\mainwebsite_html\editor.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\NBwater\mainwebsite_html\forum-intro.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\NBwater\mainwebsite_html\standby\advocates.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\NBwater\mainwebsite_html\standby\contents.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\NBwater\mainwebsite_html\standby\forum-intro.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\NBwater\mainwebsite_html\standby\index.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\NBwater\mainwebsite_html\standby\starwars\contact.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\NBwater\mainwebsite_html\water\advocates.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\NBwater\mainwebsite_html\water\contents.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\NBwater\mainwebsite_html\water\index.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\NBwater\mainwebsite_html\water\waterindex.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\NBwater\mainwebsite_html\water\personal\personal.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\NBwater\mainwebsite_html\water\starwars\contact.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\NBwater\mainwebsite_html\water 2\contentsW2.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\Pablo\index.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\Pablo\show.htm JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\Shakespeare\bandindex.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\Shakespeare\bandindexAAA.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\Shakespeare\CDMP3.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\Shakespeare\CDorder.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\Shakespeare\contact.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\Shakespeare\mailinglist.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\Shakespeare\shakespeareband.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\Shakespeare\backup\01 My Sites\NBwater\mainwebsite_html\index.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\SMB\public_html\1-nav-frame-product.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\SMB\public_html\denorder.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\SMB\public_html\incontact.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\SMB\public_html\index.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\SMB\public_html\presspak.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\SMB\public_html\sitemap.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\SMB\public_html\smbmp3.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\SMB\public_html\smbmp3old.html JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\Sonny and Perley\public_html\album.htm JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\Sonny and Perley\public_html\bio.htm JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\Sonny and Perley\public_html\bio2.htm JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\Sonny and Perley\public_html\booking.htm JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\Sonny and Perley\public_html\house.htm JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\Sonny and Perley\public_html\index.htm JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\Sonny and Perley\public_html\index3.htm JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\Sonny and Perley\public_html\indexHUH.htm JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\Sonny and Perley\public_html\indexQ.htm JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\Sonny and Perley\public_html\libraries.htm JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\Sonny and Perley\public_html\links.htm JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\Sonny and Perley\public_html\press.htm JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\Sonny and Perley\public_html\recordings.htm JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\Sonny and Perley\public_html\recordingsTEST.htm JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\Sonny and Perley\public_html\recordingsX.htm JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\Sonny and Perley\public_html\reviews.htm JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\Sonny and Perley\public_html\schedule.htm JS/Tivso.Gen trojan
C:\_OTM\MovedFiles\04242013_164942\C_Documents and Settings\Denno\My Documents\01 My Sites\Sonny and Perley\public_html\schedule.template.htm JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\lullabologist 2007\Library\navbar.lbi JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\lullabologist 2007\Library\navbat.lbi JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\lullabologist 2007\lullabologist.com\www\Brooklyn.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\lullabologist 2007\lullabologist.com\www\CD.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\lullabologist 2007\lullabologist.com\www\Chinatown.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\lullabologist 2007\lullabologist.com\www\EastVillage.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\lullabologist 2007\lullabologist.com\www\EastVillage1.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\lullabologist 2007\lullabologist.com\www\EastVillage2.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\lullabologist 2007\lullabologist.com\www\index.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\lullabologist 2007\lullabologist.com\www\julia.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\lullabologist 2007\lullabologist.com\www\LowerEast.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\lullabologist 2007\lullabologist.com\www\LowerEast1.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\lullabologist 2007\lullabologist.com\www\LowerEast2.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\lullabologist 2007\lullabologist.com\www\lullabies.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\lullabologist 2007\lullabologist.com\www\Nav.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\lullabologist 2007\lullabologist.com\www\Starting.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\lullabologist 2007\lullabologist.com\www\Stuyvesant.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\lullabologist 2007\lullabologist.com\www\UpperWest.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\lullabologist 2007\lullabologist.com\www\UpperWest1.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\lullabologist 2007\lullabologist.com\www\UpperWest2.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\lullabologist 2007\lullabologist.com\www\UpperWest3.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\lullabologist 2007\lullabologist.com\www\UpperWest4.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\lullabologist 2007\lullabologist.com\www\WestVillage.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\lullabologist 2007\lullabologist.com\www\Writings.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\lullabologist 2007\lullabologist.com\www\x.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\NBwater\mainwebsite_html\editor.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\NBwater\mainwebsite_html\forum-intro.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\NBwater\mainwebsite_html\standby\advocates.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\NBwater\mainwebsite_html\standby\contents.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\NBwater\mainwebsite_html\standby\forum-intro.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\NBwater\mainwebsite_html\standby\index.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\NBwater\mainwebsite_html\standby\starwars\contact.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\NBwater\mainwebsite_html\water\advocates.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\NBwater\mainwebsite_html\water\contents.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\NBwater\mainwebsite_html\water\index.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\NBwater\mainwebsite_html\water\waterindex.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\NBwater\mainwebsite_html\water\personal\personal.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\NBwater\mainwebsite_html\water\starwars\contact.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\NBwater\mainwebsite_html\water 2\contentsW2.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\Pablo\index.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\Pablo\show.htm JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\Shakespeare\bandindex.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\Shakespeare\bandindexAAA.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\Shakespeare\CDMP3.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\Shakespeare\CDorder.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\Shakespeare\contact.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\Shakespeare\mailinglist.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\Shakespeare\shakespeareband.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\Shakespeare\backup\01 My Sites\NBwater\mainwebsite_html\index.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\SMB\public_html\1-nav-frame-product.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\SMB\public_html\denorder.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\SMB\public_html\incontact.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\SMB\public_html\index.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\SMB\public_html\presspak.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\SMB\public_html\sitemap.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\SMB\public_html\smbmp3.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\SMB\public_html\smbmp3old.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\Sonny and Perley\public_html\album.htm JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\Sonny and Perley\public_html\bio.htm JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\Sonny and Perley\public_html\bio2.htm JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\Sonny and Perley\public_html\booking.htm JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\Sonny and Perley\public_html\index.htm JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\Sonny and Perley\public_html\index3.htm JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\Sonny and Perley\public_html\links.htm JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\Sonny and Perley\public_html\recordings.htm JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\Sonny and Perley\public_html\recordingsTEST.htm JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\Sonny and Perley\public_html\reviews.htm JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\Sonny and Perley\public_html\schedule.htm JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\Sonny and Perley\public_html\schedule.template.htm JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\Sonny and Perley\public_html\Xlinks.htm JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\Sonny and Perley\public_html\Library\webmasters.lbi JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\Sonny and Perley\public_html\mp3\agency.htm JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\Spontaneous\index.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\Spontaneous\notes\indexA.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\Local Settings\Application Data\Microsoft\CD Burning\01 My Sites\Spontaneous\notes\indexOLD.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\lullabologist 2007\Library\navbar.lbi JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\lullabologist 2007\Library\navbat.lbi JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\lullabologist 2007\lullabologist.com\www\Brooklyn.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\lullabologist 2007\lullabologist.com\www\CD.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\lullabologist 2007\lullabologist.com\www\Chinatown.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\lullabologist 2007\lullabologist.com\www\EastVillage.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\lullabologist 2007\lullabologist.com\www\EastVillage1.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\lullabologist 2007\lullabologist.com\www\EastVillage2.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\lullabologist 2007\lullabologist.com\www\index.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\lullabologist 2007\lullabologist.com\www\julia.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\lullabologist 2007\lullabologist.com\www\LowerEast.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\lullabologist 2007\lullabologist.com\www\LowerEast1.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\lullabologist 2007\lullabologist.com\www\LowerEast2.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\lullabologist 2007\lullabologist.com\www\lullabies.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\lullabologist 2007\lullabologist.com\www\Nav.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\lullabologist 2007\lullabologist.com\www\Starting.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\lullabologist 2007\lullabologist.com\www\Stuyvesant.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\lullabologist 2007\lullabologist.com\www\UpperWest.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\lullabologist 2007\lullabologist.com\www\UpperWest1.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\lullabologist 2007\lullabologist.com\www\UpperWest2.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\lullabologist 2007\lullabologist.com\www\UpperWest3.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\lullabologist 2007\lullabologist.com\www\UpperWest4.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\lullabologist 2007\lullabologist.com\www\WestVillage.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\lullabologist 2007\lullabologist.com\www\Writings.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\lullabologist 2007\lullabologist.com\www\x.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\NBwater\mainwebsite_html\editor.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\NBwater\mainwebsite_html\forum-intro.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\NBwater\mainwebsite_html\standby\advocates.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\NBwater\mainwebsite_html\standby\contents.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\NBwater\mainwebsite_html\standby\forum-intro.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\NBwater\mainwebsite_html\standby\index.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\NBwater\mainwebsite_html\standby\starwars\contact.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\NBwater\mainwebsite_html\water\advocates.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\NBwater\mainwebsite_html\water\contents.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\NBwater\mainwebsite_html\water\index.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\NBwater\mainwebsite_html\water\waterindex.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\NBwater\mainwebsite_html\water\personal\personal.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\NBwater\mainwebsite_html\water\starwars\contact.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\NBwater\mainwebsite_html\water 2\contentsW2.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\Pablo\index.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\Pablo\show.htm JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\Shakespeare\bandindex.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\Shakespeare\bandindexAAA.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\Shakespeare\CDMP3.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\Shakespeare\CDorder.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\Shakespeare\contact.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\Shakespeare\mailinglist.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\Shakespeare\shakespeareband.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\Shakespeare\backup\01 My Sites\NBwater\mainwebsite_html\index.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\SMB\public_html\1-nav-frame-product.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\SMB\public_html\denorder.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\SMB\public_html\incontact.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\SMB\public_html\index.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\SMB\public_html\presspak.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\SMB\public_html\sitemap.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\SMB\public_html\smbmp3.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\SMB\public_html\smbmp3old.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\Sonny and Perley\public_html\album.htm JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\Sonny and Perley\public_html\bio.htm JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\Sonny and Perley\public_html\bio2.htm JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\Sonny and Perley\public_html\booking.htm JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\Sonny and Perley\public_html\house.htm JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\Sonny and Perley\public_html\index.htm JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\Sonny and Perley\public_html\index3.htm JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\Sonny and Perley\public_html\indexHUH.htm JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\Sonny and Perley\public_html\indexQ.htm JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\Sonny and Perley\public_html\libraries.htm JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\Sonny and Perley\public_html\links.htm JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\Sonny and Perley\public_html\press.htm JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\Sonny and Perley\public_html\recordings.htm JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\Sonny and Perley\public_html\recordingsTEST.htm JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\Sonny and Perley\public_html\recordingsX.htm JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\Sonny and Perley\public_html\reviews.htm JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\Sonny and Perley\public_html\schedule.htm JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\Sonny and Perley\public_html\schedule.template.htm JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\Sonny and Perley\public_html\theme.htm JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\Sonny and Perley\public_html\weddings.htm JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\Sonny and Perley\public_html\Xlinks.htm JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\Sonny and Perley\public_html\Library\webmasters.lbi JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\Sonny and Perley\public_html\mp3\agency.htm JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\Spontaneous\index.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\Spontaneous\notes\indexA.html JS/Tivso.Gen trojan
D:\Documents and Settings\Miekro S. Dallalio\My Documents\01 My Sites\Spontaneous\notes\indexOLD.html JS/Tivso.Gen trojan
D:\download\temp\EAE\Email Address Encryptor\htmlcode.htm JS/Tivso.Gen trojan
D:\TEMP\temp\EAE\Email Address Encryptor\htmlcode.htm JS/Tivso.Gen trojan
————————————————————————————————————————————————————————————————————–
DDS
DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 10.21.2
Run by [removed] at 21:26:42 on 2013-04-25
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1013.158 [GMT -4:00]
.
AV: Microsoft Security Essentials Prerelease *Disabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}
.
============== Running Processes ================
.
c:\Program Files\Microsoft Security Client\MsMpEng.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Microsoft Security Client\msseces.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9HA.EXE
C:\Program Files\Fighters\SPAMfighter\sfagent.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Fighters\Tray\FightersTray.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Microsoft Office\Office\FINDFAST.EXE
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Program Files\IDrive\IDriveE Service.exe
C:\Program Files\Java\jre7\bin\jqs.exe
C:\Program Files\Fighters\SPAMfighter\sfus.exe
C:\Program Files\Fighters\FighterSuiteService.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\IDrive\IDrivePlugin.exe
C:\Program Files\IDrive\IDriveETray.exe
C:\Program Files\IDrive\IDriveEBackground.exe
C:\Program Files\azzCardfile\azzCardfile.exe
C:\Program Files\Microsoft Office\Office\Winword.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\notepad.exe
C:\Program Files\Outlook Express\msimn.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k rpcss
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\System32\svchost.exe -k NetworkService
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\System32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\System32\svchost.exe -k imgsvc
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.google.com
mStart Page = hxxp://www.google.com
uProxyOverride =
BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Java™ Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\java\jre7\bin\ssv.dll
BHO: Java™ Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre7\bin\jp2ssv.dll
EB: {32683183-48a0-441b-a342-7c2a440a9478} -
uRun: [MSMSGS] "c:\program files\messenger\msmsgs.exe" /background
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [IDriveE Startup] "c:\program files\idrive\IDrvieEStartup.exe" Hide
mRun: [MSC] "c:\program files\microsoft security client\msseces.exe" -hide -runkey
mRun: [IgfxTray] c:\windows\system32\igfxtray.exe
mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
mRun: [Persistence] c:\windows\system32\igfxpers.exe
mRun: [RTHDCPL] RTHDCPL.EXE
mRun: [Alcmtr] ALCMTR.EXE
mRun: [EPSON Stylus Photo RX620 Series] c:\windows\system32\spool\drivers\w32x86\3\E_FATI9HA.EXE /P31 "EPSON Stylus Photo RX620 Series" /O6 "USB001" /M "Stylus Photo RX620"
mRun: [sfagent] c:\program files\fighters\spamfighter\sfagent.exe
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
mRun: [KernelFaultCheck] c:\windows\system32\dumprep 0 -k
mRun: [CommonToolkitTray] c:\program files\fighters\tray\FightersTray.exe
StartupFolder: c:\docume~1\denno\startm~1\programs\startup\idrive~1.lnk - c:\program files\idrive\IDriveEReg2ini.exe
StartupFolder: c:\docume~1\denno\startm~1\programs\startup\openof~1.lnk - c:\program files\openoffice.org 3\program\quickstart.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\adobeg~1.lnk - c:\program files\common files\adobe\calibration\Adobe Gamma Loader.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\micros~2.lnk - c:\program files\microsoft office\office\FINDFAST.EXE
uPolicies-Explorer: NoDriveTypeAutoRun = dword:323
uPolicies-Explorer: NoDriveAutoRun = dword:67108863
mPolicies-Explorer: NoDriveAutoRun = dword:67108863
mPolicies-Explorer: NoDriveTypeAutoRun = dword:323
mPolicies-Windows\System: Allow-LogonScript-NetbiosDisabled = dword:1
mPolicies-Explorer: NoDriveTypeAutoRun = dword:323
mPolicies-Explorer: NoDriveAutoRun = dword:67108863
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1361254869718
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos/OnlineScanner.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
TCP: NameServer = 64.22.32.8 64.22.32.9
TCP: Interfaces\{6C210370-FF0F-404C-A510-43343D733ACB} : DHCPNameServer = [removed] [removed]
Notify: igfxcui - igfxdev.dll
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\documents and settings\denno\application data\mozilla\firefox\profiles\veaes6fa.default\
FF - prefs.js: browser.startup.homepage - hxxps://www.google.com/
FF - plugin: c:\program files\adobe\reader 11.0\reader\air\nppdf32.dll
FF - plugin: c:\program files\foxit software\foxit reader\plugins\npFoxitReaderPlugin.dll
FF - plugin: c:\program files\java\jre7\bin\plugin2\npjp2.dll
FF - plugin: c:\program files\microsoft silverlight\5.1.20125.0\npctrlui.dll
FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_11_7_700_169.dll
FF - ExtSQL: 2013-04-20 23:51; {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}; c:\documents and settings\denno\application data\mozilla\firefox\profiles\veaes6fa.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
FF - ExtSQL: 2013-04-24 15:00; {5C46D283-ABDE-4dce-B83C-08881401921C}; c:\documents and settings\denno\application data\mozilla\firefox\profiles\veaes6fa.default\extensions\{5C46D283-ABDE-4dce-B83C-08881401921C}.xpi
.
============= SERVICES / DRIVERS ===============
.
R0 MpFilter;Microsoft Malware Protection Driver;c:\windows\system32\drivers\MpFilter.sys [2012-11-7 195296]
R2 IDriveE Service;IDriveE Service;c:\program files\idrive\IDriveE Service.exe [2013-2-26 157128]
R2 SPAMfighter Update Service;SPAMfighter Update Service;c:\program files\fighters\spamfighter\sfus.exe [2013-2-28 216608]
R2 Suite Service;Suite Service;c:\program files\fighters\FighterSuiteService.exe [2012-11-12 1270376]
S1 MpKslf3d1a5bc;MpKslf3d1a5bc;\??\c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{a7b59ff4-d476-42c2-94c4-9d63af296f06}\mpkslf3d1a5bc.sys –> c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{a7b59ff4-d476-42c2-94c4-9d63af296f06}\MpKslf3d1a5bc.sys [?]
S2 PEVSystemStart;PEVSystemStart;c:\combofix\pev.3XE [2011-6-26 256000]
.
=============== Created Last 30 ================
.
2013-04-26 01:07:14 60872 —-a-w- c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{2ea2cb8c-c324-42db-a07d-e0823c28867d}\offreg.dll
2013-04-25 21:39:22 6906960 —-a-w- c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\{2ea2cb8c-c324-42db-a07d-e0823c28867d}\mpengine.dll
2013-04-24 20:49:42 ——– d—–w- C:\_OTM
2013-04-24 02:15:21 6906960 —-a-w- c:\documents and settings\all users\application data\microsoft\microsoft antimalware\definition updates\backup\mpengine.dll
2013-04-24 00:15:00 ——– d—–w- c:\program files\ESET
2013-04-23 21:15:43 ——– d—–w- c:\windows\ERUNT
2013-04-23 21:15:24 ——– d—–w- C:\JRT
2013-04-23 19:43:19 ——– d—–w- c:\documents and settings\denno\application data\Malwarebytes
2013-04-23 19:42:52 ——– d—–w- c:\documents and settings\all users\application data\Malwarebytes
2013-04-23 19:42:49 22856 —-a-w- c:\windows\system32\drivers\mbam.sys
2013-04-23 19:42:49 ——– d—–w- c:\program files\Malwarebytes' Anti-Malware
2013-04-22 14:13:24 ——– d—–w- c:\documents and settings\denno\application data\Foxit Software
2013-04-22 13:57:02 ——– d-sha-r- C:\cmdcons
2013-04-22 13:55:00 98816 —-a-w- c:\windows\sed.exe
2013-04-22 13:55:00 256000 —-a-w- c:\windows\PEV.exe
2013-04-22 13:55:00 208896 —-a-w- c:\windows\MBR.exe
2013-04-22 13:54:45 ——– d-s—w- C:\ComboFix
2013-04-22 03:09:25 94112 —-a-w- c:\windows\system32\WindowsAccessBridge.dll
2013-04-19 14:14:56 ——– d—–w- c:\documents and settings\denno\application data\azzCardfile
2013-04-19 14:14:54 ——– d—–w- c:\program files\azzCardfile
2013-04-12 22:04:51 15104 -c–a-w- c:\windows\system32\dllcache\usbscan.sys
2013-04-12 22:04:51 15104 —-a-w- c:\windows\system32\drivers\usbscan.sys
2013-04-12 15:41:20 ——– d—–w- c:\windows\pss
2013-04-12 14:51:14 ——– d—–w- c:\documents and settings\denno\local settings\application data\Sun
2013-04-12 08:50:59 ——– d—–w- c:\windows\SendTo
2013-04-12 08:49:40 ——– d—–w- c:\windows\forms
2013-04-12 08:49:39 ——– d—–w- c:\program files\Windows Messaging
2013-04-12 01:01:54 478616 —-a-w- c:\program files\mozilla firefox\libGLESv2.dll
2013-04-12 01:01:54 115608 —-a-w- c:\program files\mozilla firefox\maintenanceservice.exe
2013-04-12 01:01:53 920472 —-a-w- c:\program files\mozilla firefox\firefox.exe
2013-04-12 01:01:53 59288 —-a-w- c:\program files\mozilla firefox\libEGL.dll
2013-04-12 01:01:53 2989464 —-a-w- c:\program files\mozilla firefox\gkmedias.dll
2013-04-12 01:01:53 279448 —-a-w- c:\program files\mozilla firefox\freebl3.dll
2013-04-12 01:01:53 2106216 —-a-w- c:\program files\mozilla firefox\D3DCompiler_43.dll
2013-04-12 01:01:53 1998168 —-a-w- c:\program files\mozilla firefox\d3dx9_43.dll
2013-04-12 01:01:52 116120 —-a-w- c:\program files\mozilla firefox\crashreporter.exe
2013-04-12 01:01:51 74136 —-a-w- c:\program files\mozilla firefox\breakpadinjector.dll
2013-04-12 01:01:51 263064 —-a-w- c:\program files\mozilla firefox\components\browsercomps.dll
2013-04-12 01:01:51 19352 —-a-w- c:\program files\mozilla firefox\AccessibleMarshal.dll
2013-04-11 10:15:04 ——– d—–w- c:\documents and settings\denno\application data\DSite
2013-04-11 10:15:00 ——– d—–w- c:\program files\AudioConverter
2013-04-11 10:10:59 ——– d—–w- c:\program files\Ffmpeg For Audacity
2013-04-11 10:05:00 ——– d—–w- c:\program files\Lame For Audacity
2013-04-11 01:37:12 306688 —-a-w- c:\windows\IsUninst.exe
2013-04-08 16:17:35 ——– d—–w- c:\program files\Foxit Software
2013-04-08 15:08:32 782240 —-a-w- c:\windows\system32\deployJava1.dll
2013-04-08 15:08:31 861088 —-a-w- c:\windows\system32\npDeployJava1.dll
2013-04-02 01:46:57 ——– d—–w- c:\documents and settings\denno\.thumbnails
2013-04-02 01:45:13 ——– d—–w- c:\documents and settings\denno\.gimp-2.6
2013-03-30 21:25:42 ——– d—–w- c:\documents and settings\denno\application data\LiveKit
2013-03-30 19:29:31 ——– d—–w- c:\documents and settings\denno\application data\Fighters
2013-03-30 19:29:26 ——– d—–w- c:\program files\Fighters
2013-03-30 19:29:03 ——– d—–w- c:\documents and settings\all users\application data\Fighters
2013-03-30 05:22:12 ——– d—–w- c:\program files\Audacity
2013-03-29 04:14:23 ——– d—–w- c:\program files\WS_FTP Pro
.
==================== Find3M ====================
.
2013-04-23 04:46:37 71048 —-a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2013-04-23 04:46:37 691592 —-a-w- c:\windows\system32\FlashPlayerApp.exe
2013-04-02 10:33:22 237088 ——w- c:\windows\system32\MpSigStub.exe
2013-03-08 08:36:22 293376 —-a-w- c:\windows\system32\winsrv.dll
2013-03-07 01:32:25 2149888 —-a-w- c:\windows\system32\ntoskrnl.exe
2013-03-07 00:50:30 2028544 —-a-w- c:\windows\system32\ntkrnlpa.exe
2013-03-02 02:06:31 916480 —-a-w- c:\windows\system32\wininet.dll
2013-03-02 02:06:30 43520 ——w- c:\windows\system32\licmgr10.dll
2013-03-02 02:06:30 1469440 ——w- c:\windows\system32\inetcpl.cpl
2013-03-02 01:25:02 1867264 —-a-w- c:\windows\system32\win32k.sys
2013-03-02 01:08:47 385024 ——w- c:\windows\system32\html.iec
2013-02-27 07:56:51 2067456 —-a-w- c:\windows\system32\mstscax.dll
2013-02-20 16:13:39 315392 —-a-w- c:\windows\HideWin.exe
2013-02-12 00:32:23 12928 —-a-w- c:\windows\system32\drivers\usb8023.sys
2013-02-12 00:32:23 12928 ——w- c:\windows\system32\drivers\usb8023x.sys
2013-01-26 03:55:44 552448 —-a-w- c:\windows\system32\oleaut32.dll
2003-04-25 10:32:56 1562624 —-a-w- c:\program files\AZZ Cardfile.exe
.
============= FINISH: 21:27:43.17 ===============
Attach
.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2012-11-20.01)
.
Microsoft Windows XP Home Edition
Boot Device: \Device\HarddiskVolume1
Install Date: 2/18/2013 6:13:22 PM
System Uptime: 4/24/2013 5:26:35 PM (28 hours ago)
.
Motherboard: Dell Inc. | | 0CU409
Processor: Intel® Pentium® Dual CPU E2180 @ 2.00GHz | Socket 775 | 1995/200mhz
.
==== Disk Partitions =========================
.
A: is Removable
C: is FIXED (NTFS) - 298 GiB total, 242.234 GiB free.
D: is FIXED (NTFS) - 233 GiB total, 195.916 GiB free.
F: is CDROM ()
G: is Removable
.
==== Disabled Device Manager Items =============
.
==== System Restore Points ===================
.
RP1: 2/18/2013 7:07:39 PM - System Checkpoint
RP2: 2/18/2013 9:34:39 PM - Installed Dell Resource CD.
RP3: 2/18/2013 11:21:02 PM - Installed Intel® PRO Network Connections
RP4: 2/19/2013 12:57:21 AM - Installed Windows XP Service Pack 3.
RP5: 2/19/2013 1:11:59 AM - Software Distribution Service 3.0
RP6: 2/19/2013 1:24:42 AM - Software Distribution Service 3.0
RP7: 2/19/2013 1:48:14 AM - Software Distribution Service 3.0
RP8: 2/19/2013 3:00:13 AM - Software Distribution Service 3.0
RP9: 2/19/2013 10:09:18 AM - Installed Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
RP10: 2/19/2013 10:10:16 AM - Installed OpenOffice.org 3.4.1
RP11: 2/19/2013 11:19:05 PM - Installed Microsoft Fix it 50530
RP12: 2/20/2013 12:42:59 AM - Installed Microsoft Fix it 50530
RP13: 2/20/2013 12:44:50 AM - Installed %1 %2.
RP14: 2/20/2013 10:21:43 AM - Installed Akamai NetSession Interface
RP15: 2/20/2013 11:13:45 AM - Installed Realtek High Definition Audio Driver
RP16: 2/20/2013 6:58:52 PM - Software Distribution Service 3.0
RP17: 2/20/2013 7:23:39 PM - Software Distribution Service 3.0
RP18: 2/20/2013 7:33:47 PM - Software Distribution Service 3.0
RP19: 2/21/2013 3:16:05 PM - Software Distribution Service 3.0
RP20: 2/22/2013 3:30:06 PM - System Checkpoint
RP21: 2/22/2013 4:06:23 PM - Software Distribution Service 3.0
RP22: 2/23/2013 4:10:21 PM - Software Distribution Service 3.0
RP23: 2/24/2013 2:24:20 AM - Software Distribution Service 3.0
RP24: 2/24/2013 4:04:32 PM - Software Distribution Service 3.0
RP25: 2/25/2013 4:04:54 PM - Software Distribution Service 3.0
RP26: 2/26/2013 4:05:10 PM - System Checkpoint
RP27: 2/26/2013 4:05:29 PM - Software Distribution Service 3.0
RP28: 2/27/2013 4:04:22 PM - Software Distribution Service 3.0
RP29: 2/28/2013 4:04:21 PM - Software Distribution Service 3.0
RP30: 3/7/2013 1:12:52 PM - Software Distribution Service 3.0
RP31: 3/8/2013 1:17:30 PM - System Checkpoint
RP32: 3/8/2013 1:23:36 PM - Software Distribution Service 3.0
RP33: 3/9/2013 1:22:29 PM - Software Distribution Service 3.0
RP34: 3/10/2013 2:30:50 AM - Software Distribution Service 3.0
RP35: 3/10/2013 2:22:17 PM - Software Distribution Service 3.0
RP36: 3/11/2013 2:22:48 PM - Software Distribution Service 3.0
RP37: 3/12/2013 2:44:34 PM - System Checkpoint
RP38: 3/13/2013 10:52:40 AM - Software Distribution Service 3.0
RP39: 3/14/2013 10:52:59 AM - Software Distribution Service 3.0
RP40: 3/15/2013 10:51:37 AM - Software Distribution Service 3.0
RP41: 3/16/2013 10:51:29 AM - Software Distribution Service 3.0
RP42: 3/17/2013 2:29:33 AM - Software Distribution Service 3.0
RP43: 3/17/2013 10:51:33 AM - Software Distribution Service 3.0
RP44: 3/18/2013 10:51:38 AM - Software Distribution Service 3.0
RP45: 3/18/2013 10:29:21 PM - Software Distribution Service 3.0
RP46: 3/19/2013 10:51:01 PM - System Checkpoint
RP47: 3/20/2013 9:24:40 AM - Software Distribution Service 3.0
RP48: 3/21/2013 4:22:00 AM - Software Distribution Service 3.0
RP49: 3/22/2013 4:29:53 AM - System Checkpoint
RP50: 3/22/2013 4:37:10 AM - Software Distribution Service 3.0
RP51: 3/23/2013 4:37:11 AM - Software Distribution Service 3.0
RP52: 3/24/2013 1:56:35 AM - Software Distribution Service 3.0
RP53: 3/24/2013 4:36:48 AM - Software Distribution Service 3.0
RP54: 3/25/2013 4:37:21 AM - Software Distribution Service 3.0
RP55: 3/26/2013 4:37:13 AM - Software Distribution Service 3.0
RP56: 3/27/2013 4:37:17 AM - Software Distribution Service 3.0
RP57: 3/28/2013 4:37:29 AM - Software Distribution Service 3.0
RP58: 3/29/2013 5:09:05 AM - System Checkpoint
RP59: 3/30/2013 12:17:45 AM - Software Distribution Service 3.0
RP60: 3/30/2013 3:29:22 PM - Installed DRIVERfighter.
RP61: 3/30/2013 3:36:32 PM - Installed SPAMfighter.
RP62: 3/30/2013 8:03:13 PM - Removed DRIVERfighter.
RP63: 3/31/2013 12:17:04 AM - Software Distribution Service 3.0
RP64: 4/1/2013 12:16:45 AM - Software Distribution Service 3.0
RP65: 4/1/2013 9:15:33 PM - Removed Internet Explorer Toolbar 4.7 by SweetPacks
RP66: 4/2/2013 9:18:24 PM - System Checkpoint
RP67: 4/2/2013 9:24:42 PM - Software Distribution Service 3.0
RP68: 4/3/2013 9:24:35 PM - Software Distribution Service 3.0
RP69: 4/4/2013 9:24:47 PM - Software Distribution Service 3.0
RP70: 4/5/2013 9:24:28 PM - Software Distribution Service 3.0
RP71: 4/6/2013 9:24:22 PM - Software Distribution Service 3.0
RP72: 4/7/2013 1:45:41 AM - Software Distribution Service 3.0
RP73: 4/7/2013 9:24:35 PM - Software Distribution Service 3.0
RP74: 4/8/2013 11:07:56 AM - Installed Java 7 Update 17
RP75: 4/8/2013 11:27:34 AM - Removed Adobe Reader XI (11.0.02).
RP76: 4/8/2013 9:25:05 PM - Software Distribution Service 3.0
RP77: 4/9/2013 9:24:55 PM - Software Distribution Service 3.0
RP78: 4/10/2013 9:26:33 PM - Software Distribution Service 3.0
RP79: 4/11/2013 9:25:17 PM - Software Distribution Service 3.0
RP80: 4/12/2013 10:59:26 AM - Software Distribution Service 3.0
RP81: 4/12/2013 6:04:51 PM - Update to an unsigned driver
RP82: 4/13/2013 5:52:54 PM - Software Distribution Service 3.0
RP83: 4/14/2013 2:16:42 AM - Software Distribution Service 3.0
RP84: 4/14/2013 5:52:51 PM - Software Distribution Service 3.0
RP85: 4/15/2013 5:52:58 PM - Software Distribution Service 3.0
RP86: 4/16/2013 5:54:09 PM - Software Distribution Service 3.0
RP87: 4/17/2013 5:54:35 PM - Software Distribution Service 3.0
RP88: 4/18/2013 6:38:08 PM - System Checkpoint
RP89: 4/18/2013 11:09:24 PM - Software Distribution Service 3.0
RP90: 4/20/2013 11:44:28 AM - Software Distribution Service 3.0
RP91: 4/21/2013 1:55:41 AM - Software Distribution Service 3.0
RP92: 4/21/2013 11:43:38 AM - Software Distribution Service 3.0
RP93: 4/21/2013 11:07:29 PM - Installed Java 7 Update 21
RP94: 4/22/2013 4:16:24 PM - Software Distribution Service 3.0
RP95: 4/23/2013 5:05:15 PM - System Checkpoint
RP96: 4/23/2013 8:18:55 PM - Software Distribution Service 3.0
RP97: 4/24/2013 8:30:51 PM - System Checkpoint
RP98: 4/25/2013 5:39:19 PM - Software Distribution Service 3.0
.
==== Installed Programs ======================
.
Adobe Flash Player 11 ActiveX
Adobe Flash Player 11 Plugin
Adobe Photoshop 7.0
Adobe Reader XI (11.0.02)
Akamai NetSession Interface
Audacity 2.0.3
azzCardfile 4.1
Dell Resource CD
EPSON Printer Software
EPSON Scan
ESET Online Scanner v3
FFmpeg v0.6.2 for Audacity
Foxit Reader
FreeRIP 4.1.1
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Hotfix for Windows XP (KB2779562)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB954550-v5)
Hotfix for Windows XP (KB961118)
IDrive version 3.4.1 January 03, 2012
Intel® Graphics Media Accelerator Driver
Intel® PRO Network Connections 12.1.12.0
Java 7 Update 21
Java Auto Updater
LAME v3.99.3 (for Windows)
Malwarebytes Anti-Malware version 1.75.0.1300
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft Application Error Reporting
Microsoft Office 97, Professional Edition
Microsoft Security Client
Microsoft Security Essentials Prerelease
Microsoft Silverlight
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Microsoft Works 6-9 Converter
Mozilla Firefox 20.0.1 (x86 en-US)
Mozilla Maintenance Service
OpenOffice.org 3.4.1
Realtek High Definition Audio Driver
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2604111)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2657424)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2736416)
Security Update for Microsoft Windows (KB2564958)
Security Update for Windows Internet Explorer 8 (KB2510531)
Security Update for Windows Internet Explorer 8 (KB2618444)
Security Update for Windows Internet Explorer 8 (KB2744842)
Security Update for Windows Internet Explorer 8 (KB2792100)
Security Update for Windows Internet Explorer 8 (KB2797052)
Security Update for Windows Internet Explorer 8 (KB2809289)
Security Update for Windows Internet Explorer 8 (KB2817183)
Security Update for Windows Internet Explorer 8 (KB982381)
Security Update for Windows Media Player (KB2378111)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB954155)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player (KB975558)
Security Update for Windows Media Player (KB978695)
Security Update for Windows XP (KB2115168)
Security Update for Windows XP (KB2229593)
Security Update for Windows XP (KB2296011)
Security Update for Windows XP (KB2347290)
Security Update for Windows XP (KB2360937)
Security Update for Windows XP (KB2387149)
Security Update for Windows XP (KB2393802)
Security Update for Windows XP (KB2419632)
Security Update for Windows XP (KB2423089)
Security Update for Windows XP (KB2440591)
Security Update for Windows XP (KB2443105)
Security Update for Windows XP (KB2478960)
Security Update for Windows XP (KB2478971)
Security Update for Windows XP (KB2479943)
Security Update for Windows XP (KB2481109)
Security Update for Windows XP (KB2483185)
Security Update for Windows XP (KB2485663)
Security Update for Windows XP (KB2506212)
Security Update for Windows XP (KB2507938)
Security Update for Windows XP (KB2508429)
Security Update for Windows XP (KB2509553)
Security Update for Windows XP (KB2510581)
Security Update for Windows XP (KB2535512)
Security Update for Windows XP (KB2536276-v2)
Security Update for Windows XP (KB2544893-v2)
Security Update for Windows XP (KB2566454)
Security Update for Windows XP (KB2570947)
Security Update for Windows XP (KB2584146)
Security Update for Windows XP (KB2585542)
Security Update for Windows XP (KB2592799)
Security Update for Windows XP (KB2598479)
Security Update for Windows XP (KB2603381)
Security Update for Windows XP (KB2618451)
Security Update for Windows XP (KB2619339)
Security Update for Windows XP (KB2620712)
Security Update for Windows XP (KB2624667)
Security Update for Windows XP (KB2631813)
Security Update for Windows XP (KB2646524)
Security Update for Windows XP (KB2653956)
Security Update for Windows XP (KB2655992)
Security Update for Windows XP (KB2659262)
Security Update for Windows XP (KB2661637)
Security Update for Windows XP (KB2676562)
Security Update for Windows XP (KB2686509)
Security Update for Windows XP (KB2691442)
Security Update for Windows XP (KB2698365)
Security Update for Windows XP (KB2705219-v2)
Security Update for Windows XP (KB2712808)
Security Update for Windows XP (KB2719985)
Security Update for Windows XP (KB2723135-v2)
Security Update for Windows XP (KB2727528)
Security Update for Windows XP (KB2753842-v2)
Security Update for Windows XP (KB2757638)
Security Update for Windows XP (KB2758857)
Security Update for Windows XP (KB2770660)
Security Update for Windows XP (KB2778344)
Security Update for Windows XP (KB2780091)
Security Update for Windows XP (KB2792100)
Security Update for Windows XP (KB2797052)
Security Update for Windows XP (KB2799494)
Security Update for Windows XP (KB2802968)
Security Update for Windows XP (KB2807986)
Security Update for Windows XP (KB2808735)
Security Update for Windows XP (KB2813170)
Security Update for Windows XP (KB2813345)
Security Update for Windows XP (KB2820917)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB923789)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956744)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB970430)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB972270)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB973904)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974318)
Security Update for Windows XP (KB974392)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB975467)
Security Update for Windows XP (KB975560)
Security Update for Windows XP (KB975713)
Security Update for Windows XP (KB977816)
Security Update for Windows XP (KB977914)
Security Update for Windows XP (KB978338)
Security Update for Windows XP (KB978542)
Security Update for Windows XP (KB978706)
Security Update for Windows XP (KB979309)
Security Update for Windows XP (KB979482)
Security Update for Windows XP (KB979687)
Security Update for Windows XP (KB981322)
Security Update for Windows XP (KB981997)
Security Update for Windows XP (KB982132)
Security Update for Windows XP (KB982665)
SPAMfighter
Update for Audio Converter
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Windows Internet Explorer 8 (KB2598845)
Update for Windows XP (KB2345886)
Update for Windows XP (KB2467659)
Update for Windows XP (KB2661254-v2)
Update for Windows XP (KB2736233)
Update for Windows XP (KB2749655)
Update for Windows XP (KB898461)
Update for Windows XP (KB951978)
Update for Windows XP (KB955759)
Update for Windows XP (KB968389)
Update for Windows XP (KB971029)
Update for Windows XP (KB973815)
WebFldrs XP
Windows Genuine Advantage Validation Tool (KB892130)
Windows Internet Explorer 8
Windows PowerShell™ 1.0
Windows XP Service Pack 3
.
==== Event Viewer Messages From Past Week ========
.
4/25/2013 9:07:24 PM, error: Microsoft Antimalware [1119] - Microsoft Antimalware has encountered a critical error when taking action on malware or other potentially unwanted software. For more information please see the following:
http://go.microsoft.com/fwlink/?linkid=370…atid=2147650955 Name: Trojan:Win32/Bamital!dat ID: 2147650955 Severity: Severe Category: Trojan Path: file:_D:\WINDOWS\system32\dll Detection Origin: Local machine Detection Type: Concrete Detection Source: Real-Time Protection User: NT AUTHORITY\SYSTEM Process Name: C:\Program Files\ESET\ESET Online Scanner\OnlineCmdLineScanner.exe Action: Clean Action Status: No additional actions required Error Code: 0x8007007f Error description: The specified procedure could not be found. Signature Version: AV: 1.149.616.0, AS: 1.149.616.0, NIS: 0.0.0.0 Engine Version: AM: 1.1.9402.0, NIS: 0.0.0.0
4/24/2013 5:36:31 PM, error: Microsoft Antimalware [1119] - Microsoft Antimalware has encountered a critical error when taking action on malware or other potentially unwanted software. For more information please see the following:
http://go.microsoft.com/fwlink/?linkid=370…atid=2147650955 Name: Trojan:Win32/Bamital!dat ID: 2147650955 Severity: Severe Category: Trojan Path: file:_D:\WINDOWS\system32\dll Detection Origin: Local machine Detection Type: Concrete Detection Source: System User: NT AUTHORITY\SYSTEM Process Name: Unknown Action: Clean Action Status: No additional actions required Error Code: 0x8007007f Error description: The specified procedure could not be found. Signature Version: AV: 1.149.431.0, AS: 1.149.431.0, NIS: 0.0.0.0 Engine Version: AM: 1.1.9402.0, NIS: 0.0.0.0
4/24/2013 4:59:00 PM, error: Microsoft Antimalware [1119] - Microsoft Antimalware has encountered a critical error when taking action on malware or other potentially unwanted software. For more information please see the following:
http://go.microsoft.com/fwlink/?linkid=370…atid=2147650955 Name: Trojan:Win32/Bamital!dat ID: 2147650955 Severity: Severe Category: Trojan Path: file:_D:\WINDOWS\system32\dll Detection Origin: Local machine Detection Type: Concrete Detection Source: System User: NT AUTHORITY\SYSTEM Process Name: Unknown Action: Clean Action Status: No additional actions required Error Code: 0x8007007f Error description: The specified procedure could not be found. Signature Version: AV: 1.149.431.0, AS: 1.149.431.0, NIS: 0.0.0.0 Engine Version: AM: 1.1.9402.0, NIS: 0.0.0.0
4/23/2013 8:17:44 PM, error: Microsoft Antimalware [1119] - Microsoft Antimalware has encountered a critical error when taking action on malware or other potentially unwanted software. For more information please see the following:
http://go.microsoft.com/fwlink/?linkid=370…atid=2147650955 Name: Trojan:Win32/Bamital!dat ID: 2147650955 Severity: Severe Category: Trojan Path: file:_D:\WINDOWS\system32\dll Detection Origin: Local machine Detection Type: Concrete Detection Source: System User: NT AUTHORITY\SYSTEM Process Name: Unknown Action: Clean Action Status: No additional actions required Error Code: 0x8007007f Error description: The specified procedure could not be found. Signature Version: AV: 1.149.346.0, AS: 1.149.346.0, NIS: 0.0.0.0 Engine Version: AM: 1.1.9402.0, NIS: 0.0.0.0
4/23/2013 8:04:29 PM, error: Service Control Manager [7034] - The Suite Service service terminated unexpectedly. It has done this 1 time(s).
4/23/2013 8:04:29 PM, error: Service Control Manager [7034] - The SPAMfighter Update Service service terminated unexpectedly. It has done this 1 time(s).
4/23/2013 8:04:29 PM, error: Service Control Manager [7034] - The Java Quick Starter service terminated unexpectedly. It has done this 1 time(s).
4/23/2013 8:04:29 PM, error: Service Control Manager [7034] - The IDriveE Service service terminated unexpectedly. It has done this 1 time(s).
4/23/2013 8:04:28 PM, error: Service Control Manager [7031] - The Microsoft Antimalware Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 15000 milliseconds: Restart the service.
4/23/2013 4:11:03 PM, error: Microsoft Antimalware [1119] - Microsoft Antimalware has encountered a critical error when taking action on malware or other potentially unwanted software. For more information please see the following:
http://go.microsoft.com/fwlink/?linkid=370…atid=2147650955 Name: Trojan:Win32/Bamital!dat ID: 2147650955 Severity: Severe Category: Trojan Path: file:_D:\WINDOWS\system32\dll Detection Origin: Local machine Detection Type: Concrete Detection Source: System User: NT AUTHORITY\SYSTEM Process Name: Unknown Action: Clean Action Status: No additional actions required Error Code: 0x8007007f Error description: The specified procedure could not be found. Signature Version: AV: 1.149.346.0, AS: 1.149.346.0, NIS: 0.0.0.0 Engine Version: AM: 1.1.9402.0, NIS: 0.0.0.0
4/23/2013 4:01:35 PM, error: sr [1] - The System Restore filter encountered the unexpected error '0xC0000001' while processing the file '' on the volume 'HarddiskVolume1'. It has stopped monitoring the volume.
4/22/2013 4:16:35 PM, error: Microsoft Antimalware [1119] - Microsoft Antimalware has encountered a critical error when taking action on malware or other potentially unwanted software. For more information please see the following:
http://go.microsoft.com/fwlink/?linkid=370…atid=2147650955 Name: Trojan:Win32/Bamital!dat ID: 2147650955 Severity: Severe Category: Trojan Path: file:_D:\WINDOWS\system32\dll Detection Origin: Local machine Detection Type: Concrete Detection Source: System User: NT AUTHORITY\SYSTEM Process Name: Unknown Action: Clean Action Status: No additional actions required Error Code: 0x8007007f Error description: The specified procedure could not be found. Signature Version: AV: 1.149.270.0, AS: 1.149.270.0, NIS: 0.0.0.0 Engine Version: AM: 1.1.9402.0, NIS: 0.0.0.0
4/22/2013 10:17:51 AM, error: Microsoft Antimalware [1119] - Microsoft Antimalware has encountered a critical error when taking action on malware or other potentially unwanted software. For more information please see the following:
http://go.microsoft.com/fwlink/?linkid=370…atid=2147650955 Name: Trojan:Win32/Bamital!dat ID: 2147650955 Severity: Severe Category: Trojan Path: file:_D:\WINDOWS\system32\dll Detection Origin: Local machine Detection Type: Concrete Detection Source: System User: NT AUTHORITY\SYSTEM Process Name: Unknown Action: Clean Action Status: No additional actions required Error Code: 0x8007007f Error description: The specified procedure could not be found. Signature Version: AV: 1.149.270.0, AS: 1.149.270.0, NIS: 0.0.0.0 Engine Version: AM: 1.1.9402.0, NIS: 0.0.0.0
4/20/2013 3:22:38 AM, error: Dhcp [1002] - The IP address lease 192.168.172.51 for the Network Card with network address 001D098C2B91 has been denied by the DHCP server 192.168.172.1 (The DHCP Server sent a DHCPNACK message).
4/20/2013 11:52:00 AM, error: Microsoft Antimalware [1119] - Microsoft Antimalware has encountered a critical error when taking action on malware or other potentially unwanted software. For more information please see the following:
http://go.microsoft.com/fwlink/?linkid=370…atid=2147650955 Name: Trojan:Win32/Bamital!dat ID: 2147650955 Severity: Severe Category: Trojan Path: file:_D:\WINDOWS\system32\dll Detection Origin: Local machine Detection Type: Concrete Detection Source: System User: NT AUTHORITY\SYSTEM Process Name: Unknown Action: Clean Action Status: No additional actions required Error Code: 0x8007007f Error description: The specified procedure could not be found. Signature Version: AV: 1.149.240.0, AS: 1.149.240.0, NIS: 0.0.0.0 Engine Version: AM: 1.1.9402.0, NIS: 0.0.0.0
4/19/2013 5:14:13 PM, error: Microsoft Antimalware [1119] - Microsoft Antimalware has encountered a critical error when taking action on malware or other potentially unwanted software. For more information please see the following:
http://go.microsoft.com/fwlink/?linkid=370…atid=2147650955 Name: Trojan:Win32/Bamital!dat ID: 2147650955 Severity: Severe Category: Trojan Path: file:_D:\WINDOWS\system32\dll Detection Origin: Local machine Detection Type: Concrete Detection Source: Real-Time Protection User: NT AUTHORITY\SYSTEM Process Name: C:\WINDOWS\explorer.exe Action: Clean Action Status: No additional actions required Error Code: 0x8007007f Error description: The specified procedure could not be found. Signature Version: AV: 1.149.117.0, AS: 1.149.117.0, NIS: 0.0.0.0 Engine Version: AM: 1.1.9402.0, NIS: 0.0.0.0
4/19/2013 4:00:50 PM, error: Microsoft Antimalware [1119] - Microsoft Antimalware has encountered a critical error when taking action on malware or other potentially unwanted software. For more information please see the following:
http://go.microsoft.com/fwlink/?linkid=370…atid=2147650955 Name: Trojan:Win32/Bamital!dat ID: 2147650955 Severity: Severe Category: Trojan Path: file:_D:\WINDOWS\system32\dll Detection Origin: Local machine Detection Type: Concrete Detection Source: User User: SHERIFFJOHN\Denno Process Name: Unknown Action: Clean Action Status: No additional actions required Error Code: 0x8007007f Error description: The specified procedure could not be found. Signature Version: AV: 1.149.117.0, AS: 1.149.117.0, NIS: 0.0.0.0 Engine Version: AM: 1.1.9402.0, NIS: 0.0.0.0
.
==== End Of File ===========================
Got some anomalies going on. Java still missing from Control Panel. Peculiar things happening to those cardfile files again. Lots of delay getting to and signing into this forum. Files missing from my Dreamweaver site files.
OTM has an odd mini-tree of folders in my C:\ drive.
denno