This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Hijackthis Log

4 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

can you help me with this log. After various scan with various programs sahagents and hotbar elements still appears!

here is the hijackthisLog

Logfile of HijackThis v1.99.1
Scan saved at 22:41:02, on 28/04/05
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Nhksrv.exe
c:\srvany.exe
C:\Program Files\Dell\Bluetooth Software\bin\btwdins.exe
c:\aaaa.exe
c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
c:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\FireDaemon\FireDaemon.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\NALNTSRV.EXE
C:\WINDOWS\System32\svchost.exe
c:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\WINDOWS\System32\wltrysvc.exe
C:\Program Files\Novell\ZENworks\wm.exe
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\Explorer.EXE
C:\back1.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\system32\NWTRAY.EXE
C:\WINDOWS\System32\dpmw32.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\PROGRA~1\SYMANT~2\VPTray.exe
C:\Program Files\CA\eTrust PestPatrol\PPActiveDetection.exe
C:\Program Files\Google\Gmail Notifier\gnotify.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
C:\Program Files\Dell\Bluetooth Software\BTTray.exe
C:\Program Files\Novell\iFolder\trayapp.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\PROGRA~1\Dell\BLUETO~1\BTSTAC~1.EXE
C:\WINDOWS\system32\cmd.exe
C:\WINDOWS\system32\xcopy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\wincmd\WINCMD32.EXE
C:\Program Files\wincmd\WINCMD32.EXE
C:\DOCUME~1\afinsr\LOCALS~1\Temp\$wc\HIJACK~1.EXE
c:\lapip1.exe
C:\WINDOWS\system32\cmd.exe
C:\WINDOWS\system32\ping.exe
C:\WINDOWS\system32\cmd.exe
c:\process.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.repubblica.it/
R3 - Default URLSearchHook is missing
F2 - REG:system.ini: UserInit=c:\windows\system32\userinit.exe,c:\off.exe
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [ZENRC Tray Icon] zentray.exe
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [back1] C:\back1.exe
O4 - HKLM\..\Run: [sinc] C:\sinc.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [ADUserMon] C:\Program Files\Iomega\AutoDisk\ADUserMon.exe
O4 - HKLM\..\Run: [NWTRAY] NWTRAY.EXE
O4 - HKLM\..\Run: [NDPS] C:\WINDOWS\System32\dpmw32.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_02\bin\jusched.exe
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] c:\PROGRA~1\SYMANT~2\VPTray.exe
O4 - HKLM\..\Run: [InvisibleBrowsing] C:\Program Files\Invisible Browsing\InvisibleBrowsing.exe
O4 - HKLM\..\Run: [GhostSurfDelSatellite] C:\Program Files\GhostSurf 2005\DeleteSatellite.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [eTrustPPAP] "C:\Program Files\CA\eTrust PestPatrol\PPActiveDetection.exe"
O4 - HKLM\..\Run: [irgpuner] C:\WINNT\irgpuner.exe
O4 - HKLM\..\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] C:\Program Files\Google\Gmail Notifier\gnotify.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [cB5pRkJ7i] travpa.exe
O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: Novell iFolder.lnk = C:\Program Files\Novell\iFolder\trayapp.exe
O4 - Global Startup: Shortcut to spooler.exe.lnk = C:\spooler.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_02\bin\npjpi142_02.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_02\bin\npjpi142_02.dll
O9 - Extra button: Novell delivered applications - {C1994287-422F-47aa-8E5E-6323E210A125} - C:\Program Files\Novell\ZENworks\AxNalServer.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {2B1AA38D-2D12-11D5-AAD0-00C04FA03D78} (LocalExec Control) - https://insite.warwick.ac.uk/nps/portal/gad…t/LocalExec.CAB
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://groups.msn.com/controls/PhotoUC/MsnPUpld.cab
O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - http://a1540.g.akamai.net/7/1540/52/200305…meInstaller.exe
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe…nt.cab30149.cab
O16 - DPF: {90A29DA5-D020-4B18-8660-6689520C7CD7} (DmiReader Class) - http://support.euro.dell.com/global/apps/s…er/PROFILER.CAB
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse…pDownloader.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = wbs.warwick.ac.uk
O17 - HKLM\Software\..\Telephony: DomainName = wbs.warwick.ac.uk
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = wbs.warwick.ac.uk
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = wbs.warwick.ac.uk
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: NavLogon - c:\WINDOWS\system32\NavLogon.dll
O23 - Service: aaaa - Unknown owner - c:\srvany.exe
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM Inc. - C:\Program Files\Dell\Bluetooth Software\bin\btwdins.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - c:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: FireDaemon Service: lapip1 (lapip1) - Sublime Solutions Pty Ltd - C:\Program Files\FireDaemon\FireDaemon.exe
O23 - Service: Netropa NHK Server (Nhksrv) - Unknown owner - C:\WINDOWS\Nhksrv.exe
O23 - Service: SAVRoam (SavRoam) - symantec - c:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - c:\Program Files\Symantec AntiVirus\Rtvscan.exe
O23 - Service: WLTRYSVC - Unknown owner - C:\WINDOWS\System32\wltrysvc.exe
O23 - Service: Workstation Manager (ZFDWM) - Novell, INC. - C:\Program Files\Novell\ZENworks\wm.exe

Thanks
hi


Download the trial version of TDS-3 anti trojan from here:
http://www.diamondcs.com.au/tds/downloads/tds3setup.exe
Install it, but do not launch it yet

Update it: right click the link below, select "save as"
http://www.diamondcs.com.au/tds/radius.td3

Save it to the directory where you installed TDS-3, overwriting the previous radius.td3 if prompted.

Then launch tds-3. In the top bar of TDS window click System Testing> Full System Scan.
Detections will appear in the lower pane of TDS window. After the scan is finished ( it'll take a while ) right click the list> select save as text. Save it and post the contents of the scandump.txt here

do not delete any files yet, OK?
hi first of all thanks! Then … I followed what you told me and I got the following results: Scan Control Dumped @ 14:59:39 30-04-05 File Trace: Default trojan filename: TrojanDropper.Win32.Delf.fb File: C:\spooler.exe Positive identification: Riskware.Tool.ServiceRunner.d File: c:\documents and settings\recycler\s-1-5-21-1282138258-97400744-4212676017-1040\dh1\srvany.exe Positive identification: Riskware.Tool.ServiceRunner.d File: c:\recycler\s-1-5-21-1282138258-97400744-4212676017-500\dc1\desktop\copy of srvany\srvany.exe Suspicious Filename: Dual extensions File: c:\sciword3.0\docs\larry.jpg.vbs Positive identification: Riskware.Tool.ServiceRunner.d File: d:\backup\recycler\s-1-5-21-1282138258-97400744-4212676017-1040\dh1\srvany.exe Positive identification: Riskware.Tool.ServiceRunner.d File: h:\recycler\s-1-5-21-1282138258-97400744-4212676017-1040\dh1\srvany.exe and now…. Ciao
hi
you did update tds prior to scanning??


follow the procedure described

here

i'm not saying that you have this infection, but we need the most powerful virus scanner to clean your computer..

be sure to save Kaspersky's scan report, post it here, along with a fresh hijackthis log
Hi

I did update tds prior the scanning. After the scanning I gave you the results but I didn't take any action.

Now I did the kaspersky's scan (after updating) and I had a virus (pus a couple of others quarantined). I had also some files zipped that needed the password, but they relate to etrust petrol and ad aware so I don't think it is relevant.

Afterwards I deleted the virus that has been found and not it results clean with no viruses found.

I did again a spyware scan with Scan Spyware and again hot toolbar and sahagent appeared. What is funny is that if I delete them they reappear!

I attach you first the first scan of kaspersky (the one were the virus is found. The second had no virus). The hijackthis's scan follows.

I must say the scans are very long.

Thank yoou very much for your help!

Ciao

Task: Scan My Computer

Statistics:
Task start time: 02/05/05 10:02:55
Task completion time: 02/05/05 11:29:57
Objects scanned: 282708
Viruses detected: 13
Disinfected: 5
Quarantined: 0

Settings:
Scan scope: My Computer
Protection level: Recommended
Scan: all objects
Infected objects: prompt user for action when the scan is completed
Suspicious objects: prompt user for action when the scan is completed
Exclusions: none
Disk boot sectors: scan
Embedded OLE-objects: scan
Alternate NTFS data streams: scan
Mail databases: do not scan
E-mail format files: do not scan
Packed objects: scan
Self-extracting archives: scan
Archives: scan
Maximum size of archives: do not limit
iChecker™: use
iStreams™: use
Maximum time allowed for object processing: do not limit

Report:
Object Event Duration
H:\afinsr\Local Settings\Temp\dEbrQG.exe Could not be disinfected. Reason: disinfection postponed until the scan is complete. 02/05/05 11:28:30
C:\Documents and Settings\afinsr\Local Settings\Temp\CYgMYe.exe Could not be disinfected. Reason: disinfection postponed until the scan is complete. 02/05/05 10:04:03
H:\afinsr\Local Settings\Temp\fkFDddF.exe Could not be disinfected. Reason: disinfection postponed until the scan is complete. 02/05/05 11:28:30
C:\Documents and Settings\afinsr\Local Settings\Temp\dEbrQG.exe Could not be disinfected. Reason: disinfection postponed until the scan is complete. 02/05/05 10:04:03
H:\afinsr\Local Settings\Temp\MQJuyb.exe Could not be disinfected. Reason: disinfection postponed until the scan is complete. 02/05/05 11:28:40
C:\Documents and Settings\afinsr\Local Settings\Temp\fkFDddF.exe Could not be disinfected. Reason: disinfection postponed until the scan is complete. 02/05/05 10:04:03
H:\afinsr\Local Settings\Temp\CYgMYe.exe Could not be disinfected. Reason: disinfection postponed until the scan is complete. 02/05/05 11:28:30
C:\Documents and Settings\afinsr\Local Settings\Temp\MQJuyb.exe Could not be disinfected. Reason: disinfection postponed until the scan is complete. 02/05/05 10:04:46
C:\Documents and Settings\settings\Personal\rorwt207.zip\start.exe Could not be disinfected. Reason: disinfection postponed until the scan is complete. 02/05/05 10:12:05
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\033C0000.VBN Could not be disinfected. Reason: disinfection postponed until the scan is complete. 02/05/05 10:10:58
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\08240001.VBN Could not be disinfected. Reason: disinfection postponed until the scan is complete. 02/05/05 10:10:58
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\08240000.VBN Could not be disinfected. Reason: disinfection postponed until the scan is complete. 02/05/05 10:10:58
D:\backup\settings\Personal\rorwt207.zip\start.exe Could not be disinfected. Reason: disinfection postponed until the scan is complete. 02/05/05 11:24:17
C:\Documents and Settings\afinsr\Local Settings\Temp\CYgMYe.exe Deleted. 02/05/05 11:42:39
C:\Documents and Settings\afinsr\Local Settings\Temp\dEbrQG.exe Deleted. 02/05/05 11:42:44
C:\Documents and Settings\afinsr\Local Settings\Temp\fkFDddF.exe Deleted. 02/05/05 11:42:48
C:\Documents and Settings\afinsr\Local Settings\Temp\MQJuyb.exe Deleted. 02/05/05 11:42:52
D:\backup\settings\Personal\rorwt207.zip\start.exe Deleted. 02/05/05 11:43:06
D:\backup\settings\Personal\rorwt207.zip Infected with a virus Trojan-Downloader.Win32.IstBar.gen. 02/05/05 11:24:17
D:\backup\settings\Personal\rorwt207.zip\start.exe Infected with a virus Trojan-Downloader.Win32.IstBar.gen. 02/05/05 11:24:17
C:\Documents and Settings\settings\Personal\rorwt207.zip Infected with a virus Trojan-Downloader.Win32.IstBar.gen. 02/05/05 10:12:05
C:\Documents and Settings\settings\Personal\rorwt207.zip\start.exe Infected with a virus Trojan-Downloader.Win32.IstBar.gen. 02/05/05 10:12:05
D:\backup\settings\Personal\rorwt207.zip\start.exe Infected with a virus Trojan-Downloader.Win32.IstBar.gen. 02/05/05 11:43:06
H:\afinsr\Local Settings\Temp\CYgMYe.exe Infected with a virus Trojan-Downloader.Win32.IstBar.ie. 02/05/05 11:28:30
C:\Documents and Settings\afinsr\Local Settings\Temp\CYgMYe.exe Infected with a virus Trojan-Downloader.Win32.IstBar.ie. 02/05/05 11:42:39
C:\Documents and Settings\afinsr\Local Settings\Temp\CYgMYe.exe Infected with a virus Trojan-Downloader.Win32.IstBar.ie. 02/05/05 10:04:03
C:\Documents and Settings\afinsr\Local Settings\Temp\fkFDddF.exe Infected with a virus Trojan-Downloader.Win32.IstBar.if. 02/05/05 10:04:03
C:\Documents and Settings\afinsr\Local Settings\Temp\fkFDddF.exe Infected with a virus Trojan-Downloader.Win32.IstBar.if. 02/05/05 11:42:47
H:\afinsr\Local Settings\Temp\fkFDddF.exe Infected with a virus Trojan-Downloader.Win32.IstBar.if. 02/05/05 11:28:30
C:\Documents and Settings\afinsr\Local Settings\Temp\dEbrQG.exe Infected with a virus Trojan-Downloader.Win32.IstBar.ig. 02/05/05 10:04:03
C:\Documents and Settings\afinsr\Local Settings\Temp\MQJuyb.exe Infected with a virus Trojan-Downloader.Win32.IstBar.ig. 02/05/05 11:42:51
C:\Documents and Settings\afinsr\Local Settings\Temp\MQJuyb.exe Infected with a virus Trojan-Downloader.Win32.IstBar.ig. 02/05/05 10:04:46
C:\Documents and Settings\afinsr\Local Settings\Temp\dEbrQG.exe Infected with a virus Trojan-Downloader.Win32.IstBar.ig. 02/05/05 11:42:43
H:\afinsr\Local Settings\Temp\MQJuyb.exe Infected with a virus Trojan-Downloader.Win32.IstBar.ig. 02/05/05 11:28:40
H:\afinsr\Local Settings\Temp\dEbrQG.exe Infected with a virus Trojan-Downloader.Win32.IstBar.ig. 02/05/05 11:28:30
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\033C0000.VBN Infected with a virus Trojan-Downloader.Win32.Small.on. 02/05/05 10:10:58
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\157 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\158 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\159 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\160 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\161 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\162 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\163 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\164 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\165 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\166 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\156 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\155 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\154 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\153 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\152 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\151 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\150 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\149 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\148 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\147 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\146 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311120531.zip\7 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311120531.zip\6 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311120531.zip\5 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311120531.zip\4 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311120531.zip\3 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311120531.zip\2 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311120531.zip\1 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311120531.zip\0 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\180 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\179 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\178 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\177 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\176 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\175 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\174 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\173 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\172 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\171 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\170 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\169 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\168 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\167 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\123 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\122 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\121 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\120 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\119 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\118 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\117 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\116 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\115 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\114 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\113 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\112 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\111 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\110 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\109 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\108 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\107 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\106 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\105 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\104 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\103 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\102 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\145 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\144 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\143 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\142 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\141 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\140 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\139 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\138 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\137 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\136 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\135 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\134 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\133 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\132 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\131 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\130 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\129 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\128 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\127 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\126 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\125 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\124 Password-protected. 02/05/05 10:27:27
C:\Program Files\Lavasoft\Ad-Aware SE Personal\Skins\Ad-Aware SE default.ask\defbtn1.bmp Password-protected. 02/05/05 10:31:54
C:\Program Files\Lavasoft\Ad-Aware SE Personal\Skins\Ad-Aware SE default.ask\default.skn Password-protected. 02/05/05 10:31:54
C:\Program Files\Lavasoft\Ad-Aware SE Personal\Skins\Ad-Aware SE default.ask\checkbox4.bmp Password-protected. 02/05/05 10:31:54
C:\Program Files\Lavasoft\Ad-Aware SE Personal\Skins\Ad-Aware SE default.ask\checkbox3.bmp Password-protected. 02/05/05 10:31:54
C:\Program Files\Lavasoft\Ad-Aware SE Personal\Skins\Ad-Aware SE default.ask\checkbox2.bmp Password-protected. 02/05/05 10:31:54
C:\Program Files\Lavasoft\Ad-Aware SE Personal\Skins\Ad-Aware SE default.ask\checkbox1.bmp Password-protected. 02/05/05 10:31:54
C:\Program Files\Lavasoft\Ad-Aware SE Personal\Skins\Ad-Aware SE default.ask\bt62.bmp Password-protected. 02/05/05 10:31:54
C:\Program Files\Lavasoft\Ad-Aware SE Personal\Skins\Ad-Aware SE default.ask\bt61.bmp Password-protected. 02/05/05 10:31:54
C:\Program Files\Lavasoft\Ad-Aware SE Personal\Skins\Ad-Aware SE default.ask\bt53.bmp Password-protected. 02/05/05 10:31:54
C:\Program Files\Lavasoft\Ad-Aware SE Personal\Skins\Ad-Aware SE default.ask\bt52.bmp Password-protected. 02/05/05 10:31:54
C:\Program Files\Lavasoft\Ad-Aware SE Personal\Skins\Ad-Aware SE default.ask\bt51.bmp Password-protected. 02/05/05 10:31:54
C:\Program Files\Lavasoft\Ad-Aware SE Personal\Skins\Ad-Aware SE default.ask\bt43.bmp Password-protected. 02/05/05 10:31:54
C:\Program Files\Lavasoft\Ad-Aware SE Personal\Skins\Ad-Aware SE default.ask\bt42.bmp Password-protected. 02/05/05 10:31:54
C:\Program Files\Lavasoft\Ad-Aware SE Personal\Skins\Ad-Aware SE default.ask\bt41.bmp Password-protected. 02/05/05 10:31:54
C:\Program Files\Lavasoft\Ad-Aware SE Personal\Skins\Ad-Aware SE default.ask\bt33.bmp Password-protected. 02/05/05 10:31:54
C:\Program Files\Lavasoft\Ad-Aware SE Personal\Skins\Ad-Aware SE default.ask\bt32.bmp Password-protected. 02/05/05 10:31:54
C:\Program Files\Lavasoft\Ad-Aware SE Personal\Skins\Ad-Aware SE default.ask\bt31.bmp Password-protected. 02/05/05 10:31:54
C:\Program Files\Lavasoft\Ad-Aware SE Personal\Skins\Ad-Aware SE default.ask\bt23.bmp Password-protected. 02/05/05 10:31:54
C:\Program Files\Lavasoft\Ad-Aware SE Personal\Skins\Ad-Aware SE default.ask\bt22.bmp Password-protected. 02/05/05 10:31:54
C:\Program Files\Lavasoft\Ad-Aware SE Personal\Skins\Ad-Aware SE default.ask\bt21.bmp Password-protected. 02/05/05 10:31:54
C:\Program Files\Lavasoft\Ad-Aware SE Personal\Skins\Ad-Aware SE default.ask\bt13.bmp Password-protected. 02/05/05 10:31:54
C:\Program Files\Lavasoft\Ad-Aware SE Personal\Skins\Ad-Aware SE default.ask\bt12.bmp Password-protected. 02/05/05 10:31:54
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050202143744.zip\0 Password-protected. 02/05/05 10:19:23
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050202143744.zip\1 Password-protected. 02/05/05 10:19:54
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050202143744.zip\2 Password-protected. 02/05/05 10:27:04
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050202143744.zip\3 Password-protected. 02/05/05 10:27:06
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050202143744.zip\4 Password-protected. 02/05/05 10:27:10
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050202143744.zip\5 Password-protected. 02/05/05 10:27:12
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050202143744.zip\6 Password-protected. 02/05/05 10:27:12
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050202143744.zip\7 Password-protected. 02/05/05 10:27:12
C:\Program Files\Lavasoft\Ad-Aware SE Personal\Skins\Ad-Aware SE default.ask\tab2.bmp Password-protected. 02/05/05 10:31:54
C:\Program Files\Lavasoft\Ad-Aware SE Personal\Skins\Ad-Aware SE default.ask\tab1.bmp Password-protected. 02/05/05 10:31:54
C:\Program Files\Lavasoft\Ad-Aware SE Personal\Skins\Ad-Aware SE default.ask\sprite1.bmp Password-protected. 02/05/05 10:31:54
C:\Program Files\Lavasoft\Ad-Aware SE Personal\Skins\Ad-Aware SE default.ask\preview.bmp Password-protected. 02/05/05 10:31:54
C:\Program Files\Lavasoft\Ad-Aware SE Personal\Skins\Ad-Aware SE default.ask\main.bmp Password-protected. 02/05/05 10:31:54
C:\Program Files\Lavasoft\Ad-Aware SE Personal\Skins\Ad-Aware SE default.ask\glyph7.bmp Password-protected. 02/05/05 10:31:54
C:\Program Files\Lavasoft\Ad-Aware SE Personal\Skins\Ad-Aware SE default.ask\glyph6.bmp Password-protected. 02/05/05 10:31:54
C:\Program Files\Lavasoft\Ad-Aware SE Personal\Skins\Ad-Aware SE default.ask\glyph5.bmp Password-protected. 02/05/05 10:31:54
C:\Program Files\Lavasoft\Ad-Aware SE Personal\Skins\Ad-Aware SE default.ask\glyph4.bmp Password-protected. 02/05/05 10:31:54
C:\Program Files\Lavasoft\Ad-Aware SE Personal\Skins\Ad-Aware SE default.ask\glyph3.bmp Password-protected. 02/05/05 10:31:54
C:\Program Files\Lavasoft\Ad-Aware SE Personal\Skins\Ad-Aware SE default.ask\glyph2.bmp Password-protected. 02/05/05 10:31:54
C:\Program Files\Lavasoft\Ad-Aware SE Personal\Skins\Ad-Aware SE default.ask\glyph1.bmp Password-protected. 02/05/05 10:31:54
C:\Program Files\Lavasoft\Ad-Aware SE Personal\Skins\Ad-Aware SE default.ask\defbtn3.bmp Password-protected. 02/05/05 10:31:54
C:\Program Files\Lavasoft\Ad-Aware SE Personal\Skins\Ad-Aware SE default.ask\defbtn2.bmp Password-protected. 02/05/05 10:31:54
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050313113451.zip\8 Password-protected. 02/05/05 10:27:29
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050313113451.zip\7 Password-protected. 02/05/05 10:27:29
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050313113451.zip\6 Password-protected. 02/05/05 10:27:29
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050313113451.zip\5 Password-protected. 02/05/05 10:27:29
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050313113451.zip\4 Password-protected. 02/05/05 10:27:29
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050313113451.zip\3 Password-protected. 02/05/05 10:27:29
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050313113451.zip\1 Password-protected. 02/05/05 10:27:29
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050313113451.zip\0 Password-protected. 02/05/05 10:27:29
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050313113419.zip\0 Password-protected. 02/05/05 10:27:29
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050313113342.zip\0 Password-protected. 02/05/05 10:27:28
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311150519.zip\11 Password-protected. 02/05/05 10:27:28
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311150519.zip\10 Password-protected. 02/05/05 10:27:28
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311150519.zip\9 Password-protected. 02/05/05 10:27:28
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311150519.zip\8 Password-protected. 02/05/05 10:27:28
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311150519.zip\7 Password-protected. 02/05/05 10:27:28
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311150519.zip\6 Password-protected. 02/05/05 10:27:28
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311150519.zip\5 Password-protected. 02/05/05 10:27:28
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311150519.zip\4 Password-protected. 02/05/05 10:27:28
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311150519.zip\3 Password-protected. 02/05/05 10:27:28
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311150519.zip\2 Password-protected. 02/05/05 10:27:28
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311150519.zip\1 Password-protected. 02/05/05 10:27:28
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311150519.zip\0 Password-protected. 02/05/05 10:27:28
C:\Program Files\Lavasoft\Ad-Aware SE Personal\Skins\Ad-Aware SE default.ask\bt11.bmp Password-protected. 02/05/05 10:31:54
C:\Program Files\Lavasoft\Ad-Aware SE Personal\Skins\Ad-Aware SE default.ask\bck2.bmp Password-protected. 02/05/05 10:31:54
C:\Program Files\Lavasoft\Ad-Aware SE Personal\Skins\Ad-Aware SE default.ask\bck1.bmp Password-protected. 02/05/05 10:31:54
C:\Program Files\Lavasoft\Ad-Aware SE Personal\Skins\Ad-Aware SE default.ask\arrow2.bmp Password-protected. 02/05/05 10:31:54
C:\Program Files\Lavasoft\Ad-Aware SE Personal\Skins\Ad-Aware SE default.ask\arrow1.bmp Password-protected. 02/05/05 10:31:54
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050501110156.zip\0 Password-protected. 02/05/05 10:27:36
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050428140436.zip\0 Password-protected. 02/05/05 10:27:36
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050401151557.zip\0 Password-protected. 02/05/05 10:27:35
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050323123104.zip\0 Password-protected. 02/05/05 10:27:34
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050320110803.zip\1 Password-protected. 02/05/05 10:27:33
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050320110803.zip\0 Password-protected. 02/05/05 10:27:33
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050314150258.zip\0 Password-protected. 02/05/05 10:27:33
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050313135254.zip\3 Password-protected. 02/05/05 10:27:32
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050313135254.zip\2 Password-protected. 02/05/05 10:27:32
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050313135254.zip\1 Password-protected. 02/05/05 10:27:32
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050313135254.zip\0 Password-protected. 02/05/05 10:27:32
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050313114455.zip\0 Password-protected. 02/05/05 10:27:32
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050313114104.zip\1 Password-protected. 02/05/05 10:27:31
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050313114104.zip\0 Password-protected. 02/05/05 10:27:31
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050313114034.zip\0 Password-protected. 02/05/05 10:27:30
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050313113451.zip\10 Password-protected. 02/05/05 10:27:29
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050313113451.zip\9 Password-protected. 02/05/05 10:27:29
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112400.zip\46 Password-protected. 02/05/05 10:27:26
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112400.zip\45 Password-protected. 02/05/05 10:27:26
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112400.zip\44 Password-protected. 02/05/05 10:27:26
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112400.zip\43 Password-protected. 02/05/05 10:27:26
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112400.zip\42 Password-protected. 02/05/05 10:27:26
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112400.zip\41 Password-protected. 02/05/05 10:27:26
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112400.zip\40 Password-protected. 02/05/05 10:27:26
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112400.zip\39 Password-protected. 02/05/05 10:27:26
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112400.zip\38 Password-protected. 02/05/05 10:27:26
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112400.zip\36 Password-protected. 02/05/05 10:27:26
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112400.zip\35 Password-protected. 02/05/05 10:27:26
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112400.zip\34 Password-protected. 02/05/05 10:27:26
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112400.zip\33 Password-protected. 02/05/05 10:27:26
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112400.zip\32 Password-protected. 02/05/05 10:27:26
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112400.zip\31 Password-protected. 02/05/05 10:27:26
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112400.zip\30 Password-protected. 02/05/05 10:27:26
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112400.zip\29 Password-protected. 02/05/05 10:27:26
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112400.zip\28 Password-protected. 02/05/05 10:27:26
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112400.zip\27 Password-protected. 02/05/05 10:27:26
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112400.zip\26 Password-protected. 02/05/05 10:27:26
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112400.zip\25 Password-protected. 02/05/05 10:27:26
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112400.zip\24 Password-protected. 02/05/05 10:27:26
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112400.zip\23 Password-protected. 02/05/05 10:27:26
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\8 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\7 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\6 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\5 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\4 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\3 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\2 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\1 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\0 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112400.zip\60 Password-protected. 02/05/05 10:27:26
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112400.zip\59 Password-protected. 02/05/05 10:27:26
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112400.zip\58 Password-protected. 02/05/05 10:27:26
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112400.zip\57 Password-protected. 02/05/05 10:27:26
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112400.zip\56 Password-protected. 02/05/05 10:27:26
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112400.zip\55 Password-protected. 02/05/05 10:27:26
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112400.zip\54 Password-protected. 02/05/05 10:27:26
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112400.zip\53 Password-protected. 02/05/05 10:27:26
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112400.zip\52 Password-protected. 02/05/05 10:27:26
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112400.zip\51 Password-protected. 02/05/05 10:27:26
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112400.zip\50 Password-protected. 02/05/05 10:27:26
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112400.zip\49 Password-protected. 02/05/05 10:27:26
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112400.zip\48 Password-protected. 02/05/05 10:27:26
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112400.zip\47 Password-protected. 02/05/05 10:27:26
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050221095851.zip\1 Password-protected. 02/05/05 10:27:24
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050221095851.zip\0 Password-protected. 02/05/05 10:27:24
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050220101751.zip\0 Password-protected. 02/05/05 10:27:16
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050202154455.zip\6 Password-protected. 02/05/05 10:27:14
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050202154455.zip\5 Password-protected. 02/05/05 10:27:14
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050202154455.zip\4 Password-protected. 02/05/05 10:27:14
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050202154455.zip\3 Password-protected. 02/05/05 10:27:14
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050202154455.zip\2 Password-protected. 02/05/05 10:27:14
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050202154455.zip\1 Password-protected. 02/05/05 10:27:14
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050202154455.zip\0 Password-protected. 02/05/05 10:27:14
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050202143744.zip\20 Password-protected. 02/05/05 10:27:12
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050202143744.zip\19 Password-protected. 02/05/05 10:27:12
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050202143744.zip\18 Password-protected. 02/05/05 10:27:12
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050202143744.zip\17 Password-protected. 02/05/05 10:27:12
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050202143744.zip\16 Password-protected. 02/05/05 10:27:12
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050202143744.zip\15 Password-protected. 02/05/05 10:27:12
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050202143744.zip\14 Password-protected. 02/05/05 10:27:12
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050202143744.zip\13 Password-protected. 02/05/05 10:27:12
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050202143744.zip\12 Password-protected. 02/05/05 10:27:12
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050202143744.zip\11 Password-protected. 02/05/05 10:27:12
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050202143744.zip\10 Password-protected. 02/05/05 10:27:12
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050202143744.zip\9 Password-protected. 02/05/05 10:27:12
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050202143744.zip\8 Password-protected. 02/05/05 10:27:12
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112400.zip\22 Password-protected. 02/05/05 10:27:26
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112400.zip\21 Password-protected. 02/05/05 10:27:26
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112400.zip\20 Password-protected. 02/05/05 10:27:26
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112400.zip\19 Password-protected. 02/05/05 10:27:26
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112400.zip\18 Password-protected. 02/05/05 10:27:26
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112400.zip\17 Password-protected. 02/05/05 10:27:26
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112400.zip\16 Password-protected. 02/05/05 10:27:26
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112400.zip\15 Password-protected. 02/05/05 10:27:26
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112400.zip\14 Password-protected. 02/05/05 10:27:26
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112400.zip\13 Password-protected. 02/05/05 10:27:26
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112400.zip\12 Password-protected. 02/05/05 10:27:26
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112400.zip\11 Password-protected. 02/05/05 10:27:26
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112400.zip\10 Password-protected. 02/05/05 10:27:26
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112400.zip\9 Password-protected. 02/05/05 10:27:26
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112400.zip\8 Password-protected. 02/05/05 10:27:26
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112400.zip\7 Password-protected. 02/05/05 10:27:26
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112400.zip\6 Password-protected. 02/05/05 10:27:26
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112400.zip\5 Password-protected. 02/05/05 10:27:26
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112400.zip\4 Password-protected. 02/05/05 10:27:26
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112400.zip\3 Password-protected. 02/05/05 10:27:26
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112400.zip\2 Password-protected. 02/05/05 10:27:26
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112400.zip\1 Password-protected. 02/05/05 10:27:26
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112305.zip\0 Password-protected. 02/05/05 10:27:25
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050221095851.zip\2 Password-protected. 02/05/05 10:27:24
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\78 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\77 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\76 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\75 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\74 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\73 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\72 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\71 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\70 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\69 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\68 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\67 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\66 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\65 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\64 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\63 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\62 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\61 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\60 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\59 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\58 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\57 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\56 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\101 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\100 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\99 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\98 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\97 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\96 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\95 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\94 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\93 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\92 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\91 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\90 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\89 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\88 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\87 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\86 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\85 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\84 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\83 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\82 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\81 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\80 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\79 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\31 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\30 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\29 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\28 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\27 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\26 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\25 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\24 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\23 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\22 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\21 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\20 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\19 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\18 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\17 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\16 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\15 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\14 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\13 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\12 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\11 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\10 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\9 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\55 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\54 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\53 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\52 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\51 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\50 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\49 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\48 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\47 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\46 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\45 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\44 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\43 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\42 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\41 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\40 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\39 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\38 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\37 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\36 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\35 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\34 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\33 Password-protected. 02/05/05 10:27:27
C:\Program Files\CA\eTrust PestPatrol\Quarantine\20050311112624.zip\32 Password-protected. 02/05/05 10:27:27
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\08240001.VBN Possibly infected with a virus Exploit.HTML.Mht. 02/05/05 10:10:58
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\08240000.VBN Possibly infected with a virus Exploit.HTML.Mht. 02/05/05 10:10:58



Logfile of HijackThis v1.99.1
Scan saved at 12:17:33, on 02/05/05
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Nhksrv.exe
c:\srvany.exe
C:\Program Files\Dell\Bluetooth Software\bin\btwdins.exe
c:\aaaa.exe
c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
c:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\FireDaemon\FireDaemon.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\svchost.exe
c:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\WINDOWS\System32\wltrysvc.exe
C:\WINDOWS\System32\bcmwltry.exe
C:\Program Files\Novell\ZENworks\wm.exe
C:\WINDOWS\system32\NALNTSRV.EXE
C:\WINDOWS\Explorer.EXE
C:\back1.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\system32\NWTRAY.EXE
C:\WINDOWS\System32\dpmw32.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\PROGRA~1\SYMANT~2\VPTray.exe
C:\Program Files\CA\eTrust PestPatrol\PPActiveDetection.exe
C:\Program Files\Google\Gmail Notifier\gnotify.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
C:\Program Files\Dell\Bluetooth Software\BTTray.exe
C:\Program Files\Novell\iFolder\trayapp.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\PROGRA~1\Dell\BLUETO~1\BTSTAC~1.EXE
C:\WINDOWS\system32\cmd.exe
C:\WINDOWS\system32\xcopy.exe
C:\Program Files\wincmd\WINCMD32.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\WINDOWS\system32\notepad.exe
C:\DOCUME~1\afinsr\LOCALS~1\Temp\$wc\HIJACK~1.EXE
c:\lapip1.exe
C:\WINDOWS\system32\cmd.exe
C:\WINDOWS\system32\ping.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.repubblica.it/
R3 - Default URLSearchHook is missing
F2 - REG:system.ini: UserInit=c:\windows\system32\userinit.exe,c:\off.exe
O1 - Hosts: 64.91.255.87 www.dcsresearch.com
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\pro
hi looks like the hijackthis log you posted is incomplete, can you repost it? there seems to be many lines missing from it
here it is again.. I hope it is all right now!



Logfile of HijackThis v1.99.1
Scan saved at 13:50:53, on 02/05/05
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Nhksrv.exe
c:\srvany.exe
C:\Program Files\Dell\Bluetooth Software\bin\btwdins.exe
c:\aaaa.exe
c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
c:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\FireDaemon\FireDaemon.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\svchost.exe
c:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\WINDOWS\System32\wltrysvc.exe
C:\WINDOWS\System32\bcmwltry.exe
C:\Program Files\Novell\ZENworks\wm.exe
C:\WINDOWS\system32\NALNTSRV.EXE
C:\WINDOWS\Explorer.EXE
C:\back1.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\system32\NWTRAY.EXE
C:\WINDOWS\System32\dpmw32.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\PROGRA~1\SYMANT~2\VPTray.exe
C:\Program Files\CA\eTrust PestPatrol\PPActiveDetection.exe
C:\Program Files\Google\Gmail Notifier\gnotify.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
C:\Program Files\Dell\Bluetooth Software\BTTray.exe
C:\Program Files\Novell\iFolder\trayapp.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\PROGRA~1\Dell\BLUETO~1\BTSTAC~1.EXE
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Novell\GroupWise\GrpWise.exe
C:\Program Files\Microsoft Office\Office10\WINWORD.EXE
C:\WINDOWS\system32\DllHost.exe
C:\WINDOWS\System32\wisptis.exe
C:\Program Files\Microsoft Office\Office10\EXCEL.EXE
C:\Program Files\Internet Explorer\iexplore.exe
c:\lapip1.exe
C:\WINDOWS\system32\cmd.exe
C:\WINDOWS\system32\ping.exe
C:\Program Files\wincmd\WINCMD32.EXE
C:\DOCUME~1\afinsr\LOCALS~1\Temp\$wc\HIJACK~1.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.repubblica.it/
R3 - Default URLSearchHook is missing
F2 - REG:system.ini: UserInit=c:\windows\system32\userinit.exe,c:\off.exe
O1 - Hosts: 64.91.255.87 www.dcsresearch.com
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [ZENRC Tray Icon] zentray.exe
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [back1] C:\back1.exe
O4 - HKLM\..\Run: [sinc] C:\sinc.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [ADUserMon] C:\Program Files\Iomega\AutoDisk\ADUserMon.exe
O4 - HKLM\..\Run: [NWTRAY] NWTRAY.EXE
O4 - HKLM\..\Run: [NDPS] C:\WINDOWS\System32\dpmw32.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_02\bin\jusched.exe
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] c:\PROGRA~1\SYMANT~2\VPTray.exe
O4 - HKLM\..\Run: [InvisibleBrowsing] C:\Program Files\Invisible Browsing\InvisibleBrowsing.exe
O4 - HKLM\..\Run: [GhostSurfDelSatellite] C:\Program Files\GhostSurf 2005\DeleteSatellite.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [eTrustPPAP] "C:\Program Files\CA\eTrust PestPatrol\PPActiveDetection.exe"
O4 - HKLM\..\Run: [irgpuner] C:\WINNT\irgpuner.exe
O4 - HKLM\..\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] C:\Program Files\Google\Gmail Notifier\gnotify.exe
O4 - HKLM\..\Run: [KAV50] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\kav.exe" -run -n PersonalPro -v 5.0.0.0
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [cB5pRkJ7i] travpa.exe
O4 - HKCU\..\Run: [ScanSpyware] "C:\Program Files\ScanSpyware v3.8.0.4\Scanner.exe" /rb
O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: Novell iFolder.lnk = C:\Program Files\Novell\iFolder\trayapp.exe
O4 - Global Startup: Shortcut to spooler.exe.lnk = C:\spooler.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_02\bin\npjpi142_02.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_02\bin\npjpi142_02.dll
O9 - Extra button: Novell delivered applications - {C1994287-422F-47aa-8E5E-6323E210A125} - C:\Program Files\Novell\ZENworks\AxNalServer.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {2B1AA38D-2D12-11D5-AAD0-00C04FA03D78} (LocalExec Control) - https://insite.warwick.ac.uk/nps/portal/gad…t/LocalExec.CAB
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://groups.msn.com/controls/PhotoUC/MsnPUpld.cab
O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - http://a1540.g.akamai.net/7/1540/52/200305…meInstaller.exe
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe…nt.cab30149.cab
O16 - DPF: {90A29DA5-D020-4B18-8660-6689520C7CD7} (DmiReader Class) - http://support.euro.dell.com/global/apps/s…er/PROFILER.CAB
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse…pDownloader.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = wbs.warwick.ac.uk
O17 - HKLM\Software\..\Telephony: DomainName = wbs.warwick.ac.uk
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = wbs.warwick.ac.uk
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = wbs.warwick.ac.uk
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: NavLogon - c:\WINDOWS\system32\NavLogon.dll
O23 - Service: aaaa - Unknown owner - c:\srvany.exe
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM Inc. - C:\Program Files\Dell\Bluetooth Software\bin\btwdins.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - c:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: Kaspersky Anti-Virus Service (KLBLMain) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\kavmm.exe" -run bl -n PersonalPro -v 5.0.0.0 -ttsr 10000000 (file missing)
O23 - Service: FireDaemon Service: lapip1 (lapip1) - Sublime Solutions Pty Ltd - C:\Program Files\FireDaemon\FireDaemon.exe
O23 - Service: Novell Application Launcher (NALNTSERVICE) - Novell, Inc. - C:\WINDOWS\system32\NALNTSRV.EXE
O23 - Service: Netropa NHK Server (Nhksrv) - Unknown owner - C:\WINDOWS\Nhksrv.exe
O23 - Service: SAVRoam (SavRoam) - symantec - c:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - c:\Program Files\Symantec AntiVirus\Rtvscan.exe
O23 - Service: WLTRYSVC - Unknown owner - C:\WINDOWS\System32\wltrysvc.exe
O23 - Service: Workstation Manager (ZFDWM) - Novell, INC. - C:\Program Files\Novell\ZENworks\wm.exe
hi

can you check the properties of the following files:


c:\srvany.exe
c:\aaaa.exe
C:\back1.exe
c:\lapip1.exe
c:\off.exe


post them here
also upload those files above, one at a time to http://virusscan.jotti.org
if found infected, post the results here

Important:
this line
C:\DOCUME~1\afinsr\LOCALS~1\Temp\$wc\HIJACK~1.EXE

tells me that you're running hijackthis from a temporary directory. NOT recommended. HJT creates back ups of the fixed items into the folder where its started from. in temp folders those could easily be deleted, leaving you without those vital backups if anything went wrong.
create a new folder on your desktop, call it hijackthis, and unzip the download of hijackthis.xip into that folder. do the following fixes from that folder !


Run HijackThis!, press Do A system Scan Only, and put a check mark next to all these:


R3 - Default URLSearchHook is missing
F2 - REG:system.ini: UserInit=c:\windows\system32\userinit.exe,c:\off.exe

O4 - HKLM\..\Run: [back1] C:\back1.exe
O4 - HKLM\..\Run: [sinc] C:\sinc.exe

O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k

O4 - HKLM\..\Run: [irgpuner] C:\WINNT\irgpuner.exe

O4 - HKCU\..\Run: [cB5pRkJ7i] travpa.exe

O4 - Global Startup: Shortcut to spooler.exe.lnk = C:\spooler.exe

O23 - Service: aaaa - Unknown owner - c:\srvany.exe

O23 - Service: FireDaemon Service: lapip1 (lapip1) - Sublime Solutions Pty Ltd - C:\Program Files\FireDaemon\FireDaemon.exe


Close all other windows and browsers, and press the Fix Checked button.

reboot

post a fresh log
Hi

you are amazing everytime I fond alaways new stuff in my computer

what the http://virusscan.jotti.org/ said is that:

c:\aaaa.exe
C:\back1.exe
c:\lapip1.exe

were infected:
Packers detected: UPX, AUTOIT
Norman Virus Control W32/Starpage.BAA


off.exe
Status: POSSIBLY INFECTED/MALWARE (Note: this file has been scanned before. Therefore, this file's scan results will not be stored in the database) (Note: this file was only classified as malware by scanners known to generate more false positives than the average scanner. Do not consider these results definately accurate. Also, because of this, results of this scan will not be recorded in the database.)
MD5 bba5173296ddeb93ebf4aa305c2386a3
Packers detected: UPX, AUTOIT
Scanner results
AntiVir Found TR/AutoItroj.A

After I did what you told me for HJT .. so I put in in the program files and fixed what you told me and then reboot.
It took ages to reboot and I had to do it many times because when i was logging in it was freezing or taking ages.

Now the new scan results

Logfile of HijackThis v1.99.1
Scan saved at 10:54:15, on 03/05/05
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Nhksrv.exe
C:\Program Files\Dell\Bluetooth Software\bin\btwdins.exe
c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
c:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\FireDaemon\FireDaemon.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\NALNTSRV.EXE
C:\WINDOWS\System32\svchost.exe
c:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\WINDOWS\System32\wltrysvc.exe
C:\WINDOWS\System32\bcmwltry.exe
C:\Program Files\Novell\ZENworks\wm.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\system32\NWTRAY.EXE
C:\WINDOWS\System32\dpmw32.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\PROGRA~1\SYMANT~2\VPTray.exe
C:\Program Files\CA\eTrust PestPatrol\PPActiveDetection.exe
C:\Program Files\Google\Gmail Notifier\gnotify.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
C:\Program Files\Dell\Bluetooth Software\BTTray.exe
C:\Program Files\Novell\iFolder\trayapp.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\PROGRA~1\Dell\BLUETO~1\BTSTAC~1.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Hikackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.repubblica.it/
O1 - Hosts: 64.91.255.87 www.dcsresearch.com
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [ZENRC Tray Icon] zentray.exe
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [ADUserMon] C:\Program Files\Iomega\AutoDisk\ADUserMon.exe
O4 - HKLM\..\Run: [NWTRAY] NWTRAY.EXE
O4 - HKLM\..\Run: [NDPS] C:\WINDOWS\System32\dpmw32.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_02\bin\jusched.exe
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] c:\PROGRA~1\SYMANT~2\VPTray.exe
O4 - HKLM\..\Run: [InvisibleBrowsing] C:\Program Files\Invisible Browsing\InvisibleBrowsing.exe
O4 - HKLM\..\Run: [GhostSurfDelSatellite] C:\Program Files\GhostSurf 2005\DeleteSatellite.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [eTrustPPAP] "C:\Program Files\CA\eTrust PestPatrol\PPActiveDetection.exe"
O4 - HKLM\..\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] C:\Program Files\Google\Gmail Notifier\gnotify.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [ScanSpyware] "C:\Program Files\ScanSpyware v3.8.0.4\Scanner.exe" /rb
O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: Novell iFolder.lnk = C:\Program Files\Novell\iFolder\trayapp.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_02\bin\npjpi142_02.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_02\bin\npjpi142_02.dll
O9 - Extra button: Novell delivered applications - {C1994287-422F-47aa-8E5E-6323E210A125} - C:\Program Files\Novell\ZENworks\AxNalServer.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {2B1AA38D-2D12-11D5-AAD0-00C04FA03D78} (LocalExec Control) - https://insite.warwick.ac.uk/nps/portal/gad…t/LocalExec.CAB
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://groups.msn.com/controls/PhotoUC/MsnPUpld.cab
O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - http://a1540.g.akamai.net/7/1540/52/200305…meInstaller.exe
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe…nt.cab30149.cab
O16 - DPF: {90A29DA5-D020-4B18-8660-6689520C7CD7} (DmiReader Class) - http://support.euro.dell.com/global/apps/s…er/PROFILER.CAB
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse…pDownloader.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = wbs.warwick.ac.uk
O17 - HKLM\Software\..\Telephony: DomainName = wbs.warwick.ac.uk
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = wbs.warwick.ac.uk
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = wbs.warwick.ac.uk
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: NavLogon - c:\WINDOWS\system32\NavLogon.dll
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM Inc. - C:\Program Files\Dell\Bluetooth Software\bin\btwdins.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - c:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: FireDaemon Service: lapip1 (lapip1) - Sublime Solutions Pty Ltd - C:\Program Files\FireDaemon\FireDaemon.exe
O23 - Service: Novell Application Launcher (NALNTSERVICE) - Novell, Inc. - C:\WINDOWS\system32\NALNTSRV.EXE
O23 - Service: Netropa NHK Server (Nhksrv) - Unknown owner - C:\WINDOWS\Nhksrv.exe
O23 - Service: SAVRoam (SavRoam) - symantec - c:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - c:\Program Files\Symantec AntiVirus\Rtvscan.exe
O23 - Service: WLTRYSVC - Unknown owner - C:\WINDOWS\System32\wltrysvc.exe
O23 - Service: Workstation Manager (ZFDWM) - Novell, INC. - C:\Program Files\Novell\ZENworks\wm.exe

Hopefully this mught help

Ciao
hi
this line in your log:

O4 - HKCU\..\Run: [ScanSpyware] "C:\Program Files\ScanSpyware v3.8.0.4\Scanner.exe" /rb

see:
http://startup.iamnotageek.com/srch-Scanner.exe.html

and
http://www.spywarewarrior.com/rogue_anti-spyware.htm

i suggest getting rid of it

then open a command prompt, click start> run > type in the box cmd

once the command prompt window is open type into it:

sc stop lapip1
and hit enter

then type:
sc delete lapip1
and hit enter

then type:

sc delete aaaa
and hit enter

close the command propt!

*IMPORTANT*CLICK THIS LINK TO LEARN HOW TO VIEW HIDDEN FILES

Reboot into SafeMode by tapping F8 key repeatedly at bootup: Starting your computer in Safe mode



locate and delete the following files and folders, if still there:


c:\srvany.exe
c:\aaaa.exe
C:\back1.exe
c:\lapip1.exe
c:\off.exe
C:\Program Files\FireDaemon
C:\WINNT\irgpuner.exe
C:\spooler.exe
travpa.exe

reboot

post a fresh log
uhmmmmmm!

I eliminated scan spyware and did what you told me

when I arrived to rebboting and starting it in a safe mode the computer was freezing

so I restarted in the usual way but now I don't see anymore one of my partitions in the computer

plus scanspyware is still there!

here is the HJT now:

Logfile of HijackThis v1.99.1
Scan saved at 16:15:52, on 03/05/05
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Nhksrv.exe
C:\Program Files\Dell\Bluetooth Software\bin\btwdins.exe
c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
c:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\NALNTSRV.EXE
C:\WINDOWS\System32\svchost.exe
c:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\WINDOWS\System32\wltrysvc.exe
C:\Program Files\Novell\ZENworks\wm.exe
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\system32\NWTRAY.EXE
C:\WINDOWS\System32\dpmw32.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\PROGRA~1\SYMANT~2\VPTray.exe
C:\Program Files\CA\eTrust PestPatrol\PPActiveDetection.exe
C:\Program Files\Google\Gmail Notifier\gnotify.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
C:\Program Files\Dell\Bluetooth Software\BTTray.exe
C:\Program Files\Novell\iFolder\trayapp.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\PROGRA~1\Dell\BLUETO~1\BTSTAC~1.EXE
C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Hikackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.repubblica.it/
O1 - Hosts: 64.91.255.87 www.dcsresearch.com
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [ZENRC Tray Icon] zentray.exe
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [ADUserMon] C:\Program Files\Iomega\AutoDisk\ADUserMon.exe
O4 - HKLM\..\Run: [NWTRAY] NWTRAY.EXE
O4 - HKLM\..\Run: [NDPS] C:\WINDOWS\System32\dpmw32.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_02\bin\jusched.exe
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] c:\PROGRA~1\SYMANT~2\VPTray.exe
O4 - HKLM\..\Run: [InvisibleBrowsing] C:\Program Files\Invisible Browsing\InvisibleBrowsing.exe
O4 - HKLM\..\Run: [GhostSurfDelSatellite] C:\Program Files\GhostSurf 2005\DeleteSatellite.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [eTrustPPAP] "C:\Program Files\CA\eTrust PestPatrol\PPActiveDetection.exe"
O4 - HKLM\..\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] C:\Program Files\Google\Gmail Notifier\gnotify.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [ScanSpyware] "C:\Program Files\ScanSpyware v3.8.0.4\Scanner.exe" /rb
O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: Novell iFolder.lnk = C:\Program Files\Novell\iFolder\trayapp.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_02\bin\npjpi142_02.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_02\bin\npjpi142_02.dll
O9 - Extra button: Novell delivered applications - {C1994287-422F-47aa-8E5E-6323E210A125} - C:\Program Files\Novell\ZENworks\AxNalServer.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {2B1AA38D-2D12-11D5-AAD0-00C04FA03D78} (LocalExec Control) - https://insite.warwick.ac.uk/nps/portal/gad…t/LocalExec.CAB
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://groups.msn.com/controls/PhotoUC/MsnPUpld.cab
O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - http://a1540.g.akamai.net/7/1540/52/200305…meInstaller.exe
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe…nt.cab30149.cab
O16 - DPF: {90A29DA5-D020-4B18-8660-6689520C7CD7} (DmiReader Class) - http://support.euro.dell.com/global/apps/s…er/PROFILER.CAB
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse…pDownloader.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = wbs.warwick.ac.uk
O17 - HKLM\Software\..\Telephony: DomainName = wbs.warwick.ac.uk
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = wbs.warwick.ac.uk
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = wbs.warwick.ac.uk
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: NavLogon - c:\WINDOWS\system32\NavLogon.dll
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM Inc. - C:\Program Files\Dell\Bluetooth Software\bin\btwdins.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - c:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: Novell Application Launcher (NALNTSERVICE) - Novell, Inc. - C:\WINDOWS\system32\NALNTSRV.EXE
O23 - Service: Netropa NHK Server (Nhksrv) - Unknown owner - C:\WINDOWS\Nhksrv.exe
O23 - Service: SAVRoam (SavRoam) - symantec - c:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - c:\Program Files\Symantec AntiVirus\Rtvscan.exe
O23 - Service: WLTRYSVC - Unknown owner - C:\WINDOWS\System32\wltrysvc.exe
O23 - Service: Workstation Manager (ZFDWM) - Novell, INC. - C:\Program Files\Novell\ZENworks\wm.exe
hi

you have to unistall scan spyware from control panel> add/remove programs

I restarted in the usual way but now I don't see anymore one of my partitions in the computer


what do you mean by this?
a partition was deletd??

i'll ask someone to take a look at this..
HI I went add an remove and removed it.. but it was still there in the HJT scan…in the end I removed it with HJT and it worked. the partition.. I did it all the ways and I could not find it anymore…
hi

sorry for the late reply, ive been doublechecking what we did, and IMO getting rid of those should not delete any partitions..

please tell me which partition was lost? c:\seems to be there but how many hard disks you have there?
what is the letter of the lost partition ?

closed for now, no response

If you need this topic reopened, please request this by sending an email to us at the following

link

(Click for address)
Include your post user name and detail why you need it

reopened with a valid link to your post.
Any bad links or emails that are not from the original poster will be deleted without response.
Any emails without the subject "Reopen" will be deleted without being looked

at.

If this is not your thread please start a New Topic.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI