need help please

hello katlady, and welcome (back) to tom coyote forums. i'm dak, and i'll be helping you to fix your computer. Sorry for the delay in getting to your log. if you still require assistance, please make a new HijackThis log and post it up as a reply to this thread.

okey dokums, only one naughty program in your log.

run hijakthis, do a scan, and, with all other windows closed including this one, place a check-mark next to the following item:

O16 - DPF: {9522B3FB-7A2B-4646-8AF6-36E7F593073C} (cpbrkpie Control) - http://a19.g.akamai.net/7/19/7125/4047/ftp…23/cpbrkpie.cab

and then click on fix selected

what kind of problems are you having with your computer?

Ok i fixed that one. Well i've been having a few goofy things happen lately.One thing is that i can be doing something and all of a sudden my whole system just shuts itself off.The other thing is that a couple times now it shows i have a program running or one was just installed but i never installed it myself.Then it usually just disappears if i reboot the system.Its just been acting weird lately and i can't really put my finger on what it is exactly.I don't know a whole lot about computers,so if it acts different i just come here and you guys fix me up.Sorry i don't really know whats wrong,hope you can figure it out for me.I really appreciate it!!

which program is it thats running/just installed? and, how do you know it's running/just installed? eg, are you seeing it in hijack this, the system tray (bottom-right of the screen), the task manager (the ctrl-alt-del thing) etc?

It shows up in the system tray and it was some graphics program.I think it was called something like intel graphics.There was another program too that showed up but i don't remember the name of that one.

ok, the intel-graphics one's legit.

as to why it keeps disapearing/reapearing, i don't know, but a few of my system tray icons do that too

to eliminate the possibility of viruses, please do an online virus scan

You will be promted to install an ActiveX component from Kaspersky, Click Yes.

• The program will launch and then start to download the latest definition files.
  
• Once the scanner is installed and the definitions downloaded, click Next.
  
• Now click on Scan Settings
  
• In the scan settings make that the following are selected:
  
  • Scan using the following Anti-Virus database:
    
    • Extended (If available otherwise Standard)
  • Scan Options:
    
    • Scan Archives
    • Scan Mail Bases
• Click OK
  
• Now under select a target to scan select My Computer
  
• The scan will take a while so be patient and let it run. Once the scan is complete it will display if your system has been infected.
  
• Now click on the Save as Text button:
  
• Save the file to your desktop.
  
• Copy and paste that information in your next post

also: is this a desktop PC or a laptop?

well the scan is finally done and here it is.also,my computer is a desktop. KASPERSKY ONLINE SCANNER REPORT Tuesday, October 17, 2006 3:23:11 PM Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600) Kaspersky Online Scanner version: 5.0.83.0 Kaspersky Anti-Virus database last update: 17/10/2006 Kaspersky Anti-Virus database records: 232419 Scan Settings Scan using the following antivirus database extended Scan Archives true Scan Mail Bases true Scan Target My Computer A:\ C:\ D:\ E:\ Scan Statistics Total number of scanned objects 67831 Number of viruses found 15 Number of infected objects 44 / 0 Number of suspicious objects 0 Duration of the scan process 04:10:54 Infected Object Name Virus Name Last Action C:\Documents and Settings\All Users\Application Data\avg7\Log\emc.log Object is locked skipped C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\avg7log.log Object is locked skipped C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\avg7log.log.lck Object is locked skipped C:\Documents and Settings\Carrie\Cookies\index.dat Object is locked skipped C:\Documents and Settings\Carrie\Desktop\dllfix\programs\Reboot.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped C:\Documents and Settings\Carrie\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\Carrie\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\Carrie\Local Settings\History\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\Carrie\Local Settings\History\History.IE5\MSHist012006101720061018\index.dat Object is locked skipped C:\Documents and Settings\Carrie\Local Settings\Temp\me_JSPPnFbZ287irV1 Object is locked skipped C:\Documents and Settings\Carrie\Local Settings\Temp\me_n4a3Vw2zYCGAuGL Object is locked skipped C:\Documents and Settings\Carrie\Local Settings\Temp\me_vCEAXMMWHmeUgT8 Object is locked skipped C:\Documents and Settings\Carrie\Local Settings\Temp\me_ZMqGtZkafSAacEl Object is locked skipped C:\Documents and Settings\Carrie\Local Settings\Temp\me_zZ8h0G0bcH3jqSb Object is locked skipped C:\Documents and Settings\Carrie\Local Settings\Temp\Perflib_Perfdata_82c.dat Object is locked skipped C:\Documents and Settings\Carrie\Local Settings\Temp\~DF1EF8.tmp Object is locked skipped C:\Documents and Settings\Carrie\Local Settings\Temp\~DF4405.tmp Object is locked skipped C:\Documents and Settings\Carrie\Local Settings\Temp\~DFB819.tmp Object is locked skipped C:\Documents and Settings\Carrie\Local Settings\Temp\~DFFA20.tmp Object is locked skipped C:\Documents and Settings\Carrie\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\Carrie\My Documents\My eBooks\tigerinthenightss.exe/WISE0019.BIN Infected: not-a-virus:AdWare.Win32.Quick.a skipped C:\Documents and Settings\Carrie\My Documents\My eBooks\tigerinthenightss.exe/WISE0020.BIN Infected: not-a-virus:AdWare.Win32.NewDotNet skipped C:\Documents and Settings\Carrie\My Documents\My eBooks\tigerinthenightss.exe/WISE0021.BIN Infected: not-a-virus:AdWare.Win32.EZula.a skipped C:\Documents and Settings\Carrie\My Documents\My eBooks\tigerinthenightss.exe/WISE0022.BIN Infected: not-a-virus:AdWare.Win32.Gator.3103 skipped C:\Documents and Settings\Carrie\My Documents\My eBooks\tigerinthenightss.exe/WISE0023.BIN Infected: Trojan-Dropper.Win32.Small.ff skipped C:\Documents and Settings\Carrie\My Documents\My eBooks\tigerinthenightss.exe WiseSFX: infected - 5 skipped C:\Documents and Settings\Carrie\NTUSER.DAT Object is locked skipped C:\Documents and Settings\Carrie\NTUSER.DAT.LOG Object is locked skipped C:\Documents and Settings\Default User\My Documents\Data\all_files4.exe/data0003/data0002 Infected: not-a-virus:AdWare.Win32.Broadcap.c skipped C:\Documents and Settings\Default User\My Documents\Data\all_files4.exe/data0003 Infected: not-a-virus:AdWare.Win32.Broadcap.c skipped C:\Documents and Settings\Default User\My Documents\Data\all_files4.exe/data0007 Infected: not-a-virus:AdWare.Win32.PurityScan.bl skipped C:\Documents and Settings\Default User\My Documents\Data\all_files4.exe/data0009 Infected: Trojan-Downloader.Win32.Agent.ec skipped C:\Documents and Settings\Default User\My Documents\Data\all_files4.exe/data0011 Infected: not-a-virus:AdWare.Win32.EZula skipped C:\Documents and Settings\Default User\My Documents\Data\all_files4.exe/data0012 Infected: Trojan-Downloader.Win32.Apropo.v skipped C:\Documents and Settings\Default User\My Documents\Data\all_files4.exe/data0013 Infected: Trojan.Win32.Qhost.ap skipped C:\Documents and Settings\Default User\My Documents\Data\all_files4.exe NSIS: infected - 7 skipped C:\Documents and Settings\Default User\My Documents\Data\Data\all_files4.exe/data0003/data0002 Infected: not-a-virus:AdWare.Win32.Broadcap.c skipped C:\Documents and Settings\Default User\My Documents\Data\Data\all_files4.exe/data0003 Infected: not-a-virus:AdWare.Win32.Broadcap.c skipped C:\Documents and Settings\Default User\My Documents\Data\Data\all_files4.exe/data0007 Infected: not-a-virus:AdWare.Win32.PurityScan.bl skipped C:\Documents and Settings\Default User\My Documents\Data\Data\all_files4.exe/data0009 Infected: Trojan-Downloader.Win32.Agent.ec skipped C:\Documents and Settings\Default User\My Documents\Data\Data\all_files4.exe/data0011 Infected: not-a-virus:AdWare.Win32.EZula skipped C:\Documents and Settings\Default User\My Documents\Data\Data\all_files4.exe/data0012 Infected: Trojan-Downloader.Win32.Apropo.v skipped C:\Documents and Settings\Default User\My Documents\Data\Data\all_files4.exe/data0013 Infected: Trojan.Win32.Qhost.ap skipped C:\Documents and Settings\Default User\My Documents\Data\Data\all_files4.exe NSIS: infected - 7 skipped C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped C:\Documents and Settings\Mark\My Documents\Data\all_files4.exe/data0003/data0002 Infected: not-a-virus:AdWare.Win32.Broadcap.c skipped C:\Documents and Settings\Mark\My Documents\Data\all_files4.exe/data0003 Infected: not-a-virus:AdWare.Win32.Broadcap.c skipped C:\Documents and Settings\Mark\My Documents\Data\all_files4.exe/data0007 Infected: not-a-virus:AdWare.Win32.PurityScan.bl skipped C:\Documents and Settings\Mark\My Documents\Data\all_files4.exe/data0009 Infected: Trojan-Downloader.Win32.Agent.ec skipped C:\Documents and Settings\Mark\My Documents\Data\all_files4.exe/data0011 Infected: not-a-virus:AdWare.Win32.EZula skipped C:\Documents and Settings\Mark\My Documents\Data\all_files4.exe/data0012 Infected: Trojan-Downloader.Win32.Apropo.v skipped C:\Documents and Settings\Mark\My Documents\Data\all_files4.exe/data0013 Infected: Trojan.Win32.Qhost.ap skipped C:\Documents and Settings\Mark\My Documents\Data\all_files4.exe NSIS: infected - 7 skipped C:\Documents and Settings\Mark\My Documents\Data\Data\all_files4.exe/data0003/data0002 Infected: not-a-virus:AdWare.Win32.Broadcap.c skipped C:\Documents and Settings\Mark\My Documents\Data\Data\all_files4.exe/data0003 Infected: not-a-virus:AdWare.Win32.Broadcap.c skipped C:\Documents and Settings\Mark\My Documents\Data\Data\all_files4.exe/data0007 Infected: not-a-virus:AdWare.Win32.PurityScan.bl skipped C:\Documents and Settings\Mark\My Documents\Data\Data\all_files4.exe/data0009 Infected: Trojan-Downloader.Win32.Agent.ec skipped C:\Documents and Settings\Mark\My Documents\Data\Data\all_files4.exe/data0011 Infected: not-a-virus:AdWare.Win32.EZula skipped C:\Documents and Settings\Mark\My Documents\Data\Data\all_files4.exe/data0012 Infected: Trojan-Downloader.Win32.Apropo.v skipped C:\Documents and Settings\Mark\My Documents\Data\Data\all_files4.exe/data0013 Infected: Trojan.Win32.Qhost.ap skipped C:\Documents and Settings\Mark\My Documents\Data\Data\all_files4.exe NSIS: infected - 7 skipped C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped C:\Program Files\DivX\ac-mi614.zip/mirc614.exe/data0001.bin Infected: not-a-virus:Client-IRC.Win32.mIRC.614 skipped C:\Program Files\DivX\ac-mi614.zip/mirc614.exe Infected: not-a-virus:Client-IRC.Win32.mIRC.614 skipped C:\Program Files\DivX\ac-mi614.zip ZIP: infected - 2 skipped C:\Program Files\Kodak\Kodak EasyShare software\bin\Catalog\EasyShare.me Object is locked skipped C:\Program Files\Kodak\Kodak EasyShare software\bin\Catalog\EasyShare.mm Object is locked skipped C:\Program Files\mIRC\mirc.exe Infected: not-a-virus:Client-IRC.Win32.mIRC.612 skipped C:\Program Files\Yahoo!\Messenger\ypager.log Object is locked skipped C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped C:\System Volume Information\_restore{DFB159EA-6C61-4832-8B25-E1C87A21719E}\RP1070\change.log Object is locked skipped C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped C:\WINDOWS\Downloaded Program Files\imloader.exe Infected: not-a-virus:Downloader.Win32.ImLoader.b skipped C:\WINDOWS\SchedLgU.Txt Object is locked skipped C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped C:\WINDOWS\Sti_Trace.log Object is locked skipped C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\default Object is locked skipped C:\WINDOWS\system32\config\default.LOG Object is locked skipped C:\WINDOWS\system32\config\SAM Object is locked skipped C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\SECURITY Object is locked skipped C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped C:\WINDOWS\system32\config\software Object is locked skipped C:\WINDOWS\system32\config\software.LOG Object is locked skipped C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\system Object is locked skipped C:\WINDOWS\system32\config\system.LOG Object is locked skipped C:\WINDOWS\system32\h323log.txt Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped C:\WINDOWS\wiadebug.log Object is locked skipped C:\WINDOWS\wiaservc.log Object is locked skipped C:\WINDOWS\WindowsUpdate.log Object is locked skipped Scan process completed.

Right-oh, looks like we've found the source of the rebooting problem.


Download Pocket Killbox
http://www.atribune.org/downloads/KillBox.exe
If you already have Killbox first ensure it is this version !.

Then double-click on the killbox.exe program.


Start Killbox and click on Tools->Delete Temp Files.

Then select the option labeled Delete on reboot.

Copy the following, by highlighting them and then right-clicking on them and selecting 'copy':

C:\Documents and Settings\Carrie\Desktop\dllfix\programs\Reboot.exe
C:\Documents and Settings\Carrie\My Documents\My eBooks\tigerinthenightss.exe
C:\Documents and Settings\Default User\My Documents\Data\all_files4.exe


Return to Killbox, go to the File menu and select Paste from Clipboard.


Still in Killbox, click the red-and-white Delete File button. Click Yes at the Delete on Reboot prompt. Click No at the Pending Operations prompt.

If your computer does not restart automatically, please restart it manually


———-


when your computer has rebooted, Please download Ewido anti-spyware

This is a 30 day trial of the program

1. Once you have downloaded ewido anti-spyware, locate the icon on the desktop and double-click it to launch the set up program.
2. Once the setup is complete you will need run ewido and update the definition files.
3. On the main screen select the icon "Update" then select the "Update now" link.
4. Next select the "Start Update" button, the update will start and a progress bar will show the updates being installed.
5. Once the update has completed select the "Scanner" icon at the top of the screen, then select the "Settings" tab.
6. Once in the Settings screen click on "Recommended actions" and then select "Quarantine".
7. Under "Reports", select "Automatically generate report after every scan" and un-Select "Only if threats were found"
IMPORTANT: Do not open any other windows or programs while ewido is scanning, it may interfere with the scanning proccess!
8. Select the "Scanner" icon at the top and then the "Scan" tab then click on "Complete System Scan".
9. ewido will now begin the scanning process, be patient this may take a little time.

Once the scan is complete do the following:

1. If you have any infections you will prompted, then select "Apply all actions"
2. Next select the "Reports" icon at the top.
3. Select the "Save report as" button in the lower left hand of the screen and save it to a text file on your system (make sure to remember where you saved that file, this is important).
4. Close ewido

———-

reboot your computer and post the ewido log as a reply to this thread please.

well i'm not quite sure what to do and i hope i didn't goof any thing up.I followed your directions for dowloading and running killbox and that went fine.Then i went onto the second part and after the scan was done,i hit apply all actions like you said because there were 2 infections found and when i hit reports it said there weren't any.So i don't have a report to show you.What should i do now?

hmm, that's odd… no worries, probably ewido's fault oh well, not to worry. do you remember the names of the two infections that ewido found? hopefully, that'll be it, but lets do a few more scans to confirm – these infections can be sneaky. if you haven't done so since the ewido scan, please reboot your PC. please do another kaspersky scan, and save the log file. next, open up ewido, and click on 'scanner' up on the top; click on the 'settings' tab; and, under the 'reports' bit, make sure 'automatically generate a report after every scan' is checked, and 'only if threats were found' is unchecked. then, scan again with ewido, allowing it to quarenteen anything it finds. hopefully, it'll give you a report this time; if not, just make a note of the name of any infections that it finds (hopefully, it should come back clean this time). post up the new kaspersky and (hopefully ) the ewido log please.

c:\Documents and settings\carrie\My Documents\backup20040608 c:\WINDOWS\Downloaded program files\imloader.exe Those were the 2 infections found.I'm going to reboot and do the 2nd kaspersky scan now.

ok,heres the new kaspersky scan log. KASPERSKY ONLINE SCANNER REPORT Wednesday, October 18, 2006 11:57:42 AM Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600) Kaspersky Online Scanner version: 5.0.83.0 Kaspersky Anti-Virus database last update: 18/10/2006 Kaspersky Anti-Virus database records: 232641 Scan Settings Scan using the following antivirus database extended Scan Archives true Scan Mail Bases true Scan Target My Computer A:\ C:\ D:\ E:\ Scan Statistics Total number of scanned objects 65124 Number of viruses found 14 Number of infected objects 43 / 0 Number of suspicious objects 0 Duration of the scan process 03:30:38 Infected Object Name Virus Name Last Action C:\!KillBox\all_files4.exe/data0003/data0002 Infected: not-a-virus:AdWare.Win32.Broadcap.c skipped C:\!KillBox\all_files4.exe/data0003 Infected: not-a-virus:AdWare.Win32.Broadcap.c skipped C:\!KillBox\all_files4.exe/data0007 Infected: not-a-virus:AdWare.Win32.PurityScan.bl skipped C:\!KillBox\all_files4.exe/data0009 Infected: Trojan-Downloader.Win32.Agent.ec skipped C:\!KillBox\all_files4.exe/data0011 Infected: not-a-virus:AdWare.Win32.EZula skipped C:\!KillBox\all_files4.exe/data0012 Infected: Trojan-Downloader.Win32.Apropo.v skipped C:\!KillBox\all_files4.exe/data0013 Infected: Trojan.Win32.Qhost.ap skipped C:\!KillBox\all_files4.exe NSIS: infected - 7 skipped C:\!KillBox\Reboot.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped C:\!KillBox\tigerinthenightss.exe/WISE0019.BIN Infected: not-a-virus:AdWare.Win32.Quick.a skipped C:\!KillBox\tigerinthenightss.exe/WISE0020.BIN Infected: not-a-virus:AdWare.Win32.NewDotNet skipped C:\!KillBox\tigerinthenightss.exe/WISE0021.BIN Infected: not-a-virus:AdWare.Win32.EZula.a skipped C:\!KillBox\tigerinthenightss.exe/WISE0022.BIN Infected: not-a-virus:AdWare.Win32.Gator.3103 skipped C:\!KillBox\tigerinthenightss.exe/WISE0023.BIN Infected: Trojan-Dropper.Win32.Small.ff skipped C:\!KillBox\tigerinthenightss.exe WiseSFX: infected - 5 skipped C:\Documents and Settings\Carrie\Cookies\index.dat Object is locked skipped C:\Documents and Settings\Carrie\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\Carrie\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\Carrie\Local Settings\History\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\Carrie\Local Settings\History\History.IE5\MSHist012006101820061019\index.dat Object is locked skipped C:\Documents and Settings\Carrie\Local Settings\Temp\me_4q7csUUuW4Sg56Y Object is locked skipped C:\Documents and Settings\Carrie\Local Settings\Temp\me_hBRF8iqrXVLXETR Object is locked skipped C:\Documents and Settings\Carrie\Local Settings\Temp\me_iqOlXHhzAd6gEZV Object is locked skipped C:\Documents and Settings\Carrie\Local Settings\Temp\me_kL0acJK6gVQSI4f Object is locked skipped C:\Documents and Settings\Carrie\Local Settings\Temp\me_QICFGTrQUfdcBhU Object is locked skipped C:\Documents and Settings\Carrie\Local Settings\Temp\Perflib_Perfdata_924.dat Object is locked skipped C:\Documents and Settings\Carrie\Local Settings\Temp\~DF2426.tmp Object is locked skipped C:\Documents and Settings\Carrie\Local Settings\Temp\~DF6676.tmp Object is locked skipped C:\Documents and Settings\Carrie\Local Settings\Temp\~DF733A.tmp Object is locked skipped C:\Documents and Settings\Carrie\Local Settings\Temp\~DF772D.tmp Object is locked skipped C:\Documents and Settings\Carrie\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\Carrie\NTUSER.DAT Object is locked skipped C:\Documents and Settings\Carrie\NTUSER.DAT.LOG Object is locked skipped C:\Documents and Settings\Default User\My Documents\Data\Data\all_files4.exe/data0003/data0002 Infected: not-a-virus:AdWare.Win32.Broadcap.c skipped C:\Documents and Settings\Default User\My Documents\Data\Data\all_files4.exe/data0003 Infected: not-a-virus:AdWare.Win32.Broadcap.c skipped C:\Documents and Settings\Default User\My Documents\Data\Data\all_files4.exe/data0007 Infected: not-a-virus:AdWare.Win32.PurityScan.bl skipped C:\Documents and Settings\Default User\My Documents\Data\Data\all_files4.exe/data0009 Infected: Trojan-Downloader.Win32.Agent.ec skipped C:\Documents and Settings\Default User\My Documents\Data\Data\all_files4.exe/data0011 Infected: not-a-virus:AdWare.Win32.EZula skipped C:\Documents and Settings\Default User\My Documents\Data\Data\all_files4.exe/data0012 Infected: Trojan-Downloader.Win32.Apropo.v skipped C:\Documents and Settings\Default User\My Documents\Data\Data\all_files4.exe/data0013 Infected: Trojan.Win32.Qhost.ap skipped C:\Documents and Settings\Default User\My Documents\Data\Data\all_files4.exe NSIS: infected - 7 skipped C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped C:\Documents and Settings\Mark\My Documents\Data\all_files4.exe/data0003/data0002 Infected: not-a-virus:AdWare.Win32.Broadcap.c skipped C:\Documents and Settings\Mark\My Documents\Data\all_files4.exe/data0003 Infected: not-a-virus:AdWare.Win32.Broadcap.c skipped C:\Documents and Settings\Mark\My Documents\Data\all_files4.exe/data0007 Infected: not-a-virus:AdWare.Win32.PurityScan.bl skipped C:\Documents and Settings\Mark\My Documents\Data\all_files4.exe/data0009 Infected: Trojan-Downloader.Win32.Agent.ec skipped C:\Documents and Settings\Mark\My Documents\Data\all_files4.exe/data0011 Infected: not-a-virus:AdWare.Win32.EZula skipped C:\Documents and Settings\Mark\My Documents\Data\all_files4.exe/data0012 Infected: Trojan-Downloader.Win32.Apropo.v skipped C:\Documents and Settings\Mark\My Documents\Data\all_files4.exe/data0013 Infected: Trojan.Win32.Qhost.ap skipped C:\Documents and Settings\Mark\My Documents\Data\all_files4.exe NSIS: infected - 7 skipped C:\Documents and Settings\Mark\My Documents\Data\Data\all_files4.exe/data0003/data0002 Infected: not-a-virus:AdWare.Win32.Broadcap.c skipped C:\Documents and Settings\Mark\My Documents\Data\Data\all_files4.exe/data0003 Infected: not-a-virus:AdWare.Win32.Broadcap.c skipped C:\Documents and Settings\Mark\My Documents\Data\Data\all_files4.exe/data0007 Infected: not-a-virus:AdWare.Win32.PurityScan.bl skipped C:\Documents and Settings\Mark\My Documents\Data\Data\all_files4.exe/data0009 Infected: Trojan-Downloader.Win32.Agent.ec skipped C:\Documents and Settings\Mark\My Documents\Data\Data\all_files4.exe/data0011 Infected: not-a-virus:AdWare.Win32.EZula skipped C:\Documents and Settings\Mark\My Documents\Data\Data\all_files4.exe/data0012 Infected: Trojan-Downloader.Win32.Apropo.v skipped C:\Documents and Settings\Mark\My Documents\Data\Data\all_files4.exe/data0013 Infected: Trojan.Win32.Qhost.ap skipped C:\Documents and Settings\Mark\My Documents\Data\Data\all_files4.exe NSIS: infected - 7 skipped C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped C:\Program Files\DivX\ac-mi614.zip/mirc614.exe/data0001.bin Infected: not-a-virus:Client-IRC.Win32.mIRC.614 skipped C:\Program Files\DivX\ac-mi614.zip/mirc614.exe Infected: not-a-virus:Client-IRC.Win32.mIRC.614 skipped C:\Program Files\DivX\ac-mi614.zip ZIP: infected - 2 skipped C:\Program Files\Kodak\Kodak EasyShare software\bin\Catalog\EasyShare.me Object is locked skipped C:\Program Files\Kodak\Kodak EasyShare software\bin\Catalog\EasyShare.mm Object is locked skipped C:\Program Files\mIRC\mirc.exe Infected: not-a-virus:Client-IRC.Win32.mIRC.612 skipped C:\Program Files\Yahoo!\Messenger\ypager.log Object is locked skipped C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped C:\WINDOWS\SchedLgU.Txt Object is locked skipped C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped C:\WINDOWS\Sti_Trace.log Object is locked skipped C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\default Object is locked skipped C:\WINDOWS\system32\config\default.LOG Object is locked skipped C:\WINDOWS\system32\config\SAM Object is locked skipped C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\SECURITY Object is locked skipped C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped C:\WINDOWS\system32\config\software Object is locked skipped C:\WINDOWS\system32\config\software.LOG Object is locked skipped C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\system Object is locked skipped C:\WINDOWS\system32\config\system.LOG Object is locked skipped C:\WINDOWS\system32\h323log.txt Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped C:\WINDOWS\wiadebug.log Object is locked skipped C:\WINDOWS\wiaservc.log Object is locked skipped C:\WINDOWS\WindowsUpdate.log Object is locked skipped Scan process completed.

Nothing was found on the second ewido scan.