Can you help me please

lukem

Welcome to Tom Coyote

Open HJT Scan Only, close your browser and all open windows, check this entry and click on Fix Checked

O2 - BHO: (no name) - {14D1A72D-8705-11D8-B120-0040F46CB696} - (no file)




Download and install the 30 day trial of AVG Anti-Spyware 7.5 to your desktop.

• Once you have downloaded AVG Anti-Spyware 7.5, locate the icon on the desktop and double-click it to launch the set up program.
• Once the setup is complete you will need run Ewido and update the definition files.
• On the main screen select the icon Update then select the Update now link.
• Next select the Start Update button, the update will start and a progress bar will show the updates being installed.
• Once the update has completed select the Scanner icon at the top of the screen, then select the Settings tab.
• Once in the Settings screen click on Recommended actions and then select Quarantine <– Dont forget this
• Under Reports
• Select Automatically generate report after every scan
• Un-Select Only if threats were found
• Close AVG Anti-Spyware 7.5 <– Do not run the scan yet.

Boot your computer into Safemode

• Go to Start> Shut Off your Computer> Restart
• As the computer starts to boot-up, Tap the F8 KEY somewhat rapidly.
• This will bring up a menu.
• Use the Up and Down Arrow Keys to scroll up to SAFEMODE
• Then press the Enter on your Keyboard

IMPORTANT: Do not open any other windows or programs while ewido is scanning, it may interfere with the scanning process:

• Launch AVG Anti-Spyware 7.5 by double-clicking the icon on your desktop.
• Select the Scanner icon at the top and then the Scan tab then click on Complete System Scan.
• Ewido will now begin the scanning process, be patient this may take a little time.
• Once the scan is complete do the following:
• If you have any infections you will prompted, then select Apply all actions
• Next select the Reports icon at the top.
• Select the Save report as button in the lower left hand of the screen and save it to a text file on your system
• make sure to remember where you saved that file, this is important
• Close AVG Anti-Spyware 7.5

Reboot normally

Now run this online scan using Internet Explorer:
Kaspersky Online Scanner from Kaspersky Online Virus Scanner

Next Click on Launch Kaspersky Online Scanner

You will be prompted to install an ActiveX component from Kaspersky, Click Yes.

• The program will launch and then begin downloading the latest definition files:
  
• Once the files have been downloaded click on NEXT
  
• Now click on Scan Settings
  
• In the scan settings make that the following are selected:
  
• Scan using the following Anti-Virus database:
  
• Standard
  
• Scan Options:
  
• Scan Archives
  
• Scan Mail Bases
  
• Click OK
  
• Now under select a target to scan: Select My Computer
  
• This will program will start and scan your system.
  
• The scan will take a while so be patient and let it run.
  
• Once the scan is complete it will display if your system has been infected.
  
• Now click on the Save as Text button:
  
• Save the file to your desktop.

Run this system cleaner

Please download ATF Cleaner by Atribune.

• This program is for XP and Windows 2000 only
• Double-click ATF-Cleaner.exe to run the program.
• Under Main choose: Select All
• Click the Empty Selected button.

Let me see the AVG report, the Kasperky log and a new HJT log please.

AVG report: ——————————————————— AVG Anti-Spyware - Rapporto scansione ——————————————————— + Creato alle: 10.41.59 16/10/2006 + Risultato scansione: C:\Documents and Settings\lucamarantelli\Desktop\forum.zip/forum/upload/html/emoticons/p.php -> Backdoor.Rst.f : Ripulito. C:\Programmi\SWiSHpix\ScreenSaver.scr -> Heuristic.Win32.Dialer : Ripulito. C:\System Volume Information\_restore{A9F9D686-3B04-43AE-B23F-6FBE58D6D41D}\RP145\A0034766.dll -> Hijacker.Small.kj : Ripulito. C:\System Volume Information\_restore{A9F9D686-3B04-43AE-B23F-6FBE58D6D41D}\RP145\A0034796.dll -> Hijacker.Small.kj : Ripulito. C:\System Volume Information\_restore{A9F9D686-3B04-43AE-B23F-6FBE58D6D41D}\RP145\A0035797.dll -> Hijacker.Small.kj : Ripulito. C:\System Volume Information\_restore{A9F9D686-3B04-43AE-B23F-6FBE58D6D41D}\RP145\A0036797.dll -> Hijacker.Small.kj : Ripulito. C:\System Volume Information\_restore{A9F9D686-3B04-43AE-B23F-6FBE58D6D41D}\RP145\A0039808.dll -> Hijacker.Small.kj : Ripulito. C:\System Volume Information\_restore{A9F9D686-3B04-43AE-B23F-6FBE58D6D41D}\RP145\A0039820.dll -> Hijacker.Small.kj : Ripulito. :mozilla.136:C:\Documents and Settings\lucamarantelli\Documenti\firefox_backup\Firefox 1.5.0.6 it - 2006-08-29.pcv/cookies.txt -> TrackingCookie.2o7 : Errore durante la pulizia. :mozilla.274:C:\Documents and Settings\lucamarantelli\Documenti\firefox_backup\Firefox 1.5.0.6 it - 2006-08-29.pcv/cookies.txt -> TrackingCookie.Adtech : Errore durante la pulizia. :mozilla.275:C:\Documents and Settings\lucamarantelli\Documenti\firefox_backup\Firefox 1.5.0.6 it - 2006-08-29.pcv/cookies.txt -> TrackingCookie.Adtech : Errore durante la pulizia. :mozilla.305:C:\Documents and Settings\lucamarantelli\Documenti\firefox_backup\Firefox 1.5.0.6 it - 2006-08-29.pcv/cookies.txt -> TrackingCookie.Advertising : Errore durante la pulizia. :mozilla.306:C:\Documents and Settings\lucamarantelli\Documenti\firefox_backup\Firefox 1.5.0.6 it - 2006-08-29.pcv/cookies.txt -> TrackingCookie.Advertising : Errore durante la pulizia. :mozilla.307:C:\Documents and Settings\lucamarantelli\Documenti\firefox_backup\Firefox 1.5.0.6 it - 2006-08-29.pcv/cookies.txt -> TrackingCookie.Advertising : Errore durante la pulizia. :mozilla.61:C:\Documents and Settings\lucamarantelli\Documenti\firefox_backup\Firefox 1.5.0.6 it - 2006-08-29.pcv/cookies.txt -> TrackingCookie.Atdmt : Errore durante la pulizia. :mozilla.317:C:\Documents and Settings\lucamarantelli\Documenti\firefox_backup\Firefox 1.5.0.6 it - 2006-08-29.pcv/cookies.txt -> TrackingCookie.Bfast : Errore durante la pulizia. :mozilla.239:C:\Documents and Settings\lucamarantelli\Documenti\firefox_backup\Firefox 1.5.0.6 it - 2006-08-29.pcv/cookies.txt -> TrackingCookie.Burstnet : Errore durante la pulizia. :mozilla.240:C:\Documents and Settings\lucamarantelli\Documenti\firefox_backup\Firefox 1.5.0.6 it - 2006-08-29.pcv/cookies.txt -> TrackingCookie.Burstnet : Errore durante la pulizia. :mozilla.278:C:\Documents and Settings\lucamarantelli\Documenti\firefox_backup\Firefox 1.5.0.6 it - 2006-08-29.pcv/cookies.txt -> TrackingCookie.Centrport : Errore durante la pulizia. :mozilla.279:C:\Documents and Settings\lucamarantelli\Documenti\firefox_backup\Firefox 1.5.0.6 it - 2006-08-29.pcv/cookies.txt -> TrackingCookie.Centrport : Errore durante la pulizia. :mozilla.41:C:\Documents and Settings\lucamarantelli\Dati applicazioni\Mozilla\Firefox\Profiles\f7icq3lf.default\cookies.txt -> TrackingCookie.Com : Ripulito. :mozilla.126:C:\Documents and Settings\lucamarantelli\Documenti\firefox_backup\Firefox 1.5.0.6 it - 2006-08-29.pcv/cookies.txt -> TrackingCookie.Doubleclick : Errore durante la pulizia. :mozilla.20:C:\Documents and Settings\Administrator\Dati applicazioni\Mozilla\Firefox\Profiles\qoahdlxp.default\cookies.txt -> TrackingCookie.Doubleclick : Ripulito. :mozilla.41:C:\Documents and Settings\Administrator\Dati applicazioni\Mozilla\Firefox\Profiles\qoahdlxp.default\cookies.txt -> TrackingCookie.Falkag : Ripulito. :mozilla.42:C:\Documents and Settings\Administrator\Dati applicazioni\Mozilla\Firefox\Profiles\qoahdlxp.default\cookies.txt -> TrackingCookie.Falkag : Ripulito. :mozilla.43:C:\Documents and Settings\Administrator\Dati applicazioni\Mozilla\Firefox\Profiles\qoahdlxp.default\cookies.txt -> TrackingCookie.Falkag : Ripulito. :mozilla.44:C:\Documents and Settings\Administrator\Dati applicazioni\Mozilla\Firefox\Profiles\qoahdlxp.default\cookies.txt -> TrackingCookie.Falkag : Ripulito. :mozilla.227:C:\Documents and Settings\lucamarantelli\Documenti\firefox_backup\Firefox 1.5.0.6 it - 2006-08-29.pcv/cookies.txt -> TrackingCookie.Fastclick : Errore durante la pulizia. :mozilla.198:C:\Documents and Settings\lucamarantelli\Documenti\firefox_backup\Firefox 1.5.0.6 it - 2006-08-29.pcv/cookies.txt -> TrackingCookie.Hitbox : Errore durante la pulizia. :mozilla.199:C:\Documents and Settings\lucamarantelli\Documenti\firefox_backup\Firefox 1.5.0.6 it - 2006-08-29.pcv/cookies.txt -> TrackingCookie.Hitbox : Errore durante la pulizia. :mozilla.200:C:\Documents and Settings\lucamarantelli\Documenti\firefox_backup\Firefox 1.5.0.6 it - 2006-08-29.pcv/cookies.txt -> TrackingCookie.Hitbox : Errore durante la pulizia. :mozilla.286:C:\Documents and Settings\lucamarantelli\Documenti\firefox_backup\Firefox 1.5.0.6 it - 2006-08-29.pcv/cookies.txt -> TrackingCookie.Hitbox : Errore durante la pulizia. :mozilla.293:C:\Documents and Settings\lucamarantelli\Documenti\firefox_backup\Firefox 1.5.0.6 it - 2006-08-29.pcv/cookies.txt -> TrackingCookie.Hitbox : Errore durante la pulizia. :mozilla.276:C:\Documents and Settings\lucamarantelli\Documenti\firefox_backup\Firefox 1.5.0.6 it - 2006-08-29.pcv/cookies.txt -> TrackingCookie.Ivwbox : Errore durante la pulizia. :mozilla.62:C:\Documents and Settings\lucamarantelli\Documenti\firefox_backup\Firefox 1.5.0.6 it - 2006-08-29.pcv/cookies.txt -> TrackingCookie.Questionmarket : Errore durante la pulizia. :mozilla.63:C:\Documents and Settings\lucamarantelli\Documenti\firefox_backup\Firefox 1.5.0.6 it - 2006-08-29.pcv/cookies.txt -> TrackingCookie.Questionmarket : Errore durante la pulizia. :mozilla.25:C:\Documents and Settings\Administrator\Dati applicazioni\Mozilla\Firefox\Profiles\qoahdlxp.default\cookies.txt -> TrackingCookie.Spylog : Ripulito. :mozilla.163:C:\Documents and Settings\lucamarantelli\Documenti\firefox_backup\Firefox 1.5.0.6 it - 2006-08-29.pcv/cookies.txt -> TrackingCookie.Tacoda : Errore durante la pulizia. :mozilla.164:C:\Documents and Settings\lucamarantelli\Documenti\firefox_backup\Firefox 1.5.0.6 it - 2006-08-29.pcv/cookies.txt -> TrackingCookie.Tacoda : Errore durante la pulizia. :mozilla.23:C:\Documents and Settings\Administrator\Dati applicazioni\Mozilla\Firefox\Profiles\qoahdlxp.default\cookies.txt -> TrackingCookie.Tradedoubler : Ripulito. :mozilla.24:C:\Documents and Settings\Administrator\Dati applicazioni\Mozilla\Firefox\Profiles\qoahdlxp.default\cookies.txt -> TrackingCookie.Tradedoubler : Ripulito. :mozilla.64:C:\Documents and Settings\lucamarantelli\Documenti\firefox_backup\Firefox 1.5.0.6 it - 2006-08-29.pcv/cookies.txt -> TrackingCookie.Tradedoubler : Errore durante la pulizia. :mozilla.65:C:\Documents and Settings\lucamarantelli\Documenti\firefox_backup\Firefox 1.5.0.6 it - 2006-08-29.pcv/cookies.txt -> TrackingCookie.Tradedoubler : Errore durante la pulizia. :mozilla.66:C:\Documents and Settings\lucamarantelli\Documenti\firefox_backup\Firefox 1.5.0.6 it - 2006-08-29.pcv/cookies.txt -> TrackingCookie.Tradedoubler : Errore durante la pulizia. :mozilla.67:C:\Documents and Settings\lucamarantelli\Documenti\firefox_backup\Firefox 1.5.0.6 it - 2006-08-29.pcv/cookies.txt -> TrackingCookie.Tradedoubler : Errore durante la pulizia. :mozilla.291:C:\Documents and Settings\lucamarantelli\Documenti\firefox_backup\Firefox 1.5.0.6 it - 2006-08-29.pcv/cookies.txt -> TrackingCookie.Tribalfusion : Errore durante la pulizia. :mozilla.45:C:\Documents and Settings\lucamarantelli\Dati applicazioni\Mozilla\Firefox\Profiles\f7icq3lf.default\cookies.txt -> TrackingCookie.Tribalfusion : Ripulito. :mozilla.194:C:\Documents and Settings\lucamarantelli\Documenti\firefox_backup\Firefox 1.5.0.6 it - 2006-08-29.pcv/cookies.txt -> TrackingCookie.Webtrendslive : Errore durante la pulizia. :mozilla.27:C:\Documents and Settings\Administrator\Dati applicazioni\Mozilla\Firefox\Profiles\qoahdlxp.default\cookies.txt -> TrackingCookie.Yadro : Ripulito. :mozilla.168:C:\Documents and Settings\lucamarantelli\Documenti\firefox_backup\Firefox 1.5.0.6 it - 2006-08-29.pcv/cookies.txt -> TrackingCookie.Yieldmanager : Errore durante la pulizia. ::Fine rapporto Kaspersky report: ——————————————————————————- KASPERSKY ONLINE SCANNER REPORT Monday, October 16, 2006 12:52:25 PM Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600) Kaspersky Online Scanner version: 5.0.83.0 Kaspersky Anti-Virus database last update: 16/10/2006 Kaspersky Anti-Virus database records: 219228 ——————————————————————————- Scan Settings: Scan using the following antivirus database: standard Scan Archives: true Scan Mail Bases: true Scan Target - Folders: C:\ Scan Statistics: Total number of scanned objects: 92228 Number of viruses found: 2 Number of infected objects: 5 / 0 Number of suspicious objects: 0 Duration of the scan process: 01:14:51 Infected Object Name / Virus Name / Last Action C:\Documents and Settings\Administrator\Cookies\[removed][1].txt Object is locked skipped C:\Documents and Settings\Administrator\Cookies\administrator@portal[1].txt Object is locked skipped C:\Documents and Settings\Administrator\Cookies\[removed][1].txt Object is locked skipped C:\Documents and Settings\Administrator\Dati applicazioni\Microsoft\Credentials\S-1-5-21-1116711825-2855827882-1717449719-500\Credentials Object is locked skipped C:\Documents and Settings\Administrator\Dati applicazioni\Microsoft\CryptnetUrlCache\Content\60E31627FDA0A46932B0E5948949F2A5 Object is locked skipped C:\Documents and Settings\Administrator\Dati applicazioni\Microsoft\CryptnetUrlCache\Content\696F3DE637E6DE85B458996D49D759AD Object is locked skipped C:\Documents and Settings\Administrator\Dati applicazioni\Microsoft\CryptnetUrlCache\Content\71644221AC231DBD2359C18EBB2118DC Object is locked skipped C:\Documents and Settings\Administrator\Dati applicazioni\Microsoft\CryptnetUrlCache\Content\7C8A03C4580C6B04FDF34357F3474EDC Object is locked skipped C:\Documents and Settings\Administrator\Dati applicazioni\Microsoft\CryptnetUrlCache\Content\A44F4E7CB3133FF765C39A53AD8FCFDD Object is locked skipped C:\Documents and Settings\Administrator\Dati applicazioni\Microsoft\CryptnetUrlCache\Content\A8FABA189DB7D25FBA7CAC806625FD30 Object is locked skipped C:\Documents and Settings\Administrator\Dati applicazioni\Microsoft\CryptnetUrlCache\Content\B82262A5D5DA4DDACE9EDA7F787D0DEB Object is locked skipped C:\Documents and Settings\Administrator\Dati applicazioni\Microsoft\CryptnetUrlCache\Content\C571B417AAF1F617555A0486AB3F5361 Object is locked skipped C:\Documents and Settings\Administrator\Dati applicazioni\Microsoft\CryptnetUrlCache\Content\F482C95F83F1B59228F1B1E720F2EDF1 Object is locked skipped C:\Documents and Settings\Administrator\Dati applicazioni\Microsoft\CryptnetUrlCache\MetaData\60E31627FDA0A46932B0E5948949F2A5 Object is locked skipped C:\Documents and Settings\Administrator\Dati applicazioni\Microsoft\CryptnetUrlCache\MetaData\696F3DE637E6DE85B458996D49D759AD Object is locked skipped C:\Documents and Settings\Administrator\Dati applicazioni\Microsoft\CryptnetUrlCache\MetaData\71644221AC231DBD2359C18EBB2118DC Object is locked skipped C:\Documents and Settings\Administrator\Dati applicazioni\Microsoft\CryptnetUrlCache\MetaData\7C8A03C4580C6B04FDF34357F3474EDC Object is locked skipped C:\Documents and Settings\Administrator\Dati applicazioni\Microsoft\CryptnetUrlCache\MetaData\A44F4E7CB3133FF765C39A53AD8FCFDD Object is locked skipped C:\Documents and Settings\Administrator\Dati applicazioni\Microsoft\CryptnetUrlCache\MetaData\A8FABA189DB7D25FBA7CAC806625FD30 Object is locked skipped C:\Documents and Settings\Administrator\Dati applicazioni\Microsoft\CryptnetUrlCache\MetaData\B82262A5D5DA4DDACE9EDA7F787D0DEB Object is locked skipped C:\Documents and Settings\Administrator\Dati applicazioni\Microsoft\CryptnetUrlCache\MetaData\C571B417AAF1F617555A0486AB3F5361 Object is locked skipped C:\Documents and Settings\Administrator\Dati applicazioni\Microsoft\CryptnetUrlCache\MetaData\F482C95F83F1B59228F1B1E720F2EDF1 Object is locked skipped C:\Documents and Settings\Administrator\Dati applicazioni\Microsoft\Crypto\RSA\S-1-5-21-1116711825-2855827882-1717449719-500\2e595f498b3560c7ced880a4bbc793b1_7adb50a1-4782-493c-b9db-ce141e942978 Object is locked skipped C:\Documents and Settings\Administrator\Dati applicazioni\Microsoft\Crypto\RSA\S-1-5-21-1116711825-2855827882-1717449719-500\6e22962ad96ee7c69ddc940aa08e0512_7adb50a1-4782-493c-b9db-ce141e942978 Object is locked skipped C:\Documents and Settings\Administrator\Dati applicazioni\Microsoft\Crypto\RSA\S-1-5-21-1116711825-2855827882-1717449719-500\a18ca4003deb042bbee7a40f15e1970b_7adb50a1-4782-493c-b9db-ce141e942978 Object is locked skipped C:\Documents and Settings\Administrator\Dati applicazioni\Microsoft\Crypto\RSA\S-1-5-21-1116711825-2855827882-1717449719-500\ac2e89e727e95d4450db466da70d8be3_7adb50a1-4782-493c-b9db-ce141e942978 Object is locked skipped C:\Documents and Settings\Administrator\Dati applicazioni\Microsoft\Crypto\RSA\S-1-5-21-1116711825-2855827882-1717449719-500\da47e999042ae48104899886526cd890_7adb50a1-4782-493c-b9db-ce141e942978 Object is locked skipped C:\Documents and Settings\Administrator\Dati applicazioni\Microsoft\Internet Explorer\Quick Launch\Avvia il browser Internet Explorer.lnk Object is locked skipped C:\Documents and Settings\Administrator\Dati applicazioni\Microsoft\MMC\SQL Server Enterprise Manager Object is locked skipped C:\Documents and Settings\Administrator\Dati applicazioni\Microsoft\Protect\CREDHIST Object is locked skipped C:\Documents and Settings\Administrator\Dati applicazioni\Microsoft\Protect\S-1-5-21-1116711825-2855827882-1717449719-500\65433379-6741-47b9-be07-c4d52dccbaed Object is locked skipped C:\Documents and Settings\Administrator\Dati applicazioni\Microsoft\Protect\S-1-5-21-1116711825-2855827882-1717449719-500\a1ec6ec8-3bce-47f7-b329-e4d3256e998f Object is locked skipped C:\Documents and Settings\Administrator\Dati applicazioni\Microsoft\Protect\S-1-5-21-1116711825-2855827882-1717449719-500\Preferred Object is locked skipped C:\Documents and Settings\Administrator\Dati applicazioni\Microsoft\Protect\S-1-5-21-2959310302-1850912694-1656824758-500\b67e5827-f182-4857-9820-ec85f45a9134 Object is locked skipped C:\Documents and Settings\Administrator\Dati applicazioni\Microsoft\Protect\S-1-5-21-2959310302-1850912694-1656824758-500\Preferred Object is locked skipped C:\Documents and Settings\Administrator\Dati applicazioni\Microsoft\Windows\Themes\Custom.theme Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Cronologia\desktop.ini Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Cronologia\History.IE5\desktop.ini Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Dati applicazioni\ApplicationHistory\devenv.exe.114cac65.ini Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Dati applicazioni\ApplicationHistory\matClientArt16.exe.f1ad380c.ini Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Dati applicazioni\ApplicationHistory\migrazione_avviamenti.exe.a6780ed.ini Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Dati applicazioni\ApplicationHistory\migrazione_avviamenti.exe.a6780ed.ini.inuse Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Dati applicazioni\ApplicationHistory\ngen.exe.2c05686e.ini Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Dati applicazioni\ApplicationHistory\SLA2.tmp.9e9f71b6.ini Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Dati applicazioni\fusioncache.dat Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Dati applicazioni\GDIPFONTCACHEV1.DAT Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Dati applicazioni\Microsoft\Credentials\S-1-5-21-1116711825-2855827882-1717449719-500\Credentials Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Dati applicazioni\Microsoft\Internet Explorer\MSIMGSIZ.DAT Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Dati applicazioni\{3248F0A6-6813-11D6-A77B-00B0D0150000}\1040.MST Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Dati applicazioni\{3248F0A6-6813-11D6-A77B-00B0D0150000}\J2SE Runtime Environment 5.0.msi Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temp\netfxupdate.log Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\desktop.ini Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KPAN8HE7\04o[1].htm Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KPAN8HE7\04[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KPAN8HE7\10o[1].htm Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KPAN8HE7\10[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KPAN8HE7\13[2].js Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KPAN8HE7\5_10_06_234x60_MOBI_POPOPO[1].jpg Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KPAN8HE7\arrow[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KPAN8HE7\bkd[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KPAN8HE7\bkd_title[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KPAN8HE7\bottom1_back[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KPAN8HE7\bottom2_right[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KPAN8HE7\bottom_right[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KPAN8HE7\butter45x32[1].png Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KPAN8HE7\CA8V4JW1.HTM Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KPAN8HE7\cp2403_MatchWord[1].png Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KPAN8HE7\D234x60cpc0030114gIT[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KPAN8HE7\desktop.ini Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KPAN8HE7\dw_customize[1].xml Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KPAN8HE7\ebaylogo[1].png Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KPAN8HE7\flashlib[1].js Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KPAN8HE7\flashwrite_1_2[1].js Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KPAN8HE7\hpweb_styles_win_ie6[1].css Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KPAN8HE7\inv[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KPAN8HE7\kristall[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KPAN8HE7\kristall[2].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KPAN8HE7\left_back[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KPAN8HE7\li_phone[1].png Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KPAN8HE7\li_yahoo.sm[1].jpg Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KPAN8HE7\login2[1].htm Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KPAN8HE7\menuitem_it_wk_1[2].xml Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KPAN8HE7\menuitem_it_wk_2[2].xml Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KPAN8HE7\menuitem_it_wk_3[2].xml Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KPAN8HE7\menuitem_it_wk_4[1].xml Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KPAN8HE7\menuitem_it_wk_5[1].xml Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KPAN8HE7\menuitem_it_wk_6[1].xml Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KPAN8HE7\menuitem_it_wk_7[1].xml Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KPAN8HE7\menuitem_it_wk_8[1].xml Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KPAN8HE7\middle_back[2].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KPAN8HE7\MsgrConfig[1].xml Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KPAN8HE7\ogame-produktion[1].jpg Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KPAN8HE7\om_acct_nm[1].txt Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KPAN8HE7\portal[1].htm Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KPAN8HE7\PSHE_B1_Gov1_022206[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KPAN8HE7\PSHE_B1_Gov1_022206[1].jpg Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KPAN8HE7\right[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KPAN8HE7\right_bottom[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KPAN8HE7\search[1].png Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KPAN8HE7\setcookie[1].js Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KPAN8HE7\s_dschjungelplanet02[1].jpg Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KPAN8HE7\s_wasserplanet06[1].jpg Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KPAN8HE7\top[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KPAN8HE7\user-menu[1].jpg Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KPAN8HE7\utilities[1].js Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KPAN8HE7\utilities[2].js Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KPAN8HE7\vsHome[1].js Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KPAN8HE7\vsProfile[1].xsl Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KPAN8HE7\vstab[1].xdr Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KTAJST6V\0000008941_000000000000000348410[1].swf Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KTAJST6V\02o[1].htm Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KTAJST6V\12o[1].htm Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KTAJST6V\234x60_2[1].swf Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KTAJST6V\234x60_alitalia_e-coupon_ver2[1].swf Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KTAJST6V\26[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KTAJST6V\28[2].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KTAJST6V\3-234-60_tandem_bundle[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KTAJST6V\asldata[1].js Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KTAJST6V\b1_hho_photo[1].jpg Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KTAJST6V\b1_hho_text[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KTAJST6V\B2003869;sz=234x60;ord=53543366[2] Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KTAJST6V\B2047381[1].htm Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KTAJST6V\b2_329x95_hp_022706[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KTAJST6V\background[1].jpg Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KTAJST6V\bkd_linkoff[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KTAJST6V\black_trans[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KTAJST6V\bottom1_right[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KTAJST6V\bottom_left[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KTAJST6V\CAVMTCL1.HTM Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KTAJST6V\default[1].htm Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KTAJST6V\desktop.ini Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KTAJST6V\deuterium[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KTAJST6V\dw_802_full_default[1].swf Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KTAJST6V\energie[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KTAJST6V\expedia[1].png Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KTAJST6V\hpweb_1-2_arrw_sbmt[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KTAJST6V\hpweb_country_pulldown[1].js Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KTAJST6V\icona[1].png Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KTAJST6V\icon[1].png Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KTAJST6V\icon[2].png Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KTAJST6V\info-help[1].jpg Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KTAJST6V\info-help[2].jpg Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KTAJST6V\left[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KTAJST6V\left_top[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KTAJST6V\li_sharing[1].png Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KTAJST6V\login_back[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KTAJST6V\mainback[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KTAJST6V\middle_bottom[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KTAJST6V\middle_top[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KTAJST6V\NF_B2F_swoosh[1].png Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KTAJST6V\ogame-produktion[1].jpg Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KTAJST6V\ogame[1].htm Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KTAJST6V\Omniture[1].js Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KTAJST6V\onepixel[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KTAJST6V\start2[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KTAJST6V\s_normaltempplanet03[1].jpg Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KTAJST6V\s_normaltempplanet04[1].jpg Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KTAJST6V\s_normaltempplanet07[1].jpg Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KTAJST6V\thumbnail[1].png Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KTAJST6V\tiscali234x60dalmata[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KTAJST6V\top_right[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KTAJST6V\toshiba_fb_gif_onenote_468x60_it_20051209[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KTAJST6V\tracker[2].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KTAJST6V\trpix[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KTAJST6V\user-menu[1].jpg Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\KTAJST6V\vsprofileStrings[1].xsl Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\08o[1].htm Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\1x1[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\234x60v_1[1].swf Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\234x60_2[1].swf Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\adjs[1].php Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\arrow2[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\aslmain[2].js Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\B2003869;sz=234x60;ord=1796866671[2] Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\B2031223;sz=234x60;ord=185731344[1] Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\B2031223;sz=234x60;ord=185731344[2] Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\B2047381[1].htm Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\B2047381[2].htm Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\bglcd[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\bkd_page[1].jpg Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\bottom1_left[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\bottom2_back[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\CA1K255Z.swf Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\D234x60cpcmsn[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\default[1].css Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\default[2].css Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\desktop.ini Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\deuterium[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\dreamweaver_802_content[1].xml Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\ebay[1].jpg Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\energie[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\EolasFix-v2[1].js Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\formate[1].css Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\hpweb_utilities[1].js Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\hpweb_welcome_cssp[1].css Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\IT_ads_234x60_002[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\IT_giordano_fotocameranew_234x60[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\left[1].jpg Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\left_bottom[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\login2[1].htm Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\menuitem_it_em_3[2].xml Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\menuitem_it_em_4[2].xml Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\menuitem_it_em_5[2].xml Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\menuitem_it_mb_1[2].xml Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\menuitem_it_mb_2[2].xml Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\menuitem_it_mb_3[2].xml Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\menuitem_it_mb_4[2].xml Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\menuitem_it_pe_1[2].xml Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\menuitem_it_pe_2[2].xml Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\menuitem_it_pe_3[2].xml Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\menuitem_it_pe_4[2].xml Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\metall[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\metrics[1].js Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\middle[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\right[1].jpg Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\right[2].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\startbild[1].jpg Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\Storage_b2_lg_ent_copy_2_20[1].jpg Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\s_normaltempplanet02[1].jpg Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\top_left[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\wasserplanet01[1].jpg Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\wbk1D.tmp Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\[10] Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\[11] Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\[12] Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\[1] Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\[2] Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\[3] Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\[4] Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\[5] Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\[6] Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\[7] Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\[8] Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\OTMZ856Z\[9] Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\0000065522_000000000000000341751[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\02[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\06o[1].htm Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\12[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\14o[1].htm Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\234x60[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\5_10_06_234x60_MOBI_Superman[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\71[2].js Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\adjs[1].php Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\ADSAdClient31[1].htm Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\animspace[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\B2003869;sz=234x60;ord=943278276[2] Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\b2_hho_lg_format[1].jpg Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\back[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\bkd_navigation[1].jpg Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\bottom2_left[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\bottom[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\crossdomain[1].xml Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\desktop.ini Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\dw[1].swf Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\eingabe_back[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\flashwrite_1_2[1].js Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\formate[1].css Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\hpweb_welcome_ns4_cssp[1].css Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\hp[1].htm Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\ico_tab[1].png Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\index[1].htm Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\Integrity_Home_B1_US_2_21[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\Integrity_US_Home_B1_image_2_16[1].jpg Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\it[1].htm Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\left[2].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\li_video[1].png Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\login[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\menuitem_it_em_1[1].xml Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\menuitem_it_em_2[1].xml Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\metall[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\MSIE.PNG[1].js Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\msn_icon[1].png Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\m[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\navi_back[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\right_back[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\right_top[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\small_habbohotel[1].png Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\swflash[1].cab Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\s_dschjungelplanet06[1].jpg Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\s_wasserplanet01[1].jpg Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\s_wasserplanet06[1].jpg Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\Tabicon[1].png Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\tabsmiley[1].png Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\tele2_flat_234x60_1510[1].gif Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Inter

net Files\Content.IE5\W9QB0P27\vsapp[1].xsl Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\vsHome[1].css Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\vshome[1].xsl Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\wnzpen[1].txt Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\wz_tooltip[1].js Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\wz_tooltip[2].js Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\[10] Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\[11] Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\[12] Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\[13] Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\[14] Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\[15] Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\[16] Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\[17] Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\[18] Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\[19] Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\[1] Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\[20] Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\[21] Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\[22] Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\[2] Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\[3] Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\[4] Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\[5] Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\[6] Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\[7] Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\[8] Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\W9QB0P27\[9] Object is locked skipped C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\desktop.ini Object is locked skipped C:\Documents and Settings\Administrator\Menu Avvio\Programmi\Accessori\Svago\Windows Media Player.lnk Object is locked skipped C:\Documents and Settings\Administrator\Menu Avvio\Programmi\Internet Explorer.lnk Object is locked skipped C:\Documents and Settings\Administrator\Menu Avvio\Programmi\Windows Media Player.lnk Object is locked skipped C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped C:\Documents and Settings\LocalService\Impostazioni locali\Cronologia\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\LocalService\Impostazioni locali\Dati applicazioni\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\LocalService\Impostazioni locali\Dati applicazioni\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\LocalService\Impostazioni locali\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped C:\Documents and Settings\lucamarantelli\Cookies\index.dat Object is locked skipped C:\Documents and Settings\lucamarantelli\Dati applicazioni\$_hpcst$.hpc Object is locked skipped C:\Documents and Settings\lucamarantelli\Dati applicazioni\MailWasherPro\tmpLog.txt Object is locked skipped C:\Documents and Settings\lucamarantelli\Dati applicazioni\MailWasherPro\Training\Training archive - junk.rot135 Object is locked skipped C:\Documents and Settings\lucamarantelli\Dati applicazioni\MailWasherPro\Training\Training archive - legitimate.rot135 Object is locked skipped C:\Documents and Settings\lucamarantelli\Dati applicazioni\MailWasherPro\Trash.rot135 Object is locked skipped C:\Documents and Settings\lucamarantelli\Dati applicazioni\Microsoft\Modelli\Normal.dot Object is locked skipped C:\Documents and Settings\lucamarantelli\Dati applicazioni\Microsoft\Outlook\Outlook.srs Object is locked skipped C:\Documents and Settings\lucamarantelli\Dati applicazioni\Mozilla\Firefox\Profiles\f7icq3lf.default\cert8.db Object is locked skipped C:\Documents and Settings\lucamarantelli\Dati applicazioni\Mozilla\Firefox\Profiles\f7icq3lf.default\flashgot.log Object is locked skipped C:\Documents and Settings\lucamarantelli\Dati applicazioni\Mozilla\Firefox\Profiles\f7icq3lf.default\formhistory.dat Object is locked skipped C:\Documents and Settings\lucamarantelli\Dati applicazioni\Mozilla\Firefox\Profiles\f7icq3lf.default\history.dat Object is locked skipped C:\Documents and Settings\lucamarantelli\Dati applicazioni\Mozilla\Firefox\Profiles\f7icq3lf.default\key3.db Object is locked skipped C:\Documents and Settings\lucamarantelli\Dati applicazioni\Mozilla\Firefox\Profiles\f7icq3lf.default\parent.lock Object is locked skipped C:\Documents and Settings\lucamarantelli\Impostazioni locali\Cronologia\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\lucamarantelli\Impostazioni locali\Cronologia\History.IE5\MSHist012006101620061017\index.dat Object is locked skipped C:\Documents and Settings\lucamarantelli\Impostazioni locali\Dati applicazioni\Microsoft\Messenger\[removed]\SharingMetadata\Logs\Dfsr.log Object is locked skipped C:\Documents and Settings\lucamarantelli\Impostazioni locali\Dati applicazioni\Microsoft\Messenger\[removed]\SharingMetadata\pending.dat Object is locked skipped C:\Documents and Settings\lucamarantelli\Impostazioni locali\Dati applicazioni\Microsoft\Messenger\[removed]\SharingMetadata\Working\database_6830_783B_3078_1274\dfsr.db Object is locked skipped C:\Documents and Settings\lucamarantelli\Impostazioni locali\Dati applicazioni\Microsoft\Messenger\[removed]\SharingMetadata\Working\database_6830_783B_3078_1274\fsr.log Object is locked skipped C:\Documents and Settings\lucamarantelli\Impostazioni locali\Dati applicazioni\Microsoft\Messenger\[removed]\SharingMetadata\Working\database_6830_783B_3078_1274\fsrtmp.log Object is locked skipped C:\Documents and Settings\lucamarantelli\Impostazioni locali\Dati applicazioni\Microsoft\Messenger\[removed]\SharingMetadata\Working\database_6830_783B_3078_1274\tmp.edb Object is locked skipped C:\Documents and Settings\lucamarantelli\Impostazioni locali\Dati applicazioni\Microsoft\Outlook\archive.pst Object is locked skipped C:\Documents and Settings\lucamarantelli\Impostazioni locali\Dati applicazioni\Microsoft\Outlook\outlook.ost Object is locked skipped C:\Documents and Settings\lucamarantelli\Impostazioni locali\Dati applicazioni\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\lucamarantelli\Impostazioni locali\Dati applicazioni\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\lucamarantelli\Impostazioni locali\Dati applicazioni\Microsoft\Windows Live Contacts\[removed]\real\members.stg Object is locked skipped C:\Documents and Settings\lucamarantelli\Impostazioni locali\Dati applicazioni\Microsoft\Windows Live Contacts\[removed]\shadow\members.stg Object is locked skipped C:\Documents and Settings\lucamarantelli\Impostazioni locali\Dati applicazioni\Mozilla\Firefox\Profiles\f7icq3lf.default\Cache\_CACHE_001_ Object is locked skipped C:\Documents and Settings\lucamarantelli\Impostazioni locali\Dati applicazioni\Mozilla\Firefox\Profiles\f7icq3lf.default\Cache\_CACHE_002_ Object is locked skipped C:\Documents and Settings\lucamarantelli\Impostazioni locali\Dati applicazioni\Mozilla\Firefox\Profiles\f7icq3lf.default\Cache\_CACHE_003_ Object is locked skipped C:\Documents and Settings\lucamarantelli\Impostazioni locali\Dati applicazioni\Mozilla\Firefox\Profiles\f7icq3lf.default\Cache\_CACHE_MAP_ Object is locked skipped C:\Documents and Settings\lucamarantelli\Impostazioni locali\Temp\ExchangePerflog_8484fa3197ed59cfcfcccd43.dat Object is locked skipped C:\Documents and Settings\lucamarantelli\Impostazioni locali\Temp\it_0107.exe Infected: Packed.Win32.PolyCrypt.a skipped C:\Documents and Settings\lucamarantelli\Impostazioni locali\Temp\WCESLog.log Object is locked skipped C:\Documents and Settings\lucamarantelli\Impostazioni locali\Temp\~DF3D89.tmp Object is locked skipped C:\Documents and Settings\lucamarantelli\Impostazioni locali\Temp\~DF8746.tmp Object is locked skipped C:\Documents and Settings\lucamarantelli\Impostazioni locali\Temp\~DF8753.tmp Object is locked skipped C:\Documents and Settings\lucamarantelli\Impostazioni locali\Temp\~DF9E16.tmp Object is locked skipped C:\Documents and Settings\lucamarantelli\Impostazioni locali\Temp\~DF9E2D.tmp Object is locked skipped C:\Documents and Settings\lucamarantelli\Impostazioni locali\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\lucamarantelli\NTUSER.DAT Object is locked skipped C:\Documents and Settings\lucamarantelli\ntuser.dat.LOG Object is locked skipped C:\Documents and Settings\NetworkService\Impostazioni locali\Dati applicazioni\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\NetworkService\Impostazioni locali\Dati applicazioni\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped C:\Programmi\Microsoft SQL Server\MSSQL\Data\agriturismo_Data.MDF Object is locked skipped C:\Programmi\Microsoft SQL Server\MSSQL\Data\agriturismo_Log.LDF Object is locked skipped C:\Programmi\Microsoft SQL Server\MSSQL\Data\american_appraisal_Data.MDF Object is locked skipped C:\Programmi\Microsoft SQL Server\MSSQL\Data\american_appraisal_Log.LDF Object is locked skipped C:\Programmi\Microsoft SQL Server\MSSQL\Data\master.mdf Object is locked skipped C:\Programmi\Microsoft SQL Server\MSSQL\Data\mastlog.ldf Object is locked skipped C:\Programmi\Microsoft SQL Server\MSSQL\Data\MilanoOrigine_Data.MDF Object is locked skipped C:\Programmi\Microsoft SQL Server\MSSQL\Data\MilanoOrigine_Log.LDF Object is locked skipped C:\Programmi\Microsoft SQL Server\MSSQL\Data\model.mdf Object is locked skipped C:\Programmi\Microsoft SQL Server\MSSQL\Data\modellog.ldf Object is locked skipped C:\Programmi\Microsoft SQL Server\MSSQL\Data\msdbdata.mdf Object is locked skipped C:\Programmi\Microsoft SQL Server\MSSQL\Data\msdblog.ldf Object is locked skipped C:\Programmi\Microsoft SQL Server\MSSQL\Data\northwnd.ldf Object is locked skipped C:\Programmi\Microsoft SQL Server\MSSQL\Data\northwnd.mdf Object is locked skipped C:\Programmi\Microsoft SQL Server\MSSQL\Data\pubs.mdf Object is locked skipped C:\Programmi\Microsoft SQL Server\MSSQL\Data\pubs_log.ldf Object is locked skipped C:\Programmi\Microsoft SQL Server\MSSQL\Data\rhcp_Data.MDF Object is locked skipped C:\Programmi\Microsoft SQL Server\MSSQL\Data\rhcp_Log.LDF Object is locked skipped C:\Programmi\Microsoft SQL Server\MSSQL\Data\SINTESI_Data.MDF Object is locked skipped C:\Programmi\Microsoft SQL Server\MSSQL\Data\SINTESI_Log.LDF Object is locked skipped C:\Programmi\Microsoft SQL Server\MSSQL\Data\tempdb.mdf Object is locked skipped C:\Programmi\Microsoft SQL Server\MSSQL\Data\templog.ldf Object is locked skipped C:\Programmi\Microsoft SQL Server\MSSQL\LOG\ERRORLOG Object is locked skipped C:\Programmi\MySQL\MySQL Server 5.0\data\ibdata1 Object is locked skipped C:\Programmi\MySQL\MySQL Server 5.0\data\ib_logfile0 Object is locked skipped C:\Programmi\MySQL\MySQL Server 5.0\data\ib_logfile1 Object is locked skipped C:\Programmi\MySQL\MySQL Server 5.0\data\lucamarantelli.err Object is locked skipped C:\Programmi\Trend Micro\OfficeScan Client\ConnLog\Conn_20061016.log Object is locked skipped C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped C:\System Volume Information\_restore{A9F9D686-3B04-43AE-B23F-6FBE58D6D41D}\RP145\A0035798.exe Infected: Trojan-Clicker.Win32.Agent.hz skipped C:\System Volume Information\_restore{A9F9D686-3B04-43AE-B23F-6FBE58D6D41D}\RP145\A0036798.exe Infected: Trojan-Clicker.Win32.Agent.hz skipped C:\System Volume Information\_restore{A9F9D686-3B04-43AE-B23F-6FBE58D6D41D}\RP145\A0039797.exe Infected: Trojan-Clicker.Win32.Agent.hz skipped C:\System Volume Information\_restore{A9F9D686-3B04-43AE-B23F-6FBE58D6D41D}\RP145\A0039831.exe Infected: Packed.Win32.PolyCrypt.a skipped C:\System Volume Information\_restore{A9F9D686-3B04-43AE-B23F-6FBE58D6D41D}\RP145\change.log Object is locked skipped C:\WINDOWS\CSC\00000001 Object is locked skipped C:\WINDOWS\Debug\Netlogon.log Object is locked skipped C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped C:\WINDOWS\Internet Logs\tvDebug.log Object is locked skipped C:\WINDOWS\SchedLgU.Txt Object is locked skipped C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\default Object is locked skipped C:\WINDOWS\system32\config\default.log Object is locked skipped C:\WINDOWS\system32\config\SAM Object is locked skipped C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\SECURITY Object is locked skipped C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped C:\WINDOWS\system32\config\software Object is locked skipped C:\WINDOWS\system32\config\software.log Object is locked skipped C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\system Object is locked skipped C:\WINDOWS\system32\config\system.log Object is locked skipped C:\WINDOWS\system32\h323log.txt Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped C:\WINDOWS\Temp\ib17 Object is locked skipped C:\WINDOWS\Temp\ib18 Object is locked skipped C:\WINDOWS\Temp\ib19 Object is locked skipped C:\WINDOWS\Temp\ib20 Object is locked skipped C:\WINDOWS\Temp\ib21 Object is locked skipped C:\WINDOWS\Temp\Perflib_Perfdata_134.dat Object is locked skipped Scan process completed.

Lets do this…

System Restore makes regular backups of all your settings, if you ever had to use this program to restore your system to a previous date, you will be infected all over again so we need to clean out the previous Restore Points

Turn off System Restore.

* Right-click My Computer.
* Click Properties.
* Click the System Restore tab.
* Check Turn off System Restore on all Drives.
* Click Apply, and then click OK.

Reboot your System

Turn ON System Restore.

* Right-click My Computer.
* ClickProperties.
* Click the System Restore tab.
* UN-Check Turn off System Restore on all Drives.
* Click Apply, and then click OK.

* Go to Start/ Control Panel/ Performance and Maintenance/ System Restore/ Create a New Restore Point
You can name the restore point anything you like, something that you can remember, You will have to be in Catagory View to see this



Run this other cleaner because there is a bad file in your temp folder that is still there.

If you don't want the Yahoo Toolbar, be sure to uncheck it during installation
Download and Install CCleaner

• Click on Run Cleaner
• Run the Issues Scan < –After you run the issues scan and when you click on FIX, it will ask you to backup the Registry..Say Yes

Tutorial for CCleaner



Run this free online scanner from Panda, it won't fix anything but I need to see the report.

Panda ActiveScan <<

Let me see the Panda report and a new HJT log.

lukem

This line in Panda has me a little concerned.
Hacktool:rootkit/mhook Not disinfected hkey_local_machine\system\currentcontrolset\services\m_hook


Download and install Rootkit Revealer You will find the download button at the bottom of the page. Run the scan and post the log please.

HKLM\SOFTWARE\Microsoft\Cryptography\RNG\Seed 16/10/2006 19.01 80 bytes Data mismatch between Windows API and raw hive data. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\0140110900063D11C8EF10054038389C\Usage\OUTLOOKFiles 16/10/2006 18.36 4 bytes Data mismatch between Windows API and raw hive data. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\0140110900063D11C8EF10054038389C\Usage\OutlookMAPI2 16/10/2006 18.36 4 bytes Data mismatch between Windows API and raw hive data. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\0140110900063D11C8EF10054038389C\Usage\ProductFiles 16/10/2006 18.36 4 bytes Data mismatch between Windows API and raw hive data. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\0140110900063D11C8EF10054038389C\Usage\OUTLOOKNonBootFiles 16/10/2006 18.36 4 bytes Data mismatch between Windows API and raw hive data. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\0140110900063D11C8EF10054038389C\Usage\WORDFiles 16/10/2006 18.36 4 bytes Data mismatch between Windows API and raw hive data. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1\CacheLimit 16/10/2006 17.00 4 bytes Data mismatch between Windows API and raw hive data. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2\CacheLimit 16/10/2006 17.00 4 bytes Data mismatch between Windows API and raw hive data. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3\CacheLimit 16/10/2006 17.00 4 bytes Data mismatch between Windows API and raw hive data. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4\CacheLimit 16/10/2006 17.00 4 bytes Data mismatch between Windows API and raw hive data. HKLM\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\Misc.\TotalScanned 16/10/2006 19.02 4 bytes Data mismatch between Windows API and raw hive data. HKLM\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\Misc.\LastScannedFileName 16/10/2006 19.02 65 bytes Windows API length not consistent with raw hive data. HKLM\SYSTEM\ControlSet001\Control\StillImage\Events\STIProxyEvent\{E5A294F4-6077-4AD4-9761-110B2AFF23F4}\Icon 28/08/2006 16.27 9 bytes Data mismatch between Windows API and raw hive data. HKLM\SYSTEM\ControlSet003\Control\StillImage\Events\STIProxyEvent\{E5A294F4-6077-4AD4-9761-110B2AFF23F4}\Icon 28/08/2006 16.27 9 bytes Data mismatch between Windows API and raw hive data. C:\Documents and Settings\lucamarantelli\Impostazioni locali\Dati applicazioni\Microsoft\Messenger\[removed]\SharingMetadata\Working\database_6830_783B_3078_1274\fsr00023.log 16/10/2006 19.14 128.00 KB Hidden from Windows API. C:\Documents and Settings\lucamarantelli\Impostazioni locali\Dati applicazioni\Mozilla\Firefox\Profiles\f7icq3lf.default\Cache\14F31619d01 16/10/2006 19.11 2.29 KB Hidden from Windows API. C:\Documents and Settings\lucamarantelli\Impostazioni locali\Dati applicazioni\Mozilla\Firefox\Profiles\f7icq3lf.default\Cache\333C9221d01 16/10/2006 19.25 54.73 KB Hidden from Windows API. C:\Documents and Settings\lucamarantelli\Impostazioni locali\Dati applicazioni\Mozilla\Firefox\Profiles\f7icq3lf.default\Cache\4E851A70d01 16/10/2006 19.26 56.61 KB Hidden from Windows API. C:\Documents and Settings\lucamarantelli\Impostazioni locali\Dati applicazioni\Mozilla\Firefox\Profiles\f7icq3lf.default\Cache\59472F52d01 16/10/2006 19.10 27.42 KB Hidden from Windows API. C:\Documents and Settings\lucamarantelli\Impostazioni locali\Dati applicazioni\Mozilla\Firefox\Profiles\f7icq3lf.default\Cache\61CC197Ad01 16/10/2006 19.13 16.60 KB Hidden from Windows API. C:\Documents and Settings\lucamarantelli\Impostazioni locali\Dati applicazioni\Mozilla\Firefox\Profiles\f7icq3lf.default\Cache\61CC197Bd01 16/10/2006 19.13 18.45 KB Hidden from Windows API. C:\Documents and Settings\lucamarantelli\Impostazioni locali\Dati applicazioni\Mozilla\Firefox\Profiles\f7icq3lf.default\Cache\81FE8560d01 16/10/2006 19.10 9.60 KB Hidden from Windows API. C:\Documents and Settings\lucamarantelli\Impostazioni locali\Dati applicazioni\Mozilla\Firefox\Profiles\f7icq3lf.default\Cache\9DFB4C60d01 16/10/2006 19.26 19.64 KB Hidden from Windows API. C:\Documents and Settings\lucamarantelli\Impostazioni locali\Dati applicazioni\Mozilla\Firefox\Profiles\f7icq3lf.default\Cache\B9A25201d01 16/10/2006 19.26 44.05 KB Hidden from Windows API. C:\Documents and Settings\lucamarantelli\Impostazioni locali\Dati applicazioni\Mozilla\Firefox\Profiles\f7icq3lf.default\Cache\C130ACA1d01 16/10/2006 19.26 16.64 KB Hidden from Windows API. C:\Documents and Settings\lucamarantelli\Impostazioni locali\Dati applicazioni\Mozilla\Firefox\Profiles\f7icq3lf.default\Cache\E12CECE5d01 16/10/2006 19.11 41.94 KB Hidden from Windows API. C:\Documents and Settings\lucamarantelli\Impostazioni locali\Temp\48m.jpg 16/10/2006 19.26 4.42 KB Hidden from Windows API. C:\Documents and Settings\lucamarantelli\Impostazioni locali\Temp\MessengerCache\hWuvXXZLDsSdRTAyX2FCZ5Xq4eqI= 16/10/2006 19.20 27.88 KB Hidden from Windows API. C:\Documents and Settings\lucamarantelli\Impostazioni locali\Temp\~WRD0001.doc 16/10/2006 19.06 141 bytes Visible in Windows API, but not in MFT or directory index. thanks

Lukem, This can be touchy, I am looking into it and will be back early this evening. Ken

thank you very much Ken!

Lukem,

There is a bad entry in the registry we need to find. Do this,

Please download/unzip this:

Registry Search 2.0 by Bobbi Flekman © 2005

on regsearch.exe, and search for this:

m_hook

[external image: Posted Image] Make sure ALL the boxes are checked under "Search".

It may take a while to run, so be patient. When finished, the search results will appear in your text editor,

Paste the contents of the search results into your next post.

REGEDIT4 ; Registry Search 2.0 by Bobbi Flekman © 2005 ; Version: 2.0.1.0 ; Results at 17/10/2006 9.23.11 for strings: ; 'm_hook' ; Strings excluded from search: ; (None) ; Search in: ; Registry Keys Registry Values Registry Data ; HKEY_LOCAL_MACHINE HKEY_USERS [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_M_HOOK] [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\m_hook] [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\m_hook] ; Contents of value: ; \??\c:\documents and settings\lucamarantelli\dati applicazioni\hidires\m_hook.sys "ImagePath"=hex(2):5c,3f,3f,5c,43,3a,5c,44,6f,63,75,6d,65,6e,74,73,20,61,6e,64,\ 20,53,65,74,74,69,6e,67,73,5c,6c,75,63,61,6d,61,72,61,6e,74,65,6c,6c,69,5c,\ 44,61,74,69,20,61,70,70,6c,69,63,61,7a,69,6f,6e,69,5c,68,69,64,69,72,65,73,\ 5c,6d,5f,68,6f,6f,6b,2e,73,79,73,00 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\m_hook\Security] [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_M_HOOK] [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\m_hook] [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\m_hook] ; Contents of value: ; \??\c:\documents and settings\lucamarantelli\dati applicazioni\hidires\m_hook.sys "ImagePath"=hex(2):5c,3f,3f,5c,43,3a,5c,44,6f,63,75,6d,65,6e,74,73,20,61,6e,64,\ 20,53,65,74,74,69,6e,67,73,5c,6c,75,63,61,6d,61,72,61,6e,74,65,6c,6c,69,5c,\ 44,61,74,69,20,61,70,70,6c,69,63,61,7a,69,6f,6e,69,5c,68,69,64,69,72,65,73,\ 5c,6d,5f,68,6f,6f,6b,2e,73,79,73,00 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\m_hook\Security] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_M_HOOK] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\m_hook] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\m_hook] ; Contents of value: ; \??\c:\documents and settings\lucamarantelli\dati applicazioni\hidires\m_hook.sys "ImagePath"=hex(2):5c,3f,3f,5c,43,3a,5c,44,6f,63,75,6d,65,6e,74,73,20,61,6e,64,\ 20,53,65,74,74,69,6e,67,73,5c,6c,75,63,61,6d,61,72,61,6e,74,65,6c,6c,69,5c,\ 44,61,74,69,20,61,70,70,6c,69,63,61,7a,69,6f,6e,69,5c,68,69,64,69,72,65,73,\ 5c,6d,5f,68,6f,6f,6b,2e,73,79,73,00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\m_hook\Security] ; End Of The Log… thanks

lukem

Do this, you may want to print this out and keep it handy for reference.



Download The Avenger Copyright © Swandog46
You must extract avenger.exe to your desktop, before you run it.

Copy and paste the contents of the quote box below into notepad.

Save it as file name: "fixme.reg" (not including the quotes). Save as file type: *All files* and save it on your Desktop.

REGEDIT4

[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_M_HOOK]

[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\m_hook]

[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_M_HOOK]

[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\m_hook]

[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_M_HOOK]

[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\m_hook]

Then, locate fixme.reg on your desktop and it.

You will receive a prompt similar to: "Do you wish to merge the information into the registry?".

Answer 'Yes' and wait for a message to appear similar to "Merged Successfully".

Copy all the text contained in the code box below to your Clipboard.

Files to delete:
c:\documents and settings\lucamarantelli\dati applicazioni\hidires\m_hook.sys
c:\documents and settings\lucamarantelli\dati applicazioni\hidires\hidr.exe

The above script is for this user only, if you need help please start your own thread.

Start the Avenger.
Under "Script file to execute" choose "Input Script Manually".
Click on the Magnifying Glass icon which will open a new window titled "View/edit script".
Paste the entire text in into this window.
Click done, now click on the Green Light
Answer "Yes" twice when prompted.
Your computer shoud reboot, and briefly open a black command window on your desktop, this is normal.

After the restart, it will create a log file that should open.
This log file will be located at C:\avenger.txt
Paste the contents of the file into your reply along with a fresh HJT log.

Also: Avenger has made backups of all the files, etc., that you asked it to delete, located at C:\avenger\backup.zip.