What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Second try posting please help!

8 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
Hi could someone help me?

I’ve had Project 1 on my PC. I’ve thrown all of the following at it:

AVG Anti-spy ware

Registry Mechanic

Adaware SE

CC Cleaner

It no-longer appears in Task Manager. Is the Pc clean?

I think that I may have inadvertently deleted a file by mistake as I keep getting the following message when I boot up:

RUNDLL

Error loading W009acfd.dll

The specified module could not be found.


Also I can’t delete the following file from the prefetch folder says the file or directory is corrupted and unreadable:

WSCNTFY.EXE-1B24F5EB.pf

Attached Hijackthis log file.

Logfile of HijackThis v1.99.1
Scan saved at 22:34:46, on 06/11/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Documents and Settings\Andrew\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.pcservicecall.co.uk
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.pcservicecall.co.uk
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
O4 - HKLM\..\Run: [vhu26244] RUNDLL32.EXE w009acfd.dll,n 0052623f0000000a009acfd
O4 - HKLM\..\Run: [defender] C:\\dfndrff_e19.exe
O4 - HKLM\..\Run: [keyboard] C:\\kybrdff_e19.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKLM\..\Run: [adiras] adiras.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
O4 - Global Startup: Utility Tray.lnk = C:\WINDOWS\system32\sistray.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.pcservicecall.co.uk
O16 - DPF: {2D2BEE6E-3C9A-4D58-B9EC-458EDB28D0F6} - http://www.drivecleaner.com/.freeware/inst…leanerstart.cab
O16 - DPF: {B64F4A7C-97C9-11DA-8BDE-F66BAD1E3F3A} - http://locator1.cdn.imagesrvr.com/sites/er…easeInstall.cab
O20 - AppInit_DLLs:
O20 - Winlogon Notify: DIFx - C:\WINDOWS\
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

Logfile of HijackThis v1.99.1
Scan saved at 21:12:01, on 24/11/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\WINDOWS\system32\sistray.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Microsoft Works\WksWP.exe
C:\Program Files\Microsoft Works\WkDStore.exe
C:\Program Files\Microsoft Works\wkgdcach.exe
C:\Documents and Settings\Andrew\HijackThis.exe

R3 - URLSearchHook: DeskbarBHO - {A8B28872-3324-4CD2-8AA3-7D555C872D96} - blank (file missing)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
O4 - HKLM\..\Run: [vhu26244] RUNDLL32.EXE w009acfd.dll,n 0052623f0000000a009acfd
O4 - HKLM\..\Run: [adiras] adiras.exe
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
O4 - Global Startup: Utility Tray.lnk = C:\WINDOWS\system32\sistray.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.pcservicecall.co.uk
O16 - DPF: {2D2BEE6E-3C9A-4D58-B9EC-458EDB28D0F6} - http://www.drivecleaner.com/.freeware/inst…leanerstart.cab
O16 - DPF: {B64F4A7C-97C9-11DA-8BDE-F66BAD1E3F3A} - http://locator1.cdn.imagesrvr.com/sites/er…easeInstall.cab
O20 - AppInit_DLLs:
O20 - Winlogon Notify: DIFx - C:\WINDOWS\
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
Post #2
Hello rosey and welcome to TomCoyote,

Please do the following:

* Download AlcanShorty from here.
Click the download button below and agree to download the fix.
Download Alcanshorty to your desktop.
DoubleClick alcanshorty_en.exe and click install
This will create a new folder on your desktop called alcanshorty_en
Open that folder and doubleclick Run.bat
Once the fix starts, your icons and desktop will disappear, this is normal.
Make sure you have a working internet connection. In case your firewall gives an alert, don't block it,
because alcanshorty needs to download some additional files to let the tool run properly.
Wait for the complete script execution box to popup and press OK.
Press exit to terminate the BFU program.
——————-

* Download Combofix.zip
Unzip it to its own folder.
Read here how to unzip/extract properly.
Open the Combofix folder and doubleclick combo.exe
Follow the prompts.
Don't click on the window while the fix is running, because that will cause your system to hang.
When finished, it should produce a log, combofix.txt.

Please post (reply) with the combofix.txt and a new hijackthislog.
Post #3
Hi Susan528,

Many thanks in advance for your help!

AlcanShorty no problem

Combofix.zip link wouldn't work. downloaded Combofix from techsupportforum installed and run, but it wouldn't produce a logfile?

New HijackThis log:

Logfile of HijackThis v1.99.1
Scan saved at 17:16, on 06-11-25
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\WINDOWS\system32\sistray.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\cmd.exe
C:\WINDOWS\system32\swsc.exe
C:\WINDOWS\system32\cmd.exe
C:\WINDOWS\system32\swsc.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
C:\Documents and Settings\Andrew\HijackThis.exe

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
O4 - HKLM\..\Run: [vhu26244] RUNDLL32.EXE w009acfd.dll,n 0052623f0000000a009acfd
O4 - HKLM\..\Run: [adiras] adiras.exe
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
O4 - Global Startup: Utility Tray.lnk = C:\WINDOWS\system32\sistray.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.pcservicecall.co.uk
O16 - DPF: {2D2BEE6E-3C9A-4D58-B9EC-458EDB28D0F6} - http://www.drivecleaner.com/.freeware/inst…leanerstart.cab
O16 - DPF: {B64F4A7C-97C9-11DA-8BDE-F66BAD1E3F3A} - http://locator1.cdn.imagesrvr.com/sites/er…easeInstall.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{B822EA58-F843-4AFC-BBD8-B9A12FAD484D}: NameServer = 212.139.132.4 212.139.132.5
O20 - AppInit_DLLs:
O20 - Winlogon Notify: DIFx - C:\WINDOWS\
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
Post #4
Hello rosey,

Please do the following:

Scan with HijackThis. Place a check against each of the following:
O4 - HKLM\..\Run: [vhu26244] RUNDLL32.EXE w009acfd.dll,n 0052623f0000000a009acfd
O16 - DPF: {2D2BEE6E-3C9A-4D58-B9EC-458EDB28D0F6} - http://www.drivecleaner.com/.freeware/inst…leanerstart.cab
Close all windows or browsers except for Hijackthis. Click on Fix Checked when finished and exit HijackThis.

Now run this online scan using Internet Explorer:
Kaspersky Online Scanner from http://www.kaspersky.com/virusscanner

Next Click on Launch Kaspersky Online Scanner

You will be prompted to install an ActiveX component from Kaspersky, Click Yes.
  • The program will launch and then begin downloading the latest definition files:
  • Once the files have been downloaded click on NEXT
  • Now click on Scan Settings
  • In the scan settings make that the following are selected:
  • Scan using the following Anti-Virus database:
  • Standard
  • Scan Options:
  • Scan Archives
  • Scan Mail Bases
  • Click OK
  • Now under select a target to scan:
  • Select My Computer
  • This will program will start and scan your system.
  • The scan will take a while so be patient and let it run.
  • Once the scan is complete it will display if your system has been infected.
  • Now click on the Save as Text button:
  • Save the file to your desktop.
Copy and paste that information from Kapersky in your next post.


Post (reply) with a fresh HijackThis log and the Kapersky log.
Post #5
Hi Susan,

Greetings from a cold wet and miserable Chesterfield!

I have executed your instructions.. no problems running Kaspersky!

Please see below HijackThis Log and Kaspersky report.

Many Thanks

rosey


Logfile of HijackThis v1.99.1
Scan saved at 11:07, on 06-11-26
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\WINDOWS\system32\sistray.exe
C:\WINDOWS\system32\cmd.exe
C:\WINDOWS\system32\swsc.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Documents and Settings\Andrew\HijackThis.exe

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
O4 - HKLM\..\Run: [adiras] adiras.exe
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
O4 - Global Startup: Utility Tray.lnk = C:\WINDOWS\system32\sistray.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.pcservicecall.co.uk
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/d…can_unicode.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{B822EA58-F843-4AFC-BBD8-B9A12FAD484D}: NameServer = 212.139.132.41 212.139.132.42
O20 - AppInit_DLLs:
O20 - Winlogon Notify: DIFx - C:\WINDOWS\
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe




——————————————————————————-
KASPERSKY ONLINE SCANNER REPORT
06-11-26 11:01
Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.83.0
Kaspersky Anti-Virus database last update: 26/11/2006
Kaspersky Anti-Virus database records: 231769
——————————————————————————-

Scan Settings:
Scan using the following antivirus database: standard
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
C:\
D:\

Scan Statistics:
Total number of scanned objects: 39494
Number of viruses found: 3
Number of infected objects: 5 / 0
Number of suspicious objects: 0
Duration of the scan process: 00:32:32

Infected Object Name / Virus Name / Last Action
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped
C:\Documents and Settings\Danielle g\.housecall6.6\Quarantine\RDFX4.exe.bac_a03076/data0004 Infected: Trojan-Downloader.Win32.Small.ctp skipped
C:\Documents and Settings\Danielle g\.housecall6.6\Quarantine\RDFX4.exe.bac_a03076/data0005 Infected: Trojan-Downloader.Win32.Small.ajc skipped
C:\Documents and Settings\Danielle g\.housecall6.6\Quarantine\RDFX4.exe.bac_a03076 NSIS: infected - 2 skipped
C:\Documents and Settings\Danielle g\.housecall6.6\Quarantine\RDFX4.exe.bac_a03076 CryptFF.b: infected - 2 skipped
C:\Documents and Settings\Danielle g\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\Danielle g\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\Danielle g\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\Danielle g\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Danielle g\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Danielle g\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\Danielle g\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\Jason\Local Settings\Temporary Internet Files\Content.IE5\URW75IR6\checkin[1].htm Infected: Trojan-Downloader.VBS.Small.co skipped
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc141\x!x Ladz x!x\x!x Demii N Miivo x!x.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc141\x!x Ladz x!x\x!x Matt x!x.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc141\x!x Ladz x!x\x!x Miii Dwave x!x.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc141\x!x Ladz x!x\x!x Woooo Go Uz x!x.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F03\T101.ithmb Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F04\T102.ithmb Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F05\T103.ithmb Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F06\T104.ithmb Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F07\T105.ithmb Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F08\T106.ithmb Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F09\T107.ithmb Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F10\T108.ithmb Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F11\T109.ithmb Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F12\T110.ithmb Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F13\T111.ithmb Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F14\T112.ithmb Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F15\T113.ithmb Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F16\T114.ithmb Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F17\T115.ithmb Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F18\T116.ithmb Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F19\T117.ithmb Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F20\T118.ithmb Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F21\T119.ithmb Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F22\T120.ithmb Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F23\T121.ithmb Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F24\T122.ithmb Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F25\T123.ithmb Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F26\T124.ithmb Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F27\T125.ithmb Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F28\T126.ithmb Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F29\T127.ithmb Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F30\T128.ithmb Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F31\T129.ithmb Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F32\T130.ithmb Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F33\T131.ithmb Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F34\T132.ithmb Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F35\T133.ithmb Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F36\T134.ithmb Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F37\T135.ithmb Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F38\T136.ithmb Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F39\T137.ithmb Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F40\T138.ithmb Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F41\T139.ithmb Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F42\T140.ithmb Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F43\T141.ithmb Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F44\T142.ithmb Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F45\T143.ithmb Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F46\T144.ithmb Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F47\T145.ithmb Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F48\T146.ithmb Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F49\T147.ithmb Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F50\T148.ithmb Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\Photo Database Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc193\DSCI0027.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc193\DSCI0033.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc193\DSCI0035.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc193\DSCI0050.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc193\DSCI0054.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc193\Thumbs.db Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc240\Thumbs.db Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc241\Thumbs.db Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc242\Thumbs.db Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc263\Thumbs.db Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc264\Thumbs.db Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc265\Thumbs.db Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc266\Thumbs.db Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc267\Thumbs.db Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc268\Thumbs.db Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc269\Thumbs.db Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc270\Thumbs.db Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc271\Thumbs.db Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc273\Thumbs.db Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc274\Thumbs.db Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc275\Thumbs.db Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc276\Thumbs.db Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc277\Desktop.ini Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc277\Thumbs.db Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc483\Beep.cda Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc483\Bite the dust.cda Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc483\Buttons.cda Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc483\dont cha.cda Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc483\feelin good.cda Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc483\Hot Stuff.cda Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc483\How many times how many lies.cda Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc483\i dont need a man.cda Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc483\Right now.cda Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc483\Stickwitu.cda Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc483\sway.cda Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc483\Tainted love.cda Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc483\Wait a minute.cda Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc483\we went as far as we felt like going.cda Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc484\Desktop.ini Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc484\Thumbs.db Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\Thumbs.db Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\Thumbs.db Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Best Friiendz 4eva x!x.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Danii N Demii x!x.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Demii Bii Miivo x!x.bmp Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Demii iin Mavew's Sexii Jumpa x!x.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Demii N Amy x!x.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Erm. . . Wots That x!x.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Erm. . Wts That x!x.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Funii x!x.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Look At Miivo x!x.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Mii Agaiiin x!x.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Mii Agaiin x!x.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Mii Again x!x.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Mii Bii Miivo x!x.bmp Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Mii iin Grey x!x.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Mii iin Orange x!x.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Mii N Hearts x!x.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Mii N Mii Demii At Her House x!x.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Mii N Mii Friinge Wooo x!x.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Mii N Mii Friinge x!x.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Mii N Mii Tamar x!x.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Mii Tamar x!x.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Mii Wiith A Curl iin Mii Haiir x!x.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Mii Wiith Curly Haiir Wooo x!x.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Mii Wiith Curly Haiirx!x.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Mii Wiith Mii Curl x!x.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Mii Wiith Mii Haiir Up Grey x!x.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Mii Wiith Mii Haiir Up x!x.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Mii With Curly Haiir x!x.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Mii Wooo x!x.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Miii Agaiiin x!x.JPG Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Miii Agaiin x!x.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Miii Demii n Amy x!x.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Miii x!x.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x SpoonZ x!x.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Uz x!x.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Wt Are We Doiin x!x.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Ladz x!x\Thumbs.db Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Ladz x!x\x!x Matt x!x.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Ladz x!x\x!x Miii Dwave x!x.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Ladz x!x\x!x Miivo Bii Miivo x!x.bmp Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Mates x!x\Thumbs.db Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Mates x!x\x!x Demii N Miivo x!x.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Mates x!x\x!x Woooo Go Uz x!x.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc489\orange heart.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc489\pink heart.GIF Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc489\puple heart.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc489\Thumbs.db Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc489\x!x Fade Pink x!x.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc489\x!x Grey Heart x!x.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc489\x!x I Cant Help But ….jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc489\x!x Kiss x!x.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc489\x!x Lean Pink x!x.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc489\x!x Lean Purple x!x.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc489\x!x Lean Tone x!x.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc489\x!x Pink Dance x!x.jpg Object is locked skipped
C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc492\Thumbs.db Object is locked skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\Internet Logs\DANNI.ldb Object is locked skipped
C:\WINDOWS\Internet Logs\fwdbglog.txt Object is locked skipped
C:\WINDOWS\Internet Logs\fwpktlog.txt Object is locked skipped
C:\WINDOWS\Internet Logs\IAMDB.RDB Object is locked skipped
C:\WINDOWS\Internet Logs\tvDebug.log Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\Tasks\SCHEDLGU.TXT Object is locked skipped
C:\WINDOWS\Temp\ZLT05e68.TMP Object is locked skipped
C:\WINDOWS\Temp\ZLT05e85.TMP Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped

Scan process completed.
Post #6
Hi rosey,

It is a beautiful day here on the Alabama coast–difficult to believe that Christmas is next month. Kids are wishing for a White Christmas. Dream on! Although I remember back in the 60's it once snowed on New Year's Eve.

You hijackthis log appears to be clean. From the Kapersky log,
the infected files are quarantined except for the following:

C:\Documents and Settings\Jason\Local Settings\Temporary Internet Files\Content.IE5\URW75IR6\checkin[1].htm Infected: Trojan-Downloader.VBS.Small.co skipped

Please download ATF Cleaner by Atribune.

This program is for XP and Windows 2000 only
  • Double-click ATF-Cleaner.exe to run the program.
  • Under Main choose: Select All
  • Click the Empty Selected button.
If you use Firefox browser
  • Click Firefox at the top and choose:Select All
  • Click the Empty Selected button.
  • NOTE: If you would like to keep your saved passwords, please click
  • No at the prompt.
If you use Opera browser
  • Click Opera at the top and choose: Select All
  • Click the Empty Selected button.
  • NOTE:If you would like to keep your saved passwords, please click No at the prompt.
Click Exit on the Main menu to close the program.
For Technical Support, double-click the e-mail address located at the bottom of each menu.

You can permanently delete the file in quarantine.
http://service1.symantec.com/SUPPORT/nav.n…000041213443506

Let's go ahead and delete those files from Quarantine.
Now please use the instructions below to delete the following files out of Quarantine.
C:\Documents and Settings\Danielle g\.housecall6.6\Quarantine\RDFX4.exe.bac_a03076/data0004 Infected: Trojan-Downloader.Win32.Small.ctp skipped
C:\Documents and Settings\Danielle g\.housecall6.6\Quarantine\RDFX4.exe.bac_a03076/data0005 Infected: Trojan-Downloader.Win32.Small.ajc skipped
C:\Documents and Settings\Danielle g\.housecall6.6\Quarantine\RDFX4.exe.bac_a03076 NSIS: infected - 2 skipped
C:\Documents and Settings\Danielle g\.housecall6.6\Quarantine\RDFX4.exe.bac_a03076 CryptFF.b: infected - 2 skipped

Go to the section that describes your version of Norton AntiVirus and follow the steps.

To remove Norton AntiVirus 2006 files from Norton Quarantine and Restore
  • Start Norton AntiVirus.
  • If Norton AntiVirus is installed as part of Norton SystemWorks or Norton Internet Security, then start that program and click Norton AntiVirus.
  • In the left pane, click Reports.
  • Click View Norton Quarantined and Restore
  • In the left pane, select the type of risk that you want to remove.
  • In the right pane, select the files that you want to remove.
  • To select multiple items, press and hold down the Ctrl key while clicking the items that you want to select for deletion. To select everything in Quarantine, click the first item in the list, and then press Shift+End.
  • Click Delete Item.
  • When prompted "Warning! Are you sure that you want to remove this item from Quarantine," click Yes.
  • Close the Quarantine window, and then exit Norton AntiVirus.
Please run Kapersky again and post the log and we will check the difference.
Post #7
Hi Susan, I remember our last white Christmas, four years ago, mind you its never usually a long journey to go out and find some snow. Can't wait for Christmas, my daughter will be eight months old. I know she's not old enough to comprehend and appreciate Christmas, all the same I can't wait! To matters in hand: I've run the ATF Cleaner… Ok Now this machine belongs to my niece and it appear that she doesn't have any antivirus software installed! What would you recommend… Norton? Haven't included log files at this time I'll await your advice on the Antivirus software and install and run it first.
Post #10
Hi Susan, Sorry for the delay, family commitments kept me away from the PC. Have install and now running the AVG antivirus software. which hasn't reported anything nasty. Attached Kaspersky report and Hijackthis log. Many Thanks Rosey ——————————————————————————- KASPERSKY ONLINE SCANNER REPORT 06-11-30 00:23 Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600) Kaspersky Online Scanner version: 5.0.83.0 Kaspersky Anti-Virus database last update: 30/11/2006 Kaspersky Anti-Virus database records: 232883 ——————————————————————————- Scan Settings: Scan using the following antivirus database: standard Scan Archives: true Scan Mail Bases: true Scan Target - My Computer: C:\ D:\ Scan Statistics: Total number of scanned objects: 33484 Number of viruses found: 2 Number of infected objects: 4 / 0 Number of suspicious objects: 0 Duration of the scan process: 00:36:06 Infected Object Name / Virus Name / Last Action C:\Documents and Settings\All Users\Application Data\avg7\Log\emc.log Object is locked skipped C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\avg7log.log Object is locked skipped C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\avg7log.log.lck Object is locked skipped C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped C:\Documents and Settings\Danielle g\.housecall6.6\Quarantine\RDFX4.exe.bac_a03076/data0004 Infected: Trojan-Downloader.Win32.Small.ctp skipped C:\Documents and Settings\Danielle g\.housecall6.6\Quarantine\RDFX4.exe.bac_a03076/data0005 Infected: Trojan-Downloader.Win32.Small.ajc skipped C:\Documents and Settings\Danielle g\.housecall6.6\Quarantine\RDFX4.exe.bac_a03076 NSIS: infected - 2 skipped C:\Documents and Settings\Danielle g\.housecall6.6\Quarantine\RDFX4.exe.bac_a03076 CryptFF.b: infected - 2 skipped C:\Documents and Settings\Danielle g\Cookies\index.dat Object is locked skipped C:\Documents and Settings\Danielle g\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\Danielle g\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\Danielle g\Local Settings\History\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\Danielle g\Local Settings\History\History.IE5\MSHist012006112920061130\index.dat Object is locked skipped C:\Documents and Settings\Danielle g\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\Danielle g\NTUSER.DAT Object is locked skipped C:\Documents and Settings\Danielle g\ntuser.dat.LOG Object is locked skipped C:\Documents and Settings\Danielle g\UserData\index.dat Object is locked skipped C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc141\x!x Ladz x!x\x!x Demii N Miivo x!x.jpg Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc141\x!x Ladz x!x\x!x Matt x!x.jpg Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc141\x!x Ladz x!x\x!x Miii Dwave x!x.jpg Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc141\x!x Ladz x!x\x!x Woooo Go Uz x!x.jpg Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F03\T101.ithmb Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F04\T102.ithmb Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F05\T103.ithmb Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F06\T104.ithmb Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F07\T105.ithmb Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F08\T106.ithmb Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F09\T107.ithmb Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F10\T108.ithmb Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F11\T109.ithmb Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F12\T110.ithmb Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F13\T111.ithmb Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F14\T112.ithmb Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F15\T113.ithmb Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F16\T114.ithmb Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F17\T115.ithmb Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F18\T116.ithmb Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F19\T117.ithmb Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F20\T118.ithmb Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F21\T119.ithmb Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F22\T120.ithmb Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F23\T121.ithmb Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F24\T122.ithmb Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F25\T123.ithmb Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F26\T124.ithmb Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F27\T125.ithmb Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F28\T126.ithmb Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F29\T127.ithmb Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F30\T128.ithmb Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F31\T129.ithmb Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F32\T130.ithmb Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F33\T131.ithmb Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F34\T132.ithmb Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F35\T133.ithmb Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F36\T134.ithmb Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F37\T135.ithmb Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F38\T136.ithmb Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F39\T137.ithmb Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F40\T138.ithmb Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F41\T139.ithmb Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F42\T140.ithmb Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F43\T141.ithmb Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F44\T142.ithmb Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F45\T143.ithmb Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F46\T144.ithmb Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F47\T145.ithmb Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F48\T146.ithmb Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F49\T147.ithmb Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\F50\T148.ithmb Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc192\x!x Giirliies x!x\iPod Photo Cache\Photo Database Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc193\DSCI0027.JPG Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc193\DSCI0033.JPG Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc193\DSCI0035.JPG Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc193\DSCI0050.JPG Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc193\DSCI0054.JPG Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc193\Thumbs.db Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc240\Thumbs.db Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc241\Thumbs.db Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc242\Thumbs.db Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc263\Thumbs.db Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc264\Thumbs.db Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc265\Thumbs.db Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc266\Thumbs.db Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc267\Thumbs.db Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc268\Thumbs.db Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc269\Thumbs.db Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc270\Thumbs.db Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc271\Thumbs.db Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc273\Thumbs.db Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc274\Thumbs.db Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc275\Thumbs.db Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc276\Thumbs.db Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc277\Desktop.ini Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc277\Thumbs.db Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc483\Beep.cda Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc483\Bite the dust.cda Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc483\Buttons.cda Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc483\dont cha.cda Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc483\feelin good.cda Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc483\Hot Stuff.cda Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc483\How many times how many lies.cda Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc483\i dont need a man.cda Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc483\Right now.cda Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc483\Stickwitu.cda Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc483\sway.cda Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc483\Tainted love.cda Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc483\Wait a minute.cda Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc483\we went as far as we felt like going.cda Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc484\Desktop.ini Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc484\Thumbs.db Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\Thumbs.db Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\Thumbs.db Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Best Friiendz 4eva x!x.JPG Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Danii N Demii x!x.jpg Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Demii Bii Miivo x!x.bmp Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Demii iin Mavew's Sexii Jumpa x!x.jpg Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Demii N Amy x!x.jpg Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Erm. . . Wots That x!x.jpg Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Erm. . Wts That x!x.jpg Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Funii x!x.jpg Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Look At Miivo x!x.jpg Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Mii Agaiiin x!x.jpg Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Mii Agaiin x!x.jpg Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Mii Again x!x.jpg Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Mii Bii Miivo x!x.bmp Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Mii iin Grey x!x.jpg Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Mii iin Orange x!x.jpg Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Mii N Hearts x!x.JPG Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Mii N Mii Demii At Her House x!x.jpg Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Mii N Mii Friinge Wooo x!x.jpg Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Mii N Mii Friinge x!x.jpg Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Mii N Mii Tamar x!x.jpg Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Mii Tamar x!x.JPG Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Mii Wiith A Curl iin Mii Haiir x!x.jpg Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Mii Wiith Curly Haiir Wooo x!x.jpg Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Mii Wiith Curly Haiirx!x.jpg Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Mii Wiith Mii Curl x!x.jpg Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Mii Wiith Mii Haiir Up Grey x!x.jpg Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Mii Wiith Mii Haiir Up x!x.jpg Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Mii With Curly Haiir x!x.jpg Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Mii Wooo x!x.jpg Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Miii Agaiiin x!x.JPG Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Miii Agaiin x!x.jpg Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Miii Demii n Amy x!x.jpg Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Miii x!x.jpg Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x SpoonZ x!x.jpg Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Uz x!x.jpg Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Giirliies x!x\x!x Wt Are We Doiin x!x.jpg Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Ladz x!x\Thumbs.db Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Ladz x!x\x!x Matt x!x.jpg Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Ladz x!x\x!x Miii Dwave x!x.jpg Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Ladz x!x\x!x Miivo Bii Miivo x!x.bmp Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Mates x!x\Thumbs.db Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Mates x!x\x!x Demii N Miivo x!x.jpg Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc488\x!x Mates x!x\x!x Woooo Go Uz x!x.jpg Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc489\orange heart.jpg Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc489\pink heart.GIF Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc489\puple heart.jpg Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc489\Thumbs.db Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc489\x!x Fade Pink x!x.jpg Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc489\x!x Grey Heart x!x.jpg Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc489\x!x I Cant Help But ….jpg Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc489\x!x Kiss x!x.jpg Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc489\x!x Lean Pink x!x.jpg Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc489\x!x Lean Purple x!x.jpg Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc489\x!x Lean Tone x!x.jpg Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc489\x!x Pink Dance x!x.jpg Object is locked skipped C:\RECYCLER\S-1-5-21-3090202235-310836079-1638056570-1007\Dc492\Thumbs.db Object is locked skipped C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped C:\WINDOWS\Internet Logs\DANNI.ldb Object is locked skipped C:\WINDOWS\Internet Logs\fwdbglog.txt Object is locked skipped C:\WINDOWS\Internet Logs\fwpktlog.txt Object is locked skipped C:\WINDOWS\Internet Logs\IAMDB.RDB Object is locked skipped C:\WINDOWS\Internet Logs\tvDebug.log Object is locked skipped C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped C:\WINDOWS\Sti_Trace.log Object is locked skipped C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\default Object is locked skipped C:\WINDOWS\system32\config\default.LOG Object is locked skipped C:\WINDOWS\system32\config\SAM Object is locked skipped C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\SECURITY Object is locked skipped C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped C:\WINDOWS\system32\config\software Object is locked skipped C:\WINDOWS\system32\config\software.LOG Object is locked skipped C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\system Object is locked skipped C:\WINDOWS\system32\config\system.LOG Object is locked skipped C:\WINDOWS\system32\h323log.txt Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped C:\WINDOWS\Tasks\SCHEDLGU.TXT Object is locked skipped C:\WINDOWS\Temp\ZLT07f2f.TMP Object is locked skipped C:\WINDOWS\Temp\ZLT07f32.TMP Object is locked skipped C:\WINDOWS\wiadebug.log Object is locked skipped C:\WINDOWS\wiaservc.log Object is locked skipped C:\WINDOWS\WindowsUpdate.log Object is locked skipped Scan process completed. Logfile of HijackThis v1.99.1 Scan saved at 18:56, on 06-12-01 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\LEXBCES.EXE C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\LEXPPS.EXE C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe C:\WINDOWS\system32\cisvc.exe C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe C:\WINDOWS\system32\sistray.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgw.exe C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe C:\Documents and Settings\Andrew\HijackThis.exe O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent O4 - HKLM\..\Run: [adiras] adiras.exe O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_0 O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe O4 - Global Startup: Utility Tray.lnk = C:\WINDOWS\system32\sistray.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll O14 - IERESET.INF: START_PAGE_URL=http://www.pcservicecall.co.uk O17 - HKLM\System\CCS\Services\Tcpip\..\{B822EA58-F843-4AFC-BBD8-B9A12FAD484D}: NameServer = 212.139.132.6 212.139.132.7 O20 - AppInit_DLLs: O20 - Winlogon Notify: DIFx - C:\WINDOWS\ O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
Post #11
Good work rosey!

Your logs appear to be clean. The Kapersky log showed infected files quarantined by Housecall but are no threat.

I would empty the Recycle Bin.

STEP 1.
Reset and Re-enable your System Restore to remove infected files that have been backed up by Windows. The files in System Restore are protected to prevent any programs changing those files. This is the only way to clean these files: (You will lose all previous restore points which are likely to be infected)
  • Turn off System Restore.
  • On the Desktop, right-click My Computer.
  • Click Properties.
  • Click the System Restore tab.
  • Check Turn off System Restore.
  • Click Apply, and then click OK.
Reboot.

Turn ON System Restore.
  • On the Desktop, right-click My Computer.
  • Click Properties.
  • Click the System Restore tab.
  • UN-Check *Turn off System Restore*.
  • Click Apply, and then click OK.

STEP 2.
======
DON’T BECOME OVERCONFIDENT WITH ANTIVIRUS APPLICATIONS INSTALLED!!!

http://forum.malwareremoval.com/viewtopic….39eba6ea0b5e8ee

Stay up to date on security patches and be extremely wary of clicking on links and attachments that arrive unbidden in instant messages and e-mail.

"The number one thing the majority of the malicious code we're seeing now does is disable or delete anti-virus and other security software," Dunham said. "In a lot of cases, once the user clicks on that attachment, it's already too late."


Now that you are clean, please follow these simple steps in order to keep your computer clean and secure:
  • Update your AntiVirus Software - It is imperative that you update your Antivirus software at least once a week (Even more if you wish). If you do not update your antivirus software then it will not be able to catch any of the new variants that may come out.


    Visit Microsoft's Update Site Frequently - It is important that you visit Windows Updates regularly. This will ensure your computer has always the latest security updates available installed on your computer. If there are new updates to install, install them immediately, reboot your computer, and revisit the site until there are no more critical updates.

  • Install Spybot - Search and Destroy - Install and download Spybot - Search and Destroy with its TeaTimer option. This will provide realtime spyware & hijacker protection on your computer alongside your virus protection. You should also scan your computer with program on a regular basis just as you would an antivirus software.
    A tutorial on installing & using this product can be found here:
    Using Spybot - Search & Destroy to remove Spyware , Malware, and Hijackers

  • Install Ad-Aware - Install and download Ad-Aware. ou should also scan your computer with program on a regular basis just as you would an antivirus software in conjunction with Spybot.
    A tutorial on installing & using this product can be found here:
    Using Ad-aware to remove Spyware, Malware, & Hijackers from Your Computer

  • Install SpywareBlaster - SpywareBlaster will added a large list of programs and sites into your Internet Explorer settings that will protect you from running and downloading known malicious programs.
    A tutorial on installing & using this product can be found here:
    Using SpywareBlaster to protect your computer from Spyware and Malware

  • Update all these programs regularly - Make sure you update all the programs I have listed regularly. Without regular updates you WILL NOT be protected when new malicious programs are released.

  • More info on how to prevent malware you can also find here (By Tony Klein)
Follow this list and your potential for being infected again will reduce dramatically.

Thank you for allowing me to assist you.

Susan
Post #12
Hi Susan, I've downloaded all the software and undated everything as recommended. I can't thank you enough for your help and expertise. Best wishes to you and your family!
Post #14
Glad we could be of assistance. This topic is now closed. If you wish it reopened, please send us an email (Click for address) with a link to your thread.

Do not bother contacting us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.
Make sure you use proper prevention to keep from having problems occur to your computer in the future.

Coyote's Installed programs for prevention:

http://forums.tomcoyote.org/index.php?showtopic=31418

The help you receive here is free. If you wish to show your appreciation, then you may donate to help keep us online.

Visit the CoyoteStore http://TomCoyote.org/coyotestore.php

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI