What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Hijacked possible trojan

3 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
My AV proggy found a trojan called backdoor trojan win32 vb kl which it seemed to struggle to remove

Logfile of HijackThis v1.99.1
Scan saved at 14:45:12, on 15/12/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpcc.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpm.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpcc.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Yahoo!\Yahoo! Widget Engine\YahooWidgetEngine.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Yahoo!\Yahoo! Widget Engine\YahooWidgetEngine.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\explorer.exe
C:\hjt\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.wanadoo.co.uk/iesearch/default.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.wanadoo.co.uk
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer Provided By Wanadoo
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O3 - Toolbar: Wanadoo - {8B68564D-53FD-4293-B80C-993A9F3988EE} - C:\WINDOWS\system32\WSBar.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon
O4 - HKLM\..\Run: [AVPCC] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpcc.exe" /wait
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\RunServices: [Win32] c:\documents and settings\stevo\start menu\programs\startup\win32.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: Yahoo! Widget Engine.lnk = C:\Program Files\Yahoo!\Yahoo! Widget Engine\YahooWidgetEngine.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Search with Wanadoo - res://C:\WINDOWS\system32\WSBar.dll/VSearch.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0D6709DD-4ED8-40CA-B459-2757AEEF7BEE} (Dldrv2 Control) - http://download.gigabyte.com.tw/object/Dldrv.ocx
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/…b?1162581307937
O16 - DPF: {E8F628B5-259A-4734-97EE-BA914D7BE941} (Driver Agent ActiveX Control) - http://driveragent.com/files/driveragent.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{B16634AE-E422-4BEA-8043-B01BE740075E}: NameServer = 195.92.195.95 195.92.195.94
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVP Control Centre Service (AVPCC) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpcc.exe" /service (file missing)
O23 - Service: KAV Monitor Service (KAVMonitorService) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpm.exe" /service (file missing)
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

AV log

;#15 December 2006, 09:53:17
;
;
; Save report file = Yes
; Report file name = avp32.rpt
; Show pack info in the report = No
; Show clean object info in the report = No
; Append = No
; Limit size to (Kb) = Yes
; Limit size = 2048
; For renaming of infected objects use = Special folder
; Folder name = Infected
; Use quarantine = No
; Enable delete or rename non-disinfected archives = Yes
; Assign the scan process priority to = Normal
;
;
;
; "My Computer"
; Enable processing = Yes
; Actions in case of virus detection = Disinfect
; Make backup file before disinfection = No
; If disinfection is impossible = Delete object
; Scan local removable disk drives = Yes
; Scan local hard disk drives = Yes
; Scan network drives = No
; Scan files of following types = Yes
; Scan files of following types = All
; Exclude by mask = No
; Scan sectors = Yes
; Scan memory = Yes
; Scan MS Outlook Express data bases = Yes
; Scan StartUp objects = Yes
; Scan compound files of the following types = Yes
; Archives = Yes
; Archives with self-extractors = Yes
; Mail databases = Yes
; Plain mail = Yes
; Embedded objects = Yes
; Enable code analyser = Yes
;
; "C:\"
; Enable processing = Yes
; Actions in case of virus detection = Ask user
; Scan files of following types = Yes
; Scan files of following types = All
; Exclude by mask = No
; Scan sectors = Yes
; Scan compound files of the following types = Yes
; Archives = Yes
; Archives with self-extractors = Yes
; Mail databases = Yes
; Plain mail = Yes
; Embedded objects = Yes
; Enable code analyser = Yes
;
; "D:\"
; Enable processing = No
; Actions in case of virus detection = Disinfect
; Make backup file before disinfection = No
; If disinfection is impossible = Delete object
; Scan files of following types = Yes
; Scan files of following types = All
; Exclude by mask = No
; Scan sectors = Yes
; Scan compound files of the following types = Yes
; Archives = Yes
; Archives with self-extractors = Yes
; Mail databases = Yes
; Plain mail = Yes
; Embedded objects = Yes
; Enable code analyser = Yes
;
;
<200.1500.10101.2.103>
OK Warning Suspicious Infected <[removed].1304.e04>
Disinfected Deleted Renamed Quarantined <200.b04.d04.c04.1804>
Will be deleted after reboot Will be renamed after reboot Disinfection failed Packed <200.1704.1604.a04.1004>
Archive Encrypted Corrupted Unknown format <200.1104.f04.704.1404>
Password protected Locked by another process Read access denied Disk is out of space <200.804.304.504.604>
I/O Error Kernel fault Interface fault Second pass <200.404.[removed]>
Object Result Description <100.3c00000c.f000018.19000010>
C:\Documents and Settings\NetworkService\NTUSER.DAT Read access denied
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Read access denied
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Read access denied
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Read access denied
C:\Documents and Settings\stevo\NTUSER.DAT Read access denied
C:\Documents and Settings\stevo\ntuser.dat.LOG Read access denied
C:\Documents and Settings\stevo\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Read access denied
C:\Documents and Settings\stevo\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Read access denied
C:\Documents and Settings\stevo\Local Settings\Temporary Internet Files\Content.IE5\K52BSD6J\Codecs6030_allin1[1].exe Unknown format SetupFactory
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/Ad-Aware SE Default.skn Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/arrow1.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/arrow2.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/bck1.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/bt11.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/bt12.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/bt13.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/bt21.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/bt22.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/bt23.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/bt31.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/bt32.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/bt33.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/bt41.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/bt42.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/bt43.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/bt51.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/bt52.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/bt53.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/bt61.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/bt62.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/checkbox1.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/checkbox2.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/checkbox3.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/checkbox4.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/defbtn1.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/defbtn2.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/defbtn3.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/glyph1.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/glyph2.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/glyph3.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/glyph4.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/glyph5.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/glyph6.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/glyph7.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/main.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/preview.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/sprite1.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/arrow1.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/arrow2.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/awgrad1.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/awgrad2.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/bck1.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/bck2.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/bt11.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/bt12.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/bt13.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/bt21.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/bt22.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/bt23.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/bt31.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/bt32.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/bt33.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/bt41.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/bt42.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/bt43.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/bt51.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/bt52.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/bt53.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/bt61.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/bt62.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/checkbox1.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/checkbox2.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/checkbox3.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/checkbox4.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/defbtn1.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/defbtn2.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/defbtn3.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/glyph1.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/glyph2.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/glyph3.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/glyph4.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/glyph5.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/glyph6.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/glyph7.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/greyskin.skn Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/main.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/preview.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/sprite1.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/tab1.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/tab2.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/arrow1.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/arrow2.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/awgrad1.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/awgrad2.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/bck1.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/bck2.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/bt11.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/bt12.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/bt13.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/bt21.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/bt22.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/bt23.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/bt31.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/bt32.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/bt33.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/bt41.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/bt42.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/bt43.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/bt51.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/bt52.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/bt53.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/bt61.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/bt62.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/checkbox1.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/checkbox2.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/checkbox3.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/checkbox4.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/defbtn1.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/defbtn2.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/defbtn3.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/glyph1.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/glyph2.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/glyph3.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/glyph4.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/glyph5.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/glyph6.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/glyph7.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/main.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/preview.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/sprite1.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/tab1.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/tab2.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/testskin.skn Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/arrow1.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/arrow2.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/awgrad1.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/awgrad2.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/bck1.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/bck2.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/bt11.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/bt12.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/bt13.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/bt21.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/bt22.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/bt23.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/bt31.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/bt32.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/bt33.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/bt41.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/bt42.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/bt43.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/bt51.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/bt52.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/bt53.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/bt61.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/bt62.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/checkbox1.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/checkbox2.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/checkbox3.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/checkbox4.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/defbtn1.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/defbtn2.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/defbtn3.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/glyph1.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/glyph2.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/glyph3.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/glyph4.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/glyph5.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/glyph6.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/glyph7.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/main.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/mediumblue.skn Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/preview.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/sprite1.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/tab1.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/tab2.bmp Password protected
C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/arrow1.bmp Password protected
C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/arrow2.bmp Password protected
C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/bck1.bmp Password protected
C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/bck2.bmp Password protected
C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/bt11.bmp Password protected
C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/bt12.bmp Password protected
C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/bt13.bmp Password protected
C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/bt21.bmp Password protected
C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/bt22.bmp Password protected
C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/bt23.bmp Password protected
C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/bt31.bmp Password protected
C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/bt32.bmp Password protected
C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/bt33.bmp Password protected
C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/bt41.bmp Password protected
C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/bt42.bmp Password protected
C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/bt43.bmp Password protected
C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/bt51.bmp Password protected
C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE d
Post #2
Hi Stevo67 and welcome to the TC Forums.

Run hijackthis. Hit None of the above, Click Do a System Scan Only. Put a Check in the box on the left side on this:

O4 - HKLM\..\RunServices: [Win32] c:\documents and settings\stevo\start menu\programs\startup\win32.exe

Then close all windows except this one and press Fix checked.

Please delete the following file:
c:\documents and settings\stevo\start menu\programs\startup\win32.exe<–File

Download ATF (Atribune Temp File) Cleaner© by Atribune to your desktop.

Double-click ATF Cleaner.exe to open it.

Under Main select the following:
Under Main choose: Select All
Click the Empty Selected button.

If you use Firefox:
Click Firefox at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click NO at the prompt.

It's normal after running ATF cleaner that the PC will be slower to boot the first time.

I would also like to have you run an online virus scan if possible:
Using Internet Explorer, click on Kaspersky Online Scanner * You will be prompted to install an ActiveX component from Kaspersky, Click 'Yes'.
* The program will launch and then start to download the latest definition files.
* Once the scanner is installed and the definitions downloaded, click 'Next'.
* Now click on 'Scan Settings'
* In the scan settings make sure that the following are selected:
o Scan using the following Anti-Virus database: 'Extended' (If available, otherwise 'Standard')
o Scan Options: 'Scan Archives' and 'Scan Mail Bases'
* Click 'OK'
* Now under 'Select a target to scan' select 'My Computer'
* The scan will take a while, so be patient and let it run. Once the scan is complete, it will display whether your system has been infected.
* Now click on the 'Save as Text' button:
* Save the file to your desktop.
Please post the Kaspersky report and a new HijackThis log. Also let me know how things are running at this point.

Thanks,
Dave
Post #3
Hi IndiGenus thanx for the quick reply
here is my online AVG report and HJT report
my pooter seems to be running fine I have not noticed my AVG proggy finding the trojan

Logfile of HijackThis v1.99.1
Scan saved at 21:20:02, on 17/12/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpcc.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpm.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpcc.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\system32\RunDLL32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Yahoo!\Yahoo! Widget Engine\YahooWidgetEngine.exe
C:\Program Files\Yahoo!\Yahoo! Widget Engine\YahooWidgetEngine.exe
C:\hjt\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.wanadoo.co.uk/iesearch/default.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.wanadoo.co.uk
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer Provided By Wanadoo
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O3 - Toolbar: Wanadoo - {8B68564D-53FD-4293-B80C-993A9F3988EE} - C:\WINDOWS\system32\WSBar.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon
O4 - HKLM\..\Run: [AVPCC] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpcc.exe" /wait
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: Yahoo! Widget Engine.lnk = C:\Program Files\Yahoo!\Yahoo! Widget Engine\YahooWidgetEngine.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Search with Wanadoo - res://C:\WINDOWS\system32\WSBar.dll/VSearch.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0D6709DD-4ED8-40CA-B459-2757AEEF7BEE} (Dldrv2 Control) - http://download.gigabyte.com.tw/object/Dldrv.ocx
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/d…can_unicode.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/…b?1162581307937
O16 - DPF: {E8F628B5-259A-4734-97EE-BA914D7BE941} (Driver Agent ActiveX Control) - http://driveragent.com/files/driveragent.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{B16634AE-E422-4BEA-8043-B01BE740075E}: NameServer = 195.92.195.94 195.92.195.95
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVP Control Centre Service (AVPCC) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpcc.exe" /service (file missing)
O23 - Service: KAV Monitor Service (KAVMonitorService) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpm.exe" /service (file missing)
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

KASPERSKY ONLINE SCANNER REPORT
Sunday, December 17, 2006 9:18:45 PM
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.83.0
Kaspersky Anti-Virus database last update: 17/12/2006
Kaspersky Anti-Virus database records: 237355
——————————————————————————-

Scan Settings:
Scan using the following antivirus database: standard
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
C:\
D:\
F:\

Scan Statistics:
Total number of scanned objects: 34027
Number of viruses found: 0
Number of infected objects: 0 / 0
Number of suspicious objects: 0
Duration of the scan process: 00:18:25

Infected Object Name / Virus Name / Last Action
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\stevo\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\stevo\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\stevo\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\stevo\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\stevo\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\stevo\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\stevo\ntuser.dat.LOG Object is locked skipped
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\AVPCCServ.log Object is locked skipped
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\AVPCCUser.log Object is locked skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\Internet Logs\COMPO.ldb Object is locked skipped
C:\WINDOWS\Internet Logs\fwdbglog.txt Object is locked skipped
C:\WINDOWS\Internet Logs\fwpktlog.txt Object is locked skipped
C:\WINDOWS\Internet Logs\IAMDB.RDB Object is locked skipped
C:\WINDOWS\Internet Logs\tvDebug.log Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\Temp\kav2.tmp Object is locked skipped
C:\WINDOWS\Temp\ZLT05665.TMP Object is locked skipped
C:\WINDOWS\Temp\ZLT05668.TMP Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
D:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped

Scan process completed.

Stevo
Post #4
Hi stevo,

Good to hear things are running better. To keep them that way I recommend the following:

Reset and Re-enable your System Restore to remove infected files that have been backed up by Windows. The files in System Restore are protected to prevent any programs changing those files. This is the only way to clean these files: (You will lose all previous restore points which may be infected anyway).

Click Start>Help and Support>Undo changes to your computer with System Restore
Select Create A Restore Point then click Next. Give it a name it and then click Create

Click Start>Run and type Cleanmgr
Click the More Options Tab.
Click Clean Up in the System Restore section.

You've got some good protection in place. Just make sure to keep it updated and run regular scans.

Here is a great link to a post here at TC on securing your PC after an attack.

http://forums.tomcoyote.org/index.php?show…mp;#entry257163

Follow this list and your potential for being infected again will reduce dramatically.

Glad I was able to help.

Dave
Post #5
Glad we could be of assistance. This topic is now closed. If you wish it reopened, please send us an email (Click for address) with a link to your thread.

Do not bother contacting us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.
Make sure you use proper prevention to keep from having problems occur to your computer in the future.

Coyote's Installed programs for prevention:

http://forums.tomcoyote.org/index.php?showtopic=31418

The help you receive here is free. If you wish to show your appreciation, then you may donate to help keep us online.

Visit the CoyoteStore http://TomCoyote.org/coyotestore.php

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI