[Resolved]Cant Fix With Anything... Hjt Log Inside

Hello BoostedH23a1 and welcome to the TomCoyote Forums

My name is Trevuren and I will be helping you with your problem.


A. 1. Go to Start->Run and type in notepad and hit OK.

2. Then copy and paste the content of the following codebox into Notepad:

sc stop "Viewpoint Manager Service"
sc delete "Viewpoint Manager Service"
del delete.bat

3. Save the file as "delete.bat". Make sure to save it with the quotes.

4. Double click delete.bat.


B. Now using the Add/Remove Programs module in your Control Panel, UNINSTALL the following program: Viewpoint


C. Please run the following program:

• Please download WinHelp2002's DelDomains by right-clicking on the following link, and choosing "Save Target As": DelDomains.inf to your Desktop
  http://www.mvps.org/winhelp2002/DelDomains.inf
  
  
• Then go to the desktop, right click on DelDomains.inf, and choose Install. You may not see any noticeable changes or prompts; this is normal.
  
• Then please restart your computer and post a fresh HJT log
  Note: You will have to reimmunize with SpywareBlaster, IE-SPYADS, and/or Spybot after doing this if you were using these features before.

Regards,

Trevuren

Please download this file - combofix.exe by sUBs

• Double click combofix.exe & follow the prompts.
• When finished, it will produce a log. Please save that log to post in your next reply along with a fresh HJT log.

Note:
Do not mouse-click combofix's window while it is running. That may cause it to stall.

Regards,

Trevuren

A. Please RUN HijackThis

• Click the SCAN button to produce a log.
  
  
• Place a check mark beside each one of the following items:
  
  O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
  O16 - DPF: {BDEE1959-AB6B-4745-A29B-F492861102CC} -
  
  
• Now with all the items selected, and all windows closed except for HJT, delete them by clicking the FIX checked button. Close the HijackThis window.

B. 1. Please open Notepad

• Click Start , then Run
• Type notepad .exe in the Run Box.

2. Now copy/paste the entire content of the codebox below into the Notepad window:

File::
C:\WINDOWS\system32\wyadd.bak2
C:\WINDOWS\system32\wyadd.bak1
C:\Program Files\Online Services\prokycortypr.html

Folder::
C:\Program Files\Viewpoint

Registry::
[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components]
"Source"=- 
"FriendlyName"=-

3. Save the above as CFScript.txt

4. Then drag the CFScript.txt into ComboFix.exe as depicted in the animation below. This will start ComboFix again.

[external image: Posted Image]


5. After reboot, (in case it asks to reboot), please post the following reports/logs into your next reply:

• Combofix.txt

.


C.
First download AVG AntiSpyware from HERE and save that file to your desktop.
This is a 30 day trial of the program

• Once you have downloaded AVG AntiSpyware, locate the icon on the desktop and double-click it to launch the set up program.
• Once the setup is complete, run AVG AntiSpyware and update the definition files.
• On the main screen select the icon "Update" then select the "Update now" link.
  • Next select the "Start Update" button, the update will start and a progress bar will show the updates being installed.
• Once the update has completed select the "Scanner" icon at the top of the screen, then select the "Settings" tab.
• Once in the Settings screen click on "Recommended actions" and then select "Quarantine".
• Under "Reports"
  • Select "Automatically generate report after every scan"
  • Un-Select "Only if threats were found"

Close AVG AntiSpyware, Do Not run a scan just yet, we will shortly.

• Reboot your computer into Safe Mode. You can do this by restarting your computer and continually tapping the F8 key until a menu appears. Use your up arrow key to highlight SafeMode then hit enter.
  IMPORTANT: Do not open any other windows or programs while AVG AntiSpyware is scanning, it may interfere with the scanning proccess:
• Launch AVG AntiSpyware by double-clicking the icon on your desktop.
• Select the "Scanner" icon at the top and then the "Scan" tab then click on "Complete System Scan".
• AVG AntiSpyware will now begin the scanning process, be patient this may take a little time.
  Once the scan is complete do the following:
• If you have any infections you will prompted, then select "Apply all actions"
• Next select the "Reports" icon at the top.
• Select the "Save report as" button in the lower left hand of the screen and save it to a text file on your system (make sure to remember where you saved that file, this is important).
• Close AVG AntiSpyware and reboot your system back into Normal Mode and post the results of the report scan along with a fresh HJT log for review.

I believe that you scanned with AVG Anti-Virus and not AVG Antispyware as requested.

First download AVG AntiSpyware from HERE and save that file to your desktop.
This is a 30 day trial of the program

If this is the case, please download the AntiSpyware program and follow my previous instructions.

Thanks,

Trevuren

i have avg internet security 7.5 it has like 8 or 9 componets one of which is antispyware

will downloaded that conflict with my licensed version?

AVG Internet Security:

Includes

* Anti-Virus protects from viruses, worms and trojans
* Anti-Spyware protects from spyware, adware and other malicious programs
* Anti-Spam filters spam and protects against phishing attacks
* Firewall protects from hackers

It should be part of the suite.

it is, but it scans for everything at the same time…. that was everything it found in the log i posted

That's good then

Let's make sure and give your system a deep system scan:

Please do an online scan with Kaspersky Online Virus Scanner (Use Internet Explorer as your Browser)

Note: If you have used this particular scanner before, you MAY HAVE YO UNINSTALL the program through Add/Remove Programs before downloading the new ActiveX component

Next Click on Free Virus Scanner, then Kaspersky Online Scanner

You will be prompted to install an ActiveX component from Kaspersky, Click Yes.

• The program will launch and then begin downloading the latest definition files:
• Once the files have been downloaded click on NEXT
  
• Now click on Scan Settings
• In the scan settings make that the following are selected:
  • Scan using the following Anti-Virus database:
  Standard
  
  • Scan Options:
  Scan Archives
  Scan Mail Bases
• Click OK
• Now under select a target to scan:Select My Computer
• This will program will start and scan your system.
• The scan will take a while so be patient and let it run.
• Once the scan is complete it will display if your system has been infected.
  • Now click on the Save as Text button:
• Save the file to your desktop.
• Copy and paste that information into your next post.

Regards

Trevuren

——————————————————————————- KASPERSKY ONLINE SCANNER REPORT Friday, July 13, 2007 7:28:39 AM Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600) Kaspersky Online Scanner version: 5.0.93.0 Kaspersky Anti-Virus database last update: 13/07/2007 Kaspersky Anti-Virus database records: 361868 ——————————————————————————- Scan Settings: Scan using the following antivirus database: extended Scan Archives: true Scan Mail Bases: true Scan Target - My Computer: A:\ C:\ D:\ E:\ F:\ G:\ Scan Statistics: Total number of scanned objects: 102042 Number of viruses found: 27 Number of infected objects: 77 Number of suspicious objects: 2 Duration of the scan process: 01:39:18 Infected Object Name / Virus Name / Last Action C:\Documents and Settings\All Users\Application Data\avg7\Log\emc.log Object is locked skipped C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\avg7log.log Object is locked skipped C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\avg7log.log.lck Object is locked skipped C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\AvgFwLog.log Object is locked skipped C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\AvgFwLog.log.lck Object is locked skipped C:\Documents and Settings\All Users\Application Data\Microsoft\eHome\logs\ehRecvr.log Object is locked skipped C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped C:\Documents and Settings\All Users\Application Data\Pure Networks\Network Magic\Log\logfile.nmsrvc_exe.txt Object is locked skipped C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\YazzleSudoku.zip/Yazzle1281OinUninstaller.exe Suspicious: Password-protected-EXE skipped C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\YazzleSudoku.zip ZIP: suspicious - 1 skipped C:\Documents and Settings\All Users\Documents\Recorded TV\TempRec\TempSBE\MSDVRMM_3761402969_589824_15013 Object is locked skipped C:\Documents and Settings\All Users\Documents\Recorded TV\TempRec\TempSBE\SBE3.tmp Object is locked skipped C:\Documents and Settings\All Users\Documents\Recorded TV\TempRec\{54038E71-9E3F-49F7-B205-DE3840D4B3CC}.TmpSBE Object is locked skipped C:\Documents and Settings\All Users\DRM\Cache\Indiv02.tmp Object is locked skipped C:\Documents and Settings\All Users\DRM\drmstore.hds Object is locked skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\arvrlfot.dll.bac_a01016 Infected: Trojan-Spy.Win32.VBStat.h skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\b103.exe.bac_a03760/stream/data0002 Infected: Trojan-Downloader.Win32.TSUpdate.o skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\b103.exe.bac_a03760/stream/data0004 Infected: not-a-virus:AdWare.Win32.Softomate.u skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\b103.exe.bac_a03760/stream Infected: not-a-virus:AdWare.Win32.Softomate.u skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\b103.exe.bac_a03760 NSIS: infected - 3 skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\b103.exe.bac_a03760 CryptFF.b: infected - 3 skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\b122.exe.dat.bac_a03428/Documents and Settings/DJ KoVrT/Local Settings/Temp/b122.exe/stream/data0002 Infected: not-a-virus:AdWare.Win32.Rond.a skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\b122.exe.dat.bac_a03428/Documents and Settings/DJ KoVrT/Local Settings/Temp/b122.exe/stream/data0004 Infected: not-a-virus:AdWare.Win32.Softomate.u skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\b122.exe.dat.bac_a03428/Documents and Settings/DJ KoVrT/Local Settings/Temp/b122.exe/stream Infected: not-a-virus:AdWare.Win32.Softomate.u skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\b122.exe.dat.bac_a03428/Documents and Settings/DJ KoVrT/Local Settings/Temp/b122.exe Infected: not-a-virus:AdWare.Win32.Softomate.u skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\b122.exe.dat.bac_a03428 ZIP: infected - 4 skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\b122.exe.dat.bac_a03428 CryptFF.b: infected - 4 skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\b128.exe.dat.bac_a03428/Documents and Settings/DJ KoVrT/Local Settings/Temp/b128.exe/stream/data0002/data0002 Infected: Trojan-Downloader.Win32.PurityScan.eh skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\b128.exe.dat.bac_a03428/Documents and Settings/DJ KoVrT/Local Settings/Temp/b128.exe/stream/data0002 Infected: Trojan-Downloader.Win32.PurityScan.eh skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\b128.exe.dat.bac_a03428/Documents and Settings/DJ KoVrT/Local Settings/Temp/b128.exe/stream/data0004 Infected: not-a-virus:AdWare.Win32.Softomate.u skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\b128.exe.dat.bac_a03428/Documents and Settings/DJ KoVrT/Local Settings/Temp/b128.exe/stream Infected: not-a-virus:AdWare.Win32.Softomate.u skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\b128.exe.dat.bac_a03428/Documents and Settings/DJ KoVrT/Local Settings/Temp/b128.exe Infected: not-a-virus:AdWare.Win32.Softomate.u skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\b128.exe.dat.bac_a03428 ZIP: infected - 5 skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\b128.exe.dat.bac_a03428 CryptFF.b: infected - 5 skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\ckhqqyrh.dll.bac_a01016 Infected: Trojan-Spy.Win32.VBStat.h skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\core.sys.bac_a01016 Infected: Rootkit.Win32.Agent.eq skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\cwtjhncj.dll.bac_a01016 Infected: Trojan.Win32.BHO.g skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\Dc1.rar.bac_a01016/Setup.exe Infected: Backdoor.Win32.IRCBot.dd skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\Dc1.rar.bac_a01016 ZIP: infected - 1 skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\Dc1.rar.bac_a01016 CryptFF.b: infected - 1 skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\dciljunr.dll.bac_a01016 Infected: not-a-virus:AdWare.Win32.Virtumonde.ar skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\ddcawtt.dll.bac_a01016 Infected: not-a-virus:AdWare.Win32.Virtumonde.jp skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\dxdcsdhc.dll.bac_a01016 Infected: Trojan.Win32.BHO.g skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\efcywxu.dll.bac_a01016 Infected: not-a-virus:AdWare.Win32.Virtumonde.jp skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\fkcsjkvt.dll.bac_a01016 Infected: Trojan-Spy.Win32.VBStat.h skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\htxpfrnx.dll.bac_a01016 Infected: Trojan-Spy.Win32.VBStat.h skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\install.exe.bac_a01016 Infected: Trojan-Downloader.Win32.Adload.jm skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\is66953.exe.bac_a03428 Infected: not-a-virus:AdWare.Win32.Virtumonde.bq skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\j2291537.dll.bac_a01016 Infected: Trojan-Clicker.Win32.Small.mw skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\jkkigde.dll.bac_a01016 Infected: not-a-virus:AdWare.Win32.Virtumonde.jp skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\labunubiq.dll.bac_a01016 Infected: Trojan.Win32.BHO.ab skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\lkosrcmk.dll.bac_a01016 Infected: not-a-virus:AdWare.Win32.Virtumonde.kb skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\retadpu1000106.exe.bac_a01016 Infected: Trojan-Downloader.Win32.Agent.bls skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\riuia.exe.dat.bac_a03428/Program Files/Common Files/riui/riuia.exe Infected: Trojan-Downloader.Win32.TSUpdate.l skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\riuia.exe.dat.bac_a03428 ZIP: infected - 1 skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\riuia.exe.dat.bac_a03428 CryptFF.b: infected - 1 skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\riuil.exe.dat.bac_a03428/Program Files/Common Files/riui/riuil.exe Infected: Trojan-Downloader.Win32.TSUpdate.r skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\riuil.exe.dat.bac_a03428 ZIP: infected - 1 skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\riuil.exe.dat.bac_a03428 CryptFF.b: infected - 1 skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\riuim.exe.dat.bac_a03428/Program Files/Common Files/riui/riuim.exe Infected: Trojan-Downloader.Win32.TSUpdate.n skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\riuim.exe.dat.bac_a03428 ZIP: infected - 1 skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\riuim.exe.dat.bac_a03428 CryptFF.b: infected - 1 skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\riuip.exe.dat.bac_a03428/Program Files/Common Files/riui/riuip.exe Infected: Trojan-Downloader.Win32.TSUpdate.f skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\riuip.exe.dat.bac_a03428 ZIP: infected - 1 skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\riuip.exe.dat.bac_a03428 CryptFF.b: infected - 1 skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\sdexe.exe.dat.bac_a03428/Documents and Settings/DJ KoVrT/Local Settings/Temp/sdexe.exe Infected: Trojan-Downloader.Win32.PurityScan.af skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\sdexe.exe.dat.bac_a03428 ZIP: infected - 1 skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\sdexe.exe.dat.bac_a03428 CryptFF.b: infected - 1 skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\svchosts.exe.dat.bac_a03428/WINDOWS/system32/svchosts.exe Infected: Trojan-Downloader.Win32.Agent.bca skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\svchosts.exe.dat.bac_a03428 ZIP: infected - 1 skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\svchosts.exe.dat.bac_a03428 CryptFF.b: infected - 1 skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\tsinstall_4_0_4_0_b4.exe.dat.bac_a03428/Documents and Settings/DJ KoVrT/Local Settings/Temp/tsinstall_4_0_4_0_b4.exe/WISE0009.BIN Infected: Trojan-Downloader.Win32.TSUpdate.n skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\tsinstall_4_0_4_0_b4.exe.dat.bac_a03428/Documents and Settings/DJ KoVrT/Local Settings/Temp/tsinstall_4_0_4_0_b4.exe/WISE0010.BIN Infected: Trojan-Downloader.Win32.TSUpdate.p skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\tsinstall_4_0_4_0_b4.exe.dat.bac_a03428/Documents and Settings/DJ KoVrT/Local Settings/Temp/tsinstall_4_0_4_0_b4.exe/WISE0011.BIN Infected: Trojan-Downloader.Win32.TSUpdate.l skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\tsinstall_4_0_4_0_b4.exe.dat.bac_a03428/Documents and Settings/DJ KoVrT/Local Settings/Temp/tsinstall_4_0_4_0_b4.exe/WISE0012.BIN Infected: Trojan-Downloader.Win32.TSUpdate.f skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\tsinstall_4_0_4_0_b4.exe.dat.bac_a03428/Documents and Settings/DJ KoVrT/Local Settings/Temp/tsinstall_4_0_4_0_b4.exe Infected: Trojan-Downloader.Win32.TSUpdate.f skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\tsinstall_4_0_4_0_b4.exe.dat.bac_a03428 ZIP: infected - 5 skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\tsinstall_4_0_4_0_b4.exe.dat.bac_a03428 CryptFF.b: infected - 5 skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\tsupdate_4_0_4_1_b3.exe.dat.bac_a03428/Documents and Settings/DJ KoVrT/Local Settings/Temp/tsupdate_4_0_4_1_b3.exe/WISE0009.BIN Infected: Trojan-Downloader.Win32.TSUpdate.n skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\tsupdate_4_0_4_1_b3.exe.dat.bac_a03428/Documents and Settings/DJ KoVrT/Local Settings/Temp/tsupdate_4_0_4_1_b3.exe/WISE0010.BIN Infected: Trojan-Downloader.Win32.TSUpdate.r skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\tsupdate_4_0_4_1_b3.exe.dat.bac_a03428/Documents and Settings/DJ KoVrT/Local Settings/Temp/tsupdate_4_0_4_1_b3.exe/WISE0011.BIN Infected: Trojan-Downloader.Win32.TSUpdate.l skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\tsupdate_4_0_4_1_b3.exe.dat.bac_a03428/Documents and Settings/DJ KoVrT/Local Settings/Temp/tsupdate_4_0_4_1_b3.exe/WISE0012.BIN Infected: Trojan-Downloader.Win32.TSUpdate.f skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\tsupdate_4_0_4_1_b3.exe.dat.bac_a03428/Documents and Settings/DJ KoVrT/Local Settings/Temp/tsupdate_4_0_4_1_b3.exe Infected: Trojan-Downloader.Win32.TSUpdate.f skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\tsupdate_4_0_4_1_b3.exe.dat.bac_a03428 ZIP: infected - 5 skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\tsupdate_4_0_4_1_b3.exe.dat.bac_a03428 CryptFF.b: infected - 5 skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\Update.exe.bac_a01016 Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\Update.exe.bac_a03428 Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\wr-1-2000219.exe.bac_a03428 Infected: Trojan-Downloader.Win32.Agent.bls skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\YazzleBundle-1281.exe.bac_a03428/data0002 Infected: Trojan-Downloader.Win32.PurityScan.eg skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\YazzleBundle-1281.exe.bac_a03428 NSIS: infected - 1 skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\YazzleBundle-1281.exe.bac_a03428 CryptFF.b: infected - 1 skipped C:\Documents and Settings\DJ KoVrT\.housecall6.6\Quarantine\ysbactivex.dll.bac_a01016 Infected: Trojan-Downloader.Win32.IstBar.gen skipped C:\Documents and Settings\DJ KoVrT\Application Data\$_hpcst$.hpc Object is locked skipped C:\Documents and Settings\DJ KoVrT\Cookies\index.dat Object is locked skipped C:\Documents and Settings\DJ KoVrT\Local Settings\Application Data\Ahead\Nero Home\bl.db Object is locked skipped C:\Documents and Settings\DJ KoVrT\Local Settings\Application Data\Ahead\Nero Home\bl.db-journal Object is locked skipped C:\Documents and Settings\DJ KoVrT\Local Settings\Application Data\Ahead\Nero Home\is2.db Object is locked skipped C:\Documents and Settings\DJ KoVrT\Local Settings\Application Data\Ahead\Nero Home\is2.db-journal Object is locked skipped C:\Documents and Settings\DJ KoVrT\Local Settings\Application Data\ApplicationHistory\CLI.EXE.c88dbd71.ini.inuse Object is locked skipped C:\Documents and Settings\DJ KoVrT\Local Settings\Application Data\Microsoft\Media Player\CurrentDatabase_360.wmdb Object is locked skipped C:\Documents and Settings\DJ KoVrT\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\DJ KoVrT\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\DJ KoVrT\Local Settings\Application Data\Microsoft\Zune\CurrentDatabase_365.wmdb Object is locked skipped C:\Documents and Settings\DJ KoVrT\Local Settings\History\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\DJ KoVrT\Local Settings\Temp\Perflib_Perfdata_6b0.dat Object is locked skipped C:\Documents and Settings\DJ KoVrT\Local Settings\Temp\Perflib_Perfdata_878.dat Object is locked skipped C:\Documents and Settings\DJ KoVrT\Local Settings\Temp\Perflib_Perfdata_dd0.dat Object is locked skipped C:\Documents and Settings\DJ KoVrT\Local Settings\Temp\WCESLog.log Object is locked skipped C:\Documents and Settings\DJ KoVrT\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\DJ KoVrT\ntuser.dat Object is locked skipped C:\Documents and Settings\DJ KoVrT\ntuser.dat.LOG Object is locked skipped C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\LocalService\ntuser.dat Object is locked skipped C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped C:\Program Files\AMUST\Registry Cleaner\crack.exe Object is locked skipped C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped C:\WINDOWS\Registration\{02D4B3F1-FD88-11D1-960D-00805FC79235}.{34F2FF9C-9E11-45FD-BEE3-9D3CB81C4C16}.crmlog Object is locked skipped C:\WINDOWS\SchedLgU.Txt Object is locked skipped C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped C:\WINDOWS\Sti_Trace.log Object is locked skipped C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped C:\WINDOWS\system32\config\ACEEvent.evt Object is locked skipped C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\default Object is locked skipped C:\WINDOWS\system32\config\default.LOG Object is locked skipped C:\WINDOWS\system32\config\Media Ce.evt Object is locked skipped C:\WINDOWS\system32\config\SAM Object is locked skipped C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\SECURITY Object is locked skipped C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped C:\WINDOWS\system32\config\software Object is locked skipped C:\WINDOWS\system32\config\software.LOG Object is locked skipped C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\system Object is locked skipped C:\WINDOWS\system32\config\system.LOG Object is locked skipped C:\WINDOWS\system32\drivers\sptd.sys Object is locked skipped C:\WINDOWS\system32\h323log.txt Object is locked skipped C:\WINDOWS\system32\LogFiles\WUDF\WUDFTrace.etl Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped C:\WINDOWS\Temp\Perflib_Perfdata_61c.dat Object is locked skipped C:\WINDOWS\wiadebug.log Object is locked skipped C:\WINDOWS\wiaservc.log Object is locked skipped C:\WINDOWS\WindowsUpdate.log Object is locked skipped D:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped Scan process completed.