This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Random Ie Windows [Resolved]

44 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

If anyone could help, i'd appreciate it. I've done everything I can and still have bad results. IE keeps popping up with new windows. Here is my Hijack log. Thanks.


Logfile of HijackThis v1.99.1
Scan saved at 1:29:19 PM, on 7/15/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\dlcqcoms.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
C:\Program Files\Dell\Media Experience\PCMService.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\Dell Photo AIO Printer 966\dlcqmon.exe
C:\Program Files\Dell Photo AIO Printer 966\memcard.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\GUEST2~1\LOCALS~1\Temp\Rar$EX00.844\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.frontieronline.net/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/customize/…rch/search.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.microsoft.com/fwlink/?LinkId=74005
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\NppBho.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {938A8A03-A938-4019-B764-03FF8D167D79} - C:\WINDOWS\system32\plsggpdv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\UIBHO.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [IntelMeM] C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\Media Experience\PCMService.exe"
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Dell PC Fax\fm3032.exe" /s
O4 - HKLM\..\Run: [dlcqmon.exe] "C:\Program Files\Dell Photo AIO Printer 966\dlcqmon.exe"
O4 - HKLM\..\Run: [MemoryCardManager] "C:\Program Files\Dell Photo AIO Printer 966\memcard.exe"
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [DLCQCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\DLCQtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton Internet Security\osCheck.exe"
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - http://www.symantec.com/techsupp/asa/ctrl/LSSupCtl.cab
O16 - DPF: {2AF5BD25-90C5-4EEC-88C5-B44DC2905D8B} (DownloadManager Control) - http://dlm.tools.akamai.com/dlmanager/vers…vex-2.2.1.0.cab
O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} (Symantec Download Manager) - https://webdl.symantec.com/activex/symdlmgr.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1132087453687
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - http://www.symantec.com/techsupp/asa/ctrl/SymAData.cab
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://www.dk-hosting.co.uk/plugins/msnchat45.cab
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: winzoa32 - C:\WINDOWS\SYSTEM32\winzoa32.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Settings Manager (ccSetMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: dlcq_device - - C:\WINDOWS\system32\dlcqcoms.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\isPwdSvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: LiveUpdate Notice Service - Unknown owner - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PifEng.dll (file missing)
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
Hello RemyHuman and welcome to the TomCoyote Forums

My name is Trevuren and I will be helping you with your problem.


A. I need to get you to move HijackThis to a folder of its own so that nothing gets deleted by mistake

1. Right click in an empty space on your desktop.

2. From the Menu, click New, then Folder and a folder will appear on your desktop.

3. Name the folder HJT

4. Drag your current copy from C:\DOCUME~1\GUEST2~1\LOCALS~1\Temp\Rar$EX00.844\HijackThis.exe into the new Folder that was just created.



B. Please go to: VirusTotal
  • On the page you'll find a "Browse" button.
  • Next to the browse button you'll see a box to enter text.
  • Please copy/paste the following in BOLD:


    C:\WINDOWS\system32\dlcqcoms.exe

  • Then click the "Send File " button just below.
  • This will scan the file. Please be patient.
  • Once scanned, copy and paste the results in your next reply and include a newly generated HijackThis log.
Antivirus Version Last Update Result
AhnLab-V3 2007.7.14.0 2007.07.14 no virus found
AntiVir 7.4.0.42 2007.07.15 no virus found
Authentium 4.93.8 2007.07.13 no virus found
Avast 4.7.997.0 2007.07.16 no virus found
AVG 7.5.0.476 2007.07.15 no virus found
BitDefender 7.2 2007.07.16 no virus found
CAT-QuickHeal 9.00 2007.07.14 no virus found
ClamAV devel-20070416 2007.07.16 no virus found
DrWeb 4.33 2007.07.15 no virus found
eSafe 7.0.15.0 2007.07.10 no virus found
eTrust-Vet 30.8.3784 2007.07.14 no virus found
Ewido 4.0 2007.07.14 no virus found
FileAdvisor 1 2007.07.16 no virus found
Fortinet 2.91.0.0 2007.07.14 no virus found
F-Prot 4.3.2.48 2007.07.13 no virus found
Ikarus T3.1.1.8 2007.07.15 no virus found
Kaspersky 4.0.2.24 2007.07.16 no virus found
McAfee 5074 2007.07.13 no virus found
Microsoft 1.2704 2007.07.16 no virus found
NOD32v2 2399 2007.07.14 no virus found
Norman 5.80.02 2007.07.13 no virus found
Panda 9.0.0.4 2007.07.15 no virus found
Sophos 4.19.0 2007.07.06 no virus found
Sunbelt 2.2.907.0 2007.07.14 no virus found
Symantec 10 2007.07.16 no virus found
TheHacker 6.1.6.146 2007.07.13 no virus found
VBA32 3.12.0.2 2007.07.16 no virus found
VirusBuster 4.3.23:9 2007.07.15 no virus found
Webwasher-Gateway 6.0.1 2007.07.16 no virus found
Aditional information
File size: 528384 bytes
MD5: 4c937aa8261062ed9781885c6cb61d5e
SHA1: c163148f61ded5e52a536df17954f010e6b35855


Logfile of HijackThis v1.99.1
Scan saved at 10:06:14 PM, on 7/15/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\dlcqcoms.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
C:\Program Files\Dell\Media Experience\PCMService.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Dell Photo AIO Printer 966\dlcqmon.exe
C:\Program Files\Dell Photo AIO Printer 966\memcard.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\guest 2\Desktop\HJT\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.frontieronline.net/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/customize/…rch/search.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.microsoft.com/fwlink/?LinkId=74005
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\NppBho.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {938A8A03-A938-4019-B764-03FF8D167D79} - C:\WINDOWS\system32\plsggpdv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\UIBHO.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [IntelMeM] C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\Media Experience\PCMService.exe"
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Dell PC Fax\fm3032.exe" /s
O4 - HKLM\..\Run: [dlcqmon.exe] "C:\Program Files\Dell Photo AIO Printer 966\dlcqmon.exe"
O4 - HKLM\..\Run: [MemoryCardManager] "C:\Program Files\Dell Photo AIO Printer 966\memcard.exe"
O4 - HKLM\..\Run: [DLCQCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\DLCQtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton Internet Security\osCheck.exe"
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - http://www.symantec.com/techsupp/asa/ctrl/LSSupCtl.cab
O16 - DPF: {2AF5BD25-90C5-4EEC-88C5-B44DC2905D8B} (DownloadManager Control) - http://dlm.tools.akamai.com/dlmanager/vers…vex-2.2.1.0.cab
O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} (Symantec Download Manager) - https://webdl.symantec.com/activex/symdlmgr.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1132087453687
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - http://www.symantec.com/techsupp/asa/ctrl/SymAData.cab
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://www.dk-hosting.co.uk/plugins/msnchat45.cab
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Settings Manager (ccSetMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: dlcq_device - - C:\WINDOWS\system32\dlcqcoms.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\isPwdSvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: LiveUpdate Notice Service - Unknown owner - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PifEng.dll (file missing)
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
First download AVG AntiSpyware from HERE and save that file to your desktop.
This is a 30 day trial of the program
  • Once you have downloaded AVG AntiSpyware, locate the icon on the desktop and double-click it to launch the set up program.
  • Once the setup is complete, run AVG AntiSpyware and update the definition files.
  • On the main screen select the icon "Update" then select the "Update now" link.
    • Next select the "Start Update" button, the update will start and a progress bar will show the updates being installed.
  • Once the update has completed select the "Scanner" icon at the top of the screen, then select the "Settings" tab.
  • Once in the Settings screen click on "Recommended actions" and then select "Quarantine".
  • Under "Reports"
    • Select "Automatically generate report after every scan"
    • Un-Select "Only if threats were found"
Close AVG AntiSpyware, Do Not run a scan just yet, we will shortly.
  • Reboot your computer into Safe Mode. You can do this by restarting your computer and continually tapping the F8 key until a menu appears. Use your up arrow key to highlight SafeMode then hit enter.
    IMPORTANT: Do not open any other windows or programs while AVG AntiSpyware is scanning, it may interfere with the scanning proccess:
  • Launch AVG AntiSpyware by double-clicking the icon on your desktop.
  • Select the "Scanner" icon at the top and then the "Scan" tab then click on "Complete System Scan".
  • AVG AntiSpyware will now begin the scanning process, be patient this may take a little time.
    Once the scan is complete do the following:
  • If you have any infections you will prompted, then select "Apply all actions"
  • Next select the "Reports" icon at the top.
  • Select the "Save report as" button in the lower left hand of the screen and save it to a text file on your system (make sure to remember where you saved that file, this is important).
  • Close AVG AntiSpyware and reboot your system back into Normal Mode and post the results of the report scan along with a fresh HJT log for review.
———————————————————
AVG Anti-Spyware - Scan Report
———————————————————

+ Created at: 12:02:01 AM 7/16/2007

+ Scan result:



C:\Program Files\AWS\WeatherBug\MiniBugTransporter.dll -> Adware.Aws : Cleaned with backup (quarantined).
C:\Program Files\iolo\System Mechanic Professional 6\Undo\Manual\{4650CAFD-5E0D-4EFA-86BF-F8175F629AAD}\{EE921ED5-D887-425C-BAB2-4E15D922AA08}.exe/{EE921ED5-D887-425C-BAB2-4E15D922AA08}.exe -> Adware.SuspectModule : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP2\A0000002.dll -> Adware.Virtumonde : Cleaned with backup (quarantined).
C:\VundoFix Backups\byxvvur.dll.bad -> Adware.Virtumonde : Cleaned with backup (quarantined).
C:\Documents and Settings\guest 2\Cookies\guest_2@buycom.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\guest 2\Cookies\guest_2@citizenstelecom.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\guest 2\Cookies\guest_2@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
C:\Program Files\iolo\System Mechanic Professional 6\Undo\Manual\{3989E65C-ACFF-4245-A6A4-B451E20EE378}\{094156F2-B24F-46F9-81DE-967C6643C15C}.txt/{094156F2-B24F-46F9-81DE-967C6643C15C}.txt -> TrackingCookie.2o7 : Cleaned.
C:\Program Files\iolo\System Mechanic Professional 6\Undo\Manual\{3989E65C-ACFF-4245-A6A4-B451E20EE378}\{711FFE91-FC9E-49E7-9730-7438B9FBB472}.txt/{711FFE91-FC9E-49E7-9730-7438B9FBB472}.txt -> TrackingCookie.2o7 : Cleaned.
C:\Program Files\iolo\System Mechanic Professional 6\Undo\Manual\{3989E65C-ACFF-4245-A6A4-B451E20EE378}\{CB8623E6-1B1C-403E-A93B-2D0C77CAB0E0}.txt/{CB8623E6-1B1C-403E-A93B-2D0C77CAB0E0}.txt -> TrackingCookie.Adrevolver : Cleaned.
C:\Program Files\iolo\System Mechanic Professional 6\Undo\Manual\{3989E65C-ACFF-4245-A6A4-B451E20EE378}\{3D30AF67-8B23-41CF-84E8-1D5C89A4DD1A}.txt/{3D30AF67-8B23-41CF-84E8-1D5C89A4DD1A}.txt -> TrackingCookie.Adserver : Cleaned.
C:\Documents and Settings\guest 2\Cookies\guest_2@advertising[1].txt -> TrackingCookie.Advertising : Cleaned.
C:\Program Files\iolo\System Mechanic Professional 6\Undo\Manual\{3989E65C-ACFF-4245-A6A4-B451E20EE378}\{D26B157B-362A-4DC3-93A8-119438A9277E}.txt/{D26B157B-362A-4DC3-93A8-119438A9277E}.txt -> TrackingCookie.Advertising : Cleaned.
C:\Program Files\iolo\System Mechanic Professional 6\Undo\Manual\{3989E65C-ACFF-4245-A6A4-B451E20EE378}\{DDBCFD78-283C-4AB9-B691-1A69DB4A6BAB}.txt/{DDBCFD78-283C-4AB9-B691-1A69DB4A6BAB}.txt -> TrackingCookie.Advertising : Cleaned.
C:\Documents and Settings\guest 2\Cookies\guest_2@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned.
C:\Program Files\iolo\System Mechanic Professional 6\Undo\Manual\{3989E65C-ACFF-4245-A6A4-B451E20EE378}\{52F1ACA2-B16C-479C-BDD5-8B8FB4F0E1F9}.txt/{52F1ACA2-B16C-479C-BDD5-8B8FB4F0E1F9}.txt -> TrackingCookie.Atdmt : Cleaned.
C:\Program Files\iolo\System Mechanic Professional 6\Undo\Manual\{3989E65C-ACFF-4245-A6A4-B451E20EE378}\{9E23296D-C4C5-4E0B-8351-1A0338273263}.txt/{9E23296D-C4C5-4E0B-8351-1A0338273263}.txt -> TrackingCookie.Bfast : Cleaned.
C:\Program Files\iolo\System Mechanic Professional 6\Undo\Manual\{3989E65C-ACFF-4245-A6A4-B451E20EE378}\{ED5823F0-F34B-44E6-A1AC-B3134032B877}.txt/{ED5823F0-F34B-44E6-A1AC-B3134032B877}.txt -> TrackingCookie.Bridgetrack : Cleaned.
C:\Program Files\iolo\System Mechanic Professional 6\Undo\Manual\{3989E65C-ACFF-4245-A6A4-B451E20EE378}\{E0F57093-4C04-4EF4-B516-E328AB0FEB67}.txt/{E0F57093-4C04-4EF4-B516-E328AB0FEB67}.txt -> TrackingCookie.Casalemedia : Cleaned.
C:\Program Files\iolo\System Mechanic Professional 6\Undo\Manual\{3989E65C-ACFF-4245-A6A4-B451E20EE378}\{DF7BA5E1-1262-475E-81D8-8EEF4AC4F0BF}.txt/{DF7BA5E1-1262-475E-81D8-8EEF4AC4F0BF}.txt -> TrackingCookie.Centrport : Cleaned.
C:\Program Files\iolo\System Mechanic Professional 6\Undo\Manual\{3989E65C-ACFF-4245-A6A4-B451E20EE378}\{C3D48396-6930-4EFA-B85F-F8E343E9E0BC}.txt/{C3D48396-6930-4EFA-B85F-F8E343E9E0BC}.txt -> TrackingCookie.Cpvfeed : Cleaned.
C:\Documents and Settings\guest 2\Cookies\guest_2@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned.
C:\Program Files\iolo\System Mechanic Professional 6\Undo\Manual\{3989E65C-ACFF-4245-A6A4-B451E20EE378}\{BC2F3156-D962-4D74-AB5A-32655AC1DEB6}.txt/{BC2F3156-D962-4D74-AB5A-32655AC1DEB6}.txt -> TrackingCookie.Doubleclick : Cleaned.
C:\Program Files\iolo\System Mechanic Professional 6\Undo\Manual\{3989E65C-ACFF-4245-A6A4-B451E20EE378}\{FBA0F31B-EA6B-4E28-B62E-BA34EF38A939}.txt/{FBA0F31B-EA6B-4E28-B62E-BA34EF38A939}.txt -> TrackingCookie.Falkag : Cleaned.
C:\Program Files\iolo\System Mechanic Professional 6\Undo\Manual\{3989E65C-ACFF-4245-A6A4-B451E20EE378}\{DE061765-2263-4594-82FC-CB9C4312C4AA}.txt/{DE061765-2263-4594-82FC-CB9C4312C4AA}.txt -> TrackingCookie.Fastclick : Cleaned.
C:\Documents and Settings\guest 2\Cookies\guest_2@findwhat[1].txt -> TrackingCookie.Findwhat : Cleaned.
C:\Program Files\iolo\System Mechanic Professional 6\Undo\Manual\{3989E65C-ACFF-4245-A6A4-B451E20EE378}\{A50566EB-3C54-4AEE-A467-AA4F5B4CA646}.txt/{A50566EB-3C54-4AEE-A467-AA4F5B4CA646}.txt -> TrackingCookie.Hitbox : Cleaned.
C:\Program Files\iolo\System Mechanic Professional 6\Undo\Manual\{3989E65C-ACFF-4245-A6A4-B451E20EE378}\{D21A8BF0-DC7A-4B35-A75B-1C8E35899C0B}.txt/{D21A8BF0-DC7A-4B35-A75B-1C8E35899C0B}.txt -> TrackingCookie.Hitbox : Cleaned.
C:\Program Files\iolo\System Mechanic Professional 6\Undo\Manual\{3989E65C-ACFF-4245-A6A4-B451E20EE378}\{344B6CD5-36D1-49D8-BC79-4BC8D48EC3E1}.txt/{344B6CD5-36D1-49D8-BC79-4BC8D48EC3E1}.txt -> TrackingCookie.Liveperson : Cleaned.
C:\Program Files\iolo\System Mechanic Professional 6\Undo\Manual\{3989E65C-ACFF-4245-A6A4-B451E20EE378}\{4EC66FBB-2E4B-4EB8-BAC2-2D58E59CDECE}.txt/{4EC66FBB-2E4B-4EB8-BAC2-2D58E59CDECE}.txt -> TrackingCookie.Mediaplex : Cleaned.
C:\Program Files\iolo\System Mechanic Professional 6\Undo\Manual\{3989E65C-ACFF-4245-A6A4-B451E20EE378}\{0DF39F2B-786F-4C4B-A8FA-10322F49AD04}.txt/{0DF39F2B-786F-4C4B-A8FA-10322F49AD04}.txt -> TrackingCookie.Msn : Cleaned.
C:\Documents and Settings\guest 2\Cookies\[removed][1].txt -> TrackingCookie.Netflame : Cleaned.
C:\Program Files\iolo\System Mechanic Professional 6\Undo\Manual\{3989E65C-ACFF-4245-A6A4-B451E20EE378}\{F033816A-EEA4-411C-8C11-ECB502CCDDAD}.txt/{F033816A-EEA4-411C-8C11-ECB502CCDDAD}.txt -> TrackingCookie.Overture : Cleaned.
C:\Program Files\iolo\System Mechanic Professional 6\Undo\Manual\{3989E65C-ACFF-4245-A6A4-B451E20EE378}\{BA0E71ED-8B22-4724-9610-C732FB1F8344}.txt/{BA0E71ED-8B22-4724-9610-C732FB1F8344}.txt -> TrackingCookie.Pointroll : Cleaned.
C:\Program Files\iolo\System Mechanic Professional 6\Undo\Manual\{3989E65C-ACFF-4245-A6A4-B451E20EE378}\{C565B2D8-1FE9-4DDB-AF25-E24D6215519A}.txt/{C565B2D8-1FE9-4DDB-AF25-E24D6215519A}.txt -> TrackingCookie.Questionmarket : Cleaned.
C:\Documents and Settings\guest 2\Cookies\guest_2@realmedia[1].txt -> TrackingCookie.Realmedia : Cleaned.
C:\Program Files\iolo\System Mechanic Professional 6\Undo\Manual\{3989E65C-ACFF-4245-A6A4-B451E20EE378}\{2AB08CED-3751-44B9-B59D-5E6D164AE2F9}.txt/{2AB08CED-3751-44B9-B59D-5E6D164AE2F9}.txt -> TrackingCookie.Realmedia : Cleaned.
C:\Program Files\iolo\System Mechanic Professional 6\Undo\Manual\{3989E65C-ACFF-4245-A6A4-B451E20EE378}\{EC71D1F2-C860-4651-8ACB-65391C3F87EA}.txt/{EC71D1F2-C860-4651-8ACB-65391C3F87EA}.txt -> TrackingCookie.Reliablestats : Cleaned.
C:\Documents and Settings\guest 2\Cookies\guest_2@revsci[1].txt -> TrackingCookie.Revsci : Cleaned.
C:\Program Files\iolo\System Mechanic Professional 6\Undo\Manual\{3989E65C-ACFF-4245-A6A4-B451E20EE378}\{5BB8F847-BA9F-4D3E-8FB4-BF22C9005702}.txt/{5BB8F847-BA9F-4D3E-8FB4-BF22C9005702}.txt -> TrackingCookie.Ru4 : Cleaned.
C:\Program Files\iolo\System Mechanic Professional 6\Undo\Manual\{3989E65C-ACFF-4245-A6A4-B451E20EE378}\{F3F376B9-2BCF-44D2-81D5-A119E145EFFB}.txt/{F3F376B9-2BCF-44D2-81D5-A119E145EFFB}.txt -> TrackingCookie.Serving-sys : Cleaned.
C:\Program Files\iolo\System Mechanic Professional 6\Undo\Manual\{3989E65C-ACFF-4245-A6A4-B451E20EE378}\{490AD32B-F480-40AC-B1B8-A9D9617D43E7}.txt/{490AD32B-F480-40AC-B1B8-A9D9617D43E7}.txt -> TrackingCookie.Specificclick : Cleaned.
C:\Program Files\iolo\System Mechanic Professional 6\Undo\Manual\{3989E65C-ACFF-4245-A6A4-B451E20EE378}\{CE977F4E-26DC-4F39-9F51-5DC339A51955}.txt/{CE977F4E-26DC-4F39-9F51-5DC339A51955}.txt -> TrackingCookie.Starware : Cleaned.
C:\Program Files\iolo\System Mechanic Professional 6\Undo\Manual\{3989E65C-ACFF-4245-A6A4-B451E20EE378}\{6E59B258-4B4F-431A-BDBF-6AD8F67AD6A4}.txt/{6E59B258-4B4F-431A-BDBF-6AD8F67AD6A4}.txt -> TrackingCookie.Statcounter : Cleaned.
C:\Program Files\iolo\System Mechanic Professional 6\Undo\Manual\{3989E65C-ACFF-4245-A6A4-B451E20EE378}\{91E7EE7F-1325-4F38-9459-2DF14D5D9B40}.txt/{91E7EE7F-1325-4F38-9459-2DF14D5D9B40}.txt -> TrackingCookie.Tacoda : Cleaned.
C:\Program Files\iolo\System Mechanic Professional 6\Undo\Manual\{3989E65C-ACFF-4245-A6A4-B451E20EE378}\{EC320EB9-68C9-4F5C-ABFF-8AD563D3794B}.txt/{EC320EB9-68C9-4F5C-ABFF-8AD563D3794B}.txt -> TrackingCookie.Targetnet : Cleaned.
C:\Program Files\iolo\System Mechanic Professional 6\Undo\Manual\{3989E65C-ACFF-4245-A6A4-B451E20EE378}\{DF74770B-5E91-455C-9366-DC33ECC8B1A3}.txt/{DF74770B-5E91-455C-9366-DC33ECC8B1A3}.txt -> TrackingCookie.Tradedoubler : Cleaned.
C:\Program Files\iolo\System Mechanic Professional 6\Undo\Manual\{3989E65C-ACFF-4245-A6A4-B451E20EE378}\{5243ABE8-AD7A-46DE-AFA2-44C492B77451}.txt/{5243ABE8-AD7A-46DE-AFA2-44C492B77451}.txt -> TrackingCookie.Trafficmp : Cleaned.
C:\Documents and Settings\guest 2\Cookies\guest_2@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : Cleaned.
C:\Program Files\iolo\System Mechanic Professional 6\Undo\Manual\{3989E65C-ACFF-4245-A6A4-B451E20EE378}\{5628BA1B-2D0D-44A9-A0EA-0139F6C545E9}.txt/{5628BA1B-2D0D-44A9-A0EA-0139F6C545E9}.txt -> TrackingCookie.Tribalfusion : Cleaned.
C:\Program Files\iolo\System Mechanic Professional 6\Undo\Manual\{3989E65C-ACFF-4245-A6A4-B451E20EE378}\{537EBBCF-967D-48A0-A70A-09E0BC0B7B1F}.txt/{537EBBCF-967D-48A0-A70A-09E0BC0B7B1F}.txt -> TrackingCookie.Valueclick : Cleaned.
C:\Documents and Settings\guest 2\Cookies\[removed][2].txt -> TrackingCookie.Webtrends : Cleaned.
C:\Program Files\iolo\System Mechanic Professional 6\Undo\Manual\{3989E65C-ACFF-4245-A6A4-B451E20EE378}\{33701DF8-C10D-4104-801B-E94E3DC1E4C0}.txt/{33701DF8-C10D-4104-801B-E94E3DC1E4C0}.txt -> TrackingCookie.Webtrendslive : Cleaned.
C:\Program Files\iolo\System Mechanic Professional 6\Undo\Manual\{3989E65C-ACFF-4245-A6A4-B451E20EE378}\{9F2A338E-3E7D-44FB-933F-898EA35C4E08}.txt/{9F2A338E-3E7D-44FB-933F-898EA35C4E08}.txt -> TrackingCookie.Yieldmanager : Cleaned.
C:\Program Files\iolo\System Mechanic Professional 6\Undo\Manual\{3989E65C-ACFF-4245-A6A4-B451E20EE378}\{B4F23837-F689-4973-A226-64B7C01F3CFD}.txt/{B4F23837-F689-4973-A226-64B7C01F3CFD}.txt -> TrackingCookie.Yieldmanager : Cleaned.
C:\Program Files\iolo\System Mechanic Professional 6\Undo\Manual\{3989E65C-ACFF-4245-A6A4-B451E20EE378}\{A39B9F98-4088-4003-9D6D-E9418CB00145}.txt/{A39B9F98-4088-4003-9D6D-E9418CB00145}.txt -> TrackingCookie.Zedo : Cleaned.
C:\Documents and Settings\Guest\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\ms-counter.jar-4535331c-5409bb06.zip/Dex.class -> Trojan.ClassLoader.g : Cleaned with backup (quarantined).
C:\Documents and Settings\Guest\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\ms-counter.jar-4535331c-5409bb06.zip/Dix.class -> Trojan.ClassLoader.g : Cleaned with backup (quarantined).
C:\Documents and Settings\Guest\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\ms-counter.jar-4535331c-5409bb06.zip/Dux.class -> Trojan.ClassLoader.g : Cleaned with backup (quarantined).
C:\WINDOWS\SYSTEM32\winzoa32.dll -> Trojan.Dialer.qn : Cleaned with backup (quarantined).


::Report end


Logfile of HijackThis v1.99.1
Scan saved at 12:08:05 AM, on 7/16/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rar$EX00.953\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell4me.com/myway
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/customize/…rch/search.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = http://www.dell.com
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://securityresponse.symantec.com/avcen…o.cgi?vid=28544
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\NppBho.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {938A8A03-A938-4019-B764-03FF8D167D79} - C:\WINDOWS\system32\plsggpdv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\UIBHO.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [IntelMeM] C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\Media Experience\PCMService.exe"
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Dell PC Fax\fm3032.exe" /s
O4 - HKLM\..\Run: [dlcqmon.exe] "C:\Program Files\Dell Photo AIO Printer 966\dlcqmon.exe"
O4 - HKLM\..\Run: [MemoryCardManager] "C:\Program Files\Dell Photo AIO Printer 966\memcard.exe"
O4 - HKLM\..\Run: [DLCQCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\DLCQtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton Internet Security\osCheck.exe"
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - http://www.symantec.com/techsupp/asa/ctrl/LSSupCtl.cab
O16 - DPF: {2AF5BD25-90C5-4EEC-88C5-B44DC2905D8B} (DownloadManager Control) - http://dlm.tools.akamai.com/dlmanager/vers…vex-2.2.1.0.cab
O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} (Symantec Download Manager) - https://webdl.symantec.com/activex/symdlmgr.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1132087453687
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - http://www.symantec.com/techsupp/asa/ctrl/SymAData.cab
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://www.dk-hosting.co.uk/plugins/msnchat45.cab
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: winzoa32 - C:\WINDOWS\SYSTEM32\winzoa32.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Settings Manager (ccSetMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: dlcq_device - - C:\WINDOWS\system32\dlcqcoms.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\isPwdSvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: LiveUpdate Notice Service - Unknown owner - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PifEng.dll (file missing)
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
I am sorry but I am unable to proceed until you move HijackThis.exe as I requested in my first post. We can not afford to lose the backups it creates. Trevuren
Logfile of HijackThis v1.99.1
Scan saved at 1:06:23 AM, on 7/16/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\dlcqcoms.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
C:\Program Files\Dell\Media Experience\PCMService.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Dell Photo AIO Printer 966\dlcqmon.exe
C:\Program Files\Dell Photo AIO Printer 966\memcard.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\guest 2\Desktop\HJT\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.frontieronline.net/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/customize/…rch/search.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.microsoft.com/fwlink/?LinkId=74005
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\NppBho.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {938A8A03-A938-4019-B764-03FF8D167D79} - C:\WINDOWS\system32\plsggpdv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\UIBHO.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [IntelMeM] C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\Media Experience\PCMService.exe"
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Dell PC Fax\fm3032.exe" /s
O4 - HKLM\..\Run: [dlcqmon.exe] "C:\Program Files\Dell Photo AIO Printer 966\dlcqmon.exe"
O4 - HKLM\..\Run: [MemoryCardManager] "C:\Program Files\Dell Photo AIO Printer 966\memcard.exe"
O4 - HKLM\..\Run: [DLCQCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\DLCQtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton Internet Security\osCheck.exe"
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - http://www.symantec.com/techsupp/asa/ctrl/LSSupCtl.cab
O16 - DPF: {2AF5BD25-90C5-4EEC-88C5-B44DC2905D8B} (DownloadManager Control) - http://dlm.tools.akamai.com/dlmanager/vers…vex-2.2.1.0.cab
O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} (Symantec Download Manager) - https://webdl.symantec.com/activex/symdlmgr.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1132087453687
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - http://www.symantec.com/techsupp/asa/ctrl/SymAData.cab
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://www.dk-hosting.co.uk/plugins/msnchat45.cab
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: winzoa32 - winzoa32.dll (file missing)
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Settings Manager (ccSetMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: dlcq_device - - C:\WINDOWS\system32\dlcqcoms.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\isPwdSvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: LiveUpdate Notice Service - Unknown owner - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PifEng.dll (file missing)
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
Please download this file - combofix.exe by sUBs
  • Double click combofix.exe & follow the prompts.
  • When finished, it will produce a log. Please save that log to post in your next reply along with a fresh HJT log.
Note:
Do not mouse-click combofix's window while it is running. That may cause it to stall.

Regards,

Trevuren
"guest 2" - 2007-07-16 1:24:25 - ComboFix 07-07-16.4 - Service Pack 2 NTFS


(((((((((((((((((((((((((((((((((((((((((((( V Log )))))))))))))))))))))))))))))))))))))))))))))))))))))))


C:\WINDOWS\system32\agdgbtxs.dll
C:\WINDOWS\system32\plsggpdv.dll
C:\WINDOWS\system32\wfqhmjpi.dll


* * * POST RUN FILES/FOLDERS * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *


((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))


C:\WINDOWS\system32\bfstgcyd.exe
C:\WINDOWS\system32\drivers\fad.sys
C:\WINDOWS\system32\gdrwpbtv.exe
C:\WINDOWS\system32\gjamwmhr.exe
C:\WINDOWS\system32\packet.dll
C:\WINDOWS\system32\wpcap.dll


((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))


——-\LEGACY_NPF
——-\NPF


((((((((((((((((((((((((( Files Created from 2007-06-16 to 2007-07-16 )))))))))))))))))))))))))))))))


2007-07-16 01:23 51,200 –a—— C:\WINDOWS\nircmd.exe
2007-07-15 22:32 10,872 –a—— C:\WINDOWS\SYSTEM32\DRIVERS\AvgAsCln.sys
2007-07-15 16:41 d——– C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
2007-07-14 22:16 d——– C:\Program Files\Windows Defender
2007-07-14 22:04 d——– C:\Program Files\Lavasoft
2007-07-14 22:02 d——– C:\Program Files\Common Files\Wise Installation Wizard
2007-07-05 07:57 d——– C:\DOCUME~1\GUEST2~1\APPLIC~1\PC Tools
2007-07-05 01:06 d——– C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
2007-07-04 23:55 d——– C:\!KillBox
2007-07-04 22:42 d——– C:\VundoFix Backups
2007-07-04 16:34 d-a—— C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
2007-07-04 14:31 d——– C:\Program Files\Trojan Remover
2007-07-04 14:31 d——– C:\DOCUME~1\GUEST2~1\APPLIC~1\Simply Super Software
2007-07-04 14:31 d——– C:\DOCUME~1\ALLUSE~1\APPLIC~1\Simply Super Software


(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

2007-07-16 03:37:39 ——– d—–w C:\Program Files\Common Files\Symantec Shared
2007-07-15 02:56:03 ——– d—–w C:\Program Files\Google
2007-07-11 23:15:12 ——– d–h–w C:\Program Files\InstallShield Installation Information
2007-07-11 23:15:07 ——– d—–w C:\Program Files\Canon
2007-07-11 23:11:53 ——– d—–w C:\Program Files\ArcSoft
2007-07-11 23:07:28 ——– d—–w C:\Program Files\Common Files\Corel
2007-07-11 23:03:37 ——– d—–w C:\Program Files\Corel
2007-07-07 04:49:09 5,852 -csha-w C:\WINDOWS\system32\KGyGaAvL.sys
2007-07-07 04:49:05 104 –sh–r C:\WINDOWS\system32\B19DD22823.sys
2007-07-05 05:33:55 ——– d—–w C:\DOCUME~1\GUEST2~1\APPLIC~1\LimeWire
2007-07-05 05:33:53 ——– d—–w C:\DOCUME~1\GUEST2~1\APPLIC~1\Download Manager
2007-07-04 15:25:20 ——– d—–w C:\Program Files\Norton Internet Security
2007-07-04 15:24:15 ——– d—–w C:\Program Files\Symantec
2007-07-04 15:24:05 806 —-a-w C:\WINDOWS\system32\drivers\SYMEVENT.INF
2007-07-04 15:24:05 8,014 —-a-w C:\WINDOWS\system32\drivers\SYMEVENT.CAT
2007-07-04 15:24:05 115,000 —-a-w C:\WINDOWS\system32\drivers\SYMEVENT.SYS
2007-07-04 15:24:04 48,776 -c–a-w C:\WINDOWS\system32\S32EVNT1.DLL
2007-07-04 14:24:07 ——– d—–w C:\Program Files\dl_cats
2007-07-03 13:37:43 ——– d—–w C:\DOCUME~1\GUEST2~1\APPLIC~1\AdobeUM
2007-06-04 20:18:48 9,344 —-a-w C:\WINDOWS\system32\drivers\NSDriver.sys
2007-06-04 20:17:02 8,320 —-a-w C:\WINDOWS\system32\drivers\AWRTRD.sys
2007-06-04 20:14:56 6,272 —-a-w C:\WINDOWS\system32\drivers\AWRTPD.sys
2007-06-03 17:18:53 ——– d—–w C:\Program Files\Kodak
2007-06-03 17:15:33 ——– d—–w C:\Program Files\Common Files\Kodak
2007-06-03 03:55:14 ——– d—–w C:\DOCUME~1\GUEST2~1\APPLIC~1\Help
2007-06-03 03:22:18 ——– d—–w C:\DOCUME~1\GUEST2~1\APPLIC~1\Leadertech
2007-05-16 15:12:02 683,520 —-a-w C:\WINDOWS\system32\inetcomm.dll
2007-05-01 18:04:39 1,224 —-a-w C:\WINDOWS\checkip.dat
2007-04-25 14:21:15 144,896 —-a-w C:\WINDOWS\system32\schannel.dll
2007-04-18 16:12:23 2,854,400 —-a-w C:\WINDOWS\system32\msi.dll
2007-04-17 03:47:36 33,624 —-a-w C:\WINDOWS\system32\wups.dll
2007-04-17 03:45:54 1,710,936 —-a-w C:\WINDOWS\system32\wuaueng.dll
2007-04-17 03:45:48 549,720 —-a-w C:\WINDOWS\system32\wuapi.dll
2007-04-17 03:45:42 325,976 —-a-w C:\WINDOWS\system32\wucltui.dll
2007-04-17 03:45:36 203,096 —-a-w C:\WINDOWS\system32\wuweb.dll
2007-04-17 03:45:28 92,504 —-a-w C:\WINDOWS\system32\cdm.dll
2007-04-17 03:45:20 53,080 —-a-w C:\WINDOWS\system32\wuauclt.exe
2007-04-17 03:45:20 43,352 —-a-w C:\WINDOWS\system32\wups2.dll
2007-04-17 03:44:20 271,224 —-a-w C:\WINDOWS\system32\mucltui.dll
2007-04-17 03:44:18 208,248 —-a-w C:\WINDOWS\system32\muweb.dll


((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))


*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
2003-11-03 13:17 54248 –a—— C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{1E8A6170-7264-4D0F-BEAE-D42A53123C75}]
2006-09-06 01:18 93400 -ra—— C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\NppBho.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
2005-05-31 01:04 853672 –a—— C:\PROGRA~1\SPYBOT~1\SDHelper.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
2007-03-14 03:43 501400 –a—— C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
2007-07-12 00:05 2554944 -ra—— c:\program files\google\googletoolbar1.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
2007-07-12 00:06 325048 –a—— C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{E99421FB-68DD-40F0-B4AC-B7027CAE2F1A}]
2005-02-22 12:50 368640 –a—— C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IntelMeM"="C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe" [2003-09-03 20:12]
"PCMService"="C:\Program Files\Dell\Media Experience\PCMService.exe" [2003-08-26 19:47]
"FaxCenterServer"="C:\Program Files\Dell PC Fax\fm3032.exe" [2006-06-15 05:03]
"dlcqmon.exe"="C:\Program Files\Dell Photo AIO Printer 966\dlcqmon.exe" [2006-06-20 12:37]
"MemoryCardManager"="C:\Program Files\Dell Photo AIO Printer 966\memcard.exe" [2006-06-27 06:34]
"ccApp"="C:\Program Files\Common Files\Symantec Shared\ccApp.exe" [2007-01-09 22:59]
"osCheck"="C:\Program Files\Norton Internet Security\osCheck.exe" [2006-09-05 21:22]
"Symantec PIF AlertEng"="C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" [2007-03-12 18:30]
"SpyHunter"="" []
"Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [2006-11-03 19:20]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe" [2007-03-14 03:43]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2005-08-08 01:04]
"ISUSScheduler"="C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" [2005-06-10 10:44]
"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 04:25]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DellSupport"="C:\Program Files\DellSupport\DSAgnt.exe" [2007-03-15 11:09]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-07-11 23:57]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 02:56]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"DisableRegistryTools"=0 (0x0)

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\shellexecutehook.dll" [2007-05-30 07:29]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\winzoa32]
winzoa32.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\aawservice]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\AVG Anti-Spyware Driver]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\AVG Anti-Spyware Guard]

*Newly Created Service* - COMHOST

Contents of the 'Scheduled Tasks' folder
2007-07-02 02:26:30 C:\WINDOWS\tasks\EasyShare Registration Task.job
2007-07-16 06:44:18 C:\WINDOWS\tasks\MP Scheduled Scan.job
2007-07-14 01:00:00 C:\WINDOWS\tasks\Norton Internet Security - Run Full System Scan - Greg Salmon.job

**************************************************************************

catchme 0.3.1017 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-07-16 01:45:08
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes …

scanning hidden registry entries …


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\FE2DACC32FFC736428AAAAFB7320283D\Usage]
"Complete"=dword:36f009cc

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update]
"OfflineDetectionPending"=dword:00000001

scanning hidden files …

**************************************************************************

Completion time: 2007-07-16 1:55:23 - machine was rebooted
C:\ComboFix-quarantined-files.txt … 2007-07-16 01:53

— E O F —



Logfile of HijackThis v1.99.1
Scan saved at 1:59:05 AM, on 7/16/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\dlcqcoms.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
C:\Program Files\Dell\Media Experience\PCMService.exe
C:\Program Files\Dell Photo AIO Printer 966\dlcqmon.exe
C:\Program Files\Dell Photo AIO Printer 966\memcard.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\notepad.exe
C:\Documents and Settings\guest 2\Desktop\HJT\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.frontieronline.net/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/customize/…rch/search.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.microsoft.com/fwlink/?LinkId=74005
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\NppBho.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\UIBHO.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [IntelMeM] C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\Media Experience\PCMService.exe"
O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Dell PC Fax\fm3032.exe" /s
O4 - HKLM\..\Run: [dlcqmon.exe] "C:\Program Files\Dell Photo AIO Printer 966\dlcqmon.exe"
O4 - HKLM\..\Run: [MemoryCardManager] "C:\Program Files\Dell Photo AIO Printer 966\memcard.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton Internet Security\osCheck.exe"
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - http://www.symantec.com/techsupp/asa/ctrl/LSSupCtl.cab
O16 - DPF: {2AF5BD25-90C5-4EEC-88C5-B44DC2905D8B} (DownloadManager Control) - http://dlm.tools.akamai.com/dlmanager/vers…vex-2.2.1.0.cab
O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} (Symantec Download Manager) - https://webdl.symantec.com/activex/symdlmgr.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1132087453687
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - http://www.symantec.com/techsupp/asa/ctrl/SymAData.cab
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://www.dk-hosting.co.uk/plugins/msnchat45.cab
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: winzoa32 - winzoa32.dll (file missing)
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Settings Manager (ccSetMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: dlcq_device - - C:\WINDOWS\system32\dlcqcoms.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\isPwdSvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: LiveUpdate Notice Service - Unknown owner - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PifEng.dll (file missing)
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
1. Please open Notepad
  • Click Start , then Run
  • Type notepad .exe in the Run Box.
2. Now copy/paste the entire content of the codebox below into the Notepad window:

File::
C:\WINDOWS\system32\B19DD22823.sys
C:\WINDOWS\checkip.dat

Folder::
C:\VundoFix Backups

Registry::
[-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\winzoa32]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main] 
"Search Bar"=-


3. Save the above as CFScript.txt

4. Then drag the CFScript.txt into ComboFix.exe as depicted in the animation below. This will start ComboFix again.

[external image: Posted Image]


5. After reboot, (in case it asks to reboot), please post the following reports/logs into your next reply:
  • Combofix.txt
  • A new HijackThis log.
"guest 2" - 2007-07-16 10:14:41 - ComboFix 07-07-16.4 - Service Pack 2 NTFS
Command switches used :: C:\Documents and Settings\guest 2\Desktop\CFScript.txt


((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))


C:\VundoFix Backups
C:\VundoFix Backups\awvvw.dll.bad
C:\VundoFix Backups\bottdnhn.dll.bad
C:\VundoFix Backups\fgdjwvum.ini.bad
C:\VundoFix Backups\gnxedhdx.ini.bad
C:\VundoFix Backups\jcihbbgd.ini.bad
C:\VundoFix Backups\klknrosw.ini.bad
C:\VundoFix Backups\muvwjdgf.dll.bad
C:\VundoFix Backups\nhndttob.ini.bad
C:\VundoFix Backups\ssttu.dll.bad
C:\VundoFix Backups\sttss.bak1.bad
C:\VundoFix Backups\sttss.bak2.bad
C:\VundoFix Backups\sttss.ini.bad
C:\VundoFix Backups\sttss.ini2.bad
C:\VundoFix Backups\sttss.tmp.bad
C:\VundoFix Backups\uttss.bak2.bad
C:\VundoFix Backups\uttss.ini.bad
C:\VundoFix Backups\uttss.ini2.bad
C:\VundoFix Backups\wsornklk.dll.bad
C:\VundoFix Backups\wvvwa.bak1.bad
C:\VundoFix Backups\wvvwa.ini.bad
C:\VundoFix Backups\xjpoaopv.ini.bad
C:\WINDOWS\checkip.dat
C:\WINDOWS\system32\B19DD22823.sys


((((((((((((((((((((((((( Files Created from 2007-06-16 to 2007-07-16 )))))))))))))))))))))))))))))))


2007-07-16 01:23 51,200 –a—— C:\WINDOWS\nircmd.exe
2007-07-15 22:32 10,872 –a—— C:\WINDOWS\SYSTEM32\DRIVERS\AvgAsCln.sys
2007-07-15 16:41 d——– C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
2007-07-14 22:16 d——– C:\Program Files\Windows Defender
2007-07-14 22:04 d——– C:\Program Files\Lavasoft
2007-07-14 22:02 d——– C:\Program Files\Common Files\Wise Installation Wizard
2007-07-05 07:57 d——– C:\DOCUME~1\GUEST2~1\APPLIC~1\PC Tools
2007-07-05 01:06 d——– C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
2007-07-04 23:55 d——– C:\!KillBox
2007-07-04 16:34 d-a—— C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
2007-07-04 14:31 d——– C:\Program Files\Trojan Remover
2007-07-04 14:31 d——– C:\DOCUME~1\GUEST2~1\APPLIC~1\Simply Super Software
2007-07-04 14:31 d——– C:\DOCUME~1\ALLUSE~1\APPLIC~1\Simply Super Software


(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

2007-07-16 03:37:39 ——– d—–w C:\Program Files\Common Files\Symantec Shared
2007-07-15 02:56:03 ——– d—–w C:\Program Files\Google
2007-07-11 23:15:12 ——– d–h–w C:\Program Files\InstallShield Installation Information
2007-07-11 23:15:07 ——– d—–w C:\Program Files\Canon
2007-07-11 23:11:53 ——– d—–w C:\Program Files\ArcSoft
2007-07-11 23:07:28 ——– d—–w C:\Program Files\Common Files\Corel
2007-07-11 23:03:37 ——– d—–w C:\Program Files\Corel
2007-07-07 04:49:09 5,852 -csha-w C:\WINDOWS\system32\KGyGaAvL.sys
2007-07-05 05:33:55 ——– d—–w C:\DOCUME~1\GUEST2~1\APPLIC~1\LimeWire
2007-07-05 05:33:53 ——– d—–w C:\DOCUME~1\GUEST2~1\APPLIC~1\Download Manager
2007-07-04 15:25:20 ——– d—–w C:\Program Files\Norton Internet Security
2007-07-04 15:24:15 ——– d—–w C:\Program Files\Symantec
2007-07-04 15:24:05 806 —-a-w C:\WINDOWS\system32\drivers\SYMEVENT.INF
2007-07-04 15:24:05 8,014 —-a-w C:\WINDOWS\system32\drivers\SYMEVENT.CAT
2007-07-04 15:24:05 115,000 —-a-w C:\WINDOWS\system32\drivers\SYMEVENT.SYS
2007-07-04 15:24:04 48,776 -c–a-w C:\WINDOWS\system32\S32EVNT1.DLL
2007-07-04 14:24:07 ——– d—–w C:\Program Files\dl_cats
2007-07-03 13:37:43 ——– d—–w C:\DOCUME~1\GUEST2~1\APPLIC~1\AdobeUM
2007-06-04 20:18:48 9,344 —-a-w C:\WINDOWS\system32\drivers\NSDriver.sys
2007-06-04 20:17:02 8,320 —-a-w C:\WINDOWS\system32\drivers\AWRTRD.sys
2007-06-04 20:14:56 6,272 —-a-w C:\WINDOWS\system32\drivers\AWRTPD.sys
2007-06-03 17:18:53 ——– d—–w C:\Program Files\Kodak
2007-06-03 17:15:33 ——– d—–w C:\Program Files\Common Files\Kodak
2007-06-03 03:55:14 ——– d—–w C:\DOCUME~1\GUEST2~1\APPLIC~1\Help
2007-06-03 03:22:18 ——– d—–w C:\DOCUME~1\GUEST2~1\APPLIC~1\Leadertech
2007-05-16 15:12:02 683,520 —-a-w C:\WINDOWS\system32\inetcomm.dll
2007-04-25 14:21:15 144,896 —-a-w C:\WINDOWS\system32\schannel.dll
2007-04-18 16:12:23 2,854,400 —-a-w C:\WINDOWS\system32\msi.dll
2007-04-17 03:47:36 33,624 —-a-w C:\WINDOWS\system32\wups.dll
2007-04-17 03:45:54 1,710,936 —-a-w C:\WINDOWS\system32\wuaueng.dll
2007-04-17 03:45:48 549,720 —-a-w C:\WINDOWS\system32\wuapi.dll
2007-04-17 03:45:42 325,976 —-a-w C:\WINDOWS\system32\wucltui.dll
2007-04-17 03:45:36 203,096 —-a-w C:\WINDOWS\system32\wuweb.dll
2007-04-17 03:45:28 92,504 —-a-w C:\WINDOWS\system32\cdm.dll
2007-04-17 03:45:20 53,080 —-a-w C:\WINDOWS\system32\wuauclt.exe
2007-04-17 03:45:20 43,352 —-a-w C:\WINDOWS\system32\wups2.dll
2007-04-17 03:44:20 271,224 —-a-w C:\WINDOWS\system32\mucltui.dll
2007-04-17 03:44:18 208,248 —-a-w C:\WINDOWS\system32\muweb.dll


((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))


*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
2003-11-03 13:17 54248 –a—— C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{1E8A6170-7264-4D0F-BEAE-D42A53123C75}]
2006-09-06 01:18 93400 -ra—— C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\NppBho.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
2005-05-31 01:04 853672 –a—— C:\PROGRA~1\SPYBOT~1\SDHelper.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
2007-03-14 03:43 501400 –a—— C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
2007-07-12 00:05 2554944 -ra—— c:\program files\google\googletoolbar1.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
2007-07-12 00:06 325048 –a—— C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{E99421FB-68DD-40F0-B4AC-B7027CAE2F1A}]
2005-02-22 12:50 368640 –a—— C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IntelMeM"="C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe" [2003-09-03 20:12]
"PCMService"="C:\Program Files\Dell\Media Experience\PCMService.exe" [2003-08-26 19:47]
"FaxCenterServer"="C:\Program Files\Dell PC Fax\fm3032.exe" [2006-06-15 05:03]
"dlcqmon.exe"="C:\Program Files\Dell Photo AIO Printer 966\dlcqmon.exe" [2006-06-20 12:37]
"MemoryCardManager"="C:\Program Files\Dell Photo AIO Printer 966\memcard.exe" [2006-06-27 06:34]
"ccApp"="C:\Program Files\Common Files\Symantec Shared\ccApp.exe" [2007-01-09 22:59]
"osCheck"="C:\Program Files\Norton Internet Security\osCheck.exe" [2006-09-05 21:22]
"Symantec PIF AlertEng"="C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" [2007-03-12 18:30]
"SpyHunter"="" []
"Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [2006-11-03 19:20]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe" [2007-03-14 03:43]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2005-08-08 01:04]
"ISUSScheduler"="C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" [2005-06-10 10:44]
"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 04:25]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DellSupport"="C:\Program Files\DellSupport\DSAgnt.exe" [2007-03-15 11:09]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-07-11 23:57]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 02:56]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\shellexecutehook.dll" [2007-05-30 07:29]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\aawservice]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\AVG Anti-Spyware Driver]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\AVG Anti-Spyware Guard]

*Newly Created Service* - CATCHME
*Newly Created Service* - COMHOST

Contents of the 'Scheduled Tasks' folder
2007-07-02 02:26:30 C:\WINDOWS\tasks\EasyShare Registration Task.job
2007-07-16 06:44:18 C:\WINDOWS\tasks\MP Scheduled Scan.job
2007-07-14 01:00:00 C:\WINDOWS\tasks\Norton Internet Security - Run Full System Scan - Greg Salmon.job

**************************************************************************

catchme 0.3.1017 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-07-16 10:19:58
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes …

scanning hidden registry entries …

scanning hidden files …

scan completed successfully
hidden files: 0

**************************************************************************

Completion time: 2007-07-16 10:22:33
C:\ComboFix-quarantined-files.txt … 2007-07-16 10:21
C:\ComboFix2.txt … 2007-07-16 01:55

— E O F —


Logfile of HijackThis v1.99.1
Scan saved at 10:25:21 AM, on 7/16/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\dlcqcoms.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
C:\Program Files\Dell\Media Experience\PCMService.exe
C:\Program Files\Dell Photo AIO Printer 966\dlcqmon.exe
C:\Program Files\Dell Photo AIO Printer 966\memcard.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\internet explorer\iexplore.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\notepad.exe
C:\Documents and Settings\guest 2\Desktop\HJT\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.frontieronline.net/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.microsoft.com/fwlink/?LinkId=74005
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\NppBho.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\UIBHO.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [IntelMeM] C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\Media Experience\PCMService.exe"
O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Dell PC Fax\fm3032.exe" /s
O4 - HKLM\..\Run: [dlcqmon.exe] "C:\Program Files\Dell Photo AIO Printer 966\dlcqmon.exe"
O4 - HKLM\..\Run: [MemoryCardManager] "C:\Program Files\Dell Photo AIO Printer 966\memcard.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton Internet Security\osCheck.exe"
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - http://www.symantec.com/techsupp/asa/ctrl/LSSupCtl.cab
O16 - DPF: {2AF5BD25-90C5-4EEC-88C5-B44DC2905D8B} (DownloadManager Control) - http://dlm.tools.akamai.com/dlmanager/vers…vex-2.2.1.0.cab
O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} (Symantec Download Manager) - https://webdl.symantec.com/activex/symdlmgr.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1132087453687
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - http://www.symantec.com/techsupp/asa/ctrl/SymAData.cab
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://www.dk-hosting.co.uk/plugins/msnchat45.cab
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Settings Manager (ccSetMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: dlcq_device - - C:\WINDOWS\system32\dlcqcoms.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\isPwdSvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: LiveUpdate Notice Service - Unknown owner - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PifEng.dll (file missing)
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
Your logs look clean. :thumbup: I think it would be wise to do an in-depth check of your entire system just to make sure that no malware is still lurking:

Please do an online scan with Kaspersky Online Virus Scanner (Use Internet Explorer as your Browser)

Note: If you have used this particular scanner before, you MAY HAVE YO UNINSTALL the program through Add/Remove Programs before downloading the new ActiveX component

Next Click on Free Virus Scanner, then Kaspersky Online Scanner

You will be prompted to install an ActiveX component from Kaspersky, Click Yes.
  • The program will launch and then begin downloading the latest definition files:
  • Once the files have been downloaded click on NEXT
  • Now click on Scan Settings
  • In the scan settings make that the following are selected:
    • Scan using the following Anti-Virus database:
    Standard
    • Scan Options:
    Scan Archives
    Scan Mail Bases
  • Click OK
  • Now under select a target to scan:Select My Computer
  • This will program will start and scan your system.
  • The scan will take a while so be patient and let it run.
  • Once the scan is complete it will display if your system has been infected.
    • Now click on the Save as Text button:
  • Save the file to your desktop.
  • Copy and paste that information into your next post.
Please also tell me how things are now running.

Regards

Trevuren
I'm sorry, the log is too big for one post, so I am deviding it into sections. Please forgive this. KASPERSKY ONLINE SCANNER REPORT Monday, July 16, 2007 11:50:44 AM Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600) Kaspersky Online Scanner version: 5.0.93.0 Kaspersky Anti-Virus database last update: 16/07/2007 Kaspersky Anti-Virus database records: 340529 Scan Settings Scan using the following antivirus database standard Scan Archives true Scan Mail Bases true Scan Target My Computer A:\ C:\ D:\ E:\ Scan Statistics Total number of scanned objects 61105 Number of viruses found 1 Number of infected objects 1 Number of suspicious objects 0 Duration of the scan process 00:50:22 Infected Object Name Virus Name Last Action C:\97ac38c0e352ed7134b37e771dbdd751\admparse.dll Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\admparse.dll.mui Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\advpack.dll Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\advpack.dll.mui Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\browseui.dll Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\corpol.dll Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\custsat.dll Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\dxtmsft.dll Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\dxtrans.dll Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\extmgr.dll Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\extmgr.dll.mui Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\feeddisc.wav Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\hmmapi.dll Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\hmmapi.dll.mui Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\html.iec Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\html.iec.mui Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\icardie.dll Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\icardie.dll.mui Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\icrav03.rat Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\ie4uinit.exe Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\ie4uinit.exe.mui Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\ieakeng.dll Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\ieakeng.dll.mui Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\ieakmmc.chm Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\ieaksie.dll Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\ieaksie.dll.mui Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\ieakui.dll Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\ieakui.dll.mui Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\ieapfltr.dat Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\ieapfltr.dll Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\iedkcs32.dll Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\iedkcs32.dll.mui Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\iedw.exe Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\iedw.exe.mui Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\ieencode.dll Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\ieeula.chm Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\ieframe.dll Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\ieframe.dll.mui Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\iepeers.dll Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\iepeers.dll.mui Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\ieproxy.dll Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\iernonce.dll Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\iernonce.dll.mui Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\iertutil.dll Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\iesetup.dll Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\iesetup.dll.mui Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\iesupp.chm Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\ieudinit.exe Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\ieui.dll Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\ieui.dll.mui Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\ieuinit.inf Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\ieunatt.exe.mui Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\iexplore.chm Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\iexplore.exe Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\iexplore.exe.mui Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\imgutil.dll Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\inetcorp.iem Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\inetcpl.cpl Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\inetcpl.cpl.mui Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\inetres.adm Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\inetset.iem Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\infobar.wav Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\inseng.dll Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\inseng.dll.mui Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\install.ins Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\jscript.dll Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\jsproxy.dll Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\licmgr10.dll Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\licmgr10.dll.mui Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\msfeeds.dll Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\msfeeds.mof Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\msfeedsbs.dll Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\msfeedsbs.dll.mui Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\msfeedsbs.mof Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\msfeedssync.exe Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\mshta.exe Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\mshta.exe.mui Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\mshtml.dll Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\mshtml.dll.mui Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\mshtml.tlb Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\mshtmled.dll Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\mshtmled.dll.mui Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\mshtmler.dll Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\mshtmler.dll.mui Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\msls31.dll Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\msrating.dll Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\msrating.dll.mui Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\mstime.dll Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\navstart.wav Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\occache.dll Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\occache.dll.mui Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\occache.ini Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\pngfilt.dll Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\popupblk.wav Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\shdocvw.dll Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\shlwapi.dll Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\spmsg.dll Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\spuninst.exe Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\spupdsvc.exe Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\tdc.ocx Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\ticrf.rat Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\update\eula.rtf Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\update\idndl.exe Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\update\ie7.cat Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\update\iecustom.dll Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\update\iereseticons.exe Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\update\iesetup.exe Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\update\legitlibm.dll Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\update\nlsdl.exe Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\update\update.exe Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\update\update.exe.manifest Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\update\update.inf Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\update\update.ver Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\update\updspapi.dll Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\update\xmllitesetup.exe Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\url.dll Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\urlmon.dll Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\urlmon.dll.mui Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\vbscript.dll Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\vgx.dll Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\webcheck.dll Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\webcheck.dll.mui Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\webcheck.ini Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\winfxdocobj.exe Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\winfxdocobj.exe.mui Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\wininet.dll Object is locked skipped C:\97ac38c0e352ed7134b37e771dbdd751\wininet.dll.mui Object is locked skipped C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\329ff57da944468fc02238de2909fe34_1dce0e75-1303-433a-bfc1-6b582bd25551 Object is locked skipped C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3bc5411dce7032fbcffa552a6e9cbe5d_1dce0e75-1303-433a-bfc1-6b582bd25551 Object is locked skipped C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\7cbe0e1679f1c0835e346f3d3ac3eee0_1dce0e75-1303-433a-bfc1-6b582bd25551 Object is locked skipped C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\d32e2018c03fe7ceb4d939b651d1fd4e_1dce0e75-1303-433a-bfc1-6b582bd25551 Object is locked skipped C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp Object is locked skipped C:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\Support\MPLog-07142007-221734.log Object is locked skipped C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\settings.dat Object is locked skipped C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBConfig.log Object is locked skipped C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBDebug.log Object is locked skipped C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBDetect.log Object is locked skipped C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBNotify.log Object is locked skipped C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBRefr.log Object is locked skipped C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBSetCfg.log Object is locked skipped C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBSetCfg2.log Object is locked skipped C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBSetDev.log Object is locked skipped C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBSetLoc.log Object is locked skipped C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBSetUsr.log Object is locked skipped C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBStHash.log Object is locked skipped C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\BBValid.log Object is locked skipped C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\SPPolicy.log Object is locked skipped C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\SPStart.log Object is locked skipped C:\Documents and Settings\All Users\Application Data\Symantec\SPBBC\SPStop.log Object is locked skipped C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\SrtErEvt.log Object is locked skipped C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\SrtETmp\BC939759.TMP Object is locked skipped C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\SrtMoEvt.log Object is locked skipped C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\SrtNvEvt.log Object is locked skipped C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\SrtScEvt.log Object is locked skipped C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\SrtTxFEvt.log Object is locked skipped C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\SrtViEvt.log Object is locked skipped C:\Documents and Settings\All Users\Application Data\Symantec\SubEng\submissions.idx
Please DELETE the following file: C:\Documents and Settings\All Users\Application Data\Symantec\SubEng\submissions.idx


Your log looks good. If you have no more malware-related problems that you are aware of, just give me the OK and we can start the final but essential cleanup procedures and recommendations.

Trevuren
C:\Documents and Settings\Greg Salmon\Application Data\Adobe\Acrobat\6.0\AcroForm\MRUFormsList Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Adobe\Acrobat\6.0\AdobeComFnt06.lst Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Adobe\Acrobat\6.0\Collab\OfflineDocs Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Adobe\Acrobat\6.0\Collab\Reviews Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Adobe\Acrobat\6.0\JSADM.exv Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Adobe\Acrobat\6.0\Preferences\AutoFillDefaults.dat Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Adobe\Acrobat\6.0\Preferences\defaultHeuristics.dat Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Adobe\Acrobat\6.0\TMGrpPrm.sav Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Adobe\Acrobat\6.0\Updater\udstore.js Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Adobe\Online Services\Photoshop Album Starter Edition\cache\cache.dat Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Adobe\Online Services\Photoshop Album Starter Edition\cache\entry.dat Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Adobe\Online Services\Photoshop Album Starter Edition\clients\Photoshop Album Starter Edition\notifications.dat Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Adobe\Online Services\Photoshop Album Starter Edition\clients\Photoshop Album Starter Edition\preferences.dat Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Adobe\Photoshop Album\3.0\apd.prf Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Adobe\Photoshop Album\3.0\customevents.dat Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Adobe\Photoshop Album\3.0\email.xml Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Adobe\Photoshop Album\3.0\jpegviewer.xml Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Adobe\Photoshop Album\3.0\Logse30.txt Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Adobe\Photoshop Album\3.0\psa.prf Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Adobe\Photoshop Album\3.0\psase30.xml Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Adobe\Photoshop Album\3.0\status.dat Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\AdobeAUM\pase30xpwinen_US.aum Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\AdobeAUM\pase30xpwinen_US_meta.txt Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\AdobeDLM.log Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\AdobeUM\pase30xpwinen_US.ini Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Aim\rvtfyxmu\fishdaddy\cert8.db Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Aim\rvtfyxmu\fishdaddy\key3.db Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Aim\rvtfyxmu\fishdaddy\secmod.db Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Aim\rvtfyxmu\Resources\CurrentSettings.xml Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectExpert\11\Custom WP Templates\bluterra.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectExpert\11\Custom WP Templates\greenbrk.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectExpert\11\Custom WP Templates\hatch.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectExpert\11\Custom WP Templates\lace1.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectExpert\11\Custom WP Templates\lace2.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectExpert\11\Custom WP Templates\marble1.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectExpert\11\Custom WP Templates\marble2.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectExpert\11\Custom WP Templates\oil1.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectExpert\11\Custom WP Templates\oil2.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectExpert\11\Custom WP Templates\paper1.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectExpert\11\Custom WP Templates\paper2.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectExpert\11\Custom WP Templates\pine.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectExpert\11\Custom WP Templates\poly.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectExpert\11\Custom WP Templates\poplar.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectExpert\11\Custom WP Templates\qw11en.wpt Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectExpert\11\Custom WP Templates\rock.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectExpert\11\Custom WP Templates\stucco1.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectExpert\11\Custom WP Templates\stucco2.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectExpert\11\Custom WP Templates\tile.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectExpert\11\Custom WP Templates\water.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectExpert\11\Custom WP Templates\wp11US.wpt Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectExpert\11\Custom WP Templates\wrinkle.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectExpert\11\Custom WP Templates\XML\app-a50.wpt Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectExpert\11\Custom WP Templates\XML\app-d30.wpt Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectExpert\11\Custom WP Templates\XML\docbook2.wpt Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectExpert\11\Custom WP Templates\XML\docbook3.wpt Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectExpert\11\Custom WP Templates\XML\html.wpt Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectExpert\11\Custom WP Templates\XML\html32ip.wpt Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectExpert\11\Custom WP Templates\XML\html3_2.wpt Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectExpert\11\Custom WP Templates\XML\overview.wpt Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectExpert\11\Custom WP Templates\XML\sample1.wpt Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectExpert\11\Custom WP Templates\XML\sample2.wpt Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectExpert\11\Custom WP Templates\XML\teilite.wpt Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectExpert\11\Custom WP Templates\XML\XML.wpt Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectExpert\11\Custom WP Templates\XML\xmlnews.wpt Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectExpert\11\Custom WP Templates\_autotmp.wpx Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectScript\11\WordPerfect\ABBREV.WCM Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectScript\11\WordPerfect\adrs2mrg.wcm Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectScript\11\WordPerfect\ALLFONTS.WCM Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectScript\11\WordPerfect\checkbox.wcm Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectScript\11\WordPerfect\closeall.wcm Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectScript\11\WordPerfect\CTRLM.WCM Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectScript\11\WordPerfect\cvtdocs11.wcm Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectScript\11\WordPerfect\DCConvert.wcm Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectScript\11\WordPerfect\ender01.wpg Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectScript\11\WordPerfect\ender02.wpg Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectScript\11\WordPerfect\ender03.wpg Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectScript\11\WordPerfect\ender04.wpg Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectScript\11\WordPerfect\ender05.wpg Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectScript\11\WordPerfect\ender06.wpg Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectScript\11\WordPerfect\ender07.wpg Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectScript\11\WordPerfect\ender08.wpg Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectScript\11\WordPerfect\ender09.wpg Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectScript\11\WordPerfect\ender10.wpg Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectScript\11\WordPerfect\endfoot.wcm Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectScript\11\WordPerfect\EXPNDALL.WCM Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectScript\11\WordPerfect\FILESTMP.WCM Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectScript\11\WordPerfect\flipenv.wcm Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectScript\11\WordPerfect\FONTDN.WCM Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectScript\11\WordPerfect\FONTUP.WCM Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectScript\11\WordPerfect\footend.wcm Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectScript\11\WordPerfect\LONGNAME.WCM Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectScript\11\WordPerfect\nomacro.wcm Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectScript\11\WordPerfect\PARABRK.WCM Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectScript\11\WordPerfect\pleading.wcm Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectScript\11\WordPerfect\prompts.wcm Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectScript\11\WordPerfect\reverse.wcm Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectScript\11\WordPerfect\saveall.wcm Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectScript\11\WordPerfect\SAVETOA.WCM Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectScript\11\WordPerfect\tconvert.wcm Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectScript\11\WordPerfect\uawp11en.wcm Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectScript\11\WordPerfect\wp_org.wcm Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\PerfectScript\11\WordPerfect\wp_pr.wcm Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\WordPerfect Office 11\User Config\CdrConv.ini Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\WordPerfect Office 11\User Config\Color.ini Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\WordPerfect Office 11\User Config\CorelApp.ini Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\WordPerfect Office 11\User Config\Corelflt.ini Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\WordPerfect Office 11\User Config\CORELPDF.INI Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Corel\WordPerfect Office 11\User Config\FILTERS.INI Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\DellFaxCtr\FAXLOG32.CDX Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\DellFaxCtr\FAXLOG32.DBF Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\DellFaxCtr\FAXLOG32.FPT Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\DESKTOP.INI Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\dm.ini Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Google\Local Search History\google%2Eimages.w Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Google\Local Search History\google%2Eweb.w Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\gtny\88D7456F-2D0E-40AA-BDBC-7BC292A1FF1A_CONFIRM.cache Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\channels.ini Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\chdata\chdata.cfg Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\chn.pk Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\CIP\DellSupportODBK.exe Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\CIP\DellSupportODBK.log Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\CIPInfo\901.cin Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\1004.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\1027.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\1028.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\1029.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\1030.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\1043.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\1060.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\1061.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\1062.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\1063.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\1064.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\1094.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\1095.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\1096.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\1097.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\1098.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\1112.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\1113.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\1114.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\1117.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\1118.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\1120.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\516.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\519.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\522.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\526.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\527.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\528.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\579.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\580.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\587.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\632.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\679.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\699.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\701.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\703.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\706.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\716.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\745.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\746.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\748.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\756.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\758.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\759.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\793.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\794.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\798.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\800.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\801.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\804.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\809.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\810.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\811.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\812.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\814.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\832.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\833.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\840.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\846.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\848.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\849.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\873.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\879.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\880.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\883.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\884.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\885.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\886.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\887.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\888.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\889.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\901.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\902.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\903.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\905.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\906.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\907.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\908.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\909.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\910.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\911.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\912.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\914.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\915.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\916.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\917.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\918.ucl Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\channel.cfg Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\config\groups.js Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\config\ocxid.js Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\diag\bios.ini Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\diag\DAntivirus.cfg Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\diag\dell_printers.ini Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\diag\DProg.ini Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\diag\dvd.ini Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\diag\popup.ini Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\diag\printers.ini Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\diag\trojan.ini Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\faqs\10675121.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\faqs\10886371.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\faqs\122779.html Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\faqs\696.htm Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\faqs\697.htm Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\faqs\global.css Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\faqs\globe.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\faqs\title.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\fix\arg.ini Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\fix\DellSupportLauncher.exe Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\fix\DellSupportODBK.exe Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\group_icon\security\icon.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\group_icon\system\icon.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\html\blank.htm Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\html\confirm.htm Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\html\gtagent_events.vbs Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\html\index.htm Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\html\moreinfo.htm Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\html\noitems.htm Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\html\senddata.htm Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\html\statinfo.htm Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\html\survey.htm Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\html\wait.htm Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\bg.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\but_a.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\but_b.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\close_a.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\close_b.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\close_c.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\count_bg.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\delete_a.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\delete_b.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\delete_c.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\delete_d.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\dialog_strip.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\dialog_title.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\first_a.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\first_b.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\first_c.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\first_d.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\fix_abort.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\fix_fail.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\fix_ok.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\help_a.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\help_b.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\help_c.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\last_a.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\last_b.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\last_c.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\last_d.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\left_but_a.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\left_but_b.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\min_a.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\min_b.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\min_c.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\msg_bg.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\next_a.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\next_a2.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\next_b.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\next_c.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\next_d.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\noproblems.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\prev_a.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\prev_b.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\prev_c.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\prev_d.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\right_but_a.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\right_but_b.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\settings_a.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\settings_b.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\settings_c.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\spacer.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\wait.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\index.htm Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\agent_infolet_exe.htm Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\ab.ppk Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\adpglobal\AdpUtil.js Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\adpglobal\Adp_GUI.js Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\adpglobal\Common\adpicon.ico Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\adpglobal\Common\button_cirlce.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\adpglobal\Common\button_disable.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\adpglobal\Common\Chimes.wav Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\adpglobal\Common\close_popup.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\adpglobal\Common\close_popup_over.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\adpglobal\Common\dot.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\adpglobal\Common\Ending_v.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\adpglobal\Common\Ending_x.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\adpglobal\Common\field_bar.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\adpglobal\Common\inprogress.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\adpglobal\Common\installing.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\adpglobal\Common\logo.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\adpglobal\Common\main_bar.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\adpglobal\Common\mini_logo.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\adpglobal\Common\mini_topbar.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\adpglobal\Common\Notify.wav Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\adpglobal\Common\progress_bg.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\adpglobal\Common\progress_slice.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\adpglobal\Common\topbar.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\adpglobal\De\Generic.css Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\adpglobal\De\global_adp_Text.xml Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\adpglobal\En\Generic.css Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\adpglobal\En\global_adp_Text.xml Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\adpglobal\Es\Generic.css Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\adpglobal\Es\global_adp_Text.xml Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\adpglobal\Fr\Generic.css Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\adpglobal\Fr\global_adp_Text.xml Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\adpglobal\ImgOver.js Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\adpglobal\Initialize.js Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\adpglobal\It\Generic.css Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\adpglobal\It\global_adp_Text.xml Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\adpglobal\Jp\Generic.css Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\adpglobal\Jp\global_adp_Text.xml Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\adpglobal\Ko\Generic.css Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\adpglobal\Ko\global_adp_Text.xml Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\adpglobal\main.htm Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\adpglobal\Nl\Generic.css Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\adpglobal\Nl\global_adp_Text.xml Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\adpglobal\popupMsg.js Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\adpglobal\PtB\Generic.css Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\adpglobal\PtB\global_adp_Text.xml Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\adpglobal\Query.js Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\adpglobal\Sv\Generic.css Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\adpglobal\Sv\global_adp_Text.xml Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\adpglobal\Wrapper.js Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\adpglobal\Zh\Generic.css Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\adpglobal\Zh\global_adp_Text.xml Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\adpglobal\ZhT\Generic.css Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\adpglobal\ZhT\global_adp_Text.xml Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\ccnotify.cfg Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\ccnotify.ini Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\cybercoach.cfg Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\enginecf_ver.ini Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\glfs\default.glf Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\glfs\Dell.glf Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\LibDir\abort.trn Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\LibDir\cloak.trn Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\LibDir\De_LibText.ini Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\LibDir\En_LibText.ini Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\LibDir\errorlib.trn Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\LibDir\Es_LibText.ini Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\LibDir\Fr_LibText.ini Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\LibDir\func.trn Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\LibDir\generic.trn Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\LibDir\getmaindriver.trn Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\LibDir\It_LibText.ini Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\LibDir\Jp_LibText.ini Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\LibDir\Ko_LibText.ini Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\LibDir\mini.trn Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\LibDir\Nl_LibText.ini Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\LibDir\oeonwindows.trn Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\LibDir\outlookexpress.trn Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\LibDir\PtB_LibText.ini Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\LibDir\Sv_LibText.ini Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\LibDir\taskbarandstartmenu.trn Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\LibDir\xsystray.trn Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\LibDir\ZhT_LibText.ini Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\LibDir\Zh_LibText.ini Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\configuration\trainer.ppk Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\lessons\1.gdpb Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\lessons\CreateSystemRestorePoint.gdpb Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\lessons\DeleteTempFolder.gdpb Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\lessons\DeleteWow6432Node.gdpb Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\lessons\DisableHDAutorun.gdpb Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\lessons\Dl_DriverReset.gdpb Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\lessons\Dl_PwrMngUtil.gdpb Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\lessons\EnableAutomaticUpdates.gdpb Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\lessons\IERestrictedSites_SetHigh.gdpb Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\lessons\IESecurityLevel_SetMedium.gdpb Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\lessons\LimitExcelMacro.gdpb Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\lessons\LimitPwrPointMacro.gdpb Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\lessons\LimitWordMacro.gdpb Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\lessons\RemoveFolderSharing.gdpb Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\lessons\SetDefaultPrinter.gdpb Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\lessons\SetXPFirewall.gdpb Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\lessons\Spool_ActivateService.gdpb Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\lessons\StartupCorrupted.gdpb Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\lessons\StartupLinkage.gdpb Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\lessons\Trojan_Sdbot.gdpb Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\lessons\TurnOnSystemRestore.gdpb Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\lessons\UnInst_Delport.gdpb Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\lessons\UnInst_WinIK.gdpb Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\lessons\VM_SystemManagedSize.gdpb Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\lessons\VM_UserManagedSize.gdpb Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\RunGdp.exe Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\coach\RunGdpCfg.cfg Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\common\images\items_img\autorun.jpg Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\common\images\items_img\CD.jpg Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\common\images\items_img\dell_recommends.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\common\images\items_img\driver.jpg Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\common\images\items_img\dsc2.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\common\images\items_img\dvd.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\common\images\items_img\dvd.jpg Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\common\images\items_img\extend_warranty.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\common\images\items_img\firewall.jpg Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\common\images\items_img\internet.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\common\images\items_img\internet_security_general.jpg Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\common\images\items_img\java.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\common\images\items_img\memory.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\common\images\items_img\memory.jpg Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\common\images\items_img\monitor.gif Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\common\images\items_img\Msexcel2.jpg Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\common\images\items_img\MSpowerpoint2.jpg Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\common\images\items_img\MSword2.jpg Object is locked skipped C:\Documents and Settings\Greg Salmon\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\common\images\items_img\music.jpg

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI