Spyware / Malware / Virus Removal

[Resolved] oh dear lord i'm ready to give this another try

11 min read

Looking for the outcome? Ask AI

indianahx Topic Starter

Post #1November 12, 2007, 10:55 PM UTC last edited November 12, 2007, 11:09 PM UTC

Logfile of HijackThis v1.99.1
Scan saved at 5:55:18 PM, on 11/12/2007
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Video Add-on\icthis.exe
C:\windows\system\hpsysdrv.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\Program Files\Video Add-on\icmntr.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\PCHealth\HelpCtr\Binaries\HelpSvc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\HJT\HijackThis.exe

R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {1C3C4699-B285-475F-BE47-0B26088CE876} - C:\Program Files\Security Tools\iesplg.dll (file missing)
O2 - BHO: Editor plugin - {41F0460B-6B45-45de-8717-B27BC18360A6} - restorem.dll (file missing)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: IE Custom Tools - {6CA49FDD-4AEB-4F08-A394-C0A1F82CAA16} - C:\Program Files\Video Add-on\ictmdl.dll
O4 - HKLM\..\Run: [BlockTracker] c:\hp\bin\BlockTracker.exe
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\VERITAS Software\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\realsched.exe -osboot
O4 - HKLM\..\Run: [WCOLOREAL] "C:\Program Files\COMPAQ\Coloreal\coloreal.exe"
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Content Monitoring Tool (msCMTSrvc) - Unknown owner - C:\WINDOWS\system32\msCMTSrvc.exe (file missing)
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

SORRY….forgot to add the start up list and uninstall list…..they're below::

StartupList report, 11/12/2007, 5:57:29 PM
StartupList version: 1.52.2
Started from : C:\HJT\HijackThis.EXE
Detected: Windows XP SP1 (WinNT 5.01.2600)
Detected: Internet Explorer v6.00 SP1 (6.00.2800.1106)
* Using default options
==================================================

Running processes:

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Video Add-on\icthis.exe
C:\windows\system\hpsysdrv.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\Program Files\Video Add-on\icmntr.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\PCHealth\HelpCtr\Binaries\HelpSvc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\HJT\HijackThis.exe
C:\WINDOWS\system32\NOTEPAD.EXE

————————————————–

Checking Windows NT UserInit:

[HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
UserInit = C:\WINDOWS\system32\userinit.exe,

————————————————–

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

BlockTracker = c:\hp\bin\BlockTracker.exe
hpsysdrv = c:\windows\system\hpsysdrv.exe
HotKeysCmds = C:\WINDOWS\System32\hkcmd.exe
KBD = C:\HP\KBD\KBD.EXE
StorageGuard = "C:\Program Files\VERITAS Software\Update Manager\sgtray.exe" /r
TkBellExe = C:\Program Files\Common Files\Real\Update_OB\realsched.exe -osboot
WCOLOREAL = "C:\Program Files\COMPAQ\Coloreal\coloreal.exe"
Recguard = C:\WINDOWS\SMINST\RECGUARD.EXE
NvCplDaemon = RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
nwiz = nwiz.exe /installquiet /keeploaded
ATIModeChange = Ati2mdxx.exe
ATIPTA = C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
PS2 = C:\WINDOWS\system32\ps2.exe
AVG7_CC = C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
SunJavaUpdateSched = "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"

————————————————–

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run

NVIEW = rundll32.exe nview.dll,nViewLoadHook
Aim6 =
Yahoo! Pager = "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet

————————————————–

Shell & screensaver key from C:\WINDOWS\SYSTEM.INI:

Shell=*INI section not found*
SCRNSAVE.EXE=*INI section not found*
drivers=*INI section not found*

Shell & screensaver key from Registry:

Shell=Explorer.exe
SCRNSAVE.EXE=*Registry value not found*
drivers=*Registry value not found*

Policies Shell key:

HKCU\..\Policies: Shell=*Registry value not found*
HKLM\..\Policies: Shell=*Registry value not found*

————————————————–

Enumerating Browser Helper Objects:

(no name) - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll - {02478D38-C3F9-4efb-9B51-7695ECA05670}
(no name) - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
(no name) - C:\Program Files\Security Tools\iesplg.dll (file missing) - {1C3C4699-B285-475F-BE47-0B26088CE876}
(no name) - restorem.dll (file missing) - {41F0460B-6B45-45de-8717-B27BC18360A6}
(no name) - C:\PROGRA~1\SPYBOT~1\SDHelper.dll - {53707962-6F74-2D53-2644-206D7942484F}
(no name) - C:\Program Files\Yahoo!\Common\yiesrvc.dll - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897}
(no name) - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43}

————————————————–

Enumerating Task Scheduler jobs:

AppleSoftwareUpdate.job

————————————————–

Enumerating Download Program Files:

[Installation Support]
InProcServer32 = C:\Program Files\Yahoo!\Common\Yinsthelper.dll
CODEBASE = C:\Program Files\Yahoo!\Common\Yinsthelper.dll

[{3334504D-9980-0010-8000-00AA00389B71}]
CODEBASE = http://download.microsoft.com/download/0/C…C4D/mp43dmo.CAB

[{33564D57-0000-0010-8000-00AA00389B71}]
CODEBASE = http://download.microsoft.com/download/F/6…922/wmv9VCM.CAB

————————————————–

Enumerating ShellServiceObjectDelayLoad items:

PostBootReminder: C:\WINDOWS\system32\SHELL32.dll
CDBurn: C:\WINDOWS\system32\SHELL32.dll
WebCheck: C:\WINDOWS\System32\webcheck.dll
SysTray: C:\WINDOWS\System32\stobject.dll

————————————————–
Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\policies\Explorer\Run

some = C:\Program Files\Video Add-on\icthis.exe

————————————————–

End of report, 5,799 bytes
Report generated in 13.531 seconds

Command line options:
/verbose - to add additional info on each section
/complete - to include empty sections and unsuspicious data
/full - to include several rarely-important sections
/force9x - to include Win9x-only startups even if running on WinNT
/forcent - to include WinNT-only startups even if running on Win9x
/forceall - to include all Win9x and WinNT startups, regardless of platform
/history - to list version history only

Adobe Acrobat 5.0
Adobe Flash Player ActiveX
Apple Software Update
ATI Control Panel
ATI Display Driver
AVG 7.5
AVG Anti-Spyware 7.5
Coloreal
DivX Codec
DivX Content Uploader
DivX Converter
DivX Player
DivX Web Player
HijackThis 1.99.1
IE Custom Tools
IE Safety Features
Inactive HP Printer Drivers (Remove only)
Indeo® Software
Information Center
Intel® 82845G Graphics Driver Software
InterVideo WinDVD 4
Java 2 Runtime Environment Standard Edition v1.3.1_02
Java 2 Runtime Environment, SE v1.4.0_01
Java Web Start
Java™ 6 Update 2
KBD
LiveReg (Symantec Corporation)
LiveUpdate 1.80 (Symantec Corporation)
Microsoft .NET Framework (English) v1.0.3705
Mozilla Firefox (2.0.0.9)
NVIDIA Windows 2000/XP Display Drivers
PS2
RealOne Player
RecordNow
RecordNow Update Manager
S3Display
S3Gamma2
S3Info2
S3Overlay
Simple Installer - Multilanguage Version
Update for Windows XP (KB898461)
Windows Installer 3.1 (KB893803)
Windows Media Format Runtime
Windows Media Player 10
Windows Safety Alert
Windows XP Hotfix - KB842773
Windows XP Hotfix (SP2) [See q330638 for more information]
Windows XP Hotfix (SP2) [See Q331060 for more information]
Yahoo! Browser Services
Yahoo! Install Manager
Yahoo! Internet Mail
Yahoo! Messenger
Yahoo! Toolbar

indianahx

Post #2November 20, 2007, 11:45 PM UTC

i havent noticed a reply of any kind. am i still in line to be helped???

Scotty

Post #3November 20, 2007, 11:50 PM UTC

Hello

Are you going to stick around to the finish this time?

Download and Run SmitfraudFix
Please download SmitfraudFix (by S!Ri)
Extract the content (a folder named SmitfraudFix) to your Desktop.

Open the SmitfraudFix folder and double-click smitfraudfix.cmd
Select option #1 - Search by typing 1 and press "Enter"; a text file will appear, which lists infected files (if present).
Please copy/paste the content of that report into your next reply.

Note : process.exe is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a "RiskTool"; it is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user.

indianahx

Post #4November 21, 2007, 9:37 PM UTC

sorry about that. i had limited time on the computer and just couldnt get around to it with work….i'm certain i'm going to get rid of this carp** once and for all!!!!!

here's my log from the cmd file…. SmitFraudFix v2.253 Scan done at 15:31:56.77, Wed 11/21/2007 Run from C:\Documents and Settings\Owner.YOUR-KYBTG65GXE.000\Desktop\SmitfraudFix OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT The filesystem type is NTFS Fix run in normal mode »»»»»»»»»»»»»»»»»»»»»»»» Process C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\windows\system\hpsysdrv.exe C:\HP\KBD\KBD.EXE C:\Program Files\Common Files\Real\Update_OB\realsched.exe C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe C:\PROGRA~1\Yahoo!\MESSEN~1\ymsgr_tray.exe C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe C:\PROGRA~1\Grisoft\AVG7\avgemc.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\WINDOWS\System32\cmd.exe »»»»»»»»»»»»»»»»»»»»»»»» hosts »»»»»»»»»»»»»»»»»»»»»»»» C:\ »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS C:\WINDOWS\d3??.dll FOUND ! C:\WINDOWS\ieyi.dll FOUND ! »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32 »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Owner.YOUR-KYBTG65GXE.000 »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Owner.YOUR-KYBTG65GXE.000\Application Data »»»»»»»»»»»»»»»»»»»»»»»» Start Menu C:\DOCUME~1\ALLUSE~1\STARTM~1\Online Security Guide.url FOUND ! C:\DOCUME~1\ALLUSE~1\STARTM~1\Security Troubleshooting.url FOUND ! »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\OWNERY~1.000\FAVORI~1 C:\DOCUME~1\OWNERY~1.000\FAVORI~1\Online Security Test.url FOUND ! »»»»»»»»»»»»»»»»»»»»»»»» Desktop »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files C:\Program Files\Video Add-on\ FOUND ! »»»»»»»»»»»»»»»»»»»»»»»» Corrupted keys »»»»»»»»»»»»»»»»»»»»»»»» Desktop Components [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0] "Source"="About:Home" "SubscribedURL"="About:Home" "FriendlyName"="My Current Home Page" »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler !!!Attention, following keys are not inevitably infected!!! SrchSTS.exe by S!Ri Search SharedTaskScheduler's .dll [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler] "{a6a36d4a-1a41-4d0e-adf2-e797f230c20a}"="bigfeet" [HKEY_CLASSES_ROOT\CLSID\{a6a36d4a-1a41-4d0e-adf2-e797f230c20a}\InProcServer32] @="C:\WINDOWS\System32\ijftc.dll" [HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{a6a36d4a-1a41-4d0e-adf2-e797f230c20a}\InProcServer32] @="C:\WINDOWS\System32\ijftc.dll" »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs !!!Attention, following keys are not inevitably infected!!! [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLs"="" »»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System !!!Attention, following keys are not inevitably infected!!! [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] "System"="" »»»»»»»»»»»»»»»»»»»»»»»» Rustock »»»»»»»»»»»»»»»»»»»»»»»» DNS Description: Realtek RTL8139 Family PCI Fast Ethernet NIC - Packet Scheduler Miniport DNS Server Search Order: 192.168.0.1 DNS Server Search Order: 192.168.0.1 HKLM\SYSTEM\CCS\Services\Tcpip\..\{63F0298A-4CCF-4DEA-8F85-193D28FDAF95}: DhcpNameServer=192.168.0.1 192.168.0.1 HKLM\SYSTEM\CS1\Services\Tcpip\..\{63F0298A-4CCF-4DEA-8F85-193D28FDAF95}: DhcpNameServer=192.168.0.1 192.168.0.1 HKLM\SYSTEM\CS3\Services\Tcpip\..\{63F0298A-4CCF-4DEA-8F85-193D28FDAF95}: DhcpNameServer=192.168.0.1 192.168.0.1 HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.0.1 192.168.0.1 HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.0.1 192.168.0.1 HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=192.168.0.1 192.168.0.1 »»»»»»»»»»»»»»»»»»»»»»»» Scanning for wininet.dll infection »»»»»»»»»»»»»»»»»»»»»»»» End

Scotty

Post #5November 21, 2007, 9:45 PM UTC

Hi

Timezones wont help us either, Im sure. Ill try to give as much instruction as possible in each reply.

Step 1:
Run Smitfraudfix
Open the SmitfraudFix folder again and double-click smitfraudfix.cmd
Select option #2 - Clean by typing 2 and press "Enter" to delete infected files.

You will be prompted : "Registry cleaning - Do you want to clean the registry ?"; answer "Yes" by typing Y and press "Enter" in order to remove the Desktop background and clean registry keys associated with the infection.

The tool will now check if wininet.dll is infected. You may be prompted to replace the infected file (if found); answer "Yes" by typing Y and press "Enter".

The tool may need to restart your computer to finish the cleaning process; if it doesn't, please restart it into Normal Windows.
A text file will appear onscreen, with results from the cleaning process; please copy/paste the content of that report into your next reply.
The report can also be found at the root of the system drive, usually at C:\rapport.txt

Warning : running option #2 on a non infected computer will remove your Desktop background.

Step 2:
Download SDFix and save it to your Desktop.

Double click SDFix.exe and it will extract the files to %systemdrive%
(Drive that contains the Windows Directory, typically C:\SDFix)

Please then reboot your computer in Safe Mode by doing the following :

Restart your computer
After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually;
Instead of Windows loading as normal, the Advanced Options Menu should appear;
Select the first option, to run Windows in Safe Mode, then press Enter.
Choose your usual account.

Open the extracted SDFix folder and double click RunThis.bat to start the script.
Type Y to begin the cleanup process.
It will remove any Trojan Services and Registry Entries that it finds then prompt you to press any key to Reboot.
Press any Key and it will restart the PC.
When the PC restarts the Fixtool will run again and complete the removal process then display Finished, press any key to end the script and load your desktop icons.
Once the desktop icons load the SDFix report will open on screen and also save into the SDFix folder as Report.txt
(Report.txt will also be copied to Clipboard ready for posting back on the forum).
Finally paste the contents of the Report.txt back in your next reply.

Step 3:
Download and Save ComboFix

Download this file from below:

Here
Save it to your Desktop.
Disconnect from the Internet, than disable your anti-virus and any real-time anti-spyware monitors that are running.
Then double click combofix.exe & follow the prompts.
When finished, it shall produce a log for you. Post that log in your next reply with a new HijackThis log.

Note 1: Do not mouseclick combofix's window whilst it's running. That may cause it to stall
Note 2:Remember to re-enable your anti-virus and anti-spyware before reconnecting to the Internet.

indianahx

Post #6November 25, 2007, 4:15 PM UTC

just wanted to let you know i've got to step two in your directions so far…..just been a mess with the holidays and not having a printer here and jumping back and forth…..sorry

Scotty

Post #7November 25, 2007, 4:19 PM UTC

indianahx

Post #8November 25, 2007, 8:17 PM UTC

SmitFraudFix v2.253

Scan done at 17:16:23.84, Wed 11/21/2007
Run from C:\Documents and Settings\Owner.YOUR-KYBTG65GXE.000\Desktop\SmitfraudFix
OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT
The filesystem type is NTFS
Fix run in normal mode

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Before SmitFraudFix
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"{a6a36d4a-1a41-4d0e-adf2-e797f230c20a}"="bigfeet"

[HKEY_CLASSES_ROOT\CLSID\{a6a36d4a-1a41-4d0e-adf2-e797f230c20a}\InProcServer32]
@="C:\WINDOWS\System32\ijftc.dll"

[HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{a6a36d4a-1a41-4d0e-adf2-e797f230c20a}\InProcServer32]
@="C:\WINDOWS\System32\ijftc.dll"

»»»»»»»»»»»»»»»»»»»»»»»» Killing process

»»»»»»»»»»»»»»»»»»»»»»»» hosts

127.0.0.1 localhost

»»»»»»»»»»»»»»»»»»»»»»»» Winsock2 Fix

S!Ri's WS2Fix: LSP not Found.

»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

GenericRenosFix by S!Ri

C:\WINDOWS\System32\ijftc.dll -> Hoax.Win32.Renos.gen.o
C:\WINDOWS\System32\ijftc.dll -> Deleted

»»»»»»»»»»»»»»»»»»»»»»»» Deleting infected files

C:\WINDOWS\d3??.dll Deleted
C:\WINDOWS\ieyi.dll Deleted
C:\DOCUME~1\ALLUSE~1\STARTM~1\Online Security Guide.url Deleted
C:\DOCUME~1\ALLUSE~1\STARTM~1\Security Troubleshooting.url Deleted
C:\DOCUME~1\OWNERY~1.000\FAVORI~1\Online Security Test.url Deleted
C:\Program Files\Video Add-on\ Deleted

»»»»»»»»»»»»»»»»»»»»»»»» DNS

Description: Realtek RTL8139 Family PCI Fast Ethernet NIC - Packet Scheduler Miniport
DNS Server Search Order: 192.168.0.1
DNS Server Search Order: 192.168.0.1

HKLM\SYSTEM\CCS\Services\Tcpip\..\{63F0298A-4CCF-4DEA-8F85-193D28FDAF95}: DhcpNameServer=192.168.0.1 192.168.0.1
HKLM\SYSTEM\CS1\Services\Tcpip\..\{63F0298A-4CCF-4DEA-8F85-193D28FDAF95}: DhcpNameServer=192.168.0.1 192.168.0.1
HKLM\SYSTEM\CS3\Services\Tcpip\..\{63F0298A-4CCF-4DEA-8F85-193D28FDAF95}: DhcpNameServer=192.168.0.1 192.168.0.1
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.0.1 192.168.0.1
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.0.1 192.168.0.1
HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=192.168.0.1 192.168.0.1

»»»»»»»»»»»»»»»»»»»»»»»» Deleting Temp Files

»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""

»»»»»»»»»»»»»»»»»»»»»»»» Registry Cleaning
Registry Cleaning done.
»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler After SmitFraudFix
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll
»»»»»»»»»»»»»»»»»»»»»»»» End
SDFix: Version 1.115

Run by [removed] on Sun 11/25/2007 at 02:25 PM

Microsoft Windows XP [Version 5.1.2600]

Running From: C:\SDFix

Safe Mode:
Checking Services:

Restoring Windows Registry Values
Restoring Windows Default Hosts File

Rebooting…

Normal Mode:
Checking Files:

Trojan Files Found:

C:\WINDOWS\SYSTEM32\ADDBJ.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDBZ.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDNK32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDPD.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDQW32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDSP32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ADDWN32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APIAC.EXE - Deleted
C:\WINDOWS\SYSTEM32\APICE.EXE - Deleted
C:\WINDOWS\SYSTEM32\APICJ.EXE - Deleted
C:\WINDOWS\SYSTEM32\APIKA32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APIPU32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APIXZ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APIZG32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APIZW32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APPEH.EXE - Deleted
C:\WINDOWS\SYSTEM32\APPLW32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APPPJ.EXE - Deleted
C:\WINDOWS\SYSTEM32\APPVY32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APPWG32.EXE - Deleted
C:\WINDOWS\SYSTEM32\APPXX.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLBS.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLJJ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLMK32.EXE - Deleted
C:\WINDOWS\SYSTEM32\ATLOY32.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRFA32.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRGD32.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRKI.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRSJ.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRTE.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRTO.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRVG.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRVT32.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRWJ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\CRWM.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3LX.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3MZ.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3PX.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3UJ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3VV32.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3ZE32.EXE - Deleted
C:\WINDOWS\SYSTEM32\D3ZW.EXE - Deleted
C:\WINDOWS\SYSTEM32\IEEV.EXE - Deleted
C:\WINDOWS\SYSTEM32\IEGE.EXE - Deleted
C:\WINDOWS\SYSTEM32\IEIN.EXE - Deleted
C:\WINDOWS\SYSTEM32\IEJX32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IEMA.EXE - Deleted
C:\WINDOWS\SYSTEM32\IENQ.EXE - Deleted
C:\WINDOWS\SYSTEM32\IEOE32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IEPA32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IEWS.EXE - Deleted
C:\WINDOWS\SYSTEM32\IPGM32.EXE - Deleted
C:\WINDOWS\SYSTEM32\IPTY.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVAFD32.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVAFX32.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVAGO.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVAGS.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVAGV32.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVAJH.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVAJU32.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVALJ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVALW.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVALY.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVAMI32.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVAMR.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVANM.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVANR32.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVAOD32.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVASY32.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVAUU.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVAVH.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVAWH32.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVAWW32.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVAXD.EXE - Deleted
C:\WINDOWS\SYSTEM32\JAVAYB32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCAC32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCJO.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCKC.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCLX32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCOJ.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCOR.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCPE.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCQY.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCWZ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MFCZB32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSAH32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSCL32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSKM.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSMD32.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSUT.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSUV.EXE - Deleted
C:\WINDOWS\SYSTEM32\MSZP.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETCA.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETCR.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETCT32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETIE.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETKC.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETMB32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETMM.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETNE.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETOC32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETPS32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETTX.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETYG.EXE - Deleted
C:\WINDOWS\SYSTEM32\NETYI.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTDI32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTGF32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTME32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTNE32.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTZD.EXE - Deleted
C:\WINDOWS\SYSTEM32\NTZX.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKAW32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKBM.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKEO.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKFZ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKHQ.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKME32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SDKYP.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSDK.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSGK.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSGM.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSJB.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSRM.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSRN.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSRZ32.EXE - Deleted
C:\WINDOWS\SYSTEM32\SYSTL32.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINEB32.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINHLP~1.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINML32.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINNW32.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINPV32.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINRD.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINSV.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINWY32.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINXO32.EXE - Deleted
C:\WINDOWS\SYSTEM32\WINXU.EXE - Deleted
C:\WINDOWS\SYSTEM32\AASAM.DLL - Deleted
C:\WINDOWS\SYSTEM32\ABYYZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDAM32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDAU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDAY32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDBY32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDCT~1.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDCU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDCV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDDL32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDDQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDEY32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDGQ3~1.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDGT32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDHI.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDHN.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDHR32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDHW32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDIG.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDIN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDIR32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDIW.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDJE32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDJN.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDJT32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDJX.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDKC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDKR.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDLG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDLI.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDMF32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDML.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDNB.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDNH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDNJ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDNL32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDNP32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDOE32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDOL.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDOQ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDOU.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDPR32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDPS.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDPZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDQD32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDQK32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDQL.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDQW32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDQY32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDRE32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDRJ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDRN.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDRO.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDRP32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDRS.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDRS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDRU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDSD32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDSG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDSM.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDSU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDTB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDTE32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDTP32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDTS.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDTW.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDUJ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDUX.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDVC.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDVP.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDWC.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDWF.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDWO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDWX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDWY.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDXC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDXD.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDXX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDYI.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDYJ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDYK3~1.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDYL.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDYQ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDYR.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDYS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDZA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDZG.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDZI32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADDZN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ADUXO.DLL - Deleted
C:\WINDOWS\SYSTEM32\AEKTV.DLL - Deleted
C:\WINDOWS\SYSTEM32\AEQVJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\AERHT.DLL - Deleted
C:\WINDOWS\SYSTEM32\AHGSD.DLL - Deleted
C:\WINDOWS\SYSTEM32\AIFJT.DLL - Deleted
C:\WINDOWS\SYSTEM32\AJDDS.DLL - Deleted
C:\WINDOWS\SYSTEM32\AJGBZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\AMCJE.DLL - Deleted
C:\WINDOWS\SYSTEM32\AMFTG.DLL - Deleted
C:\WINDOWS\SYSTEM32\AMGIP.DLL - Deleted
C:\WINDOWS\SYSTEM32\APBQE.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIAP.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIAR.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIBV.DLL - Deleted
C:\WINDOWS\SYSTEM32\APICD32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APICK32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APICM.DLL - Deleted
C:\WINDOWS\SYSTEM32\APICY32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIDA.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIDV.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIED32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIFG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIFL.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIFL32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIFM32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIGF.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIGF32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIGG.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIGJ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIGK.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIGX.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIGX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIHB.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIHD.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIHD32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIHT.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIHU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIHY.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIHZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIJH.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIJI.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIJI32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIJX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIJY32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIKD.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIKH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APILZ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIMT32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIMW.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIMZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\APINQ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIPD32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIPH.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIPH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIPX.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIQC.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIQC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIQG.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIRI32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APISJ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APISP32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APISR32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APISZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\APITD.DLL - Deleted
C:\WINDOWS\SYSTEM32\APITK32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIUE.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIUI32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIUR32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIUW32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIVE.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIVM3~1.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIWD32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIWE.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIWI.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIWS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIXA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIXB~1.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIXQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIXU.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIXZ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIYH.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIYH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIZH.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIZR32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APIZS.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPAA.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPAD32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPAK32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPAN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPBH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPBX.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPCA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPEE32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPEI32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPEM.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPEO.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPEQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPFK.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPFT.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPGR32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPHE32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPHN.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPHO.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPIA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPIH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPIO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPIT.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPJI.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPJL.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPJP32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPKD.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPKM32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPKO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPKR.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPKT32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPLD32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPLK32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPLY3~1.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPMP.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPMV.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPNC.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPNM.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPNT32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPNU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPOA.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPOD32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPOF.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPOJ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPOO.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPOP.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPPA.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPQD.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPQP32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPSK32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPSL32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPSZ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPTA.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPTU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPTW.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPTW32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPUA.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPUE32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPUL3~1.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPUR32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPUX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPVB.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPVR.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPVS~1.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPWB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPWM.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPWO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPWS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPXE.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPXM32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPXW32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPYC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPZJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPZQ~1.DLL - Deleted
C:\WINDOWS\SYSTEM32\APPZU.DLL - Deleted
C:\WINDOWS\SYSTEM32\AQDNT.DLL - Deleted
C:\WINDOWS\SYSTEM32\ARLBX.DLL - Deleted
C:\WINDOWS\SYSTEM32\ARQDD.DLL - Deleted
C:\WINDOWS\SYSTEM32\ARWHR.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLAB.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLAC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLAK32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLAN.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLBH.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLBI.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLBJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLBQ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLCE32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLCR32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLCX.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLDE32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLDJ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLDM32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLDZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLEC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLED32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLEE.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLEK32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLFS.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLFU.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLFU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLFX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLGJ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLGS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLGZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLHA.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLHB.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLHS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLIC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLII32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLIP32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLIR32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLIU.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLJW.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLKJ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLKP.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLKX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLLI3~1.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLLR.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLLS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLLY32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLME.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLMH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLMJ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLMR32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLMU.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLMW32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLMY32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLNV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLOD32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLOH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLPD32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLPW.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLQG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLQW32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLRF.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLSC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLSH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLSO.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLSW32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLTA.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLTB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLTF.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLTK.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLUA.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLUC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLUJ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLVA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLVI~1.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLVR32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLWD.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLWN3~1.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLWU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLXE~1.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLXL32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLXS.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLYE32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLYQ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLYX.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLYY32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLZC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLZN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLZV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\ATLZW.DLL - Deleted
C:\WINDOWS\SYSTEM32\AUBZL.DLL - Deleted
C:\WINDOWS\SYSTEM32\AUQGN.DLL - Deleted
C:\WINDOWS\SYSTEM32\AVWYP.DLL - Deleted
C:\WINDOWS\SYSTEM32\AWTOP.DLL - Deleted
C:\WINDOWS\SYSTEM32\AXKAM.DLL - Deleted
C:\WINDOWS\SYSTEM32\AXYDL.DLL - Deleted
C:\WINDOWS\SYSTEM32\AZFJA.DLL - Deleted
C:\WINDOWS\SYSTEM32\AZOEV.DLL - Deleted
C:\WINDOWS\SYSTEM32\BAQXJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\BDDHI.DLL - Deleted
C:\WINDOWS\SYSTEM32\BECBF.DLL - Deleted
C:\WINDOWS\SYSTEM32\BEWXZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\BFOGX.DLL - Deleted
C:\WINDOWS\SYSTEM32\BJPND.DLL - Deleted
C:\WINDOWS\SYSTEM32\BKCMA.DLL - Deleted
C:\WINDOWS\SYSTEM32\BKVWU.DLL - Deleted
C:\WINDOWS\SYSTEM32\BLTEG.DLL - Deleted
C:\WINDOWS\SYSTEM32\BMBUU.DLL - Deleted
C:\WINDOWS\SYSTEM32\BMDSH.DLL - Deleted
C:\WINDOWS\SYSTEM32\BMQVM.DLL - Deleted
C:\WINDOWS\SYSTEM32\BNDUA.DLL - Deleted
C:\WINDOWS\SYSTEM32\BNXMM.DLL - Deleted
C:\WINDOWS\SYSTEM32\BPLLN.DLL - Deleted
C:\WINDOWS\SYSTEM32\BQLVC.DLL - Deleted
C:\WINDOWS\SYSTEM32\BRKVI.DLL - Deleted
C:\WINDOWS\SYSTEM32\BSCWO.DLL - Deleted
C:\WINDOWS\SYSTEM32\BSPBA.DLL - Deleted
C:\WINDOWS\SYSTEM32\BSQXT.DLL - Deleted
C:\WINDOWS\SYSTEM32\BUFBM.DLL - Deleted
C:\WINDOWS\SYSTEM32\BVGDH.DLL - Deleted
C:\WINDOWS\SYSTEM32\BWWFU.DLL - Deleted
C:\WINDOWS\SYSTEM32\BYGYS.DLL - Deleted
C:\WINDOWS\SYSTEM32\BZRNT.DLL - Deleted
C:\WINDOWS\SYSTEM32\BZTUO.DLL - Deleted
C:\WINDOWS\SYSTEM32\CAIWN.DLL - Deleted
C:\WINDOWS\SYSTEM32\CDHIA.DLL - Deleted
C:\WINDOWS\SYSTEM32\CDOUZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\CEBAJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\CEBUK.DLL - Deleted
C:\WINDOWS\SYSTEM32\CFCCE.DLL - Deleted
C:\WINDOWS\SYSTEM32\CFMGE.DLL - Deleted
C:\WINDOWS\SYSTEM32\CFWHY.DLL - Deleted
C:\WINDOWS\SYSTEM32\CIVMX.DLL - Deleted
C:\WINDOWS\SYSTEM32\CKTAF.DLL - Deleted
C:\WINDOWS\SYSTEM32\CLOTN.DLL - Deleted
C:\WINDOWS\SYSTEM32\CMJBY.DLL - Deleted
C:\WINDOWS\SYSTEM32\CMYDL.DLL - Deleted
C:\WINDOWS\SYSTEM32\COONT.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRBB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRBO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRCZ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRDC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRDO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRDV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRDZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\CREA.DLL - Deleted
C:\WINDOWS\SYSTEM32\CREQ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CREU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRFB32~1.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRFC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRFE.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRFF32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRFM.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRFN.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRFO.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRFV.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRGM32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRGQ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRGW.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRGY32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRHI.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRHQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRHR32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRIA.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRID32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRIG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRIH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRIL32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRIM32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRIT.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRIW32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRJB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRJI32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRKC.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRKO.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRKO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRKT.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRKT~1.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRKU~1.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRKV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRLB32~1.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRLJ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRLN.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRLQ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CROF.DLL - Deleted
C:\WINDOWS\SYSTEM32\CROR32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRPL32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRPO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRPU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRPV.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRQK.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRQO.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRQO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRQS.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRRC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRRF32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRRM32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRRU.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRSA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRSG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRSM32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRSP.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRSQ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRSW.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRTM.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRTO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRTS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRTV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRTX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRUB.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRUO.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRUT32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRVE.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRVG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRWH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRWK.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRWM32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRXH.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRXT32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRXX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRXZ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRYA.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRYF.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRYT32.DLL - Deleted
C:\WINDOWS\SYSTEM32\CRZL.DLL - Deleted
C:\WINDOWS\SYSTEM32\CSXVG.DLL - Deleted
C:\WINDOWS\SYSTEM32\CTEKG.DLL - Deleted
C:\WINDOWS\SYSTEM32\CTMOT.DLL - Deleted
C:\WINDOWS\SYSTEM32\CVDTF.DLL - Deleted
C:\WINDOWS\SYSTEM32\CXEES.DLL - Deleted
C:\WINDOWS\SYSTEM32\CZJSG.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3BI32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3BT32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3BU~1.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3BZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3CG.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3CL32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3DG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3DJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3DK32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3DZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3EF.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3FD.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3FK.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3FV.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3GA.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3GN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3HC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3HI.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3HW32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3IH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3IM.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3IO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3IP32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3JC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3JH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3JO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3JW.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3KA.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3KA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3KD.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3KS.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3LG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3LR32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3MF.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3ML32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3NF32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3NV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3NZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3PC.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3PK32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3PN.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3PV.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3QD32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3QT32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3RD.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3RG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3RQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3SP32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3ST32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3TI32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3UB.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3UH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3UV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3UX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3VH.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3WB.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3WN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3WQ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3WV.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3WY32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3XG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3XZ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3YT32.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3ZH.DLL - Deleted
C:\WINDOWS\SYSTEM32\D3ZO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\DALIG.DLL - Deleted
C:\WINDOWS\SYSTEM32\DCKOI.DLL - Deleted
C:\WINDOWS\SYSTEM32\DDYJB.DLL - Deleted
C:\WINDOWS\SYSTEM32\DFRFR.DLL - Deleted
C:\WINDOWS\SYSTEM32\DFXVA.DLL - Deleted
C:\WINDOWS\SYSTEM32\DJKDR.DLL - Deleted
C:\WINDOWS\SYSTEM32\DNJOO.DLL - Deleted
C:\WINDOWS\SYSTEM32\DNZFJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\DOYSE.DLL - Deleted
C:\WINDOWS\SYSTEM32\DPNDK.DLL - Deleted
C:\WINDOWS\SYSTEM32\DSZEX.DLL - Deleted
C:\WINDOWS\SYSTEM32\DXISD.DLL - Deleted
C:\WINDOWS\SYSTEM32\DYBAV.DLL - Deleted
C:\WINDOWS\SYSTEM32\DZHQG.DLL - Deleted
C:\WINDOWS\SYSTEM32\EAGBL.DLL - Deleted
C:\WINDOWS\SYSTEM32\EAMVT.DLL - Deleted
C:\WINDOWS\SYSTEM32\EBQKB.DLL - Deleted
C:\WINDOWS\SYSTEM32\EBVWW.DLL - Deleted
C:\WINDOWS\SYSTEM32\ECYER.DLL - Deleted
C:\WINDOWS\SYSTEM32\EDXLQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\EDYQB.DLL - Deleted
C:\WINDOWS\SYSTEM32\EEGZE.DLL - Deleted
C:\WINDOWS\SYSTEM32\EEJCP.DLL - Deleted
C:\WINDOWS\SYSTEM32\EEWTD.DLL - Deleted
C:\WINDOWS\SYSTEM32\EFELV.DLL - Deleted
C:\WINDOWS\SYSTEM32\EFLCO.DLL - Deleted
C:\WINDOWS\SYSTEM32\EFQXM.DLL - Deleted
C:\WINDOWS\SYSTEM32\EFRML.DLL - Deleted
C:\WINDOWS\SYSTEM32\EGASJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\EHLFG.DLL - Deleted
C:\WINDOWS\SYSTEM32\EIAFG.DLL - Deleted
C:\WINDOWS\SYSTEM32\EIRLC.DLL - Deleted
C:\WINDOWS\SYSTEM32\EKLJK.DLL - Deleted
C:\WINDOWS\SYSTEM32\EKNTU.DLL - Deleted
C:\WINDOWS\SYSTEM32\ELDAG.DLL - Deleted
C:\WINDOWS\SYSTEM32\EMUZB.DLL - Deleted
C:\WINDOWS\SYSTEM32\EMXEY.DLL - Deleted
C:\WINDOWS\SYSTEM32\EOSQP.DLL - Deleted
C:\WINDOWS\SYSTEM32\EOSRZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\EPYKT.DLL - Deleted
C:\WINDOWS\SYSTEM32\ERXJO.DLL - Deleted
C:\WINDOWS\SYSTEM32\EVJKY.DLL - Deleted
C:\WINDOWS\SYSTEM32\EVVMZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\EXJVL.DLL - Deleted
C:\WINDOWS\SYSTEM32\FBQVI.DLL - Deleted
C:\WINDOWS\SYSTEM32\FDTMH.DLL - Deleted
C:\WINDOWS\SYSTEM32\FELKD.DLL - Deleted
C:\WINDOWS\SYSTEM32\FGQNT.DLL - Deleted
C:\WINDOWS\SYSTEM32\FGYFC.DLL - Deleted
C:\WINDOWS\SYSTEM32\FHLCT.DLL - Deleted
C:\WINDOWS\SYSTEM32\FIBCM.DLL - Deleted
C:\WINDOWS\SYSTEM32\FIOUC.DLL - Deleted
C:\WINDOWS\SYSTEM32\FKYYQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\FMGAS.DLL - Deleted
C:\WINDOWS\SYSTEM32\FMGVG.DLL - Deleted
C:\WINDOWS\SYSTEM32\FNBWL.DLL - Deleted
C:\WINDOWS\SYSTEM32\FNHEB.DLL - Deleted
C:\WINDOWS\SYSTEM32\FORLB.DLL - Deleted
C:\WINDOWS\SYSTEM32\FOSRW.DLL - Deleted
C:\WINDOWS\SYSTEM32\FPATW.DLL - Deleted
C:\WINDOWS\SYSTEM32\FPDXY.DLL - Deleted
C:\WINDOWS\SYSTEM32\FQMBW.DLL - Deleted
C:\WINDOWS\SYSTEM32\FREAX.DLL - Deleted
C:\WINDOWS\SYSTEM32\FSHSV.DLL - Deleted
C:\WINDOWS\SYSTEM32\FVTMO.DLL - Deleted
C:\WINDOWS\SYSTEM32\FVZAX.DLL - Deleted
C:\WINDOWS\SYSTEM32\FWNCN.DLL - Deleted
C:\WINDOWS\SYSTEM32\FWUZK.DLL - Deleted
C:\WINDOWS\SYSTEM32\FYITH.DLL - Deleted
C:\WINDOWS\SYSTEM32\FYZFV.DLL - Deleted
C:\WINDOWS\SYSTEM32\FZDHD.DLL - Deleted
C:\WINDOWS\SYSTEM32\FZFLZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\GACCJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\GBFRQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\GBGBY.DLL - Deleted
C:\WINDOWS\SYSTEM32\GEFBP.DLL - Deleted
C:\WINDOWS\SYSTEM32\GFMTA.DLL - Deleted
C:\WINDOWS\SYSTEM32\GFPZG.DLL - Deleted
C:\WINDOWS\SYSTEM32\GFTAY.DLL - Deleted
C:\WINDOWS\SYSTEM32\GGDSG.DLL - Deleted
C:\WINDOWS\SYSTEM32\GGVTS.DLL - Deleted
C:\WINDOWS\SYSTEM32\GISAX.DLL - Deleted
C:\WINDOWS\SYSTEM32\GNMHE.DLL - Deleted
C:\WINDOWS\SYSTEM32\GNWAG.DLL - Deleted
C:\WINDOWS\SYSTEM32\GOABN.DLL - Deleted
C:\WINDOWS\SYSTEM32\GPTDI.DLL - Deleted
C:\WINDOWS\SYSTEM32\GQRST.DLL - Deleted
C:\WINDOWS\SYSTEM32\GQVCS.DLL - Deleted
C:\WINDOWS\SYSTEM32\GQWEP.DLL - Deleted
C:\WINDOWS\SYSTEM32\GSKCL.DLL - Deleted
C:\WINDOWS\SYSTEM32\GUDPU.DLL - Deleted
C:\WINDOWS\SYSTEM32\GUTKA.DLL - Deleted
C:\WINDOWS\SYSTEM32\GVILL.DLL - Deleted
C:\WINDOWS\SYSTEM32\GYSQM.DLL - Deleted
C:\WINDOWS\SYSTEM32\HBLEU.DLL - Deleted
C:\WINDOWS\SYSTEM32\HGRPY.DLL - Deleted
C:\WINDOWS\SYSTEM32\HJMPN.DLL - Deleted
C:\WINDOWS\SYSTEM32\HJWLB.DLL - Deleted
C:\WINDOWS\SYSTEM32\HKKPV.DLL - Deleted
C:\WINDOWS\SYSTEM32\HKWLX.DLL - Deleted
C:\WINDOWS\SYSTEM32\HLIFH.DLL - Deleted
C:\WINDOWS\SYSTEM32\HLOVG.DLL - Deleted
C:\WINDOWS\SYSTEM32\HNBWP.DLL - Deleted
C:\WINDOWS\SYSTEM32\HNEII.DLL - Deleted
C:\WINDOWS\SYSTEM32\HNVKG.DLL - Deleted
C:\WINDOWS\SYSTEM32\HOLPH.DLL - Deleted
C:\WINDOWS\SYSTEM32\HOQOO.DLL - Deleted
C:\WINDOWS\SYSTEM32\HOYWQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\HQGZH.DLL - Deleted
C:\WINDOWS\SYSTEM32\HRDNI.DLL - Deleted
C:\WINDOWS\SYSTEM32\HRGRU.DLL - Deleted
C:\WINDOWS\SYSTEM32\HRIPL.DLL - Deleted
C:\WINDOWS\SYSTEM32\HTKZB.DLL - Deleted
C:\WINDOWS\SYSTEM32\HUJSX.DLL - Deleted
C:\WINDOWS\SYSTEM32\HWDFM.DLL - Deleted
C:\WINDOWS\SYSTEM32\HWSLJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\HXMJM.DLL - Deleted
C:\WINDOWS\SYSTEM32\HXYGB.DLL - Deleted
C:\WINDOWS\SYSTEM32\HYPTO.DLL - Deleted
C:\WINDOWS\SYSTEM32\HZSHE.DLL - Deleted
C:\WINDOWS\SYSTEM32\IAMYX.DLL - Deleted
C:\WINDOWS\SYSTEM32\IAVYU.DLL - Deleted
C:\WINDOWS\SYSTEM32\ICRIR.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEAH~1.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEBG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEBS.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEBW.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEBY.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEBZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\IECF32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IECL.DLL - Deleted
C:\WINDOWS\SYSTEM32\IECN.DLL - Deleted
C:\WINDOWS\SYSTEM32\IECQ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEDI.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEDI32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEDK32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEDY32~1.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEED32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEEI.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEEJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEEL32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEFC.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEFN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEFS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEFW32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEFZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEGA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEGE32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEGG.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEGU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEGW32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEHN.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEHU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEIF32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEIO.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEIU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEJC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEJF32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEJW32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEKD~1.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEKJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEKQ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEKT.DLL - Deleted
C:\WINDOWS\SYSTEM32\IELP32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IELQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEMO32~1.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEMV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IENM32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IENV.DLL - Deleted
C:\WINDOWS\SYSTEM32\IENY.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEOA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEOG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEOV.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEOX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEOZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEQY.DLL - Deleted
C:\WINDOWS\SYSTEM32\IERO.DLL - Deleted
C:\WINDOWS\SYSTEM32\IERP32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IERR.DLL - Deleted
C:\WINDOWS\SYSTEM32\IERS.DLL - Deleted
C:\WINDOWS\SYSTEM32\IERV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IESV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEUC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEUD.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEUH.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEUI32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEUN.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEVC32~1.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEVF.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEVI32~1.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEVR32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEWE.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEWE32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEXB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEXK.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEXL.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEXM32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEXR~1.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEYQ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEYS.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEZG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEZH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEZM32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEZN.DLL - Deleted
C:\WINDOWS\SYSTEM32\IEZN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IFCIG.DLL - Deleted
C:\WINDOWS\SYSTEM32\IFIRX.DLL - Deleted
C:\WINDOWS\SYSTEM32\IHPOE.DLL - Deleted
C:\WINDOWS\SYSTEM32\IJYVU.DLL - Deleted
C:\WINDOWS\SYSTEM32\IKVFQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\ILZOK.DLL - Deleted
C:\WINDOWS\SYSTEM32\IMSXB.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPAB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPAK.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPAP32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPCG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPCO.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPCR.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPCZ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPDE32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPDO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPDY32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPDZ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPEF32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPEP.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPEP32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPEQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPEV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPEW.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPFB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPFH.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPFH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPFU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPFW32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPGF.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPGI.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPGZ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPHB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPHT32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPIB.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPIB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPIR.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPIZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPJA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPJD32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPJJ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPJQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPJS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPJX.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPKM32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPKQ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPKR.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPLK.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPLN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPLZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPMB.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPMD32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPMP32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPNA.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPNM32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPNR32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPNW.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPOA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPOD32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPOI.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPOL.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPOM.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPPC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPPV.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPQF.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPQT32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPQU.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPQZ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPRH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPRX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPSP.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPTI32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPTK32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPUE32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPUN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPUV.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPVA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPVG.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPVH.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPVI.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPWE.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPWL.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPWP32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPXR32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPXT32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPXW32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPXY32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPYI.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPYV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPZA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPZG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\IPZN.DLL - Deleted
C:\WINDOWS\SYSTEM32\IQBJQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\IQBVB.DLL - Deleted
C:\WINDOWS\SYSTEM32\IQDDG.DLL - Deleted
C:\WINDOWS\SYSTEM32\IQMQS.DLL - Deleted
C:\WINDOWS\SYSTEM32\IRLPM.DLL - Deleted
C:\WINDOWS\SYSTEM32\IVALC.DLL - Deleted
C:\WINDOWS\SYSTEM32\IVUZY.DLL - Deleted
C:\WINDOWS\SYSTEM32\IWZPA.DLL - Deleted
C:\WINDOWS\SYSTEM32\IXNSX.DLL - Deleted
C:\WINDOWS\SYSTEM32\IXPTG.DLL - Deleted
C:\WINDOWS\SYSTEM32\IYGZJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\IYJFB.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAFGR.DLL - Deleted
C:\WINDOWS\SYSTEM32\JALAE.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAAJ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVABN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVABS.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVACA.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVACE.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVACF.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVACH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVACJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVACX.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVADU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAEI.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAEQ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAEZ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAFA.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAFE.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAFX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAGA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAGR32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAGX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAHD32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAHV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAIH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAII32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAIJ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAJO~1.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAJP.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAJY.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAKM.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAKX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVALD.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVALE.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVALK32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAMB.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAME32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAMJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAML32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAMN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAMP.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAMQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAMR.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVANN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVANR32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVANT.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAOA.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAOG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAOK.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAPC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAQF.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAQH.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAQJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAQN.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVARN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVARS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVASA.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVASB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVASH.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVATC.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVATO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVATU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVATZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAUG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAVA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAVC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAVN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAVY32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAVZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAWF.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAWN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAWV.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAWV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAWW.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAXN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAXP32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAYE.DLL - Deleted
C:\WINDOWS\SYSTEM32\JAVAYL32.DLL - Deleted
C:\WINDOWS\SYSTEM32\JBWED.DLL - Deleted
C:\WINDOWS\SYSTEM32\JBZNU.DLL - Deleted
C:\WINDOWS\SYSTEM32\JCADN.DLL - Deleted
C:\WINDOWS\SYSTEM32\JEZFB.DLL - Deleted
C:\WINDOWS\SYSTEM32\JFEQA.DLL - Deleted
C:\WINDOWS\SYSTEM32\JFIDW.DLL - Deleted
C:\WINDOWS\SYSTEM32\JHIZN.DLL - Deleted
C:\WINDOWS\SYSTEM32\JHKQU.DLL - Deleted
C:\WINDOWS\SYSTEM32\JHVSH.DLL - Deleted
C:\WINDOWS\SYSTEM32\JLZCR.DLL - Deleted
C:\WINDOWS\SYSTEM32\JMKOK.DLL - Deleted
C:\WINDOWS\SYSTEM32\JMYCQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\JNEAW.DLL - Deleted
C:\WINDOWS\SYSTEM32\JNTDB.DLL - Deleted
C:\WINDOWS\SYSTEM32\JQGJZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\JQIBL.DLL - Deleted
C:\WINDOWS\SYSTEM32\JRIQL.DLL - Deleted
C:\WINDOWS\SYSTEM32\JRITT.DLL - Deleted
C:\WINDOWS\SYSTEM32\JURKV.DLL - Deleted
C:\WINDOWS\SYSTEM32\JVPNM.DLL - Deleted
C:\WINDOWS\SYSTEM32\JWMBO.DLL - Deleted
C:\WINDOWS\SYSTEM32\JWNBN.DLL - Deleted
C:\WINDOWS\SYSTEM32\JXXWE.DLL - Deleted
C:\WINDOWS\SYSTEM32\JYMWO.DLL - Deleted
C:\WINDOWS\SYSTEM32\JZHGE.DLL - Deleted
C:\WINDOWS\SYSTEM32\JZJHD.DLL - Deleted
C:\WINDOWS\SYSTEM32\JZXPJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\KBNFC.DLL - Deleted
C:\WINDOWS\SYSTEM32\KBTDE.DLL - Deleted
C:\WINDOWS\SYSTEM32\KCBOG.DLL - Deleted
C:\WINDOWS\SYSTEM32\KDWZZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\KDXRS.DLL - Deleted
C:\WINDOWS\SYSTEM32\KHXBQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\KLARO.DLL - Deleted
C:\WINDOWS\SYSTEM32\KLEZB.DLL - Deleted
C:\WINDOWS\SYSTEM32\KMLBS.DLL - Deleted
C:\WINDOWS\SYSTEM32\KNOZZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\KORWX.DLL - Deleted
C:\WINDOWS\SYSTEM32\KOVJD.DLL - Deleted
C:\WINDOWS\SYSTEM32\KPHUU.DLL - Deleted
C:\WINDOWS\SYSTEM32\KRGVS.DLL - Deleted
C:\WINDOWS\SYSTEM32\KRWKA.DLL - Deleted
C:\WINDOWS\SYSTEM32\KTAFS.DLL - Deleted
C:\WINDOWS\SYSTEM32\KTOIT.DLL - Deleted
C:\WINDOWS\SYSTEM32\KTSXJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\KUICU.DLL - Deleted
C:\WINDOWS\SYSTEM32\KUNMN.DLL - Deleted
C:\WINDOWS\SYSTEM32\KWEGA.DLL - Deleted
C:\WINDOWS\SYSTEM32\KWLLH.DLL - Deleted
C:\WINDOWS\SYSTEM32\KXBWR.DLL - Deleted
C:\WINDOWS\SYSTEM32\KYBXW.DLL - Deleted
C:\WINDOWS\SYSTEM32\KYGUW.DLL - Deleted
C:\WINDOWS\SYSTEM32\KZFOB.DLL - Deleted
C:\WINDOWS\SYSTEM32\KZZZG.DLL - Deleted
C:\WINDOWS\SYSTEM32\LBEGM.DLL - Deleted
C:\WINDOWS\SYSTEM32\LCQTP.DLL - Deleted
C:\WINDOWS\SYSTEM32\LCWXU.DLL - Deleted
C:\WINDOWS\SYSTEM32\LCXFQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\LDTVA.DLL - Deleted
C:\WINDOWS\SYSTEM32\LETEK.DLL - Deleted
C:\WINDOWS\SYSTEM32\LFLTS.DLL - Deleted
C:\WINDOWS\SYSTEM32\LJFCR.DLL - Deleted
C:\WINDOWS\SYSTEM32\LJVAB.DLL - Deleted
C:\WINDOWS\SYSTEM32\LKJNZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\LLHDF.DLL - Deleted
C:\WINDOWS\SYSTEM32\LMABC.DLL - Deleted
C:\WINDOWS\SYSTEM32\LQVWM.DLL - Deleted
C:\WINDOWS\SYSTEM32\LRQYS.DLL - Deleted
C:\WINDOWS\SYSTEM32\LUZCH.DLL - Deleted
C:\WINDOWS\SYSTEM32\LWBRK.DLL - Deleted
C:\WINDOWS\SYSTEM32\LZIVS.DLL - Deleted
C:\WINDOWS\SYSTEM32\LZPAR.DLL - Deleted
C:\WINDOWS\SYSTEM32\MCJFB.DLL - Deleted
C:\WINDOWS\SYSTEM32\MCLRH.DLL - Deleted
C:\WINDOWS\SYSTEM32\MCRTI.DLL - Deleted
C:\WINDOWS\SYSTEM32\MELFG.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCAE32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCAG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCAN.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCAO.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCAR32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCAW.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCBG.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCBO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCBQ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCCW32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCCY.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCDQ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCDW.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCDX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCEC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCEH.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCEP.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCER.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCEV.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCFC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCFG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCFH.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCFP32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCFS.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCFV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCGD.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCGU~1.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCGX3~1.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCHB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCHF.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCHG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCHL32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCHM.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCHR32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCHS.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCHV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCHW.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCHX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCIG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCJC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCJD32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCJF.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCJG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCJM.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCJM32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCJP.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCJX.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCKF.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCKG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCKP.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCKU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCLE32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCLH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCLL32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCLV.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCMF.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCMH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCMK.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCMP.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCMP32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCND32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCNY.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCOF32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCOL.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCOQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCOR32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCOT.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCOU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCPA.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCPP32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCPU~1.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCPX.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCPZ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCQH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCQW3~1.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCRI32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCRT32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCRV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCRW32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCSA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCSE.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCSJ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCSP.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCSR.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCTA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCTB.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCTN.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCUL.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCUS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCVA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCVD.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCVM32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCVW32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCWO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCWX.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCXG.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCXM.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCYB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCYE.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCYO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCYW32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCZQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\MFCZU.DLL - Deleted
C:\WINDOWS\SYSTEM32\MGGPH.DLL - Deleted
C:\WINDOWS\SYSTEM32\MJGYT.DLL - Deleted
C:\WINDOWS\SYSTEM32\MJQFY.DLL - Deleted
C:\WINDOWS\SYSTEM32\MKAJV.DLL - Deleted
C:\WINDOWS\SYSTEM32\MMATW.DLL - Deleted
C:\WINDOWS\SYSTEM32\MMLTW.DLL - Deleted
C:\WINDOWS\SYSTEM32\MNUUB.DLL - Deleted
C:\WINDOWS\SYSTEM32\MOYBT.DLL - Deleted
C:\WINDOWS\SYSTEM32\MPSZC.DLL - Deleted
C:\WINDOWS\SYSTEM32\MRUNQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSAE.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSAH.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSBB.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSBB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSBK32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSBO.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSBO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSCA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSCL32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSCV~1.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSDG.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSDJ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSDO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSDS.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSEI~1.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSEJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSFI.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSFK.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSGV.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSHE32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSHK.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSHR32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSIA.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSIF32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSIM.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSIS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSJS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSKB.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSKH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSKJ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSKK32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSKL32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSKM32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSKN.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSLR32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSMV.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSNC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSND.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSNH32~1.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSNN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSNY.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSNY32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSOT.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSPJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSPO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSPT32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSQK32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSQO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSQR.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSQY32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSRO.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSRU.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSRV.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSSG.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSSN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSTJ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSTQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSTQ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSVS.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSVT32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSWA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSWI.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSWJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSWN.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSWO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSWS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSWT.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSXM32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSXN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSYB.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSYK.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSYS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSYU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSYY.DLL - Deleted
C:\WINDOWS\SYSTEM32\MSZF.DLL - Deleted
C:\WINDOWS\SYSTEM32\MTFIE.DLL - Deleted
C:\WINDOWS\SYSTEM32\MUCEZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\MWFLS.DLL - Deleted
C:\WINDOWS\SYSTEM32\MZHAF.DLL - Deleted
C:\WINDOWS\SYSTEM32\MZKGA.DLL - Deleted
C:\WINDOWS\SYSTEM32\NABDF.DLL - Deleted
C:\WINDOWS\SYSTEM32\NBPII.DLL - Deleted
C:\WINDOWS\SYSTEM32\NBVMX.DLL - Deleted
C:\WINDOWS\SYSTEM32\NDNXW.DLL - Deleted
C:\WINDOWS\SYSTEM32\NDWUT.DLL - Deleted
C:\WINDOWS\SYSTEM32\NEBKY.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETAC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETAD.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETBM.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETBQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETCF32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETDC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETDV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETDW32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETEH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETEK32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETEN.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETEQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETFD.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETFI32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETFQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETFT32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETGE.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETGP32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETGV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETHH.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETHI.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETHJ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETHL.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETHP.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETHX.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETIG.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETIG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETIQ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETJA.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETJB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETKB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETKK32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETKU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETLD3~1.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETLK32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETLM32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETLR.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETLZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETMB.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETMI32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETMJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETMN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETND32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETOF32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETOO.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETOS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETOX.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETOZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETPR.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETPS.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETQG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETQJ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETQK.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETQY.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETRC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETRL.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETRM32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETRO.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETRS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETRV.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETRW.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETSE.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETSL32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETSR.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETST.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETSX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETTE.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETTL.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETTQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETTU.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETUG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETUZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETVI.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETXB.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETXC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETXI32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETXP32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETXT32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETXV.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETXV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETYB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETYH.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETYY32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETZJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETZL32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETZN.DLL - Deleted
C:\WINDOWS\SYSTEM32\NETZQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\NFGWT.DLL - Deleted
C:\WINDOWS\SYSTEM32\NHQFU.DLL - Deleted
C:\WINDOWS\SYSTEM32\NIWZL.DLL - Deleted
C:\WINDOWS\SYSTEM32\NJOUQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\NJPUP.DLL - Deleted
C:\WINDOWS\SYSTEM32\NKCTU.DLL - Deleted
C:\WINDOWS\SYSTEM32\NKCXC.DLL - Deleted
C:\WINDOWS\SYSTEM32\NKFXM.DLL - Deleted
C:\WINDOWS\SYSTEM32\NKNOZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\NLBTY.DLL - Deleted
C:\WINDOWS\SYSTEM32\NMABO.DLL - Deleted
C:\WINDOWS\SYSTEM32\NMAUF.DLL - Deleted
C:\WINDOWS\SYSTEM32\NNCIJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\NNYFR.DLL - Deleted
C:\WINDOWS\SYSTEM32\NPWFG.DLL - Deleted
C:\WINDOWS\SYSTEM32\NPWQE.DLL - Deleted
C:\WINDOWS\SYSTEM32\NRNQH.DLL - Deleted
C:\WINDOWS\SYSTEM32\NRRNW.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTAA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTAR.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTBF32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTBN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTCB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTCH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTCO.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTCO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTDC.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTDH.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTDN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTDV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTDW.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTEA.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTEL32~1.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTEP32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTFC.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTFJ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTFN.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTFU.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTGH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTGP.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTGP32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTHB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTHF.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTHS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTIP32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTIY32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTJE32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTJF.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTJS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTJX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTKD.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTKG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTKT32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTKV.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTLG.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTLL.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTLS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTLU.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTLY32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTMB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTML.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTMN.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTMU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTMV.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTNB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTNQ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTNW.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTOU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTOW.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTOZ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTQB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTQH.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTQH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTQI.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTQO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTQW32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTRH.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTRN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTRP32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTRX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTSB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTSD.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTSH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTSM32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTSU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTSV.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTTG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTTX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTUB.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTUE.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTUI.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTUS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTVB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTVD32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTVJ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTVK.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTVZ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTWF32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTWG.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTWO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTWR.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTXG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTXY.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTYA.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTYK32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTYM.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTYM32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTYR32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTYV.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTYV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTZK.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTZT32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTZU.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTZU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NTZX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\NUYKB.DLL - Deleted
C:\WINDOWS\SYSTEM32\NVRXI.DLL - Deleted
C:\WINDOWS\SYSTEM32\NWAPB.DLL - Deleted
C:\WINDOWS\SYSTEM32\NWTXM.DLL - Deleted
C:\WINDOWS\SYSTEM32\NXKSC.DLL - Deleted
C:\WINDOWS\SYSTEM32\NYCZV.DLL - Deleted
C:\WINDOWS\SYSTEM32\OBDIJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\OCTJW.DLL - Deleted
C:\WINDOWS\SYSTEM32\OEBWR.DLL - Deleted
C:\WINDOWS\SYSTEM32\OGKFD.DLL - Deleted
C:\WINDOWS\SYSTEM32\OGQKH.DLL - Deleted
C:\WINDOWS\SYSTEM32\OGYWQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\OJYDC.DLL - Deleted
C:\WINDOWS\SYSTEM32\OJZJB.DLL - Deleted
C:\WINDOWS\SYSTEM32\OKVLF.DLL - Deleted
C:\WINDOWS\SYSTEM32\OLZSR.DLL - Deleted
C:\WINDOWS\SYSTEM32\ONSOB.DLL - Deleted
C:\WINDOWS\SYSTEM32\OOOCZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\OTGFD.DLL - Deleted
C:\WINDOWS\SYSTEM32\OTTVX.DLL - Deleted
C:\WINDOWS\SYSTEM32\OUTYK.DLL - Deleted
C:\WINDOWS\SYSTEM32\OVBXF.DLL - Deleted
C:\WINDOWS\SYSTEM32\OXEMJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\OXFSN.DLL - Deleted
C:\WINDOWS\SYSTEM32\OZGJQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\PAHOE.DLL - Deleted
C:\WINDOWS\SYSTEM32\PCFCW.DLL - Deleted
C:\WINDOWS\SYSTEM32\PDDKL.DLL - Deleted
C:\WINDOWS\SYSTEM32\PDMMV.DLL - Deleted
C:\WINDOWS\SYSTEM32\PDUOR.DLL - Deleted
C:\WINDOWS\SYSTEM32\PEFJO.DLL - Deleted
C:\WINDOWS\SYSTEM32\PEWZB.DLL - Deleted
C:\WINDOWS\SYSTEM32\PFVMH.DLL - Deleted
C:\WINDOWS\SYSTEM32\PGHWV.DLL - Deleted
C:\WINDOWS\SYSTEM32\PGODR.DLL - Deleted
C:\WINDOWS\SYSTEM32\PKAQY.DLL - Deleted
C:\WINDOWS\SYSTEM32\PMFRM.DLL - Deleted
C:\WINDOWS\SYSTEM32\PMUQN.DLL - Deleted
C:\WINDOWS\SYSTEM32\PNQYT.DLL - Deleted
C:\WINDOWS\SYSTEM32\PODQF.DLL - Deleted
C:\WINDOWS\SYSTEM32\PQMZU.DLL - Deleted
C:\WINDOWS\SYSTEM32\PRUYI.DLL - Deleted
C:\WINDOWS\SYSTEM32\PSMTY.DLL - Deleted
C:\WINDOWS\SYSTEM32\PSOZA.DLL - Deleted
C:\WINDOWS\SYSTEM32\PVQXQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\PVRHW.DLL - Deleted
C:\WINDOWS\SYSTEM32\PWKXA.DLL - Deleted
C:\WINDOWS\SYSTEM32\QCCOD.DLL - Deleted
C:\WINDOWS\SYSTEM32\QDYCQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\QFJWC.DLL - Deleted
C:\WINDOWS\SYSTEM32\QHTVQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\QHXIA.DLL - Deleted
C:\WINDOWS\SYSTEM32\QLTGI.DLL - Deleted
C:\WINDOWS\SYSTEM32\QMFZT.DLL - Deleted
C:\WINDOWS\SYSTEM32\QOFDR.DLL - Deleted
C:\WINDOWS\SYSTEM32\QSGGM.DLL - Deleted
C:\WINDOWS\SYSTEM32\QUJVV.DLL - Deleted
C:\WINDOWS\SYSTEM32\QVDKX.DLL - Deleted
C:\WINDOWS\SYSTEM32\QWLJU.DLL - Deleted
C:\WINDOWS\SYSTEM32\QWSAC.DLL - Deleted
C:\WINDOWS\SYSTEM32\QYUSF.DLL - Deleted
C:\WINDOWS\SYSTEM32\QZHWW.DLL - Deleted
C:\WINDOWS\SYSTEM32\QZRIY.DLL - Deleted
C:\WINDOWS\SYSTEM32\QZRNO.DLL - Deleted
C:\WINDOWS\SYSTEM32\RBXWD.DLL - Deleted
C:\WINDOWS\SYSTEM32\RCGUN.DLL - Deleted
C:\WINDOWS\SYSTEM32\RCZXZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\RDLPN.DLL - Deleted
C:\WINDOWS\SYSTEM32\RECMS.DLL - Deleted
C:\WINDOWS\SYSTEM32\REPGO.DLL - Deleted
C:\WINDOWS\SYSTEM32\RFGIH.DLL - Deleted
C:\WINDOWS\SYSTEM32\RFNRN.DLL - Deleted
C:\WINDOWS\SYSTEM32\RGJSW.DLL - Deleted
C:\WINDOWS\SYSTEM32\RGZMW.DLL - Deleted
C:\WINDOWS\SYSTEM32\RHSQV.DLL - Deleted
C:\WINDOWS\SYSTEM32\RINVC.DLL - Deleted
C:\WINDOWS\SYSTEM32\RIWXU.DLL - Deleted
C:\WINDOWS\SYSTEM32\RKJPX.DLL - Deleted
C:\WINDOWS\SYSTEM32\RMFTE.DLL - Deleted
C:\WINDOWS\SYSTEM32\RMSGT.DLL - Deleted
C:\WINDOWS\SYSTEM32\RNXSQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\RNYFX.DLL - Deleted
C:\WINDOWS\SYSTEM32\RQWFC.DLL - Deleted
C:\WINDOWS\SYSTEM32\RRQHP.DLL - Deleted
C:\WINDOWS\SYSTEM32\RSLFN.DLL - Deleted
C:\WINDOWS\SYSTEM32\RVFHQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\RVGBD.DLL - Deleted
C:\WINDOWS\SYSTEM32\RWBUA.DLL - Deleted
C:\WINDOWS\SYSTEM32\SBCOS.DLL - Deleted
C:\WINDOWS\SYSTEM32\SCPDE.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKAA.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKAC.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKAS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKBB.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKBB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKBM.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKBO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKCI.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKCJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKCM32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKCY32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKFA.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKFH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKFR32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKFT.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKFV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKGF.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKGL32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKGM.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKGP32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKHT.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKHU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKJE.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKKJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKKT32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKKV.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKKZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKLL.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKNI32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKNR.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKOA.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKOP32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKPD.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKPJ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKQB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKQG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKQJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKQN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKQR32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKQS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKSB.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKSE32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKSX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKTC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKTD.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKTJ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKTK32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKTN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKTR.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKTS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKTW32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKUC.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKUD32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKUF.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKUG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKUQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKVG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKVM32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKWG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKWL.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKWM.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKWY.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKXB.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKXI.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKXL32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKXZ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKYP.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKYZ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKZA.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKZE.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKZF.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKZF32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKZL32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKZO.DLL - Deleted
C:\WINDOWS\SYSTEM32\SDKZV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SEKFA.DLL - Deleted
C:\WINDOWS\SYSTEM32\SETXN.DLL - Deleted
C:\WINDOWS\SYSTEM32\SFZRP.DLL - Deleted
C:\WINDOWS\SYSTEM32\SHNVV.DLL - Deleted
C:\WINDOWS\SYSTEM32\SJVHK.DLL - Deleted
C:\WINDOWS\SYSTEM32\SLVUN.DLL - Deleted
C:\WINDOWS\SYSTEM32\SMAGB.DLL - Deleted
C:\WINDOWS\SYSTEM32\SPKWJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\SPOGN.DLL - Deleted
C:\WINDOWS\SYSTEM32\SQAFK.DLL - Deleted
C:\WINDOWS\SYSTEM32\SQRIH.DLL - Deleted
C:\WINDOWS\SYSTEM32\STXNG.DLL - Deleted
C:\WINDOWS\SYSTEM32\SUESR.DLL - Deleted
C:\WINDOWS\SYSTEM32\SWDCK.DLL - Deleted
C:\WINDOWS\SYSTEM32\SWPJC.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYAIZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYEKT.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSAR32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSAV.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSAW32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSBC.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSBQ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSBV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSCA.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSCY.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSDB.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSDI.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSDS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSDY32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSDZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSFI.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSFS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSGL32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSGO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSGQ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSGU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSGY32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSHA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSHB.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSHD32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSHX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSIM.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSIS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSJA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSJD.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSJD32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSJM32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSJX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSKB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSKL.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSKP.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSKQ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSKS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSLL32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSLX3~1.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSLZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSMA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSMI.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSMP.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSMV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSMY.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSNA.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSNA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSNE.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSOC.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSOP.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSPQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSPS.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSPV.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSQA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSQG.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSQN.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSRL32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSRN.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSSC.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSSN.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSSP3~1.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSTO.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSUF32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSUR.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSUU.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSUU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSVD.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSVF32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSVN.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSVT32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSVZ~1.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSWA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSWF32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSWH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSWK32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSWP32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSWT32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSWU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSWX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSWZ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSXF.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSXG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSXV.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSXY32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSXZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSYD.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSYG.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSYU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSYU~1.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSZP32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SYSZZ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\SZRFP.DLL - Deleted
C:\WINDOWS\SYSTEM32\SZYUF.DLL - Deleted
C:\WINDOWS\SYSTEM32\TAKBY.DLL - Deleted
C:\WINDOWS\SYSTEM32\TAMPA.DLL - Deleted
C:\WINDOWS\SYSTEM32\TAZFL.DLL - Deleted
C:\WINDOWS\SYSTEM32\TBTIJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\TEJCS.DLL - Deleted
C:\WINDOWS\SYSTEM32\TFGYC.DLL - Deleted
C:\WINDOWS\SYSTEM32\TFIPV.DLL - Deleted
C:\WINDOWS\SYSTEM32\TFMIC.DLL - Deleted
C:\WINDOWS\SYSTEM32\TFQDJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\TGGQD.DLL - Deleted
C:\WINDOWS\SYSTEM32\TGHTO.DLL - Deleted
C:\WINDOWS\SYSTEM32\TGUJR.DLL - Deleted
C:\WINDOWS\SYSTEM32\THBBG.DLL - Deleted
C:\WINDOWS\SYSTEM32\TLTJQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\TOHWC.DLL - Deleted
C:\WINDOWS\SYSTEM32\TRXFQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\TSJVB.DLL - Deleted
C:\WINDOWS\SYSTEM32\TSLNI.DLL - Deleted
C:\WINDOWS\SYSTEM32\TVBYH.DLL - Deleted
C:\WINDOWS\SYSTEM32\TVQTC.DLL - Deleted
C:\WINDOWS\SYSTEM32\TWJCW.DLL - Deleted
C:\WINDOWS\SYSTEM32\TWRRQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\TXCPP.DLL - Deleted
C:\WINDOWS\SYSTEM32\TZWHL.DLL - Deleted
C:\WINDOWS\SYSTEM32\UBSXN.DLL - Deleted
C:\WINDOWS\SYSTEM32\UBWCB.DLL - Deleted
C:\WINDOWS\SYSTEM32\UBZUV.DLL - Deleted
C:\WINDOWS\SYSTEM32\UCLWP.DLL - Deleted
C:\WINDOWS\SYSTEM32\UCQFP.DLL - Deleted
C:\WINDOWS\SYSTEM32\UDAEW.DLL - Deleted
C:\WINDOWS\SYSTEM32\UFGZI.DLL - Deleted
C:\WINDOWS\SYSTEM32\UGLNY.DLL - Deleted
C:\WINDOWS\SYSTEM32\UGVDE.DLL - Deleted
C:\WINDOWS\SYSTEM32\UHZZR.DLL - Deleted
C:\WINDOWS\SYSTEM32\UICOB.DLL - Deleted
C:\WINDOWS\SYSTEM32\UIXTP.DLL - Deleted
C:\WINDOWS\SYSTEM32\UKYSS.DLL - Deleted
C:\WINDOWS\SYSTEM32\ULPYA.DLL - Deleted
C:\WINDOWS\SYSTEM32\UMJQP.DLL - Deleted
C:\WINDOWS\SYSTEM32\UMREF.DLL - Deleted
C:\WINDOWS\SYSTEM32\UMXYM.DLL - Deleted
C:\WINDOWS\SYSTEM32\UOZJY.DLL - Deleted
C:\WINDOWS\SYSTEM32\UQVOD.DLL - Deleted
C:\WINDOWS\SYSTEM32\URJYG.DLL - Deleted
C:\WINDOWS\SYSTEM32\USVDH.DLL - Deleted
C:\WINDOWS\SYSTEM32\UVIYZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\UVKQZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\UVPCN.DLL - Deleted
C:\WINDOWS\SYSTEM32\UVPHC.DLL - Deleted
C:\WINDOWS\SYSTEM32\UWEOF.DLL - Deleted
C:\WINDOWS\SYSTEM32\UWGEP.DLL - Deleted
C:\WINDOWS\SYSTEM32\UWYAH.DLL - Deleted
C:\WINDOWS\SYSTEM32\VBSXV.DLL - Deleted
C:\WINDOWS\SYSTEM32\VCDXM.DLL - Deleted
C:\WINDOWS\SYSTEM32\VDPBC.DLL - Deleted
C:\WINDOWS\SYSTEM32\VDWPF.DLL - Deleted
C:\WINDOWS\SYSTEM32\VFRIA.DLL - Deleted
C:\WINDOWS\SYSTEM32\VJERW.DLL - Deleted
C:\WINDOWS\SYSTEM32\VKWGN.DLL - Deleted
C:\WINDOWS\SYSTEM32\VNIVW.DLL - Deleted
C:\WINDOWS\SYSTEM32\VNKQH.DLL - Deleted
C:\WINDOWS\SYSTEM32\VOADP.DLL - Deleted
C:\WINDOWS\SYSTEM32\VOGXP.DLL - Deleted
C:\WINDOWS\SYSTEM32\VOQSF.DLL - Deleted
C:\WINDOWS\SYSTEM32\VPCOR.DLL - Deleted
C:\WINDOWS\SYSTEM32\VPLYZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\VPSCT.DLL - Deleted
C:\WINDOWS\SYSTEM32\VRYPE.DLL - Deleted
C:\WINDOWS\SYSTEM32\VSLMI.DLL - Deleted
C:\WINDOWS\SYSTEM32\VSQVG.DLL - Deleted
C:\WINDOWS\SYSTEM32\VTQMA.DLL - Deleted
C:\WINDOWS\SYSTEM32\VUXZK.DLL - Deleted
C:\WINDOWS\SYSTEM32\VVSTU.DLL - Deleted
C:\WINDOWS\SYSTEM32\VWVHP.DLL - Deleted
C:\WINDOWS\SYSTEM32\VZAFG.DLL - Deleted
C:\WINDOWS\SYSTEM32\VZGSF.DLL - Deleted
C:\WINDOWS\SYSTEM32\VZVFM.DLL - Deleted
C:\WINDOWS\SYSTEM32\WDOPO.DLL - Deleted
C:\WINDOWS\SYSTEM32\WEBQO.DLL - Deleted
C:\WINDOWS\SYSTEM32\WEBTY.DLL - Deleted
C:\WINDOWS\SYSTEM32\WEVIL.DLL - Deleted
C:\WINDOWS\SYSTEM32\WEWOX.DLL - Deleted
C:\WINDOWS\SYSTEM32\WFFWZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\WHDKF.DLL - Deleted
C:\WINDOWS\SYSTEM32\WHOIQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\WIBFK.DLL - Deleted
C:\WINDOWS\SYSTEM32\WIMDS.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINAK32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINAY.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINBD.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINBN.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINBO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINBS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINBT32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINBU32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINBW3~1.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINCD32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINCI32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINCK.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINCV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINDE.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINDX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINEF32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINES.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINES32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINEW32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINFA.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINFV.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINGF32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINGY32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINHL.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINHQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINII32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINIS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINIV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINJR32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINJV.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINKE.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINKF.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINKG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINKJ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINKP.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINLO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINLQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINLS32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINMI32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINML~1.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINMN.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINMX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINMY.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINMZ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINNE.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINNI32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINOJ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINOO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINOQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINOV32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINOW32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINPA32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINPU.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINQN32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINRB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINRC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINRD3~1.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINRH32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINRX32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINRY32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINSB.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINSY.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINTC32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINTG32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINTO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINTS.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINUL32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINVO32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINVQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINVV.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINWB3~1.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINWD32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINXB32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINXD.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINXK.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINXK32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINYD32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINYJ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINYZ32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINZB.DLL - Deleted
C:\WINDOWS\SYSTEM32\WINZF32.DLL - Deleted
C:\WINDOWS\SYSTEM32\WJFRP.DLL - Deleted
C:\WINDOWS\SYSTEM32\WKFGI.DLL - Deleted
C:\WINDOWS\SYSTEM32\WKFPN.DLL - Deleted
C:\WINDOWS\SYSTEM32\WKOTS.DLL - Deleted
C:\WINDOWS\SYSTEM32\WKROK.DLL - Deleted
C:\WINDOWS\SYSTEM32\WKVSJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\WLJAH.DLL - Deleted
C:\WINDOWS\SYSTEM32\WLNNF.DLL - Deleted
C:\WINDOWS\SYSTEM32\WOAOQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\WOMRH.DLL - Deleted
C:\WINDOWS\SYSTEM32\WPLAX.DLL - Deleted
C:\WINDOWS\SYSTEM32\WQVLM.DLL - Deleted
C:\WINDOWS\SYSTEM32\WSFTC.DLL - Deleted
C:\WINDOWS\SYSTEM32\WSLSQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\WUMRC.DLL - Deleted
C:\WINDOWS\SYSTEM32\WWLCA.DLL - Deleted
C:\WINDOWS\SYSTEM32\WXOIH.DLL - Deleted
C:\WINDOWS\SYSTEM32\WXZYQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\WZEGS.DLL - Deleted
C:\WINDOWS\SYSTEM32\WZQHM.DLL - Deleted
C:\WINDOWS\SYSTEM32\XACKV.DLL - Deleted
C:\WINDOWS\SYSTEM32\XAFDL.DLL - Deleted
C:\WINDOWS\SYSTEM32\XBJNC.DLL - Deleted
C:\WINDOWS\SYSTEM32\XCEWA.DLL - Deleted
C:\WINDOWS\SYSTEM32\XCGIU.DLL - Deleted
C:\WINDOWS\SYSTEM32\XCRKT.DLL - Deleted
C:\WINDOWS\SYSTEM32\XFUQE.DLL - Deleted
C:\WINDOWS\SYSTEM32\XJPQQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\XJPTO.DLL - Deleted
C:\WINDOWS\SYSTEM32\XLGBC.DLL - Deleted
C:\WINDOWS\SYSTEM32\XLGNU.DLL - Deleted
C:\WINDOWS\SYSTEM32\XMIKW.DLL - Deleted
C:\WINDOWS\SYSTEM32\XNRZR.DLL - Deleted
C:\WINDOWS\SYSTEM32\XOIKV.DLL - Deleted
C:\WINDOWS\SYSTEM32\XOVXY.DLL - Deleted
C:\WINDOWS\SYSTEM32\XTCWH.DLL - Deleted
C:\WINDOWS\SYSTEM32\XUTDS.DLL - Deleted
C:\WINDOWS\SYSTEM32\XUYBE.DLL - Deleted
C:\WINDOWS\SYSTEM32\XUZZF.DLL - Deleted
C:\WINDOWS\SYSTEM32\XVPRH.DLL - Deleted
C:\WINDOWS\SYSTEM32\XWUVM.DLL - Deleted
C:\WINDOWS\SYSTEM32\XYQOJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\YBNHT.DLL - Deleted
C:\WINDOWS\SYSTEM32\YCVNR.DLL - Deleted
C:\WINDOWS\SYSTEM32\YEAXV.DLL - Deleted
C:\WINDOWS\SYSTEM32\YGLLW.DLL - Deleted
C:\WINDOWS\SYSTEM32\YHXDS.DLL - Deleted
C:\WINDOWS\SYSTEM32\YJFIR.DLL - Deleted
C:\WINDOWS\SYSTEM32\YKHQS.DLL - Deleted
C:\WINDOWS\SYSTEM32\YLXKL.DLL - Deleted
C:\WINDOWS\SYSTEM32\YOILZ.DLL - Deleted
C:\WINDOWS\SYSTEM32\YPJBH.DLL - Deleted
C:\WINDOWS\SYSTEM32\YPUPN.DLL - Deleted
C:\WINDOWS\SYSTEM32\YQRJR.DLL - Deleted
C:\WINDOWS\SYSTEM32\YRQGY.DLL - Deleted
C:\WINDOWS\SYSTEM32\YSNBM.DLL - Deleted
C:\WINDOWS\SYSTEM32\YTAJH.DLL - Deleted
C:\WINDOWS\SYSTEM32\YTWBK.DLL - Deleted
C:\WINDOWS\SYSTEM32\YWDFS.DLL - Deleted
C:\WINDOWS\SYSTEM32\ZAFMO.DLL - Deleted
C:\WINDOWS\SYSTEM32\ZAHKM.DLL - Deleted
C:\WINDOWS\SYSTEM32\ZDQZJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\ZFTHR.DLL - Deleted
C:\WINDOWS\SYSTEM32\ZGHIG.DLL - Deleted
C:\WINDOWS\SYSTEM32\ZHJLF.DLL - Deleted
C:\WINDOWS\SYSTEM32\ZIOPQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\ZIRKS.DLL - Deleted
C:\WINDOWS\SYSTEM32\ZJHXU.DLL - Deleted
C:\WINDOWS\SYSTEM32\ZMLXF.DLL - Deleted
C:\WINDOWS\SYSTEM32\ZNISD.DLL - Deleted
C:\WINDOWS\SYSTEM32\ZRMRW.DLL - Deleted
C:\WINDOWS\SYSTEM32\ZSBYH.DLL - Deleted
C:\WINDOWS\SYSTEM32\ZSPGX.DLL - Deleted
C:\WINDOWS\SYSTEM32\ZTFPP.DLL - Deleted
C:\WINDOWS\SYSTEM32\ZTFUQ.DLL - Deleted
C:\WINDOWS\SYSTEM32\ZVAQJ.DLL - Deleted
C:\WINDOWS\SYSTEM32\ZVBCE.DLL - Deleted
C:\WINDOWS\SYSTEM32\ZVNAF.DLL - Deleted
C:\WINDOWS\SYSTEM32\ZWPIE.DLL - Deleted
C:\WINDOWS\system32\o - Deleted
C:\WINDOWS\system32\TFTP368 - Deleted

Removing Temp Files…

ADS Check:

C:\WINDOWS
No streams found.

C:\WINDOWS\system32
No streams found.

C:\WINDOWS\system32\svchost.exe
No streams found.

C:\WINDOWS\system32\ntoskrnl.exe
No streams found.

Final Check:

catchme 0.3.1262.1 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-11-25 14:36:53
Windows 5.1.2600 Service Pack 1 NTFS

scanning hidden processes …

scanning hidden services & system hive …

scanning hidden registry entries …

scanning hidden files …

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0

Remaining Services:
——————

Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

Remaining Files:
—————

File Backups: - C:\SDFix\backups\backups.zip

Files with Hidden Attributes:

Tue 14 Aug 2007 0 A.SH. — "C:\WINDOWS\atlgp32.dll12"
Sat 18 Aug 2007 6,473 A.SH. — "C:\WINDOWS\system32\rrqss.bak1"
Mon 20 Aug 2007 1,621,998 A.SH. — "C:\WINDOWS\system32\rrqss.bak2"
Thu 16 Jan 2003 4,348 ..SH. — "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
Mon 21 Jun 2004 84 A..H. — "C:\Program Files\ATI Multimedia\RemCtrl\x10prod.sys"
Thu 6 Oct 2005 22,803 A..H. — "C:\WINDOWS\SoftwareDistribution\Download\0091ab299e899a5920ad91739ad99c67\download\BIT10.tmp"
Mon 13 Dec 2004 510,888 A..H. — "C:\WINDOWS\SoftwareDistribution\Download\080070f6461c8001578e5e4cd4bb024b\download\BIT26.tmp"
Thu 22 Jun 2006 257,701 A..H. — "C:\WINDOWS\SoftwareDistribution\Download\109fef93c24da62cf8f31668d6ba9060\download\BIT1C.tmp"
Mon 13 Dec 2004 24,727 A..H. — "C:\WINDOWS\SoftwareDistribution\Download\1fb659e25c21839251d560da33cbcfad\download\BIT1A.tmp"
Wed 8 Jun 2005 5,995 A..H. — "C:\WINDOWS\SoftwareDistribution\Download\208c1a8c52f47d7b2df4baa21f58d3da\download\BIT14.tmp"
Mon 7 Feb 2005 8,432 A..H. — "C:\WINDOWS\SoftwareDistribution\Download\2d7809720343ee9223ce4d88d99bf3c2\download\BIT15.tmp"
Fri 2 Jun 2006 173,107 A..H. — "C:\WINDOWS\SoftwareDistribution\Download\32e99364da67a7850c38a7a4e067a1ed\download\BIT12.tmp"
Fri 5 Aug 2005 36,011 A..H. — "C:\WINDOWS\SoftwareDistribution\Download\495213e4cb2a90b1fa5505a5fab8e00b\download\BIT1D.tmp"
Thu 6 Oct 2005 173,907 A..H. — "C:\WINDOWS\SoftwareDistribution\Download\4cbc0c1da652794a86c37dbd177bef9d\download\BIT21.tmp"
Wed 29 Mar 2006 15,537 A..H. — "C:\WINDOWS\SoftwareDistribution\Download\4cc8107fde988bba1481bb736cc96c29\download\BIT1B.tmp"
Thu 8 Jun 2006 68,021 A..H. — "C:\WINDOWS\SoftwareDistribution\Download\512e19b377bd5d52a1e190ecbd7a83eb\download\BITF.tmp"
Wed 6 Sep 2006 11,840 A..H. — "C:\WINDOWS\SoftwareDistribution\Download\52b72a8354f3c8a72b1aee0b2a11d368\download\BIT13.tmp"
Wed 8 Feb 2006 25,936 A..H. — "C:\WINDOWS\SoftwareDistribution\Download\55b5c397ff94db07e8c1c336efaf0a7b\download\BIT23.tmp"
Fri 22 Sep 2006 132,377 A..H. — "C:\WINDOWS\SoftwareDistribution\Download\6f0fd10fc234123bcdf54ebca4b84cbd\download\BIT27.tmp"
Fri 2 Jun 2006 178,454 A..H. — "C:\WINDOWS\SoftwareDistribution\Download\7b94d041c29d0b8d724c97ae0005e71b\download\BIT11.tmp"
Mon 7 Nov 2005 460,849 A..H. — "C:\WINDOWS\SoftwareDistribution\Download\837a8691e43011f909e4b3e192fe1437\download\BIT1E.tmp"
Fri 28 Jul 2006 80,457 A..H. — "C:\WINDOWS\SoftwareDistribution\Download\8b20f1a9610d239c2680847de8fa139a\download\BIT22.tmp"
Thu 6 Oct 2005 10,883 A..H. — "C:\WINDOWS\SoftwareDistribution\Download\a099dfb7d5d88247579330743c8014f3\download\BIT17.tmp"
Mon 13 Dec 2004 86,814 A..H. — "C:\WINDOWS\SoftwareDistribution\Download\adc42e4e6905251cac80b18a8dccd42a\download\BIT25.tmp"
Fri 5 Aug 2005 58,087 A..H. — "C:\WINDOWS\SoftwareDistribution\Download\c23140ab2b4cffaee396a230df8b1229\download\BIT29.tmp"
Fri 28 Jul 2006 27,746 A..H. — "C:\WINDOWS\SoftwareDistribution\Download\c9cdbfcd49200c55d94bb81819c80f2b\download\BIT16.tmp"
Fri 1 Sep 2006 141,639 A..H. — "C:\WINDOWS\SoftwareDistribution\Download\d037d9bbbbdf880e477c3840b38c3180\download\BIT1F.tmp"
Tue 26 Sep 2006 62,300 A..H. — "C:\WINDOWS\SoftwareDistribution\Download\d20fc1765c1d2a8e6c26cf77036ce48f\download\BIT24.tmp"
Fri 10 Jun 2005 113,799 A..H. — "C:\WINDOWS\SoftwareDistribution\Download\d424e8f655073b64c82b6f4f138d5f7e\download\BIT18.tmp"
Fri 5 Aug 2005 2,718 A..H. — "C:\WINDOWS\SoftwareDistribution\Download\e3c3121982c8a4d0c1605cfbcb9bb7c8\download\BIT20.tmp"
Fri 22 Sep 2006 333,803 A..H. — "C:\WINDOWS\SoftwareDistribution\Download\edc9e523d8678897d85b5ee0ef1bbf7a\download\BIT28.tmp"
Fri 22 Sep 2006 224,479 A..H. — "C:\WINDOWS\SoftwareDistribution\Download\f040a43a7788e207ef67f26bf9f0471f\download\BIT19.tmp"
Fri 8 Jul 2005 15,700 A..H. — "C:\WINDOWS\SoftwareDistribution\Download\f941c900a413f153861a4032214a1aec\download\BITE.tmp"
Wed 22 Nov 2006 0 A..H. — "C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\de8ee63fe1a53132db68077e94ac91b1\BIT39.tmp"

Finished!

indianahx

Post #9November 25, 2007, 8:18 PM UTC

sorry, was so long i had to post twice……..the combo fix is below:

ComboFix 07-11-19.3 - Owner 2007-11-25 15:01:06.4 - NTFSx86
Running from: C:\Documents and Settings\[removed]\Desktop\ComboFix.exe
* Created a new restore point
.

((((((((((((((((((((((((( Files Created from 2007-10-25 to 2007-11-25 )))))))))))))))))))))))))))))))
.

2007-11-11 14:02 d——– C:\Documents and Settings\Owner.YOUR-KYBTG65GXE.000\Application Data\DivX

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-11-25 16:05 ——— d—–w C:\Documents and Settings\Owner.YOUR-KYBTG65GXE.000\Application Data\AVG7
2007-11-11 19:01 ——— d—–w C:\Program Files\DivX
2007-11-11 18:40 ——— d—a-w C:\Documents and Settings\All Users\Application Data\TEMP
2007-10-20 00:56 9,464 ——w C:\WINDOWS\system32\drivers\cdralw2k.sys
2007-10-20 00:56 9,336 ——w C:\WINDOWS\system32\drivers\cdr4_xp.sys
2007-10-20 00:56 43,528 ——w C:\WINDOWS\system32\drivers\pxhelp20.sys
2007-10-07 22:56 ——— d—–w C:\Documents and Settings\All Users\Application Data\avg7
2007-09-03 02:20 29,696 -c–a-w C:\WINDOWS\mickey32.dll
2004-12-23 22:26 4 —-a-w C:\Program Files\index.tmp
2003-12-14 20:24 1,617 -c–a-w C:\Program Files\INSTALL.LOG
2005-01-13 23:26 0 –sha-w C:\WINDOWS\avxqc.dat
2004-07-01 16:22 0 -csha-w C:\WINDOWS\bsmzw.dat
2005-06-11 12:08 0 –sha-w C:\WINDOWS\czhqk.dat
2005-08-26 15:16 0 –sha-w C:\WINDOWS\gbbnk.dat
2005-04-22 22:05 0 –sha-w C:\WINDOWS\hxdbz.dat
2005-01-09 14:42 0 -csha-w C:\WINDOWS\innvn.dat
2005-02-12 01:59 0 –sha-w C:\WINDOWS\kshzf.dat
2005-02-17 17:20 0 –sha-w C:\WINDOWS\n_aiqper.dat
2005-05-31 21:54 0 –sha-w C:\WINDOWS\n_avbvce.dat
2004-08-12 11:17 0 –sha-w C:\WINDOWS\n_ksqwas.dat
2007-08-04 07:34 0 –sha-w C:\WINDOWS\n_ljrciq.dat
2004-12-03 11:30 0 –sha-w C:\WINDOWS\n_lyfhok.dat
2004-07-17 08:42 0 -csha-w C:\WINDOWS\n_mrkjcv.dat
2006-01-31 05:40 0 –sha-w C:\WINDOWS\n_nnykak.dat
2005-05-17 09:22 0 –sha-w C:\WINDOWS\n_ooijkj.dat
2005-10-04 01:46 0 –sha-w C:\WINDOWS\n_owuaid.dat
2004-08-05 08:19 0 –sha-w C:\WINDOWS\n_pzmmzg.dat
2005-08-14 18:57 0 –sha-w C:\WINDOWS\n_qkmipa.dat
2005-02-06 17:26 0 -csha-w C:\WINDOWS\n_sajzpu.dat
2004-12-02 02:13 0 –sha-w C:\WINDOWS\n_skcrxh.dat
2005-07-12 10:47 0 –sha-w C:\WINDOWS\n_umagdu.dat
2005-06-14 15:47 0 –sha-w C:\WINDOWS\n_vlbvcz.dat
2005-06-06 04:29 0 –sha-w C:\WINDOWS\n_vljnyg.dat
2004-09-07 15:08 0 –sha-w C:\WINDOWS\n_yyunoe.dat
2004-07-18 08:06 0 -csha-w C:\WINDOWS\olplf.dat
2005-01-13 23:17 0 –sha-w C:\WINDOWS\pczxy.dat
2004-12-03 23:54 0 –sha-w C:\WINDOWS\rsdfp.dat
2005-01-20 01:52 0 -csha-w C:\WINDOWS\uikxi.dat
2004-09-05 09:02 0 –sha-w C:\WINDOWS\xgjwo.dat
2004-12-20 05:37 0 –sha-w C:\WINDOWS\system32\bzmyt.dat
2004-08-30 07:53 0 –sha-w C:\WINDOWS\system32\cfwvk.dat
2004-07-07 20:47 0 -csha-w C:\WINDOWS\system32\deaue.dat
2004-06-24 22:46 0 -csha-w C:\WINDOWS\system32\foloe.dat
2004-08-07 21:58 0 –sha-w C:\WINDOWS\system32\hzfyd.dat
2005-02-13 03:01 0 –sha-w C:\WINDOWS\system32\mtscp.dat
2004-07-01 02:05 0 -csha-w C:\WINDOWS\system32\ngkrm.dat
2004-09-01 08:21 0 –sha-w C:\WINDOWS\system32\pkbwz.dat
2004-07-18 05:48 0 -csha-w C:\WINDOWS\system32\qkvnf.dat
2004-06-22 20:23 0 -csha-w C:\WINDOWS\system32\qpocs.dat
2005-03-06 08:59 0 –sha-w C:\WINDOWS\system32\rblkl.dat
2007-08-18 14:15 6,473 –sha-w C:\WINDOWS\system32\rrqss.bak1
2007-08-20 22:20 1,621,998 –sha-w C:\WINDOWS\system32\rrqss.bak2
2005-02-06 18:39 0 –sha-w C:\WINDOWS\system32\sngtk.dat
2004-08-11 01:09 0 –sha-w C:\WINDOWS\system32\spgsl.dat
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NVIEW"="nview.dll" [2002-10-01 02:39 C:\WINDOWS\system32\nview.dll]
"Aim6"="" []
"Yahoo! Pager"="C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.exe" [2007-08-30 17:43]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BlockTracker"="c:\hp\bin\BlockTracker.exe" []
"hpsysdrv"="c:\windows\system\hpsysdrv.exe" [1998-05-07 19:04]
"HotKeysCmds"="C:\WINDOWS\System32\hkcmd.exe" [2002-09-09 10:05]
"KBD"="C:\HP\KBD\KBD.EXE" [2001-07-07 00:56]
"StorageGuard"="C:\Program Files\VERITAS Software\Update Manager\sgtray.exe" [2002-06-18 11:01]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [2002-10-29 16:41]
"WCOLOREAL"="C:\Program Files\COMPAQ\Coloreal\coloreal.exe" [2002-02-20 22:40]
"Recguard"="C:\WINDOWS\SMINST\RECGUARD.EXE" [2002-09-14 00:42]
"NvCplDaemon"="RUNDLL32.exe" [2002-08-29 07:00 C:\WINDOWS\system32\rundll32.exe]
"nwiz"="nwiz.exe" [2002-10-01 02:39 C:\WINDOWS\system32\nwiz.exe]
"ATIModeChange"="Ati2mdxx.exe" [2002-10-02 00:27 C:\WINDOWS\system32\Ati2mdxx.exe]
"ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2002-08-22 15:10]
"PS2"="C:\WINDOWS\system32\ps2.exe" [2002-07-31 23:28]
"AVG7_CC"="C:\PROGRA~1\Grisoft\AVG7\avgcc.exe" [2007-09-17 15:47]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe" [2007-07-12 04:00]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"AVG7_Run"="C:\PROGRA~1\Grisoft\AVG7\avgw.exe" [2007-08-20 18:36]

.
Contents of the 'Scheduled Tasks' folder
"2007-11-20 15:55:37 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
.
**************************************************************************

catchme 0.3.1262 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-11-25 15:10:27
Windows 5.1.2600 Service Pack 1 NTFS

scanning hidden processes …

scanning hidden autostart entries …

scanning hidden files …

**************************************************************************
.
Completion time: 2007-11-25 15:14:31
C:\ComboFix-quarantined-files.txt … 2007-09-11 20:50
C:\ComboFix2.txt … 2007-11-14 18:11
C:\ComboFix3.txt … 2007-09-11 20:50
.
— E O F —

Scotty

Post #10November 25, 2007, 11:15 PM UTC

Hi

Remember to disconnect from the Internet and disable your anti-virus before carrying out the next instruction, and to reenable the anti-virus before reconnecting to the Internet

Open Notepad - it must be Notepad, not Wordpad.
Copy the text below in the code box by highlighting all the text with your mouse and pressing Ctrl+C

File::
C:\WINDOWS\mickey32.dll
C:\Program Files\index.tmp 
C:\WINDOWS\avxqc.dat
C:\WINDOWS\bsmzw.dat
C:\WINDOWS\czhqk.dat
C:\WINDOWS\gbbnk.dat
C:\WINDOWS\hxdbz.dat
C:\WINDOWS\innvn.dat
C:\WINDOWS\kshzf.dat
C:\WINDOWS\n_aiqper.dat
C:\WINDOWS\n_avbvce.dat
C:\WINDOWS\n_ksqwas.dat
C:\WINDOWS\n_ljrciq.dat
C:\WINDOWS\n_lyfhok.dat
C:\WINDOWS\n_mrkjcv.dat
C:\WINDOWS\n_nnykak.dat
C:\WINDOWS\n_ooijkj.dat
C:\WINDOWS\n_owuaid.dat
C:\WINDOWS\n_pzmmzg.dat
C:\WINDOWS\n_qkmipa.dat
C:\WINDOWS\n_sajzpu.dat
C:\WINDOWS\n_skcrxh.dat
C:\WINDOWS\n_umagdu.dat
C:\WINDOWS\n_vlbvcz.dat
C:\WINDOWS\n_vljnyg.dat
C:\WINDOWS\n_yyunoe.dat
C:\WINDOWS\olplf.dat
C:\WINDOWS\pczxy.dat
C:\WINDOWS\rsdfp.dat
C:\WINDOWS\uikxi.dat
C:\WINDOWS\xgjwo.dat
C:\WINDOWS\system32\bzmyt.dat
C:\WINDOWS\system32\cfwvk.dat
C:\WINDOWS\system32\deaue.dat
C:\WINDOWS\system32\foloe.dat
C:\WINDOWS\system32\hzfyd.dat
C:\WINDOWS\system32\mtscp.dat
C:\WINDOWS\system32\ngkrm.dat
C:\WINDOWS\system32\pkbwz.dat
C:\WINDOWS\system32\qkvnf.dat
C:\WINDOWS\system32\qpocs.dat
C:\WINDOWS\system32\rblkl.dat
C:\WINDOWS\system32\rrqss.bak1
C:\WINDOWS\system32\rrqss.bak2
C:\WINDOWS\system32\sngtk.dat
C:\WINDOWS\system32\spgsl.dat

Folder::
C:\Vundofix
C:\SDFix

Go to the Notepad window and click Edit > Paste
Then click File > Save
Name the file "CFScript.txt" (including the quotes)
Save the file to your Desktop

[external image: Posted Image]

Refering to the picture above, drag CFScript into ComboFix.exe

Combofix should never take more that 20 minutes including the reboot if malware is detected.
If it does, open Task-Manager use the Processes tab (press ctrl alt and del at the same time) and end any processes of findstr, find, sed or swreg, then combofix should continue.
If that happened we want to know, and also what process you had to end.

In your next reply post:
ComboFix.txt
New HJT log taken after the above scan has run

indianahx

Post #11November 26, 2007, 1:49 AM UTC

after running the combo fix like you said, i did notice that it was stalling so i opened the task manager as advised and saw that the "sed" file was running so i terminated it. however, i did notice that it kept popping up. i closed it 3 or four more times. on top of that i did see the swreg pop up now and again, but the list of processes kept fluctuating the whole time and i was unable to terminate it before it would disappear and then pop back up into the list. here is the combofix log:

ComboFix 07-11-19.3 - Owner 2007-11-25 20:22:18.5 - NTFSx86
Running from: C:\Documents and Settings\[removed]\Desktop\ComboFix.exe
Command switches used :: C:\Documents and Settings\Owner.YOUR-KYBTG65GXE.000\Desktop\CFScript.txt
* Created a new restore point

FILE
C:\Program Files\index.tmp
C:\WINDOWS\avxqc.dat
C:\WINDOWS\bsmzw.dat
C:\WINDOWS\czhqk.dat
C:\WINDOWS\gbbnk.dat
C:\WINDOWS\hxdbz.dat
C:\WINDOWS\innvn.dat
C:\WINDOWS\kshzf.dat
C:\WINDOWS\mickey32.dll
C:\WINDOWS\n_aiqper.dat
C:\WINDOWS\n_avbvce.dat
C:\WINDOWS\n_ksqwas.dat
C:\WINDOWS\n_ljrciq.dat
C:\WINDOWS\n_lyfhok.dat
C:\WINDOWS\n_mrkjcv.dat
C:\WINDOWS\n_nnykak.dat
C:\WINDOWS\n_ooijkj.dat
C:\WINDOWS\n_owuaid.dat
C:\WINDOWS\n_pzmmzg.dat
C:\WINDOWS\n_qkmipa.dat
C:\WINDOWS\n_sajzpu.dat
C:\WINDOWS\n_skcrxh.dat
C:\WINDOWS\n_umagdu.dat
C:\WINDOWS\n_vlbvcz.dat
C:\WINDOWS\n_vljnyg.dat
C:\WINDOWS\n_yyunoe.dat
C:\WINDOWS\olplf.dat
C:\WINDOWS\pczxy.dat
C:\WINDOWS\rsdfp.dat
C:\WINDOWS\system32\bzmyt.dat
C:\WINDOWS\system32\cfwvk.dat
C:\WINDOWS\system32\deaue.dat
C:\WINDOWS\system32\foloe.dat
C:\WINDOWS\system32\hzfyd.dat
C:\WINDOWS\system32\mtscp.dat
C:\WINDOWS\system32\ngkrm.dat
C:\WINDOWS\system32\pkbwz.dat
C:\WINDOWS\system32\qkvnf.dat
C:\WINDOWS\system32\qpocs.dat
C:\WINDOWS\system32\rblkl.dat
C:\WINDOWS\system32\rrqss.bak1
C:\WINDOWS\system32\rrqss.bak2
C:\WINDOWS\system32\sngtk.dat
C:\WINDOWS\system32\spgsl.dat
C:\WINDOWS\uikxi.dat
C:\WINDOWS\xgjwo.dat
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Program Files\index.tmp
C:\SDFix
C:\SDFix\apps\assosfix.reg
C:\SDFix\apps\cliptext.exe
C:\SDFix\apps\download.exe
C:\SDFix\apps\drivers.exe
C:\SDFix\apps\dummy.sys
C:\SDFix\apps\Enable_Command_Prompt.reg
C:\SDFix\apps\ERDNT.E_E
C:\SDFix\apps\ERDNTDOS.LOC
C:\SDFix\apps\ERDNTWIN.LOC
C:\SDFix\apps\ERUNT.EXE
C:\SDFix\apps\ERUNT.LOC
C:\SDFix\apps\fix.reg
C:\SDFix\apps\FixBH.reg
C:\SDFix\apps\FIXCU.reg
C:\SDFix\apps\FIXLM.reg
C:\SDFix\apps\FixPath.exe
C:\SDFix\apps\FixRedir.reg
C:\SDFix\apps\FixWebCheck.reg
C:\SDFix\apps\fixXP.reg
C:\SDFix\apps\FixXPsp2.reg
C:\SDFix\apps\HPFix.reg
C:\SDFix\apps\HPFix2.reg
C:\SDFix\apps\HPFix3.reg
C:\SDFix\apps\HPFix4.reg
C:\SDFix\apps\isadmin.exe
C:\SDFix\apps\leg2.txt
C:\SDFix\apps\legacy.txt
C:\SDFix\apps\legacybk.txt
C:\SDFix\apps\locate.com
C:\SDFix\apps\LS.exe
C:\SDFix\apps\MD5File.exe
C:\SDFix\apps\moveex.exe
C:\SDFix\apps\MyGcpvFix.reg
C:\SDFix\apps\MyGkFix2.reg
C:\SDFix\apps\Process.exe
C:\SDFix\apps\procs.exe
C:\SDFix\apps\psservice.exe
C:\SDFix\apps\RegDACL.exe
C:\SDFix\apps\regedit.exe
C:\SDFix\apps\Rem.txt
C:\SDFix\apps\Rem2.txt
C:\SDFix\apps\Replace\W2K.exe
C:\SDFix\apps\Replace\w2k\null.sys
C:\SDFix\apps\Replace\XP.exe
C:\SDFix\apps\Replace\xp\null.sys
C:\SDFix\apps\Reset_AppInit_DLLs.reg
C:\SDFix\apps\RestartIt!.exe
C:\SDFix\apps\Restore_SecurityCenter.reg
C:\SDFix\apps\Restore_SharedAccess.reg
C:\SDFix\apps\sc.exe
C:\SDFix\apps\SecurityProviders.reg
C:\SDFix\apps\SF.exe
C:\SDFix\apps\shutdown.exe
C:\SDFix\apps\srv2.txt
C:\SDFix\apps\svc.txt
C:\SDFix\apps\svcbk.txt
C:\SDFix\apps\swreg.exe
C:\SDFix\apps\swsc.exe
C:\SDFix\apps\unzip.exe
C:\SDFix\apps\WINMSG.EXE
C:\SDFix\apps\zip.exe
C:\SDFix\backups\attrib.exe
C:\SDFix\backups\backupreg.zip
C:\SDFix\backups\backups.zip
C:\SDFix\backups\find.exe
C:\SDFix\backups\findstr.exe
C:\SDFix\backups\HOSTS
C:\SDFix\backups\regedit.exe
C:\SDFix\catchme.exe
C:\SDFix\dummy.exe
C:\SDFix\dummy.sys
C:\SDFix\Report.txt
C:\SDFix\RunThis.cmd
C:\SDFix\SDFIX_ReadMe_Online.url
C:\WINDOWS\avxqc.dat
C:\WINDOWS\bsmzw.dat
C:\WINDOWS\czhqk.dat
C:\WINDOWS\gbbnk.dat
C:\WINDOWS\hxdbz.dat
C:\WINDOWS\innvn.dat
C:\WINDOWS\kshzf.dat
C:\WINDOWS\mickey32.dll
C:\WINDOWS\n_aiqper.dat
C:\WINDOWS\n_avbvce.dat
C:\WINDOWS\n_ksqwas.dat
C:\WINDOWS\n_ljrciq.dat
C:\WINDOWS\n_lyfhok.dat
C:\WINDOWS\n_mrkjcv.dat
C:\WINDOWS\n_nnykak.dat
C:\WINDOWS\n_ooijkj.dat
C:\WINDOWS\n_owuaid.dat
C:\WINDOWS\n_pzmmzg.dat
C:\WINDOWS\n_qkmipa.dat
C:\WINDOWS\n_sajzpu.dat
C:\WINDOWS\n_skcrxh.dat
C:\WINDOWS\n_umagdu.dat
C:\WINDOWS\n_vlbvcz.dat
C:\WINDOWS\n_vljnyg.dat
C:\WINDOWS\n_yyunoe.dat
C:\WINDOWS\olplf.dat
C:\WINDOWS\pczxy.dat
C:\WINDOWS\rsdfp.dat
C:\WINDOWS\system32\bzmyt.dat
C:\WINDOWS\system32\cfwvk.dat
C:\WINDOWS\system32\deaue.dat
C:\WINDOWS\system32\foloe.dat
C:\WINDOWS\system32\hzfyd.dat
C:\WINDOWS\system32\mtscp.dat
C:\WINDOWS\system32\ngkrm.dat
C:\WINDOWS\system32\pkbwz.dat
C:\WINDOWS\system32\qkvnf.dat
C:\WINDOWS\system32\qpocs.dat
C:\WINDOWS\system32\rblkl.dat
C:\WINDOWS\system32\rrqss.bak1
C:\WINDOWS\system32\rrqss.bak2
C:\WINDOWS\system32\sngtk.dat
C:\WINDOWS\system32\spgsl.dat
C:\WINDOWS\uikxi.dat
C:\WINDOWS\xgjwo.dat

.
((((((((((((((((((((((((( Files Created from 2007-10-26 to 2007-11-26 )))))))))))))))))))))))))))))))
.

2007-11-11 14:02 d——– C:\Documents and Settings\Owner.YOUR-KYBTG65GXE.000\Application Data\DivX

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-11-25 16:05 ——— d—–w C:\Documents and Settings\Owner.YOUR-KYBTG65GXE.000\Application Data\AVG7
2007-11-11 19:01 ——— d—–w C:\Program Files\DivX
2007-11-11 18:40 ——— d—a-w C:\Documents and Settings\All Users\Application Data\TEMP
2007-10-20 00:56 9,464 ——w C:\WINDOWS\system32\drivers\cdralw2k.sys
2007-10-20 00:56 9,336 ——w C:\WINDOWS\system32\drivers\cdr4_xp.sys
2007-10-20 00:56 524,288 —-a-w C:\WINDOWS\system32\DivXsm.exe
2007-10-20 00:56 43,528 ——w C:\WINDOWS\system32\drivers\pxhelp20.sys
2007-10-20 00:56 3,596,288 —-a-w C:\WINDOWS\system32\qt-dx331.dll
2007-10-20 00:56 200,704 —-a-w C:\WINDOWS\system32\ssldivx.dll
2007-10-20 00:56 129,784 ——w C:\WINDOWS\system32\pxafs.dll
2007-10-20 00:56 120,056 ——w C:\WINDOWS\system32\pxcpyi64.exe
2007-10-20 00:56 118,520 ——w C:\WINDOWS\system32\pxinsi64.exe
2007-10-20 00:56 1,044,480 —-a-w C:\WINDOWS\system32\libdivx.dll
2007-10-20 00:54 823,296 —-a-w C:\WINDOWS\system32\divx_xx0c.dll
2007-10-20 00:54 823,296 —-a-w C:\WINDOWS\system32\divx_xx07.dll
2007-10-20 00:54 81,920 —-a-w C:\WINDOWS\system32\dpl100.dll
2007-10-20 00:54 802,816 —-a-w C:\WINDOWS\system32\divx_xx11.dll
2007-10-20 00:54 739,840 —-a-w C:\WINDOWS\system32\DivX.dll
2007-10-20 00:54 196,608 —-a-w C:\WINDOWS\system32\dtu100.dll
2007-10-18 09:06 156,992 —-a-w C:\WINDOWS\system32\DivXCodecVersionChecker.exe
2007-10-18 09:03 593,920 —-a-w C:\WINDOWS\system32\dpuGUI11.dll
2007-10-18 09:03 57,344 —-a-w C:\WINDOWS\system32\dpv11.dll
2007-10-18 09:03 53,248 —-a-w C:\WINDOWS\system32\dpuGUI10.dll
2007-10-18 09:03 344,064 —-a-w C:\WINDOWS\system32\dpus11.dll
2007-10-18 09:03 294,912 —-a-w C:\WINDOWS\system32\dpu11.dll
2007-10-18 09:03 294,912 —-a-w C:\WINDOWS\system32\dpu10.dll
2007-10-18 09:02 12,288 —-a-w C:\WINDOWS\system32\DivXWMPExtType.dll
2007-10-07 22:56 ——— d—–w C:\Documents and Settings\All Users\Application Data\avg7
2003-12-14 20:24 1,617 -c–a-w C:\Program Files\INSTALL.LOG
.

((((((((((((((((((((((((((((( snapshot@2007-11-25_15.13.00.48 )))))))))))))))))))))))))))))))))))))))))
.
- 2007-11-25 19:34:04 16,384 —-a-w C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat
+ 2007-11-26 00:37:43 16,384 —-a-w C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat
- 2007-11-25 19:34:04 32,768 —-a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
+ 2007-11-26 00:37:43 32,768 —-a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
- 2007-11-25 19:34:04 32,768 —-a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
+ 2007-11-26 00:37:43 32,768 —-a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
- 2007-11-25 20:00:57 262,144 —-a-w C:\WINDOWS\system32\config\systemprofile\ntuser.dat
+ 2007-11-26 01:22:09 262,144 —-a-w C:\WINDOWS\system32\config\systemprofile\ntuser.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NVIEW"="nview.dll" [2002-10-01 02:39 C:\WINDOWS\system32\nview.dll]
"Aim6"="" []
"Yahoo! Pager"="C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.exe" [2007-08-30 17:43]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BlockTracker"="c:\hp\bin\BlockTracker.exe" []
"hpsysdrv"="c:\windows\system\hpsysdrv.exe" [1998-05-07 19:04]
"HotKeysCmds"="C:\WINDOWS\System32\hkcmd.exe" [2002-09-09 10:05]
"KBD"="C:\HP\KBD\KBD.EXE" [2001-07-07 00:56]
"StorageGuard"="C:\Program Files\VERITAS Software\Update Manager\sgtray.exe" [2002-06-18 11:01]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [2002-10-29 16:41]
"WCOLOREAL"="C:\Program Files\COMPAQ\Coloreal\coloreal.exe" [2002-02-20 22:40]
"Recguard"="C:\WINDOWS\SMINST\RECGUARD.EXE" [2002-09-14 00:42]
"NvCplDaemon"="RUNDLL32.exe" [2002-08-29 07:00 C:\WINDOWS\system32\rundll32.exe]
"nwiz"="nwiz.exe" [2002-10-01 02:39 C:\WINDOWS\system32\nwiz.exe]
"ATIModeChange"="Ati2mdxx.exe" [2002-10-02 00:27 C:\WINDOWS\system32\Ati2mdxx.exe]
"ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2002-08-22 15:10]
"PS2"="C:\WINDOWS\system32\ps2.exe" [2002-07-31 23:28]
"AVG7_CC"="C:\PROGRA~1\Grisoft\AVG7\avgcc.exe" [2007-09-17 15:47]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe" [2007-07-12 04:00]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"AVG7_Run"="C:\PROGRA~1\Grisoft\AVG7\avgw.exe" [2007-08-20 18:36]

S3 msCMTSrvc;Content Monitoring Tool;C:\WINDOWS\system32\msCMTSrvc.exe

.
Contents of the 'Scheduled Tasks' folder
"2007-11-20 15:55:37 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
.
**************************************************************************

catchme 0.3.1262 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-11-25 20:35:40
Windows 5.1.2600 Service Pack 1 NTFS

scanning hidden processes …

scanning hidden autostart entries …

scanning hidden files …

**************************************************************************
.
Completion time: 2007-11-25 20:42:56 - machine was rebooted
C:\ComboFix-quarantined-files.txt … 2007-09-11 20:50
C:\ComboFix2.txt … 2007-11-25 15:14
C:\ComboFix3.txt … 2007-11-14 18:11
.
— E O F —

Logfile of HijackThis v1.99.1
Scan saved at 8:48:35 PM, on 11/25/2007
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\System32\svchost.exe
C:\windows\system\hpsysdrv.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\HJT\HijackThis.exe

R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll
O4 - HKLM\..\Run: [BlockTracker] c:\hp\bin\BlockTracker.exe
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\VERITAS Software\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\realsched.exe -osboot
O4 - HKLM\..\Run: [WCOLOREAL] "C:\Program Files\COMPAQ\Coloreal\coloreal.exe"
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Content Monitoring Tool (msCMTSrvc) - Unknown owner - C:\WINDOWS\system32\msCMTSrvc.exe (file missing)
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

Scotty

Post #12November 26, 2007, 10:30 AM UTC

Hello

Quick question, but why are you still running SP1? We must upgrade to SP2 when you are clean, to avoid re-infection.

Please do an online scan with Kaspersky Online Scanner. You will be prompted to install an ActiveX component from Kaspersky, Click Yes.

The program will launch and then start to download the latest definition files.
Once the scanner is installed and the definitions downloaded, click Next.
Now click on Scan Settings
In the scan settings make sure that the following are selected:
- Scan using the following Anti-Virus database:
  
  + Extended(If available otherwise Standard)
- Scan Options:
  
  + Scan Archives
  + Scan Mail Bases
Click OK
Now under select a target to scan select My Computer
The scan will take a while so be patient and let it run. Once the scan is complete it will display if your system has been infected.
Now click on the Save as Text button
Save the file to your desktop.
Copy and paste that information in your next post.

With the exception of Internet Explorer, which is needed for the Kaspersky Scan, keep ALL programs closed until the scan is complete.

indianahx

Post #13November 26, 2007, 9:11 PM UTC

just a quick reply before i do the scan….i believe that i'm running SP1 because at one point my computer didnt work at all and then the system restore came on and restored everything on the computer. after that, i noticed that i couldnt some of the microsoft office functions and such. that is the only info i can give on that subject.

indianahx

Post #14November 27, 2007, 12:56 AM UTC

i have finished the scan, and out of 133646 objects scanned it said there were 5 viruses found and 10 infected objects. i attempted to post the text file but it is INSANELY HUGE and I would have to break it down into many many consecutive posts. any suggestions?

Scotty

Post #15November 27, 2007, 10:36 AM UTC

Strange. When you click Add Reply do you notice the "Add Attachments" below the reply box? Attach the log and Ill take a gander.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI

[Resolved] oh dear lord i'm ready to give this another try

✨ Ask AI

Ask AI