[Resolved] Malware using Windows Installer

Hello and welcome to the forum.

Sorry about the delay in responding

If you still need help, Scan again with HijackThis, and "copy/paste" a new log file into this thread.

Please make a uninstall list using HijackThis
To access the Uninstall Manager you would do the following:

1. Start HijackThis
2. Click on the Config button
3. Click on the Misc Tools button
4. Click on the Open Uninstall Manager button.
5. Click on the Save list… button and specify where you would like to save this file. When you press Save button a notepad will open with the contents of that file. Simply copy and paste the contents of that notepad here in a reply.


Also please describe how your computer behaves at the moment.

Here is how the computer is behaving now. Most programs run fine. There are about 3 or 4 programs that have become infected with this malware. When I try to start them, the Windows Installer shows up to do something - I know not what. If I click on the cancel button in this dialog box, and continue clicking for the several times it shows up, then finally the program I am trying to select will come up and run. If I don't click cancel in the Installer dialog box, the program will not ever come up. I believe I concluded that the infected programs were all at one time in the list of recently used programs of the Start list. So, I have now set this list to maximum length 0, hoping to avoid any further infection. Also, this Windows Installer Diaglog Box comes up after reboot. If I cancel at each appearance, the system will boot up and again most programs run OK. When this first started happening I checked my own Hijackthis log and found two sites in the O15 Trusted Site list. Whataboutadog.com and whataboutarabit.com. I removed these straght away, but it did not seem to help. Ron

Hi

Let's start here.

Please download FindAWF here:
http://noahdfear.geekstogo.com/FindAWF.exe
Save to desktop and run
The output is awf.txt, save the text file to your desktop.

Hi, I downloaded FINDAWF.exe and ran it. After 6 hours it is still running. I selected option 1 to check for bak files. Did this at 10:am this morning, and it is still running now at 4:00 pm this afternoon. No output from the program at all, only a blue screen stating it is "checking for duplicate files, please wait" which came up right away. Is this normal - six hours in execution without any notice to the user? I have three hard drives on this computer, but only C: is the system drive, the others are storage and backup. It does seem like the program is still searching one of the other hard drives. Thanks Ron Cobb

No, it shouldnt take that long. The following tool also checks for AWF, so stop FindAWF and follow the instructions.

If you already have Combofix, please delete this copy and download it again as it's being updated regularly.

Please Download and Save Combofix from Bleeping Computer. Save it to your desktop.

If you can't download it, please try these 2 alternative sites:

Forospyware
Geeks to Go

• Save it to your Desktop.
• Disconnect from the Internet, than disable your anti-virus and any real-time anti-spyware monitors that are running.
• Click Start>Run copy/paste or type "%userprofile%\desktop\combofix.exe" /killall into the Run box and click OK.
• When finished, it shall produce a log for you. Post that log in your next reply with a new HijackThis log.

Note 1: Do not mouseclick combofix's window whilst it's running. That may cause it to stall
Note 2:Remember to re-enable your anti-virus and anti-spyware before reconnecting to the Internet.

Combofix should never take more that 20 minutes including the reboot if malware is detected.
If it does, open Task-Manager use the Processes tab (press ctrl alt and del at the same time) and end any processes of findstr, find, sed or swreg, then combofix should continue.
If that happened we want to know, and also what process you had to end.

In your next reply post:
ComboFix.txt
New HijackThis log taken after the above scan has run

Scotty, Finally I have an AWF.txt file. The program ran for over 8 hours, but finally finished. Below is the file. Here is why I think it took so long. I have two USB Hard Drives that I use to automaically back up the C:drive on a regular basis. These drives have various backups, many of which I should toss out, but have not done so, since I never (amost) access them. So you will see in the log a lot of reference to G: and H; drives. I expect we should disragard any duplicte files on those drives, and just concentrate on C: Anyway, because of my wierd configuration and how I backup, this might be a horrendus clean-up task. Basically what I do is an incremental backup of my C: drive each night at 2:00 am on to the H:drive. (But, note that I never create a backup file with a .bak extenseion.) The G: drive is not written anymore, and I just keep it around because it has some very old files I did n ot want to trash. Please take a look, and if you think I am beyond help, let me know. I could disconnect the G: and H; drives and redo the AWF.txt, if that would simplify this analysis. Thanks, I really appreciate your help. Ron Cobb ——————————– Find AWF report by noahdfear ©2006 Version 1.40 The current date is: Fri 12/21/2007 The current time is: 9:46:46.43 bak folders found ~~~~~~~~~~~ Directory of C:\HP\KBD\BAK 02/11/2003 11:02 PM 61,440 KBD.EXE 1 File(s) 61,440 bytes Directory of C:\PROGRA~1\AMERIC~1.0A\BAK 07/12/2005 01:17 AM 50,776 AOL.EXE 09/19/2007 09:27 PM 24 shellmon.ph 2 File(s) 50,800 bytes Directory of C:\PROGRA~1\AOL9~1.0B\BAK 04/18/2007 02:49 AM 50,736 AOL.EXE 11/19/2007 09:12 AM 24 shellmon.ph 2 File(s) 50,760 bytes Directory of C:\PROGRA~1\LEXMAR~1\BAK 06/14/2001 12:42 PM 53,248 AcBtnMgr_X83.exe 10/18/2001 10:25 AM 40,960 ACMonitor_X83.exe 2 File(s) 94,208 bytes Directory of C:\PROGRA~1\MESSEN~1\BAK 0 File(s) 0 bytes Directory of C:\PROGRA~1\PICASA2\BAK 12/11/2006 08:36 PM 366,400 PicasaMediaDetector.exe 1 File(s) 366,400 bytes Directory of C:\PROGRA~1\QUICKT~1\BAK 09/02/2005 02:16 PM 98,304 qttask.exe 1 File(s) 98,304 bytes Directory of C:\WINDOWS\SMINST\BAK 09/14/2002 12:42 AM 212,992 RECGUARD.EXE 1 File(s) 212,992 bytes Directory of C:\WINDOWS\SYSTEM\BAK 11/26/2007 08:47 AM 183 hpsysdrv.DAT 05/07/1998 07:04 PM 52,736 hpsysdrv.exe 2 File(s) 52,919 bytes Directory of C:\WINDOWS\SYSTEM32\BAK 03/11/2003 08:11 PM 114,688 hkcmd.exe 07/31/2002 11:28 PM 81,920 ps2.exe 2 File(s) 196,608 bytes Directory of C:\PROGRA~1\BROADJ~1\CLIENT~1\BAK 0 File(s) 0 bytes Directory of C:\PROGRA~1\GOOGLE\GOOGLE~2\BAK 07/12/2007 10:13 PM 68,856 GoogleToolbarNotifier.exe 1 File(s) 68,856 bytes Directory of C:\PROGRA~1\HP\HPSOFT~1\BAK 09/13/2004 04:49 PM 49,152 HPWuSchd2.exe 1 File(s) 49,152 bytes Directory of C:\PROGRA~1\MCAFEE.COM\PERSON~1\BAK 04/12/2005 04:44 PM 1,187,899 MpfTray.exe 1 File(s) 1,187,899 bytes Directory of C:\PROGRA~1\PURENE~1\PORTMA~1\BAK 04/05/2004 05:33 PM 99,480 PortAOL.exe 1 File(s) 99,480 bytes Directory of C:\PROGRA~1\REAL\REALON~1\BAK 05/26/2006 08:21 AM 1,003,520 realplay.exe 1 File(s) 1,003,520 bytes Directory of C:\PROGRA~1\SCANSOFT\PAPERP~1\BAK 02/27/2003 02:40 AM 40,960 IndexSearch.exe 02/27/2003 02:12 AM 57,393 pptd40nt.exe 2 File(s) 98,353 bytes Directory of C:\PROGRA~1\SKYPE\PHONE\BAK 08/17/2007 03:45 AM 23,120,680 Skype.exe 1 File(s) 23,120,680 bytes Directory of C:\PROGRA~1\VERITA~1\UPDATE~1\BAK 06/18/2002 01:01 AM 155,648 sgtray.exe 1 File(s) 155,648 bytes Directory of C:\PROGRA~1\COMMON~1\AOL\ACS\BAK 10/23/2006 08:50 AM 71,216 AOLDial.exe 1 File(s) 71,216 bytes Directory of C:\PROGRA~1\COMMON~1\REAL\UPDATE~1\BAK 04/26/2003 02:30 AM 151,597 realsched.exe 1 File(s) 151,597 bytes Directory of C:\PROGRA~1\COMMON~1\AOL\112568~1\EE\BAK 09/25/2006 08:52 PM 50,736 AOLSoftware.exe 1 File(s) 50,736 bytes Directory of C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\BAK 10/25/2001 02:20 PM 36,864 printray.exe 1 File(s) 36,864 bytes Directory of G:\CDRIVE~1\HP\KBD\BAK 02/11/2003 11:02 PM 61,440 KBD.EXE 1 File(s) 61,440 bytes Directory of G:\CDRIVE~1\PROGRA~1\AMERIC~1.0A\BAK 07/12/2005 01:17 AM 50,776 AOL.EXE 09/19/2007 09:27 PM 24 shellmon.ph 2 File(s) 50,800 bytes Directory of G:\CDRIVE~1\PROGRA~1\AOL9~1.0B\BAK 04/18/2007 02:49 AM 50,736 AOL.EXE 11/19/2007 09:12 AM 24 shellmon.ph 2 File(s) 50,760 bytes Directory of G:\CDRIVE~1\PROGRA~1\LEXMAR~1\BAK 06/14/2001 12:42 PM 53,248 AcBtnMgr_X83.exe 10/18/2001 10:25 AM 40,960 ACMonitor_X83.exe 2 File(s) 94,208 bytes Directory of G:\CDRIVE~1\PROGRA~1\MESSEN~1\BAK 0 File(s) 0 bytes Directory of G:\CDRIVE~1\PROGRA~1\PICASA2\BAK 12/11/2006 08:36 PM 366,400 PicasaMediaDetector.exe 1 File(s) 366,400 bytes Directory of G:\CDRIVE~1\PROGRA~1\QUICKT~1\BAK 09/02/2005 02:16 PM 98,304 qttask.exe 1 File(s) 98,304 bytes Directory of G:\CDRIVE~1\WINDOWS\SMINST\BAK 09/14/2002 12:42 AM 212,992 RECGUARD.EXE 1 File(s) 212,992 bytes Directory of G:\CDRIVE~1\WINDOWS\SYSTEM\BAK 11/26/2007 08:47 AM 183 hpsysdrv.DAT 05/07/1998 07:04 PM 52,736 hpsysdrv.exe 2 File(s) 52,919 bytes Directory of G:\CDRIVE~1\WINDOWS\SYSTEM32\BAK 03/11/2003 08:11 PM 114,688 hkcmd.exe 07/31/2002 11:28 PM 81,920 ps2.exe 2 File(s) 196,608 bytes Directory of G:\CDRIVE~1\PROGRA~1\BROADJ~1\CLIENT~1\BAK 0 File(s) 0 bytes Directory of G:\CDRIVE~1\PROGRA~1\GOOGLE\GOOGLE~2\BAK 07/12/2007 10:13 PM 68,856 GoogleToolbarNotifier.exe 1 File(s) 68,856 bytes Directory of G:\CDRIVE~1\PROGRA~1\HP\HPSOFT~1\BAK 09/13/2004 04:49 PM 49,152 HPWuSchd2.exe 1 File(s) 49,152 bytes Directory of G:\CDRIVE~1\PROGRA~1\MCAFEE.COM\PERSON~1\BAK 04/12/2005 04:44 PM 1,187,899 MpfTray.exe 1 File(s) 1,187,899 bytes Directory of G:\CDRIVE~1\PROGRA~1\PURENE~1\PORTMA~1\BAK 04/05/2004 05:33 PM 99,480 PortAOL.exe 1 File(s) 99,480 bytes Directory of G:\CDRIVE~1\PROGRA~1\REAL\REALON~1\BAK 05/26/2006 08:21 AM 1,003,520 realplay.exe 1 File(s) 1,003,520 bytes Directory of G:\CDRIVE~1\PROGRA~1\SCANSOFT\PAPERP~1\BAK 02/27/2003 02:40 AM 40,960 IndexSearch.exe 02/27/2003 02:12 AM 57,393 pptd40nt.exe 2 File(s) 98,353 bytes Directory of G:\CDRIVE~1\PROGRA~1\SKYPE\PHONE\BAK 08/17/2007 03:45 AM 23,120,680 Skype.exe 1 File(s) 23,120,680 bytes Directory of G:\CDRIVE~1\PROGRA~1\VERITA~1\UPDATE~1\BAK 06/18/2002 01:01 AM 155,648 sgtray.exe 1 File(s) 155,648 bytes Directory of G:\CDRIVE~1\PROGRA~1\COMMON~1\AOL\ACS\BAK 10/23/2006 08:50 AM 71,216 AOLDial.exe 1 File(s) 71,216 bytes Directory of G:\CDRIVE~1\PROGRA~1\COMMON~1\REAL\UPDATE~1\BAK 04/26/2003 02:30 AM 151,597 realsched.exe 1 File(s) 151,597 bytes Directory of G:\CDRIVE~1\PROGRA~1\COMMON~1\AOL\112568~1\EE\BAK 09/25/2006 08:52 PM 50,736 AOLSoftware.exe 1 File(s) 50,736 bytes Directory of G:\FHCOBB~1.JPG\HPOMNI~1\PROGRA~1\SUPPORT.COM\BACKUP\PH\PHONEITL.BAK 11/14/2001 01:10 PM 542,231 1779648_5abe1c3b1_ 1 File(s) 542,231 bytes Directory of G:\CDRIVE~1\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\BAK 10/25/2001 02:20 PM 36,864 printray.exe 1 File(s) 36,864 bytes Directory of H:\RESTOR~1\HPOMNI~1\PROGRA~1\SUPPORT.COM\BACKUP\PH\PHONEITL.BAK 11/14/2001 12:10 PM 542,231 1779648_5abe1c3b1_ 1 File(s) 542,231 bytes Duplicate files of bak directory contents ~~~~~~~~~~~~~~~~~~~~~~~ 61440 Feb 11 2003 "C:\hp\KBD\bak\KBD.EXE" 61440 Feb 11 2003 "G:\C Drive Duplicate\hp\KBD\bak\KBD.EXE" 45125 Dec 18 2002 "C:\Program Files\America Online 8.0\aol.exe" 45140 Sep 24 2003 "C:\Program Files\America Online 9.0\aol.exe" 24576 Aug 27 1999 "C:\Program Files\America Online 5.0\aol.exe" 50736 Apr 18 2007 "C:\Program Files\AOL 9.0a\aol.exe" 50776 Jul 12 2005 "C:\Program Files\America Online 9.0a\bak\AOL.EXE" 50736 Apr 18 2007 "C:\Program Files\AOL 9.0b\bak\AOL.EXE" 45125 Dec 18 2002 "G:\C Drive Duplicate\Program Files\America Online 8.0\aol.exe" 45140 Sep 24 2003 "G:\C Drive Duplicate\Program Files\America Online 9.0\aol.exe" 24576 Aug 27 1999 "G:\C Drive Duplicate\Program Files\America Online 5.0\aol.exe" 50736 Apr 18 2007 "G:\C Drive Duplicate\Program Files\AOL 9.0a\aol.exe" 24576 Aug 27 1999 "G:\Old G Drive Restored Partial\May 19 Copy ofPavillion Drive C\America Online 5.0\aol.exe" 50776 Jul 12 2005 "G:\C Drive Duplicate\Program Files\America Online 9.0a\bak\AOL.EXE" 50736 Apr 18 2007 "G:\C Drive Duplicate\Program Files\AOL 9.0b\bak\AOL.EXE" 24576 Aug 27 1999 "G:\Backup Set A - C and G-1\1 Pavilion Backup Combined\May 19 Copy ofPavillion Drive C\America Online 5.0\aol.exe" 74 Sep 16 2007 "C:\Program Files\America Online 8.0\shellmon.ph" 24 Sep 11 2007 "C:\Program Files\America Online 9.0a\shellmon.ph" 24 Sep 19 2007 "C:\Program Files\America Online 9.0\shellmon.ph" 24 Sep 16 2007 "C:\Program Files\AOL 9.0a\shellmon.ph" 24 Sep 16 2007 "C:\Program Files\AOL 9.0b\shellmon.ph" 24 Sep 19 2007 "C:\Program Files\America Online 9.0a\bak\shellmon.ph" 24 Nov 19 2007 "C:\Program Files\AOL 9.0b\bak\shellmon.ph" 1693 Oct 21 2007 "C:\Documents and Settings\All Users\Application Data\AOL\C_America Online 9.0\shellmon.ph" 1646 Sep 26 2007 "C:\Documents and Settings\All Users\Application Data\AOL\C_America Online 9.0a\shellmon.ph" 1634 Sep 24 2007 "C:\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.0a\shellmon.ph" 2402 Dec 14 2007 "C:\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.0b\shellmon.ph" 74 Sep 16 2007 "G:\C Drive Duplicate\Program Files\America Online 8.0\shellmon.ph" 24 Sep 11 2007 "G:\C Drive Duplicate\Program Files\America Online 9.0a\shellmon.ph" 24 Sep 19 2007 "G:\C Drive Duplicate\Program Files\America Online 9.0\shellmon.ph" 24 Sep 16 2007 "G:\C Drive Duplicate\Program Files\AOL 9.0a\shellmon.ph" 24 Sep 16 2007 "G:\C Drive Duplicate\Program Files\AOL 9.0b\shellmon.ph" 24 Sep 19 2007 "G:\C Drive Duplicate\Program Files\America Online 9.0a\bak\shellmon.ph" 24 Nov 19 2007 "G:\C Drive Duplicate\Program Files\AOL 9.0b\bak\shellmon.ph" 1693 Oct 21 2007 "G:\C Drive Duplicate\Documents and Settings\All Users\Application Data\AOL\C_America Online 9.0\shellmon.ph" 1646 Sep 26 2007 "G:\C Drive Duplicate\Documents and Settings\All Users\Application Data\AOL\C_America Online 9.0a\shellmon.ph" 1634 Sep 24 2007 "G:\C Drive Duplicate\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.0a\shellmon.ph" 4800 Dec 6 2007 "G:\C Drive Duplicate\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.0b\shellmon.ph" 45125 Dec 18 2002 "C:\Program Files\America Online 8.0\aol.exe" 45140 Sep 24 2003 "C:\Program Files\America Online 9.0\aol.exe" 24576 Aug 27 1999 "C:\Program Files\America Online 5.0\aol.exe" 50736 Apr 18 2007 "C:\Program Files\AOL 9.0a\aol.exe" 50776 Jul 12 2005 "C:\Program Files\America Online 9.0a\bak\AOL.EXE" 50736 Apr 18 2007 "C:\Program Files\AOL 9.0b\bak\AOL.EXE" 45125 Dec 18 2002 "G:\C Drive Duplicate\Program Files\America Online 8.0\aol.exe" 45140 Sep 24 2003 "G:\C Drive Duplicate\Program Files\America Online 9.0\aol.exe" 24576 Aug 27 1999 "G:\C Drive Duplicate\Program Files\America Online 5.0\aol.exe" 50736 Apr 18 2007 "G:\C Drive Duplicate\Program Files\AOL 9.0a\aol.exe" 24576 Aug 27 1999 "G:\Old G Drive Restored Partial\May 19 Copy ofPavillion Drive C\America Online 5.0\aol.exe" 50776 Jul 12 2005 "G:\C Drive Duplicate\Program Files\America Online 9.0a\bak\AOL.EXE" 50736 Apr 18 2007 "G:\C Drive Duplicate\Program Files\AOL 9.0b\bak\AOL.EXE" 24576 Aug 27 1999 "G:\Backup Set A - C and G-1\1 Pavilion Backup Combined\May 19 Copy ofPavillion Drive C\America Online 5.0\aol.exe" 74 Sep 16 2007 "C:\Program Files\America Online 8.0\shellmon.ph" 24 Sep 11 2007 "C:\Program Files\America Online 9.0a\shellmon.ph" 24 Sep 19 2007 "C:\Program Files\America Online 9.0\shellmon.ph" 24 Sep 16 2007 "C:\Program Files\AOL 9.0a\shellmon.ph" 24 Sep 16 2007 "C:\Program Files\AOL 9.0b\shellmon.ph" 24 Sep 19 2007 "C:\Program Files\America Online 9.0a\bak\shellmon.ph" 24 Nov 19 2007 "C:\Program Files\AOL 9.0b\bak\shellmon.ph" 1693 Oct 21 2007 "C:\Documents and Settings\All Users\Application Data\AOL\C_America Online 9.0\shellmon.ph" 1646 Sep 26 2007 "C:\Documents and Settings\All Users\Application Data\AOL\C_America Online 9.0a\shellmon.ph" 1634 Sep 24 2007 "C:\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.0a\shellmon.ph" 2402 Dec 14 2007 "C:\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.0b\shellmon.ph" 74 Sep 16 2007 "G:\C Drive Duplicate\Program Files\America Online 8.0\shellmon.ph" 24 Sep 11 2007 "G:\C Drive Duplicate\Program Files\America Online 9.0a\shellmon.ph" 24 Sep 19 2007 "G:\C Drive Duplicate\Program Files\America Online 9.0\shellmon.ph" 24 Sep 16 2007 "G:\C Drive Duplicate\Program Files\AOL 9.0a\shellmon.ph" 24 Sep 16 2007 "G:\C Drive Duplicate\Program Files\AOL 9.0b\shellmon.ph" 24 Sep 19 2007 "G:\C Drive Duplicate\Program Files\America Online 9.0a\bak\shellmon.ph" 24 Nov 19 2007 "G:\C Drive Duplicate\Program Files\AOL 9.0b\bak\shellmon.ph" 1693 Oct 21 2007 "G:\C Drive Duplicate\Documents and Settings\All Users\Application Data\AOL\C_America Online 9.0\shellmon.ph" 1646 Sep 26 2007 "G:\C Drive Duplicate\Documents and Settings\All Users\Application Data\AOL\C_America Online 9.0a\shellmon.ph" 1634 Sep 24 2007 "G:\C Drive Duplicate\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.0a\shellmon.ph" 4800 Dec 6 2007 "G:\C Drive Duplicate\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.0b\shellmon.ph" 53248 Jun 14 2001 "C:\Program Files\LexmarkX83\bak\AcBtnMgr_X83.exe" 53248 Jun 14 2001 "G:\C Drive Duplicate\Program Files\LexmarkX83\bak\AcBtnMgr_X83.exe" 40960 Oct 18 2001 "C:\Program Files\LexmarkX83\bak\ACMonitor_X83.exe" 40960 Oct 18 2001 "G:\C Drive Duplicate\Program Files\LexmarkX83\bak\ACMonitor_X83.exe" 591416 Sep 27 2007 "C:\Program Files\Picasa2\PicasaUpdate.exe" 366400 Dec 11 2006 "C:\Program Files\Picasa2\bak\PicasaMediaDetector.exe" 665160 Sep 27 2007 "C:\Program Files\Picasa2\cdautorun\PicasaRestore.exe" 591416 Sep 27 2007 "G:\C Drive Duplicate\Program Files\Picasa2\PicasaUpdate.exe" 366400 Dec 11 2006 "G:\C Drive Duplicate\Program Files\Picasa2\bak\PicasaMediaDetector.exe" 665160 Sep 27 2007 "G:\C Drive Duplicate\Program Files\Picasa2\cdautorun\PicasaRestore.exe" 98304 Sep 2 2005 "C:\Program Files\QuickTime\bak\qttask.exe" 98304 Sep 2 2005 "G:\C Drive Duplicate\Program Files\QuickTime\bak\qttask.exe" 212992 Sep 14 2002 "C:\WINDOWS\SMINST\bak\RECGUARD.EXE" 212992 Sep 14 2002 "G:\C Drive Duplicate\WINDOWS\SMINST\bak\RECGUARD.EXE" 199 Sep 16 2003 "C:\WINDOWS\system\hpsysdrv.DAT" 183 Nov 26 2007 "C:\WINDOWS\system\bak\hpsysdrv.DAT" 199 Sep 16 2003 "G:\C Drive Duplicate\WINDOWS\system\hpsysdrv.DAT" 183 Nov 26 2007 "G:\C Drive Duplicate\WINDOWS\system\bak\hpsysdrv.DAT" 52736 May 7 1998 "C:\WINDOWS\system\bak\hpsysdrv.exe" 52736 May 7 1998 "G:\C Drive Duplicate\WINDOWS\system\bak\hpsysdrv.exe" 114688 Mar 11 2003 "C:\WINDOWS\system32\bak\hkcmd.exe" 114688 Mar 11 2003 "C:\hp\drivers\video\865\hkcmd.exe" 114688 Mar 11 2003 "C:\WINDOWS\system32\ReinstallBackups\0002\DriverFiles\hkcmd.exe" 114688 Mar 11 2003 "G:\C Drive Duplicate\WINDOWS\system32\bak\hkcmd.exe" 114688 Mar 11 2003 "G:\C Drive Duplicate\hp\drivers\video\865\hkcmd.exe" 114688 Mar 11 2003 "G:\C Drive Duplicate\WINDOWS\system32\ReinstallBackups\0002\DriverFiles\hkcmd.exe" 81920 Jul 31 2002 "C:\hp\drivers\keyboard\PS2.EXE" 81920 Jul 31 2002 "C:\WINDOWS\system32\bak\ps2.exe" 81920 Jul 31 2002 "G:\C Drive Duplicate\hp\drivers\keyboard\PS2.EXE" 81920 Jul 31 2002 "G:\C Drive Duplicate\WINDOWS\system32\bak\ps2.exe" 52272 Nov 16 2007 "C:\Program Files\Google\googletoolbar1user.exe" 441088 Nov 17 2003 "C:\Program Files\America Online 5.0\download\GoogleToolbarInstaller.exe" 69632 May 24 2007 "C:\Program Files\Google\Google Earth\googleearth.exe" 126136 Nov 16 2007 "C:\Program Files\Google\Google Updater\GoogleUpdater.exe" 138680 Nov 16 2007 "C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe" 68856 Jul 12 2007 "C:\Program Files\Google\GoogleToolbarNotifier\bak\GoogleToolbarNotifier.exe" 126136 Nov 16 2007 "C:\Program Files\Google\Google Updater\2.2.969.23408\GoogleUpdaterRestartManager.exe" 26694 Jul 15 2007 "C:\Documents and Settings\Owner\Application Data\Microsoft\Installer\{407B9B5C-DAC5-4F44-A756-B57CAB4E6A8B}\googleearth.exe_407B9B5CDAC54F44A756B57CAB4E6A8B.exe" 52272 Nov 16 2007 "G:\C Drive Duplicate\Program Files\Google\googletoolbar1user.exe" 441088 Nov 17 2003 "G:\C Drive Duplicate\Program Files\America Online 5.0\download\GoogleToolbarInstaller.exe" 69632 May 24 2007 "G:\C Drive Duplicate\Program Files\Google\Google Earth\googleearth.exe" 126136 Nov 16 2007 "G:\C Drive Duplicate\Program Files\Google\Google Updater\GoogleUpdater.exe" 441088 Nov 17 2003 "G:\Old G Drive Restored Partial\May 19 Copy ofPavillion Drive C\America Online 5.0\download\GoogleToolbarInstaller.exe" 138680 Nov 16 2007 "G:\C Drive Duplicate\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe" 68856 Jul 12 2007 "G:\C Drive Duplicate\Program Files\Google\GoogleToolbarNotifier\bak\GoogleToolbarNotifier.exe" 126136 Nov 16 2007 "G:\C Drive Duplicate\Program Files\Google\Google Updater\2.2.969.23408\GoogleUpdaterRestartManager.exe" 441088 Nov 17 2003 "G:\Backup Set A - C and G-1\1 Pavilion Backup Combined\May 19 Copy ofPavillion Drive C\America Online 5.0\download\GoogleToolbarInstaller.exe" 3832231 Sep 28 2002 "G:\Old G Drive Restored Partial\May 19 Copy ofPavillion Drive C\My Documents\Daniel\2002 Season\Google News 092802.EXE" 3832231 Sep 28 2002 "G:\Backup Set A - C and G-1\1 Pavilion Backup Combined\May 19 Copy ofPavillion Drive C\My Documents\Daniel\2002 Season\Google News 092802.EXE" 26694 Jul 15 2007 "G:\C Drive Duplicate\Documents and Settings\Owner\Application Data\Microsoft\Installer\{407B9B5C-DAC5-4F44-A756-B57CAB4E6A8B}\googleearth.exe_407B9B5CDAC54F44A756B57CAB4E6A8B.exe" 882512 Nov 16 2007 "G:\C Drive Duplicate\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\OR5BEI7P\Google Updater[1].exe" 49152 Sep 13 2004 "C:\Program Files\HP\HP Software Update\bak\HPWuSchd2.exe" 49152 Sep 13 2004 "G:\C Drive Duplicate\Program Files\HP\HP Software Update\bak\HPWuSchd2.exe" 1187899 Apr 12 2005 "C:\Program Files\McAfee.com\Personal Firewall\bak\MpfTray.exe" 1187899 Apr 12 2005 "G:\C Drive Duplicate\Program Files\McAfee.com\Personal Firewall\bak\MpfTray.exe" 99480 Apr 5 2004 "C:\Program Files\Pure Networks\Port Magic\bak\PortAOL.exe" 99480 Apr 5 2004 "G:\C Drive Duplicate\Program Files\Pure Networks\Port Magic\bak\PortAOL.exe" 1003520 May 26 2006 "C:\Program Files\Real\RealOne Player\bak\realplay.exe" 1003520 May 26 2006 "G:\C Drive Duplicate\Program Files\Real\RealOne Player\bak\realplay.exe" 19456 Sep 4 2001 "G:\Old G Drive Restored Partial\May 19 Copy ofPavillion Drive C\Program Files\Real\RealPlayer\realplay.exe" 19456 Sep 4 2001 "G:\Backup Set A - C and G-1\1 Pavilion Backup Combined\May 19 Copy ofPavillion Drive C\Program Files\Real\RealPlayer\realplay.exe" 40960 Feb 27 2003 "C:\Program Files\ScanSoft\PaperPort\bak\IndexSearch.exe" 40960 Feb 27 2003 "G:\C Drive Duplicate\Program Files\ScanSoft\PaperPort\bak\IndexSearch.exe" 57393 Feb 27 2003 "C:\Program Files\ScanSoft\PaperPort\bak\pptd40nt.exe" 57393 Feb 27 2003 "G:\C Drive Duplicate\Program Files\ScanSoft\PaperPort\bak\pptd40nt.exe" 29184 Apr 13 1999 "G:\Old G Drive Restored Partial\May 19 Copy ofPavillion Drive C\Program Files\Visioneer\PaperPort\Pptd40nt.exe" 29184 Apr 13 1999 "G:\Backup Set A - C and G-1\1 Pavilion Backup Combined\May 19 Copy ofPavillion Drive C\Program Files\Visioneer\PaperPort\Pptd40nt.exe" 23120680 Aug 17 2007 "C:\Program Files\Skype\Phone\bak\Skype.exe" 23120680 Aug 17 2007 "G:\C Drive Duplicate\Program Files\Skype\Phone\bak\Skype.exe" 155648 Jun 18 2002 "C:\Program Files\VERITAS Software\Update Manager\bak\sgtray.exe" 155648 Jun 18 2002 "G:\C Drive Duplicate\Program Files\VERITAS Software\Update Manager\bak\sgtray.exe" 71216 Oct 23 2006 "C:\Program Files\Common Files\AOL\ACS\bak\AOLDial.exe" 71216 Oct 23 2006 "G:\C Drive Duplicate\Program Files\Common Files\AOL\ACS\bak\AOLDial.exe" 151597 Apr 26 2003 "C:\Program Files\Common Files\Real\Update_OB\bak\realsched.exe" 151597 Apr 26 2003 "G:\C Drive Duplicate\Program Files\Common Files\Real\Update_OB\bak\realsched.exe" 50736 Sep 25 2006 "C:\Program Files\Common Files\AOL\1125684819\EE\AOLSoftware.exe1189973455" 50736 Sep 25 2006 "C:\Program Files\Common Files\AOL\1125684819\EE\bak\AOLSoftware.exe" 50736 Sep 25 2006 "G:\C Drive Duplicate\Program Files\Common Files\AOL\1125684819\EE\AOLSoftware.exe1189973455" 50736 Sep 25 2006 "G:\C Drive Duplicate\Program Files\Common Files\AOL\1125684819\EE\bak\AOLSoftware.exe" 36864 Oct 25 2001 "C:\WINDOWS\system32\spool\drivers\w32x86\lexmarklexmark_x83d8e5\printray.exe" 36864 Oct 25 2001 "C:\WINDOWS\system32\spool\drivers\w32x86\3\bak\printray.exe" 36864 Oct 25 2001 "G:\C Drive Duplicate\WINDOWS\system32\spool\drivers\w32x86\lexmarklexmark_x83d8e5\printray.exe" 36864 Oct 25 2001 "G:\C Drive Duplicate\WINDOWS\system32\spool\drivers\w32x86\3\bak\printray.exe" 61440 Feb 11 2003 "C:\hp\KBD\bak\KBD.EXE" 61440 Feb 11 2003 "G:\C Drive Duplicate\hp\KBD\bak\KBD.EXE" 45125 Dec 18 2002 "C:\Program Files\America Online 8.0\aol.exe" 45140 Sep 24 2003 "C:\Program Files\America Online 9.0\aol.exe" 24576 Aug 27 1999 "C:\Program Files\America Online 5.0\aol.exe" 50736 Apr 18 2007 "C:\Program Files\AOL 9.0a\aol.exe" 50776 Jul 12 2005 "C:\Program Files\America Online 9.0a\bak\AOL.EXE" 50736 Apr 18 2007 "C:\Program Files\AOL 9.0b\bak\AOL.EXE" 45125 Dec 18 2002 "G:\C Drive Duplicate\Program Files\America Online 8.0\aol.exe" 45140 Sep 24 2003 "G:\C Drive Duplicate\Program Files\America Online 9.0\aol.exe" 24576 Aug 27 1999 "G:\C Drive Duplicate\Program Files\America Online 5.0\aol.exe" 50736 Apr 18 2007 "G:\C Drive Duplicate\Program Files\AOL 9.0a\aol.exe" 24576 Aug 27 1999 "G:\Old G Drive Restored Partial\May 19 Copy ofPavillion Drive C\America Online 5.0\aol.exe" 50776 Jul 12 2005 "G:\C Drive Duplicate\Program Files\America Online 9.0a\bak\AOL.EXE" 50736 Apr 18 2007 "G:\C Drive Duplicate\Program Files\AOL 9.0b\bak\AOL.EXE" 24576 Aug 27 1999 "G:\Backup Set A - C and G-1\1 Pavilion Backup Combined\May 19 Copy ofPavillion Drive C\America Online 5.0\aol.exe" 74 Sep 16 2007 "C:\Program Files\America Online 8.0\shellmon.ph" 24 Sep 11 2007 "C:\Program Files\America Online 9.0a\shellmon.ph" 24 Sep 19 2007 "C:\Program Files\America Online 9.0\shellmon.ph" 24 Sep 16 2007 "C:\Program Files\AOL 9.0a\shellmon.ph" 24 Sep 16 2007 "C:\Program Files\AOL 9.0b\shellmon.ph" 24 Sep 19 2007 "C:\Program Files\America Online 9.0a\bak\shellmon.ph" 24 Nov 19 2007 "C:\Program Files\AOL 9.0b\bak\shellmon.ph" 1693 Oct 21 2007 "C:\Documents and Settings\All Users\Application Data\AOL\C_America Online 9.0\shellmon.ph" 1646 Sep 26 2007 "C:\Documents and Settings\All Users\Application Data\AOL\C_America Online 9.0a\shellmon.ph" 1634 Sep 24 2007 "C:\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.0a\shellmon.ph" 2402 Dec 14 2007 "C:\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.0b\shellmon.ph" 74 Sep 16 2007 "G:\C Drive Duplicate\Program Files\America Online 8.0\shellmon.ph" 24 Sep 11 2007 "G:\C Drive Duplicate\Program Files\America Online 9.0a\shellmon.ph" 24 Sep 19 2007 "G:\C Drive Duplicate\Program Files\America Online 9.0\shellmon.ph" 24 Sep 16 2007 "G:\C Drive Duplicate\Program Files\AOL 9.0a\shellmon.ph" 24 Sep 16 2007 "G:\C Drive Duplicate\Program Files\AOL 9.0b\shellmon.ph" 24 Sep 19 2007 "G:\C Drive Duplicate\Program Files\America Online 9.0a\bak\shellmon.ph" 24 Nov 19 2007 "G:\C Drive Duplicate\Program Files\AOL 9.0b\bak\shellmon.ph" 1693 Oct 21 2007 "G:\C Drive Duplicate\Documents and Settings\All Users\Application Data\AOL\C_America Online 9.0\shellmon.ph" 1646 Sep 26 2007 "G:\C Drive Duplicate\Documents and Settings\All Users\Application Data\AOL\C_America Online 9.0a\shellmon.ph" 1634 Sep 24 2007 "G:\C Drive Duplicate\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.0a\shellmon.ph" 4800 Dec 6 2007 "G:\C Drive Duplicate\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.0b\shellmon.ph" 45125 Dec 18 2002 "C:\Program Files\America Online 8.0\aol.exe" 45140 Sep 24 2003 "C:\Program Files\America Online 9.0\aol.exe" 24576 Aug 27 1999 "C:\Program Files\America Online 5.0\aol.exe" 50736 Apr 18 2007 "C:\Program Files\AOL 9.0a\aol.exe" 50776 Jul 12 2005 "C:\Program Files\America Online 9.0a\bak\AOL.EXE" 50736 Apr 18 2007 "C:\Program Files\AOL 9.0b\bak\AOL.EXE" 45125 Dec 18 2002 "G:\C Drive Duplicate\Program Files\America Online 8.0\aol.exe" 45140 Sep 24 2003 "G:\C Drive Duplicate\Program Files\America Online 9.0\aol.exe" 24576 Aug 27 1999 "G:\C Drive Duplicate\Program Files\America Online 5.0\aol.exe" 50736 Apr 18 2007 "G:\C Drive Duplicate\Program Files\AOL 9.0a\aol.exe" 24576 Aug 27 1999 "G:\Old G Drive Restored Partial\May 19 Copy ofPavillion Drive C\America Online 5.0\aol.exe" 50776 Jul 12 2005 "G:\C Drive Duplicate\Program Files\America Online 9.0a\bak\AOL.EXE" 50736 Apr 18 2007 "G:\C Drive Duplicate\Program Files\AOL 9.0b\bak\AOL.EXE" 24576 Aug 27 1999 "G:\Backup Set A - C and G-1\1 Pavilion Backup Combined\May 19 Copy ofPavillion Drive C\America Online 5.0\aol.exe" 74 Sep 16 2007 "C:\Program Files\America Online 8.0\shellmon.ph" 24 Sep 11 2007 "C:\Program Files\America Online 9.0a\shellmon.ph" 24 Sep 19 2007 "C:\Program Files\America Online 9.0\shellmon.ph" 24 Sep 16 2007 "C:\Program Files\AOL 9.0a\shellmon.ph" 24 Sep 16 2007 "C:\Program Files\AOL 9.0b\shellmon.ph" 24 Sep 19 2007 "C:\Program Files\America Online 9.0a\bak\shellmon.ph" 24 Nov 19 2007 "C:\Program Files\AOL 9.0b\bak\shellmon.ph" 1693 Oct 21 2007 "C:\Documents and Settings\All Users\Application Data\AOL\C_America Online 9.0\shellmon.ph" 1646 Sep 26 2007 "C:\Documents and Settings\All Users\Application Data\AOL\C_America Online 9.0a\shellmon.ph" 1634 Sep 24 2007 "C:\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.0a\shellmon.ph" 2402 Dec 14 2007 "C:\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.0b\shellmon.ph" 74 Sep 16 2007 "G:\C Drive Duplicate\Program Files\America Online 8.0\shellmon.ph" 24 Sep 11 2007 "G:\C Drive Duplicate\Program Files\America Online 9.0a\shellmon.ph" 24 Sep 19 2007 "G:\C Drive Duplicate\Program Files\America Online 9.0\shellmon.ph" 24 Sep 16 2007 "G:\C Drive Duplicate\Program Files\AOL 9.0a\shellmon.ph" 24 Sep 16 2007 "G:\C Drive Duplicate\Program Files\AOL 9.0b\shellmon.ph" 24 Sep 19 2007 "G:\C Drive Duplicate\Program Files\America Online 9.0a\bak\shellmon.ph" 24 Nov 19 2007 "G:\C Drive Duplicate\Program Files\AOL 9.0b\bak\shellmon.ph" 1693 Oct 21 2007 "G:\C Drive Duplicate\Documents and Settings\All Users\Application Data\AOL\C_America Online 9.0\shellmon.ph" 1646 Sep 26 2007 "G:\C Drive Duplicate\Documents and Settings\All Users\Application Data\AOL\C_America Online 9.0a\shellmon.ph" 1634 Sep 24 2007 "G:\C Drive Duplicate\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.0a\shellmon.ph" 4800 Dec 6 2007 "G:\C Drive Duplicate\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.0b\shellmon.ph" 53248 Jun 14 2001 "C:\Program Files\LexmarkX83\bak\AcBtnMgr_X83.exe" 53248 Jun 14 2001 "G:\C Drive Duplicate\Program Files\LexmarkX83\bak\AcBtnMgr_X83.exe" 40960 Oct 18 2001 "C:\Program Files\LexmarkX83\bak\ACMonitor_X83.exe" 40960 Oct 18 2001 "G:\C Drive Duplicate\Program Files\LexmarkX83\bak\ACMonitor_X83.exe" 591416 Sep 27 2007 "C:\Program Files\Picasa2\PicasaUpdate.exe" 366400 Dec 11 2006 "C:\Program Files\Picasa2\bak\PicasaMediaDetector.exe" 665160 Sep 27 2007 "C:\Program Files\Picasa2\cdautorun\PicasaRestore.exe" 591416 Sep 27 2007 "G:\C Drive Duplicate\Program Files\Picasa2\PicasaUpdate.exe" 366400 Dec 11 2006 "G:\C Drive Duplicate\Program Files\Picasa2\bak\PicasaMediaDetector.exe" 665160 Sep 27 2007 "G:\C Drive Duplicate\Program Files\Picasa2\cdautorun\PicasaRestore.exe" 98304 Sep 2 2005 "C:\Program Files\QuickTime\bak\qttask.exe" 98304 Sep 2 2005 "G:\C Drive Duplicate\Program Files\QuickTime\bak\qttask.exe" 212992 Sep 14 2002 "C:\WINDOWS\SMINST\bak\RECGUARD.EXE" 212992 Sep 14 2002 "G:\C Drive Duplicate\WINDOWS\SMINST\bak\RECGUARD.EXE" 199 Sep 16 2003 "C:\WINDOWS\system\hpsysdrv.DAT" 183 Nov 26 2007 "C:\WINDOWS\system\bak\hpsysdrv.DAT" 199 Sep 16 2003 "G:\C Drive Duplicate\WINDOWS\system\hpsysdrv.DAT" 183 Nov 26 2007 "G:\C Drive Duplicate\WINDOWS\system\bak\hpsysdrv.DAT" 52736 May 7 1998 "C:\WINDOWS\system\bak\hpsysdrv.exe" 52736 May 7 1998 "G:\C Drive Duplicate\WINDOWS\system\bak\hpsysdrv.exe" 114688 Mar 11 2003 "C:\WINDOWS\system32\bak\hkcmd.exe" 114688 Mar 11 2003 "C:\hp\drivers\video\865\hkcmd.exe" 114688 Mar 11 2003 "C:\WINDOWS\system32\ReinstallBackups\0002\DriverFiles\hkcmd.exe" 114688 Mar 11 2003 "G:\C Drive Duplicate\WINDOWS\system32\bak\hkcmd.exe" 114688 Mar 11 2003 "G:\C Drive Duplicate\hp\drivers\video\865\hkcmd.exe" 114688 Mar 11 2003 "G:\C Drive Duplicate\WINDOWS\system32\ReinstallBackups\0002\DriverFiles\hkcmd.exe" 81920 Jul 31 2002 "C:\hp\drivers\keyboard\PS2.EXE" 81920 Jul 31 2002 "C:\WINDOWS\system32\bak\ps2.exe" 81920 Jul 31 2002 "G:\C Drive Duplicate\hp\drivers\keyboard\PS2.EXE" 81920 Jul 31 2002 "G:\C Drive Duplicate\WINDOWS\system32\bak\ps2.exe" 52272 Nov 16 2007 "C:\Program Files\Google\googletoolbar1user.exe" 441088 Nov 17 2003 "C:\Program Files\America Online 5.0\download\GoogleToolbarInstaller.exe" 69632 May 24 2007 "C:\Program Files\Google\Google Earth\googleearth.exe" 126136 Nov 16 2007 "C:\Program Files\Google\Google Updater\GoogleUpdater.exe" 138680 Nov 16 2007 "C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe" 68856 Jul 12 2007 "C:\Program Files\Google\GoogleToolbarNotifier\bak\GoogleToolbarNotifier.exe" 126136 Nov 16 2007 "C:\Program Files\Google\Google Updater\2.2.969.23408\GoogleUpdaterRestartManager.exe" 26694 Jul 15 2007 "C:\Documents and Settings\Owner\Application Data\Microsoft\Installer\{407B9B5C-DAC5-4F44-A756-B57CAB4E6A8B}\googleearth.exe_407B9B5CDAC54F44A756B57CAB4E6A8B.exe" 52272 Nov 16 2007 "G:\C Drive Duplicate\Program Files\Google\googletoolbar1user.exe" 441088 Nov 17 2003 "G:\C Drive Duplicate\Program Files\America Online 5.0\download\GoogleToolbarInstaller.exe" 69632 May 24 2007 "G:\C Drive Duplicate\Program Files\Google\Google Earth\googleearth.exe" 126136 Nov 16 2007 "G:\C Drive Duplicate\Program Files\Google\Google Updater\GoogleUpdater.exe" 441088 Nov 17 2003 "G:\Old G Drive Restored Partial\May 19 Copy ofPavillion Drive C\America Online 5.0\download\GoogleToolbarInstaller.exe" 138680 Nov 16 2007 "G:\C Drive Duplicate\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe" 68856 Jul 12 2007 "G:\C Drive Duplicate\Program Files\Google\GoogleToolbarNotifier\bak\GoogleToolbarNotifier.exe" 126136 Nov 16 2007 "G:\C Drive Duplicate\Program Files\Google\Google Updater\2.2.969.23408\GoogleUpdaterRestartManager.exe" 441088 Nov 17 2003 "G:\Backup Set A - C and G-1\1 Pavilion Backup Combined\May 19 Copy ofPavillion Drive C\America Online 5.0\download\GoogleToolbarInstaller.exe" 3832231 Sep 28 2002 "G:\Old G Drive Restored Partial\May 19 Copy ofPavillion Drive C\My Documents\Daniel\2002 Season\Google News 092802.EXE" 3832231 Sep 28 2002 "G:\Backup Set A - C and G-1\1 Pavilion Backup Combined\May 19 Copy ofPavillion Drive C\My Documents\Daniel\2002 Season\Google News 092802.EXE" 26694 Jul 15 2007 "G:\C Drive Duplicate\Documents and Settings\Owner\Application Data\Microsoft\Installer\{407B9B5C-DAC5-4F44-A756-B57CAB4E6A8B}\googleearth.exe_407B9B5CDAC54F44A756B57CAB4E6A8B.exe" 882512 Nov 16 2007 "G:\C Drive Duplicate\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\OR5BEI7P\Google Updater[1].exe" 49152 Sep 13 2004 "C:\Program Files\HP\HP Software Update\bak\HPWuSchd2.exe" 49152 Sep 13 2004 "G:\C Drive Duplicate\Program Files\HP\HP Software Update\bak\HPWuSchd2.exe" 1187899 Apr 12 2005 "C:\Program Files\McAfee.com\Personal Firewall\bak\MpfTray.exe" 1187899 Apr 12 2005 "G:\C Drive Duplicate\Program Files\McAfee.com\Personal Firewall\bak\MpfTray.exe" 99480 Apr 5 2004 "C:\Program Files\Pure Networks\Port Magic\bak\PortAOL.exe" 99480 Apr 5 2004 "G:\C Drive Duplicate\Program Files\Pure Networks\Port Magic\bak\PortAOL.exe" 1003520 May 26 2006 "C:\Program Files\Real\RealOne Player\bak\realplay.exe" 1003520 May 26 2006 "G:\C Drive Duplicate\Program Files\Real\RealOne Player\bak\realplay.exe" 19456 Sep 4 2001 "G:\Old G Drive Restored Partial\May 19 Copy ofPavillion Drive C\Program Files\Real\RealPlayer\realplay.exe" 19456 Sep 4 2001 "G:\Backup Set A - C and G-1\1 Pavilion Backup Combined\May 19 Copy ofPavillion Drive C\Program Files\Real\RealPlayer\realplay.exe" 40960 Feb 27 2003 "C:\Program Files\ScanSoft\PaperPort\bak\IndexSearch.exe" 40960 Feb 27 2003 "G:\C Drive Duplicate\Program Files\ScanSoft\PaperPort\bak\IndexSearch.exe" 57393 Feb 27 2003 "C:\Program Files\ScanSoft\PaperPort\bak\pptd40nt.exe" 57393 Feb 27 2003 "G:\C Drive Duplicate\Program Files\ScanSoft\PaperPort\bak\pptd40nt.exe" 29184 Apr 13 1999 "G:\Old G Drive Restored Partial\May 19 Copy ofPavillion Drive C\Program Files\Visioneer\PaperPort\Pptd40nt.exe" 29184 Apr 13 1999 "G:\Backup Set A - C and G-1\1 Pavilion Backup Combined\May 19 Copy ofPavillion Drive C\Program Files\Visioneer\PaperPort\Pptd40nt.exe" 23120680 Aug 17 2007 "C:\Program Files\Skype\Phone\bak\Skype.exe" 23120680 Aug 17 2007 "G:\C Drive Duplicate\Program Files\Skype\Phone\bak\Skype.exe" 155648 Jun 18 2002 "C:\Program Files\VERITAS Software\Update Manager\bak\sgtray.exe" 155648 Jun 18 2002 "G:\C Drive Duplicate\Program Files\VERITAS Software\Update Manager\bak\sgtray.exe" 71216 Oct 23 2006 "C:\Program Files\Common Files\AOL\ACS\bak\AOLDial.exe" 71216 Oct 23 2006 "G:\C Drive Duplicate\Program Files\Common Files\AOL\ACS\bak\AOLDial.exe" 151597 Apr 26 2003 "C:\Program Files\Common Files\Real\Update_OB\bak\realsched.exe" 151597 Apr 26 2003 "G:\C Drive Duplicate\Program Files\Common Files\Real\Update_OB\bak\realsched.exe" 50736 Sep 25 2006 "C:\Program Files\Common Files\AOL\1125684819\EE\AOLSoftware.exe1189973455" 50736 Sep 25 2006 "C:\Program Files\Common Files\AOL\1125684819\EE\bak\AOLSoftware.exe" 50736 Sep 25 2006 "G:\C Drive Duplicate\Program Files\Common Files\AOL\1125684819\EE\AOLSoftware.exe1189973455" 50736 Sep 25 2006 "G:\C Drive Duplicate\Program Files\Common Files\AOL\1125684819\EE\bak\AOLSoftware.exe" 542231 Nov 14 2001 "G:\Backup Set A - C and G-1\HP Omnibook Files\Program Files\Support.com\backup\PH\phoneitl.bak\1779648_5abe1c3b1_" 542231 Nov 14 2001 "G:\Backup Set A - C and G-1\HP Omnibook Files\Program Files\Support.com\backup\PH\phoneitl.dms\1779648_5abe1c3b1_" 542231 Nov 14 2001 "H:\Restored Drive G partial\HP Omnibook Files\Program Files\Support.com\backup\PH\phoneitl.bak\1779648_5abe1c3b1_" 542231 Nov 14 2001 "H:\Restored Drive G partial\HP Omnibook Files\Program Files\Support.com\backup\PH\phoneitl.dms\1779648_5abe1c3b1_" 36864 Oct 25 2001 "C:\WINDOWS\system32\spool\drivers\w32x86\lexmarklexmark_x83d8e5\printray.exe" 36864 Oct 25 2001 "C:\WINDOWS\system32\spool\drivers\w32x86\3\bak\printray.exe" 36864 Oct 25 2001 "G:\C Drive Duplicate\WINDOWS\system32\spool\drivers\w32x86\lexmarklexmark_x83d8e5\printray.exe" 36864 Oct 25 2001 "G:\C Drive Duplicate\WINDOWS\system32\spool\drivers\w32x86\3\bak\printray.exe" 542231 Nov 14 2001 "G:\Backup Set A - C and G-1\HP Omnibook Files\Program Files\Support.com\backup\PH\phoneitl.bak\1779648_5abe1c3b1_" 542231 Nov 14 2001 "G:\Backup Set A - C and G-1\HP Omnibook Files\Program Files\Support.com\backup\PH\phoneitl.dms\1779648_5abe1c3b1_" 542231 Nov 14 2001 "H:\Restored Drive G partial\HP Omnibook Files\Program Files\Support.com\backup\PH\phoneitl.bak\1779648_5abe1c3b1_" 542231 Nov 14 2001 "H:\Restored Drive G partial\HP Omnibook Files\Program Files\Support.com\backup\PH\phoneitl.dms\1779648_5abe1c3b1_" end of report ————————————————————— Latest HiJackThis log: Find AWF report by noahdfear ©2006 Version 1.40 The current date is: Fri 12/21/2007 The current time is: 9:46:46.43 bak folders found ~~~~~~~~~~~ Directory of C:\HP\KBD\BAK 02/11/2003 11:02 PM 61,440 KBD.EXE 1 File(s) 61,440 bytes Directory of C:\PROGRA~1\AMERIC~1.0A\BAK 07/12/2005 01:17 AM 50,776 AOL.EXE 09/19/2007 09:27 PM 24 shellmon.ph 2 File(s) 50,800 bytes Directory of C:\PROGRA~1\AOL9~1.0B\BAK 04/18/2007 02:49 AM 50,736 AOL.EXE 11/19/2007 09:12 AM 24 shellmon.ph 2 File(s) 50,760 bytes Directory of C:\PROGRA~1\LEXMAR~1\BAK 06/14/2001 12:42 PM 53,248 AcBtnMgr_X83.exe 10/18/2001 10:25 AM 40,960 ACMonitor_X83.exe 2 File(s) 94,208 bytes Directory of C:\PROGRA~1\MESSEN~1\BAK 0 File(s) 0 bytes Directory of C:\PROGRA~1\PICASA2\BAK 12/11/2006 08:36 PM 366,400 PicasaMediaDetector.exe 1 File(s) 366,400 bytes Directory of C:\PROGRA~1\QUICKT~1\BAK 09/02/2005 02:16 PM 98,304 qttask.exe 1 File(s) 98,304 bytes Directory of C:\WINDOWS\SMINST\BAK 09/14/2002 12:42 AM 212,992 RECGUARD.EXE 1 File(s) 212,992 bytes Directory of C:\WINDOWS\SYSTEM\BAK 11/26/2007 08:47 AM 183 hpsysdrv.DAT 05/07/1998 07:04 PM 52,736 hpsysdrv.exe 2 File(s) 52,919 bytes Directory of C:\WINDOWS\SYSTEM32\BAK 03/11/2003 08:11 PM 114,688 hkcmd.exe 07/31/2002 11:28 PM 81,920 ps2.exe 2 File(s) 196,608 bytes Directory of C:\PROGRA~1\BROADJ~1\CLIENT~1\BAK 0 File(s) 0 bytes Directory of C:\PROGRA~1\GOOGLE\GOOGLE~2\BAK 07/12/2007 10:13 PM 68,856 GoogleToolbarNotifier.exe 1 File(s) 68,856 bytes Directory of C:\PROGRA~1\HP\HPSOFT~1\BAK 09/13/2004 04:49 PM 49,152 HPWuSchd2.exe 1 File(s) 49,152 bytes Directory of C:\PROGRA~1\MCAFEE.COM\PERSON~1\BAK 04/12/2005 04:44 PM 1,187,899 MpfTray.exe 1 File(s) 1,187,899 bytes Directory of C:\PROGRA~1\PURENE~1\PORTMA~1\BAK 04/05/2004 05:33 PM 99,480 PortAOL.exe 1 File(s) 99,480 bytes Directory of C:\PROGRA~1\REAL\REALON~1\BAK 05/26/2006 08:21 AM 1,003,520 realplay.exe 1 File(s) 1,003,520 bytes Directory of C:\PROGRA~1\SCANSOFT\PAPERP~1\BAK 02/27/2003 02:40 AM 40,960 IndexSearch.exe 02/27/2003 02:12 AM 57,393 pptd40nt.exe 2 File(s) 98,353 bytes Directory of C:\PROGRA~1\SKYPE\PHONE\BAK 08/17/2007 03:45 AM 23,120,680 Skype.exe 1 File(s) 23,120,680 bytes Directory of C:\PROGRA~1\VERITA~1\UPDATE~1\BAK 06/18/2002 01:01 AM 155,648 sgtray.exe 1 File(s) 155,648 bytes Directory of C:\PROGRA~1\COMMON~1\AOL\ACS\BAK 10/23/2006 08:50 AM 71,216 AOLDial.exe 1 File(s) 71,216 bytes Directory of C:\PROGRA~1\COMMON~1\REAL\UPDATE~1\BAK 04/26/2003 02:30 AM 151,597 realsched.exe 1 File(s) 151,597 bytes Directory of C:\PROGRA~1\COMMON~1\AOL\112568~1\EE\BAK 09/25/2006 08:52 PM 50,736 AOLSoftware.exe 1 File(s) 50,736 bytes Directory of C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\BAK 10/25/2001 02:20 PM 36,864 printray.exe 1 File(s) 36,864 bytes Directory of G:\CDRIVE~1\HP\KBD\BAK 02/11/2003 11:02 PM 61,440 KBD.EXE 1 File(s) 61,440 bytes Directory of G:\CDRIVE~1\PROGRA~1\AMERIC~1.0A\BAK 07/12/2005 01:17 AM 50,776 AOL.EXE 09/19/2007 09:27 PM 24 shellmon.ph 2 File(s) 50,800 bytes Directory of G:\CDRIVE~1\PROGRA~1\AOL9~1.0B\BAK 04/18/2007 02:49 AM 50,736 AOL.EXE 11/19/2007 09:12 AM 24 shellmon.ph 2 File(s) 50,760 bytes Directory of G:\CDRIVE~1\PROGRA~1\LEXMAR~1\BAK 06/14/2001 12:42 PM 53,248 AcBtnMgr_X83.exe 10/18/2001 10:25 AM 40,960 ACMonitor_X83.exe 2 File(s) 94,208 bytes Directory of G:\CDRIVE~1\PROGRA~1\MESSEN~1\BAK 0 File(s) 0 bytes Directory of G:\CDRIVE~1\PROGRA~1\PICASA2\BAK 12/11/2006 08:36 PM 366,400 PicasaMediaDetector.exe 1 File(s) 366,400 bytes Directory of G:\CDRIVE~1\PROGRA~1\QUICKT~1\BAK 09/02/2005 02:16 PM 98,304 qttask.exe 1 File(s) 98,304 bytes Directory of G:\CDRIVE~1\WINDOWS\SMINST\BAK 09/14/2002 12:42 AM 212,992 RECGUARD.EXE 1 File(s) 212,992 bytes Directory of G:\CDRIVE~1\WINDOWS\SYSTEM\BAK 11/26/2007 08:47 AM 183 hpsysdrv.DAT 05/07/1998 07:04 PM 52,736 hpsysdrv.exe 2 File(s) 52,919 bytes Directory of G:\CDRIVE~1\WINDOWS\SYSTEM32\BAK 03/11/2003 08:11 PM 114,688 hkcmd.exe 07/31/2002 11:28 PM 81,920 ps2.exe 2 File(s) 196,608 bytes Directory of G:\CDRIVE~1\PROGRA~1\BROADJ~1\CLIENT~1\BAK 0 File(s) 0 bytes Directory of G:\CDRIVE~1\PROGRA~1\GOOGLE\GOOGLE~2\BAK 07/12/2007 10:13 PM 68,856 GoogleToolbarNotifier.exe 1 File(s) 68,856 bytes Directory of G:\CDRIVE~1\PROGRA~1\HP\HPSOFT~1\BAK 09/13/2004 04:49 PM 49,152 HPWuSchd2.exe 1 File(s) 49,152 bytes Directory of G:\CDRIVE~1\PROGRA~1\MCAFEE.COM\PERSON~1\BAK 04/12/2005 04:44 PM 1,187,899 MpfTray.exe 1 File(s) 1,187,899 bytes Directory of G:\CDRIVE~1\PROGRA~1\PURENE~1\PORTMA~1\BAK 04/05/2004 05:33 PM 99,480 PortAOL.exe 1 File(s) 99,480 bytes Directory of G:\CDRIVE~1\PROGRA~1\REAL\REALON~1\BAK 05/26/2006 08:21 AM 1,003,520 realplay.exe 1 File(s) 1,003,520 bytes Directory of G:\CDRIVE~1\PROGRA~1\SCANSOFT\PAPERP~1\BAK 02/27/2003 02:40 AM 40,960 IndexSearch.exe 02/27/2003 02:12 AM 57,393 pptd40nt.exe 2 File(s) 98,353 bytes Directory of G:\CDRIVE~1\PROGRA~1\SKYPE\PHONE\BAK 08/17/2007 03:45 AM 23,120,680 Skype.exe 1 File(s) 23,120,680 bytes Directory of G:\CDRIVE~1\PROGRA~1\VERITA~1\UPDATE~1\BAK 06/18/2002 01:01 AM 155,648 sgtray.exe 1 File(s) 155,648 bytes Directory of G:\CDRIVE~1\PROGRA~1\COMMON~1\AOL\ACS\BAK 10/23/2006 08:50 AM 71,216 AOLDial.exe 1 File(s) 71,216 bytes Directory of G:\CDRIVE~1\PROGRA~1\COMMON~1\REAL\UPDATE~1\BAK 04/26/2003 02:30 AM 151,597 realsched.exe 1 File(s) 151,597 bytes Directory of G:\CDRIVE~1\PROGRA~1\COMMON~1\AOL\112568~1\EE\BAK 09/25/2006 08:52 PM 50,736 AOLSoftware.exe 1 File(s) 50,736 bytes Directory of G:\FHCOBB~1.JPG\HPOMNI~1\PROGRA~1\SUPPORT.COM\BACKUP\PH\PHONEITL.BAK 11/14/2001 01:10 PM 542,231 1779648_5abe1c3b1_ 1 File(s) 542,231 bytes Directory of G:\CDRIVE~1\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\BAK 10/25/2001 02:20 PM 36,864 printray.exe 1 File(s) 36,864 bytes Directory of H:\RESTOR~1\HPOMNI~1\PROGRA~1\SUPPORT.COM\BACKUP\PH\PHONEITL.BAK 11/14/2001 12:10 PM 542,231 1779648_5abe1c3b1_ 1 File(s) 542,231 bytes Duplicate files of bak directory contents ~~~~~~~~~~~~~~~~~~~~~~~ 61440 Feb 11 2003 "C:\hp\KBD\bak\KBD.EXE" 61440 Feb 11 2003 "G:\C Drive Duplicate\hp\KBD\bak\KBD.EXE" 45125 Dec 18 2002 "C:\Program Files\America Online 8.0\aol.exe" 45140 Sep 24 2003 "C:\Program Files\America Online 9.0\aol.exe" 24576 Aug 27 1999 "C:\Program Files\America Online 5.0\aol.exe" 50736 Apr 18 2007 "C:\Program Files\AOL 9.0a\aol.exe" 50776 Jul 12 2005 "C:\Program Files\America Online 9.0a\bak\AOL.EXE" 50736 Apr 18 2007 "C:\Program Files\AOL 9.0b\bak\AOL.EXE" 45125 Dec 18 2002 "G:\C Drive Duplicate\Program Files\America Online 8.0\aol.exe" 45140 Sep 24 2003 "G:\C Drive Duplicate\Program Files\America Online 9.0\aol.exe" 24576 Aug 27 1999 "G:\C Drive Duplicate\Program Files\America Online 5.0\aol.exe" 50736 Apr 18 2007 "G:\C Drive Duplicate\Program Files\AOL 9.0a\aol.exe" 24576 Aug 27 1999 "G:\Old G Drive Restored Partial\May 19 Copy ofPavillion Drive C\America Online 5.0\aol.exe" 50776 Jul 12 2005 "G:\C Drive Duplicate\Program Files\America Online 9.0a\bak\AOL.EXE" 50736 Apr 18 2007 "G:\C Drive Duplicate\Program Files\AOL 9.0b\bak\AOL.EXE" 24576 Aug 27 1999 "G:\Backup Set A - C and G-1\1 Pavilion Backup Combined\May 19 Copy ofPavillion Drive C\America Online 5.0\aol.exe" 74 Sep 16 2007 "C:\Program Files\America Online 8.0\shellmon.ph" 24 Sep 11 2007 "C:\Program Files\America Online 9.0a\shellmon.ph" 24 Sep 19 2007 "C:\Program Files\America Online 9.0\shellmon.ph" 24 Sep 16 2007 "C:\Program Files\AOL 9.0a\shellmon.ph" 24 Sep 16 2007 "C:\Program Files\AOL 9.0b\shellmon.ph" 24 Sep 19 2007 "C:\Program Files\America Online 9.0a\bak\shellmon.ph" 24 Nov 19 2007 "C:\Program Files\AOL 9.0b\bak\shellmon.ph" 1693 Oct 21 2007 "C:\Documents and Settings\All Users\Application Data\AOL\C_America Online 9.0\shellmon.ph" 1646 Sep 26 2007 "C:\Documents and Settings\All Users\Application Data\AOL\C_America Online 9.0a\shellmon.ph" 1634 Sep 24 2007 "C:\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.0a\shellmon.ph" 2402 Dec 14 2007 "C:\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.0b\shellmon.ph" 74 Sep 16 2007 "G:\C Drive Duplicate\Program Files\America Online 8.0\shellmon.ph" 24 Sep 11 2007 "G:\C Drive Duplicate\Program Files\America Online 9.0a\shellmon.ph" 24 Sep 19 2007 "G:\C Drive Duplicate\Program Files\America Online 9.0\shellmon.ph" 24 Sep 16 2007 "G:\C Drive Duplicate\Program Files\AOL 9.0a\shellmon.ph" 24 Sep 16 2007 "G:\C Drive Duplicate\Program Files\AOL 9.0b\shellmon.ph" 24 Sep 19 2007 "G:\C Drive Duplicate\Program Files\America Online 9.0a\bak\shellmon.ph" 24 Nov 19 2007 "G:\C Drive Duplicate\Program Files\AOL 9.0b\bak\shellmon.ph" 1693 Oct 21 2007 "G:\C Drive Duplicate\Documents and Settings\All Users\Application Data\AOL\C_America Online 9.0\shellmon.ph" 1646 Sep 26 2007 "G:\C Drive Duplicate\Documents and Settings\All Users\Application Data\AOL\C_America Online 9.0a\shellmon.ph" 1634 Sep 24 2007 "G:\C Drive Duplicate\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.0a\shellmon.ph" 4800 Dec 6 2007 "G:\C Drive Duplicate\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.0b\shellmon.ph" 45125 Dec 18 2002 "C:\Program Files\America Online 8.0\aol.exe" 45140 Sep 24 2003 "C:\Program Files\America Online 9.0\aol.exe" 24576 Aug 27 1999 "C:\Program Files\America Online 5.0\aol.exe" 50736 Apr 18 2007 "C:\Program Files\AOL 9.0a\aol.exe" 50776 Jul 12 2005 "C:\Program Files\America Online 9.0a\bak\AOL.EXE" 50736 Apr 18 2007 "C:\Program Files\AOL 9.0b\bak\AOL.EXE" 45125 Dec 18 2002 "G:\C Drive Duplicate\Program Files\America Online 8.0\aol.exe" 45140 Sep 24 2003 "G:\C Drive Duplicate\Program Files\America Online 9.0\aol.exe" 24576 Aug 27 1999 "G:\C Drive Duplicate\Program Files\America Online 5.0\aol.exe" 50736 Apr 18 2007 "G:\C Drive Duplicate\Program Files\AOL 9.0a\aol.exe" 24576 Aug 27 1999 "G:\Old G Drive Restored Partial\May 19 Copy ofPavillion Drive C\America Online 5.0\aol.exe" 50776 Jul 12 2005 "G:\C Drive Duplicate\Program Files\America Online 9.0a\bak\AOL.EXE" 50736 Apr 18 2007 "G:\C Drive Duplicate\Program Files\AOL 9.0b\bak\AOL.EXE" 24576 Aug 27 1999 "G:\Backup Set A - C and G-1\1 Pavilion Backup Combined\May 19 Copy ofPavillion Drive C\America Online 5.0\aol.exe" 74 Sep 16 2007 "C:\Program Files\America Online 8.0\shellmon.ph" 24 Sep 11 2007 "C:\Program Files\America Online 9.0a\shellmon.ph" 24 Sep 19 2007 "C:\Program Files\America Online 9.0\shellmon.ph" 24 Sep 16 2007 "C:\Program Files\AOL 9.0a\shellmon.ph" 24 Sep 16 2007 "C:\Program Files\AOL 9.0b\shellmon.ph" 24 Sep 19 2007 "C:\Program Files\America Online 9.0a\bak\shellmon.ph" 24 Nov 19 2007 "C:\Program Files\AOL 9.0b\bak\shellmon.ph" 1693 Oct 21 2007 "C:\Documents and Settings\All Users\Application Data\AOL\C_America Online 9.0\shellmon.ph" 1646 Sep 26 2007 "C:\Documents and Settings\All Users\Application Data\AOL\C_America Online 9.0a\shellmon.ph" 1634 Sep 24 2007 "C:\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.0a\shellmon.ph" 2402 Dec 14 2007 "C:\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.0b\shellmon.ph" 74 Sep 16 2007 "G:\C Drive Duplicate\Program Files\America Online 8.0\shellmon.ph" 24 Sep 11 2007 "G:\C Drive Duplicate\Program Files\America Online 9.0a\shellmon.ph" 24 Sep 19 2007 "G:\C Drive Duplicate\Program Files\America Online 9.0\shellmon.ph" 24 Sep 16 2007 "G:\C Drive Duplicate\Program Files\AOL 9.0a\shellmon.ph" 24 Sep 16 2007 "G:\C Drive Duplicate\Program Files\AOL 9.0b\shellmon.ph" 24 Sep 19 2007 "G:\C Drive Duplicate\Program Files\America Online 9.0a\bak\shellmon.ph" 24 Nov 19 2007 "G:\C Drive Duplicate\Program Files\AOL 9.0b\bak\shellmon.ph" 1693 Oct 21 2007 "G:\C Drive Duplicate\Documents and Settings\All Users\Application Data\AOL\C_America Online 9.0\shellmon.ph" 1646 Sep 26 2007 "G:\C Drive Duplicate\Documents and Settings\All Users\Application Data\AOL\C_America Online 9.0a\shellmon.ph" 1634 Sep 24 2007 "G:\C Drive Duplicate\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.0a\shellmon.ph" 4800 Dec 6 2007 "G:\C Drive Duplicate\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.0b\shellmon.ph" 53248 Jun 14 2001 "C:\Program Files\LexmarkX83\bak\AcBtnMgr_X83.exe" 53248 Jun 14 2001 "G:\C Drive Duplicate\Program Files\LexmarkX83\bak\AcBtnMgr_X83.exe" 40960 Oct 18 2001 "C:\Program Files\LexmarkX83\bak\ACMonitor_X83.exe" 40960 Oct 18 2001 "G:\C Drive Duplicate\Program Files\LexmarkX83\bak\ACMonitor_X83.exe" 591416 Sep 27 2007 "C:\Program Files\Picasa2\PicasaUpdate.exe" 366400 Dec 11 2006 "C:\Program Files\Picasa2\bak\PicasaMediaDetector.exe" 665160 Sep 27 2007 "C:\Program Files\Picasa2\cdautorun\PicasaRestore.exe" 591416 Sep 27 2007 "G:\C Drive Duplicate\Program Files\Picasa2\PicasaUpdate.exe" 366400 Dec 11 2006 "G:\C Drive Duplicate\Program Files\Picasa2\bak\PicasaMediaDetector.exe" 665160 Sep 27 2007 "G:\C Drive Duplicate\Program Files\Picasa2\cdautorun\PicasaRestore.exe" 98304 Sep 2 2005 "C:\Program Files\QuickTime\bak\qttask.exe" 98304 Sep 2 2005 "G:\C Drive Duplicate\Program Files\QuickTime\bak\qttask.exe" 212992 Sep 14 2002 "C:\WINDOWS\SMINST\bak\RECGUARD.EXE" 212992 Sep 14 2002 "G:\C Drive Duplicate\WINDOWS\SMINST\bak\RECGUARD.EXE" 199 Sep 16 2003 "C:\WINDOWS\system\hpsysdrv.DAT" 183 Nov 26 2007 "C:\WINDOWS\system\bak\hpsysdrv.DAT" 199 Sep 16 2003 "G:\C Drive Duplicate\WINDOWS\system\hpsysdrv.DAT" 183 Nov 26 2007 "G:\C Drive Duplicate\WINDOWS\system\bak\hpsysdrv.DAT" 52736 May 7 1998 "C:\WINDOWS\system\bak\hpsysdrv.exe" 52736 May 7 1998 "G:\C Drive Duplicate\WINDOWS\system\bak\hpsysdrv.exe" 114688 Mar 11 2003 "C:\WINDOWS\system32\bak\hkcmd.exe" 114688 Mar 11 2003 "C:\hp\drivers\video\865\hkcmd.exe" 114688 Mar 11 2003 "C:\WINDOWS\system32\ReinstallBackups\0002\DriverFiles\hkcmd.exe" 114688 Mar 11 2003 "G:\C Drive Duplicate\WINDOWS\system32\bak\hkcmd.exe" 114688 Mar 11 2003 "G:\C Drive Duplicate\hp\drivers\video\865\hkcmd.exe" 114688 Mar 11 2003 "G:\C Drive Duplicate\WINDOWS\system32\ReinstallBackups\0002\DriverFiles\hkcmd.exe" 81920 Jul 31 2002 "C:\hp\drivers\keyboard\PS2.EXE" 81920 Jul 31 2002 "C:\WINDOWS\system32\bak\ps2.exe" 81920 Jul 31 2002 "G:\C Drive Duplicate\hp\drivers\keyboard\PS2.EXE" 81920 Jul 31 2002 "G:\C Drive Duplicate\WINDOWS\system32\bak\ps2.exe" 52272 Nov 16 2007 "C:\Program Files\Google\googletoolbar1user.exe" 441088 Nov 17 2003 "C:\Program Files\America Online 5.0\download\GoogleToolbarInstaller.exe" 69632 May 24 2007 "C:\Program Files\Google\Google Earth\googleearth.exe" 126136 Nov 16 2007 "C:\Program Files\Google\Google Updater\GoogleUpdater.exe" 138680 Nov 16 2007 "C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe" 68856 Jul 12 2007 "C:\Program Files\Google\GoogleToolbarNotifier\bak\GoogleToolbarNotifier.exe" 126136 Nov 16 2007 "C:\Program Files\Google\Google Updater\2.2.969.23408\GoogleUpdaterRestartManager.exe" 26694 Jul 15 2007 "C:\Documents and Settings\Owner\Application Data\Microsoft\Installer\{407B9B5C-DAC5-4F44-A756-B57CAB4E6A8B}\googleearth.exe_407B9B5CDAC54F44A756B57CAB4E6A8B.exe" 52272 Nov 16 2007 "G:\C Drive Duplicate\Program Files\Google\googletoolbar1user.exe" 441088 Nov 17 2003 "G:\C Drive Duplicate\Program Files\America Online 5.0\download\GoogleToolbarInstaller.exe" 69632 May 24 2007 "G:\C Drive Duplicate\Program Files\Google\Google Earth\googleearth.exe" 126136 Nov 16 2007 "G:\C Drive Duplicate\Program Files\Google\Google Updater\GoogleUpdater.exe" 441088 Nov 17 2003 "G:\Old G Drive Restored Partial\May 19 Copy ofPavillion Drive C\America Online 5.0\download\GoogleToolbarInstaller.exe" 138680 Nov 16 2007 "G:\C Drive Duplicate\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe" 68856 Jul 12 2007 "G:\C Drive Duplicate\Program Files\Google\GoogleToolbarNotifier\bak\GoogleToolbarNotifier.exe" 126136 Nov 16 2007 "G:\C Drive Duplicate\Program Files\Google\Google Updater\2.2.969.23408\GoogleUpdaterRestartManager.exe" 441088 Nov 17 2003 "G:\Backup Set A - C and G-1\1 Pavilion Backup Combined\May 19 Copy ofPavillion Drive C\America Online 5.0\download\GoogleToolbarInstaller.exe" 3832231 Sep 28 2002 "G:\Old G Drive Restored Partial\May 19 Copy ofPavillion Drive C\My Documents\Daniel\2002 Season\Google News 092802.EXE" 3832231 Sep 28 2002 "G:\Backup Set A - C and G-1\1 Pavilion Backup Combined\May 19 Copy ofPavillion Drive C\My Documents\Daniel\2002 Season\Google News 092802.EXE" 26694 Jul 15 2007 "G:\C Drive Duplicate\Documents and Settings\Owner\Application Data\Microsoft\Installer\{407B9B5C-DAC5-4F44-A756-B57CAB4E6A8B}\googleearth.exe_407B9B5CDAC54F44A756B57CAB4E6A8B.exe" 882512 Nov 16 2007 "G:\C Drive Duplicate\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\OR5BEI7P\Google Updater[1].exe" 49152 Sep 13 2004 "C:\Program Files\HP\HP Software Update\bak\HPWuSchd2.exe" 49152 Sep 13 2004 "G:\C Drive Duplicate\Program Files\HP\HP Software Update\bak\HPWuSchd2.exe" 1187899 Apr 12 2005 "C:\Program Files\McAfee.com\Personal Firewall\bak\MpfTray.exe" 1187899 Apr 12 2005 "G:\C Drive Duplicate\Program Files\McAfee.com\Personal Firewall\bak\MpfTray.exe" 99480 Apr 5 2004 "C:\Program Files\Pure Networks\Port Magic\bak\PortAOL.exe" 99480 Apr 5 2004 "G:\C Drive Duplicate\Program Files\Pure Networks\Port Magic\bak\PortAOL.exe" 1003520 May 26 2006 "C:\Program Files\Real\RealOne Player\bak\realplay.exe" 1003520 May 26 2006 "G:\C Drive Duplicate\Program Files\Real\RealOne Player\bak\realplay.exe" 19456 Sep 4 2001 "G:\Old G Drive Restored Partial\May 19 Copy ofPavillion Drive C\Program Files\Real\RealPlayer\realplay.exe" 19456 Sep 4 2001 "G:\Backup Set A - C and G-1\1 Pavilion Backup Combined\May 19 Copy ofPavillion Drive C\Program Files\Real\RealPlayer\realplay.exe" 40960 Feb 27 2003 "C:\Program Files\ScanSoft\PaperPort\bak\IndexSearch.exe" 40960 Feb 27 2003 "G:\C Drive Duplicate\Program Files\ScanSoft\PaperPort\bak\IndexSearch.exe" 57393 Feb 27 2003 "C:\Program Files\ScanSoft\PaperPort\bak\pptd40nt.exe" 57393 Feb 27 2003 "G:\C Drive Duplicate\Program Files\ScanSoft\PaperPort\bak\pptd40nt.exe" 29184 Apr 13 1999 "G:\Old G Drive Restored Partial\May 19 Copy ofPavillion Drive C\Program Files\Visioneer\PaperPort\Pptd40nt.exe" 29184 Apr 13 1999 "G:\Backup Set A - C and G-1\1 Pavilion Backup Combined\May 19 Copy ofPavillion Drive C\Program Files\Visioneer\PaperPort\Pptd40nt.exe" 23120680 Aug 17 2007 "C:\Program Files\Skype\Phone\bak\Skype.exe" 23120680 Aug 17 2007 "G:\C Drive Duplicate\Program Files\Skype\Phone\bak\Skype.exe" 155648 Jun 18 2002 "C:\Program Files\VERITAS Software\Update Manager\bak\sgtray.exe" 155648 Jun 18 2002 "G:\C Drive Duplicate\Program Files\VERITAS Software\Update Manager\bak\sgtray.exe" 71216 Oct 23 2006 "C:\Program Files\Common Files\AOL\ACS\bak\AOLDial.exe" 71216 Oct 23 2006 "G:\C Drive Duplicate\Program Files\Common Files\AOL\ACS\bak\AOLDial.exe" 151597 Apr 26 2003 "C:\Program Files\Common Files\Real\Update_OB\bak\realsched.exe" 151597 Apr 26 2003 "G:\C Drive Duplicate\Program Files\Common Files\Real\Update_OB\bak\realsched.exe" 50736 Sep 25 2006 "C:\Program Files\Common Files\AOL\1125684819\EE\AOLSoftware.exe1189973455" 50736 Sep 25 2006 "C:\Program Files\Common Files\AOL\1125684819\EE\bak\AOLSoftware.exe" 50736 Sep 25 2006 "G:\C Drive Duplicate\Program Files\Common Files\AOL\1125684819\EE\AOLSoftware.exe1189973455" 50736 Sep 25 2006 "G:\C Drive Duplicate\Program Files\Common Files\AOL\1125684819\EE\bak\AOLSoftware.exe" 36864 Oct 25 2001 "C:\WINDOWS\system32\spool\drivers\w32x86\lexmarklexmark_x83d8e5\printray.exe" 36864 Oct 25 2001 "C:\WINDOWS\system32\spool\drivers\w32x86\3\bak\printray.exe" 36864 Oct 25 2001 "G:\C Drive Duplicate\WINDOWS\system32\spool\drivers\w32x86\lexmarklexmark_x83d8e5\printray.exe" 36864 Oct 25 2001 "G:\C Drive Duplicate\WINDOWS\system32\spool\drivers\w32x86\3\bak\printray.exe" 61440 Feb 11 2003 "C:\hp\KBD\bak\KBD.EXE" 61440 Feb 11 2003 "G:\C Drive Duplicate\hp\KBD\bak\KBD.EXE" 45125 Dec 18 2002 "C:\Program Files\America Online 8.0\aol.exe" 45140 Sep 24 2003 "C:\Program Files\America Online 9.0\aol.exe" 24576 Aug 27 1999 "C:\Program Files\America Online 5.0\aol.exe" 50736 Apr 18 2007 "C:\Program Files\AOL 9.0a\aol.exe" 50776 Jul 12 2005 "C:\Program Files\America Online 9.0a\bak\AOL.EXE" 50736 Apr 18 2007 "C:\Program Files\AOL 9.0b\bak\AOL.EXE" 45125 Dec 18 2002 "G:\C Drive Duplicate\Program Files\America Online 8.0\aol.exe" 45140 Sep 24 2003 "G:\C Drive Duplicate\Program Files\America Online 9.0\aol.exe" 24576 Aug 27 1999 "G:\C Drive Duplicate\Program Files\America Online 5.0\aol.exe" 50736 Apr 18 2007 "G:\C Drive Duplicate\Program Files\AOL 9.0a\aol.exe" 24576 Aug 27 1999 "G:\Old G Drive Restored Partial\May 19 Copy ofPavillion Drive C\America Online 5.0\aol.exe" 50776 Jul 12 2005 "G:\C Drive Duplicate\Program Files\America Online 9.0a\bak\AOL.EXE" 50736 Apr 18 2007 "G:\C Drive Duplicate\Program Files\AOL 9.0b\bak\AOL.EXE" 24576 Aug 27 1999 "G:\Backup Set A - C and G-1\1 Pavilion Backup Combined\May 19 Copy ofPavillion Drive C\America Online 5.0\aol.exe" 74 Sep 16 2007 "C:\Program Files\America Online 8.0\shellmon.ph" 24 Sep 11 2007 "C:\Program Files\America Online 9.0a\shellmon.ph" 24 Sep 19 2007 "C:\Program Files\America Online 9.0\shellmon.ph" 24 Sep 16 2007 "C:\Program Files\AOL 9.0a\shellmon.ph" 24 Sep 16 2007 "C:\Program Files\AOL 9.0b\shellmon.ph" 24 Sep 19 2007 "C:\Program Files\America Online 9.0a\bak\shellmon.ph" 24 Nov 19 2007 "C:\Program Files\AOL 9.0b\bak\shellmon.ph" 1693 Oct 21 2007 "C:\Documents and Settings\All Users\Application Data\AOL\C_America Online 9.0\shellmon.ph" 1646 Sep 26 2007 "C:\Documents and Settings\All Users\Application Data\AOL\C_America Online 9.0a\shellmon.ph" 1634 Sep 24 2007 "C:\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.0a\shellmon.ph" 2402 Dec 14 2007 "C:\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.0b\shellmon.ph" 74 Sep 16 2007 "G:\C Drive Duplicate\Program Files\America Online 8.0\shellmon.ph" 24 Sep 11 2007 "G:\C Drive Duplicate\Program Files\America Online 9.0a\shellmon.ph" 24 Sep 19 2007 "G:\C Drive Duplicate\Program Files\America Online 9.0\shellmon.ph" 24 Sep 16 2007 "G:\C Drive Duplicate\Program Files\AOL 9.0a\shellmon.ph" 24 Sep 16 2007 "G:\C Drive Duplicate\Program Files\AOL 9.0b\shellmon.ph" 24 Sep 19 2007 "G:\C Drive Duplicate\Program Files\America Online 9.0a\bak\shellmon.ph" 24 Nov 19 2007 "G:\C Drive Duplicate\Program Files\AOL 9.0b\bak\shellmon.ph" 1693 Oct 21 2007 "G:\C Drive Duplicate\Documents and Settings\All Users\Application Data\AOL\C_America Online 9.0\shellmon.ph" 1646 Sep 26 2007 "G:\C Drive Duplicate\Documents and Settings\All Users\Application Data\AOL\C_America Online 9.0a\shellmon.ph" 1634 Sep 24 2007 "G:\C Drive Duplicate\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.0a\shellmon.ph" 4800 Dec 6 2007 "G:\C Drive Duplicate\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.0b\shellmon.ph" 45125 Dec 18 2002 "C:\Program Files\America Online 8.0\aol.exe" 45140 Sep 24 2003 "C:\Program Files\America Online 9.0\aol.exe" 24576 Aug 27 1999 "C:\Program Files\America Online 5.0\aol.exe" 50736 Apr 18 2007 "C:\Program Files\AOL 9.0a\aol.exe" 50776 Jul 12 2005 "C:\Program Files\America Online 9.0a\bak\AOL.EXE" 50736 Apr 18 2007 "C:\Program Files\AOL 9.0b\bak\AOL.EXE" 45125 Dec 18 2002 "G:\C Drive Duplicate\Program Files\America Online 8.0\aol.exe" 45140 Sep 24 2003 "G:\C Drive Duplicate\Program Files\America Online 9.0\aol.exe" 24576 Aug 27 1999 "G:\C Drive Duplicate\Program Files\America Online 5.0\aol.exe" 50736 Apr 18 2007 "G:\C Drive Duplicate\Program Files\AOL 9.0a\aol.exe" 24576 Aug 27 1999 "G:\Old G Drive Restored Partial\May 19 Copy ofPavillion Drive C\America Online 5.0\aol.exe" 50776 Jul 12 2005 "G:\C Drive Duplicate\Program Files\America Online 9.0a\bak\AOL.EXE" 50736 Apr 18 2007 "G:\C Drive Duplicate\Program Files\AOL 9.0b\bak\AOL.EXE" 24576 Aug 27 1999 "G:\Backup Set A - C and G-1\1 Pavilion Backup Combined\May 19 Copy ofPavillion Drive C\America Online 5.0\aol.exe" 74 Sep 16 2007 "C:\Program Files\America Online 8.0\shellmon.ph" 24 Sep 11 2007 "C:\Program Files\America Online 9.0a\shellmon.ph" 24 Sep 19 2007 "C:\Program Files\America Online 9.0\shellmon.ph" 24 Sep 16 2007 "C:\Program Files\AOL 9.0a\shellmon.ph" 24 Sep 16 2007 "C:\Program Files\AOL 9.0b\shellmon.ph" 24 Sep 19 2007 "C:\Program Files\America Online 9.0a\bak\shellmon.ph" 24 Nov 19 2007 "C:\Program Files\AOL 9.0b\bak\shellmon.ph" 1693 Oct 21 2007 "C:\Documents and Settings\All Users\Application Data\AOL\C_America Online 9.0\shellmon.ph" 1646 Sep 26 2007 "C:\Documents and Settings\All Users\Application Data\AOL\C_America Online 9.0a\shellmon.ph" 1634 Sep 24 2007 "C:\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.0a\shellmon.ph" 2402 Dec 14 2007 "C:\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.0b\shellmon.ph" 74 Sep 16 2007 "G:\C Drive Duplicate\Program Files\America Online 8.0\shellmon.ph" 24 Sep 11 2007 "G:\C Drive Duplicate\Program Files\America Online 9.0a\shellmon.ph" 24 Sep 19 2007 "G:\C Drive Duplicate\Program Files\America Online 9.0\shellmon.ph" 24 Sep 16 2007 "G:\C Drive Duplicate\Program Files\AOL 9.0a\shellmon.ph" 24 Sep 16 2007 "G:\C Drive Duplicate\Program Files\AOL 9.0b\shellmon.ph" 24 Sep 19 2007 "G:\C Drive Duplicate\Program Files\America Online 9.0a\bak\shellmon.ph" 24 Nov 19 2007 "G:\C Drive Duplicate\Program Files\AOL 9.0b\bak\shellmon.ph" 1693 Oct 21 2007 "G:\C Drive Duplicate\Documents and Settings\All Users\Application Data\AOL\C_America Online 9.0\shellmon.ph" 1646 Sep 26 2007 "G:\C Drive Duplicate\Documents and Settings\All Users\Application Data\AOL\C_America Online 9.0a\shellmon.ph" 1634 Sep 24 2007 "G:\C Drive Duplicate\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.0a\shellmon.ph" 4800 Dec 6 2007 "G:\C Drive Duplicate\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.0b\shellmon.ph" 53248 Jun 14 2001 "C:\Program Files\LexmarkX83\bak\AcBtnMgr_X83.exe" 53248 Jun 14 2001 "G:\C Drive Duplicate\Program Files\LexmarkX83\bak\AcBtnMgr_X83.exe" 40960 Oct 18 2001 "C:\Program Files\LexmarkX83\bak\ACMonitor_X83.exe" 40960 Oct 18 2001 "G:\C Drive Duplicate\Program Files\LexmarkX83\bak\ACMonitor_X83.exe" 591416 Sep 27 2007 "C:\Program Files\Picasa2\PicasaUpdate.exe" 366400 Dec 11 2006 "C:\Program Files\Picasa2\bak\PicasaMediaDetector.exe" 665160 Sep 27 2007 "C:\Program Files\Picasa2\cdautorun\PicasaRestore.exe" 591416 Sep 27 2007 "G:\C Drive Duplicate\Program Files\Picasa2\PicasaUpdate.exe" 366400 Dec 11 2006 "G:\C Drive Duplicate\Program Files\Picasa2\bak\PicasaMediaDetector.exe" 665160 Sep 27 2007 "G:\C Drive Duplicate\Program Files\Picasa2\cdautorun\PicasaRestore.exe" 98304 Sep 2 2005 "C:\Program Files\QuickTime\bak\qttask.exe" 98304 Sep 2 2005 "G:\C Drive Duplicate\Program Files\QuickTime\bak\qttask.exe" 212992 Sep 14 2002 "C:\WINDOWS\SMINST\bak\RECGUARD.EXE" 212992 Sep 14 2002 "G:\C Drive Duplicate\WINDOWS\SMINST\bak\RECGUARD.EXE" 199 Sep 16 2003 "C:\WINDOWS\system\hpsysdrv.DAT" 183 Nov 26 2007 "C:\WINDOWS\system\bak\hpsysdrv.DAT" 199 Sep 16 2003 "G:\C Drive Duplicate\WINDOWS\system\hpsysdrv.DAT" 183 Nov 26 2007 "G:\C Drive Duplicate\WINDOWS\system\bak\hpsysdrv.DAT" 52736 May 7 1998 "C:\WINDOWS\system\bak\hpsysdrv.exe" 52736 May 7 1998 "G:\C Drive Duplicate\WINDOWS\system\bak\hpsysdrv.exe" 114688 Mar 11 2003 "C:\WINDOWS\system32\bak\hkcmd.exe" 114688 Mar 11 2003 "C:\hp\drivers\video\865\hkcmd.exe" 114688 Mar 11 2003 "C:\WINDOWS\system32\ReinstallBackups\0002\DriverFiles\hkcmd.exe" 114688 Mar 11 2003 "G:\C Drive Duplicate\WINDOWS\system32\bak\hkcmd.exe" 114688 Mar 11 2003 "G:\C Drive Duplicate\hp\drivers\video\865\hkcmd.exe" 114688 Mar 11 2003 "G:\C Drive Duplicate\WINDOWS\system32\ReinstallBackups\0002\DriverFiles\hkcmd.exe" 81920 Jul 31 2002 "C:\hp\drivers\keyboard\PS2.EXE" 81920 Jul 31 2002 "C:\WINDOWS\system32\bak\ps2.exe" 81920 Jul 31 2002 "G:\C Drive Duplicate\hp\drivers\keyboard\PS2.EXE" 81920 Jul 31 2002 "G:\C Drive Duplicate\WINDOWS\system32\bak\ps2.exe" 52272 Nov 16 2007 "C:\Program Files\Google\googletoolbar1user.exe" 441088 Nov 17 2003 "C:\Program Files\America Online 5.0\download\GoogleToolbarInstaller.exe" 69632 May 24 2007 "C:\Program Files\Google\Google Earth\googleearth.exe" 126136 Nov 16 2007 "C:\Program Files\Google\Google Updater\GoogleUpdater.exe" 138680 Nov 16 2007 "C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe" 68856 Jul 12 2007 "C:\Program Files\Google\GoogleToolbarNotifier\bak\GoogleToolbarNotifier.exe" 126136 Nov 16 2007 "C:\Program Files\Google\Google Updater\2.2.969.23408\GoogleUpdaterRestartManager.exe" 26694 Jul 15 2007 "C:\Documents and Settings\Owner\Application Data\Microsoft\Installer\{407B9B5C-DAC5-4F44-A756-B57CAB4E6A8B}\googleearth.exe_407B9B5CDAC54F44A756B57CAB4E6A8B.exe" 52272 Nov 16 2007 "G:\C Drive Duplicate\Program Files\Google\googletoolbar1user.exe" 441088 Nov 17 2003 "G:\C Drive Duplicate\Program Files\America Online 5.0\download\GoogleToolbarInstaller.exe" 69632 May 24 2007 "G:\C Drive Duplicate\Program Files\Google\Google Earth\googleearth.exe" 126136 Nov 16 2007 "G:\C Drive Duplicate\Program Files\Google\Google Updater\GoogleUpdater.exe" 441088 Nov 17 2003 "G:\Old G Drive Restored Partial\May 19 Copy ofPavillion Drive C\America Online 5.0\download\GoogleToolbarInstaller.exe" 138680 Nov 16 2007 "G:\C Drive Duplicate\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe" 68856 Jul 12 2007 "G:\C Drive Duplicate\Program Files\Google\GoogleToolbarNotifier\bak\GoogleToolbarNotifier.exe" 126136 Nov 16 2007 "G:\C Drive Duplicate\Program Files\Google\Google Updater\2.2.969.23408\GoogleUpdaterRestartManager.exe" 441088 Nov 17 2003 "G:\Backup Set A - C and G-1\1 Pavilion Backup Combined\May 19 Copy ofPavillion Drive C\America Online 5.0\download\GoogleToolbarInstaller.exe" 3832231 Sep 28 2002 "G:\Old G Drive Restored Partial\May 19 Copy ofPavillion Drive C\My Documents\Daniel\2002 Season\Google News 092802.EXE" 3832231 Sep 28 2002 "G:\Backup Set A - C and G-1\1 Pavilion Backup Combined\May 19 Copy ofPavillion Drive C\My Documents\Daniel\2002 Season\Google News 092802.EXE" 26694 Jul 15 2007 "G:\C Drive Duplicate\Documents and Settings\Owner\Application Data\Microsoft\Installer\{407B9B5C-DAC5-4F44-A756-B57CAB4E6A8B}\googleearth.exe_407B9B5CDAC54F44A756B57CAB4E6A8B.exe" 882512 Nov 16 2007 "G:\C Drive Duplicate\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\OR5BEI7P\Google Updater[1].exe" 49152 Sep 13 2004 "C:\Program Files\HP\HP Software Update\bak\HPWuSchd2.exe" 49152 Sep 13 2004 "G:\C Drive Duplicate\Program Files\HP\HP Software Update\bak\HPWuSchd2.exe" 1187899 Apr 12 2005 "C:\Program Files\McAfee.com\Personal Firewall\bak\MpfTray.exe" 1187899 Apr 12 2005 "G:\C Drive Duplicate\Program Files\McAfee.com\Personal Firewall\bak\MpfTray.exe" 99480 Apr 5 2004 "C:\Program Files\Pure Networks\Port Magic\bak\PortAOL.exe" 99480 Apr 5 2004 "G:\C Drive Duplicate\Program Files\Pure Networks\Port Magic\bak\PortAOL.exe" 1003520 May 26 2006 "C:\Program Files\Real\RealOne Player\bak\realplay.exe" 1003520 May 26 2006 "G:\C Drive Duplicate\Program Files\Real\RealOne Player\bak\realplay.exe" 19456 Sep 4 2001 "G:\Old G Drive Restored Partial\May 19 Copy ofPavillion Drive C\Program Files\Real\RealPlayer\realplay.exe" 19456 Sep 4 2001 "G:\Backup Set A - C and G-1\1 Pavilion Backup Combined\May 19 Copy ofPavillion Drive C\Program Files\Real\RealPlayer\realplay.exe" 40960 Feb 27 2003 "C:\Program Files\ScanSoft\PaperPort\bak\IndexSearch.exe" 40960 Feb 27 2003 "G:\C Drive Duplicate\Program Files\ScanSoft\PaperPort\bak\IndexSearch.exe" 57393 Feb 27 2003 "C:\Program Files\ScanSoft\PaperPort\bak\pptd40nt.exe" 57393 Feb 27 2003 "G:\C Drive Duplicate\Program Files\ScanSoft\PaperPort\bak\pptd40nt.exe" 29184 Apr 13 1999 "G:\Old G Drive Restored Partial\May 19 Copy ofPavillion Drive C\Program Files\Visioneer\PaperPort\Pptd40nt.exe" 29184 Apr 13 1999 "G:\Backup Set A - C and G-1\1 Pavilion Backup Combined\May 19 Copy ofPavillion Drive C\Program Files\Visioneer\PaperPort\Pptd40nt.exe" 23120680 Aug 17 2007 "C:\Program Files\Skype\Phone\bak\Skype.exe" 23120680 Aug 17 2007 "G:\C Drive Duplicate\Program Files\Skype\Phone\bak\Skype.exe" 155648 Jun 18 2002 "C:\Program Files\VERITAS Software\Update Manager\bak\sgtray.exe" 155648 Jun 18 2002 "G:\C Drive Duplicate\Program Files\VERITAS Software\Update Manager\bak\sgtray.exe" 71216 Oct 23 2006 "C:\Program Files\Common Files\AOL\ACS\bak\AOLDial.exe" 71216 Oct 23 2006 "G:\C Drive Duplicate\Program Files\Common Files\AOL\ACS\bak\AOLDial.exe" 151597 Apr 26 2003 "C:\Program Files\Common Files\Real\Update_OB\bak\realsched.exe" 151597 Apr 26 2003 "G:\C Drive Duplicate\Program Files\Common Files\Real\Update_OB\bak\realsched.exe" 50736 Sep 25 2006 "C:\Program Files\Common Files\AOL\1125684819\EE\AOLSoftware.exe1189973455" 50736 Sep 25 2006 "C:\Program Files\Common Files\AOL\1125684819\EE\bak\AOLSoftware.exe" 50736 Sep 25 2006 "G:\C Drive Duplicate\Program Files\Common Files\AOL\1125684819\EE\AOLSoftware.exe1189973455" 50736 Sep 25 2006 "G:\C Drive Duplicate\Program Files\Common Files\AOL\1125684819\EE\bak\AOLSoftware.exe" 542231 Nov 14 2001 "G:\Backup Set A - C and G-1\HP Omnibook Files\Program Files\Support.com\backup\PH\phoneitl.bak\1779648_5abe1c3b1_" 542231 Nov 14 2001 "G:\Backup Set A - C and G-1\HP Omnibook Files\Program Files\Support.com\backup\PH\phoneitl.dms\1779648_5abe1c3b1_" 542231 Nov 14 2001 "H:\Restored Drive G partial\HP Omnibook Files\Program Files\Support.com\backup\PH\phoneitl.bak\1779648_5abe1c3b1_" 542231 Nov 14 2001 "H:\Restored Drive G partial\HP Omnibook Files\Program Files\Support.com\backup\PH\phoneitl.dms\1779648_5abe1c3b1_" 36864 Oct 25 2001 "C:\WINDOWS\system32\spool\drivers\w32x86\lexmarklexmark_x83d8e5\printray.exe" 36864 Oct 25 2001 "C:\WINDOWS\system32\spool\drivers\w32x86\3\bak\printray.exe" 36864 Oct 25 2001 "G:\C Drive Duplicate\WINDOWS\system32\spool\drivers\w32x86\lexmarklexmark_x83d8e5\printray.exe" 36864 Oct 25 2001 "G:\C Drive Duplicate\WINDOWS\system32\spool\drivers\w32x86\3\bak\printray.exe" 542231 Nov 14 2001 "G:\Backup Set A - C and G-1\HP Omnibook Files\Program Files\Support.com\backup\PH\phoneitl.bak\1779648_5abe1c3b1_" 542231 Nov 14 2001 "G:\Backup Set A - C and G-1\HP Omnibook Files\Program Files\Support.com\backup\PH\phoneitl.dms\1779648_5abe1c3b1_" 542231 Nov 14 2001 "H:\Restored Drive G partial\HP Omnibook Files\Program Files\Support.com\backup\PH\phoneitl.bak\1779648_5abe1c3b1_" 542231 Nov 14 2001 "H:\Restored Drive G partial\HP Omnibook Files\Program Files\Support.com\backup\PH\phoneitl.dms\1779648_5abe1c3b1_" end of report

Hmm…! Im trying to think of the best way to play this, to save on running time. How about a back up on one drive, format the other then clean up C. Once it is clean, back it up? That's how we work Restore Points. It's always better to have an infected backup than no backup at all.

Hi Im a bit concerned that after we clean up the main drive you reconnect the others that may be infected and re-introduce the problem. Im going to make sure I have the right idea before we proceed, if you can bear with me a bit longer?

Hello How does this sound to you? The files you want to keep on the G drive. Can you back them up to the H drive, which only has an infected Restore Point? Before moving/copying the files you want to keep, do individual anti-virus scans on them, to make sure they are not infected. Once you have everything, format and disconnect the G drive, then we can proceed with the cleaning. Let me know if that sounds good to you?

Scotty, This will take me some time, so please bear with me. I have a lot of very old stuff on these disks, and need to go through all of it to purge what I don't need, toss out duplicates, etc. I will need to find a day in which I can concentrate on this alone - hopefully in a couple of days. On the G: and H: drives, which are the USB externals, I believe that they sometimes exchange designations (G and H) depending on which one I turn of first. How can I identify the one on which to consolodate everything and the one to reformat? Thanks, Ron Cobb

Hi Sorry for the delay in getting back to you. I think the option here is for you to back up what you need onto CD or something (no bak files) and leave the USB drives connected while we do the clean up. Let me know when you are ready to proceed.