What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

[Resolved] Problem with my task manager & regedit etc.

22 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #16
Lets run an F-Secure online scan it will scan for Viruses, Spyware and RootKits:
  • Click HERE
  • Scroll to the bottom of the page and click the Start scanning button. A window will pop up.
  • Allow the Active X control to be installed on your computer, then click the Accept button
  • Click Full System Scan and allow the components to download and the scan to complete.
  • If malware is found, check Submit samples to F-Secure then select Automatic cleaning
  • When cleaning has finitished, click Show report (this will open an Internet Explorer window containing the report)
  • Highlight and Copy (CTRL + C) the complete report, and Paste (CTRL + V) in a new reply to this post
If Automatic cleaning with Submit samples hangs, click Cancel, then New Scan
  • When the cleaning option is presented, Uncheck Submit samples to F-Secure
  • Click Automatic cleaning
  • When cleaning has finitished, click Show report (this will open an Internet Explorer window containing the report)
  • Highlight and Copy (CTRL + C) the complete report, and Paste (CTRL + V) in a new reply to this post

Note: This scan will only work with Internet Explorer.
You must be logged on a administrator rights to run this scan.
The scan may take a few hours.

Also let me know how the computer is running now.
Post #17
Thank you again. I will run the test, and I'll let you know tomorrow. It's getting late in Sweden and I have work tomorrow. But I wish you a nice day or evening!! /Triton
Post #19 last edited
Hello, This is the log from F-secure scan: Scanning Report Monday, April 14, 2008 18:39:04 - 21:35:49 Computer name: *******-RC Scanning type: Scan system for malware, rootkits Target: C:\ Result: 577 malware found Worm.VBS.Headtail (virus) * System Worm.VBS.Headtail.a (virus) * C:\ROGERCA.VBS * C:\WINDOWS\ROGERCA.VBS * C:\WINDOWS\SYSTEM32\ROGERCA.VBS * C:\PROGRAM FILES\AMOS\AMOS BUSINESS SUITE 8.6.X\ROGERCA.VBS (Renamed) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP_DE_DE\ODSSUPER_ATTRIBUTES.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP_DE_DE\ODSSUPER_CLASS_SELECTOR.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP_DE_DE\ODSTASKS_AND_THEIR_PANES.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP_DE_DE\ODSUNDERSTANDING_DIRECTORY_ENTRIES.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP_DE_DE\ODSUNDERSTANDING_DIRECTORY_SCHEMA.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP_DE_DE\ODSUNDERSTANDING_REPLICATION.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP_DE_DE\ODSUNDERSTANDING_SERVER_CONFIGURATI.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP_DE_DE\ODSUSERPREFS_CONFIGACPMANAGEMNT.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP_DE_DE\ODSUSERPREFS_CONFIGENTRYMANAGMNT.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP_DE_DE\ODSUSING_MENUS.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP_DE_DE\ODSUSING_PANES_AND_BUTTONS.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP_DE_DE\ODSUSING_THE_SEARCH_PANE.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP_DE_DE\ODSVIEWING_ACCESS_CONTROL_POLICIES.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP_DE_DE\ODSVIEWING_ACTIVE_INSTANCES.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP_DE_DE\ODSVIEWING_AND_CHANGING_OBJECT_CLAS.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP_DE_DE\ODSVIEWING_AN_APPLICATIONS_PASSWORD_VERIFIERS.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP_DE_DE\ODSVIEWING_ATTRIBUTES.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP_DE_DE\ODSVIEWING_ATTRIBUTE_TYPES.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP_DE_DE\ODSVIEWING_AUDIT_LOGS.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP_DE_DE\ODSVIEWING_CONFIGURATION_SET_ENTRIES.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP_DE_DE\ODSVIEWING_DIRECTORY_ENTRIES.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP_DE_DE\ODSVIEWING_MATCHING_RULES.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP_DE_DE\ODSVIEWING_REPLICATION_SERVERS.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP_DE_DE\ODSVIEWING_SERVER_ATTRIBUTES.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP_DE_DE\ODSVIEWING_SUBSCRIBERS_PASSWORD_POLICIES.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP_DE_DE\ODSVIEWING_SYSTEM_OPERATIONAL_ATTRIBUTES.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP_DE_DE\ODSVIEW_AUDIT_LOG_PROPERTIES.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP_DE_DE\ODSVIEW_CONFIGSET_GENERAL.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP_DE_DE\ODSVIEW_DRECTORY_SERVERS.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP_DE_DE\ODSVIEW_SSL_SETTINGS.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\CS_ODSINTEGRATION_SERVER__ACTIVE_PROCESSES.HTM (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\CS_ODSPASSWORD_POLICY_MANAGEMENT_WINDOW.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\CS_ODSPASSWORD_VERIFIER_MANAGEMENT.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\CS_ODSSTRUCTURAL_ACCESS_ITEM__ADDED_OBJECT_FILTER_TAB_PAGE.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\HH_NDX.HTM (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\HH_TOC.HTM (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\LOGFILE.HTM (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSACP_PANE.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSACP_WIZARD_CONTENT_ACCESS_ITEM2_DIALOG_BOX.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSACP_WIZARD_CONTENT_ACCESS_ITEM3_DIALOG_BOX.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSACP_WIZARD_CONTENT_ACCESS_ITEM4_DIALOG_BOX.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSACP_WIZARD_CONTENT_ACCESS_ITEM_DIALOG_BOX.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSACP_WIZARD_SPECIFYING_CONTENT_ACIS_FOR_A_SPECIFIC_ENTRY.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSACP_WIZARD_SPECIFYING_STRUCTURAL_ACCESS_ITEMS_FOR_A_SPECIFIC_ENTRY.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSACP_WIZARD_SPECIFYING_THE_SAME_CONTENT_ACIS_FOR_ALL_ENTRIES_UNDER_AN_ACP .HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSACP_WIZARD_SPECIFY_SAME_ACIS_BELOW_ACP.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSACP_WIZARD_STRUCTURAL_ACCESS_ITEM.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSACP_WIZARD_STRUCTURAL_ACCESS_ITEM3_DIALOG_BOX.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSACP_WIZARD_STRUCTURAL_ACCESS_ITEM_2.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSADDING_ACESS_CONTROL_POINTS.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSADDING_AN_ATTRIBUTE_OPTION_TO_AN_EXISTING_ENTRY.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSADDING_ATTRIBUTES.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSADDING_ATTRIBUTE_TYPES__BY_COPYI.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSADDING_CONFIGURATION_SET_ENTRIES.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSADDING_DIRECTORY_ENTRIES.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSADDING_ENTRIES_BY_COPYING.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSADDING_NEW_OBJECT_CLASSES.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSADDNEWOBJCLASS.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSATTRIBUTE_PROPERTIESGENERAL.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSATTRIBUTE_PROPERTIES_ADVANCED.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSAUDIT_LOG_MANAGEMENT.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSAUDIT_MASK_LEVELS.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSBASIC_CONCEPTS_BEHIND_THE_DIT.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSBROWSING_ACCESS_CONTROL_POLICY_P.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSBROWSING_DIRECTORY_INSTANCES.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSBROWSING_FOR_THE_ROOT_OF_A_SEARC.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSBROWSING_MATCHING_RULES.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSBROWSING_SYNTAXES.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSCHANGING_CONFIGURATION_SET_ENTRI.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSCONFIGSET_GENERAL.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSCONFIGURATION_SETS_INTEGRATION_PROFILES.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSCONFIGUREACPDISPLAY.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSCONFIGUREACPSEARCH.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSCONFIGUREENTRYSEARCH.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSCONFIGURING_PASSWORD_POLICIES.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSCONFIGURING_PASSWORD_PROTECTION.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSCONFIG_ACP_SEARCH.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSCONNECTING_TO_AN_ADDITIONAL_DIRECTORY_SERVER_AFTER_LOGIN.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSCONNECTING_TO_A_DIRECTORY_SERVER.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSCONTENT_ACCESS.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSCONTENT_ACCESS_ATTRIBUTE.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSCONTENT_ACCESS_BY_WHOM.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSCONTENT_ACCESS_RIGHTS.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSCREATING_ACPS_BY_USING_THE_ACP_WIZARD.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSCREATING_AN_ACCESS_CONTROL_POLICY_POINT.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSDEBUG_FLAGS.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSDELETE_BUTTON.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSDELETING_ACCESS_CONTROL_POLICY_POINTS.HTM (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSDELETING_ACCESS_CONTROL_POLICY_POINTS.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSDELETING_AN_ATTRIBUTE_OPTION.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSDELETING_ATTRIBUTES.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSDELETING_OBJECT_CLASSES.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSDIRECTORY_SERVER_CONNECTION.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSDISCONNECTING_FROM_A_DIRECTORY_SERVER.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSDROP_INDEX.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSENTRY_PROPERTIES.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSEXPANDING_HIDDEN_ITEMS.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSFINDING_THE_LAST_APPLIED_CHANGE_NUMBER.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSFIND_ATTRIBUTES.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSFIND_OBJECT_CLASSES.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSINTEGRATION_PROFILES_DIALOG_BOX.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSINTEGRATION_PROFILE_EXECUTION.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSINTEGRATION_PROFILE_GENERAL.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSINTEGRATION_PROFILE_MAPPING.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSINTEGRATION_PROFILE_STATUS.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSLOCAL_ACCESS.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSLOGGING_ON.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSMAKE_OPTIONAL.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSMANAGING_PASSWORD_POLICIES.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSMANDATORY_ATTRIBUTE_SELECTOR.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSMDFYOBJCLSS.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSMODIFYING_ACCESS_CONTROL_POINTS.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSMODIFYING_AN_ATTRIBUTE_OPTION.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSMODIFYING_ATTRIBUTE_TYPES.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSMODIFYING_A_SUBSCRIBERS_PASSWORD_POLICIES.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSMODIFYING_THE_DEFAULT_ACP.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSNEW_ACCESS_CONTROL_POINT.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSNEW_ENTRY.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSOPTIONAL_ATTRIBUTE_SELECTOR.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSPASSWORDS.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSPASSWORD_ENCRYPTION.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSPASSWORD_MANAGEMENT_TAB_PAGE.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSPASSWORD_POLICY_MANAGEMENT_WINDOW.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSPASSWORD_VERIFIER_PROFILE_DIALOG_BOX.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSPROPERTIES_ADVANCED.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSREGISTERING_A_DIRECTORY_INTEGRATION_AGENT.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSREPLICATION_AGREEMENT.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSREPLICATION_CONFIGSET_GENERAL.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSREPLICATION_DEBUG_FLAGS.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSREPLICATION_STATUS.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSSCHEMA_MNGMNT_OBJ_CLSSES.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSSCHEMA_MNGMNT_SYNTAXES.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSSEARCHING_FOR_ATTRIBUTES.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSSEARCHING_FOR_ENTRIES.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSSELECTING_A_DIRECTORY_SERVER.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSSELECT_DIRECTORY_SERVER.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSSELECT_DISTINGUISHED_NAME_PATH.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSSERVER_LIST.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSSERVER_LIST_TAB_PAGE.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSSETTING_SUPER_NAME_AND_PASSWORD.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSSETTING_THE_AUDIT_LEVEL.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSSETTING_THE_DEBUG_LOGGING_LEVEL.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSSSL_LOGIN.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSSSL_SETTINGS.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSSTARTING_THE_DIRECTORY_SERVER.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSSTRUCTURAL_ACCESS.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSSTRUCTURAL_ACCESS_BY_WHOM.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSSTRUCTURAL_ACCESS_ITEM__ADDED_OBJECT_FILTER_TAB_PAGE.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSSTRUCTURAL_ACCESS_RIGHTS.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSSUBTREE_ACCESS.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSSUPER_ATTRIBUTES.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSSUPER_CLASS_SELECTOR.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSTASKS_AND_THEIR_PANES.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSUNDERSTANDING_DIRECTORY_ENTRIES.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSUNDERSTANDING_DIRECTORY_SCHEMA.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSUNDERSTANDING_REPLICATION.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSUNDERSTANDING_SERVER_CONFIGURATI.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSUSERPREFS_CONFIGACPMANAGEMNT.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSUSERPREFS_CONFIGENTRYMANAGMNT.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSUSING_MENUS.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSUSING_PANES_AND_BUTTONS.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSUSING_THE_SEARCH_PANE.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSVIEWING_ACCESS_CONTROL_POLICIES.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSVIEWING_ACTIVE_INSTANCES.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSVIEWING_AND_CHANGING_OBJECT_CLAS.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSVIEWING_AN_APPLICATIONS_PASSWORD_VERIFIERS.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSVIEWING_ATTRIBUTES.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSVIEWING_ATTRIBUTE_TYPES.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSVIEWING_AUDIT_LOGS.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSVIEWING_CONFIGURATION_SET_ENTRIES.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSVIEWING_DIRECTORY_ENTRIES.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSVIEWING_MATCHING_RULES.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSVIEWING_REPLICATION_SERVERS.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSVIEWING_SERVER_ATTRIBUTES.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSVIEWING_SUBSCRIBERS_PASSWORD_POLICIES.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSVIEWING_SYSTEM_OPERATIONAL_ATTRIBUTES.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSVIEW_AUDIT_LOG_PROPERTIES.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSVIEW_CONFIGSET_GENERAL.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSVIEW_DRECTORY_SERVERS.HTML (Disinfected) * C:\ORACLE\ORA92\CLASSES\ORACLE\LDAP\ADMIN\HELP\LDAP\ODSVIEW_SSL_SETTINGS.HTML (Disinfected) * C:\ORACLE\ORA92\ASSISTANTS\IFA\DOC\HELP\CASE.HTM (Disinfected) * C:\ORACLE\ORA92\ASSISTANTS\IFA\DOC\HELP\CREATE_INTYPE_FILE.HTM (Disinfected) * C:\ORACLE\ORA92\ASSISTANTS\IFA\DOC\HELP\EBD_EBD1.HTM (Disinfected) * C:\ORACLE\ORA92\ASSISTANTS\IFA\DOC\HELP\EBD_EBD2.HTM (Disinfected) * C:\ORACLE\ORA92\ASSISTANTS\IFA\DOC\HELP\FLOW_OCI.HTM (Disinfected) * C:\ORACLE\ORA92\ASSISTANTS\IFA\DOC\HELP\FLOW_PROC.HTM (Disinfected) * C:\ORACLE\ORA92\ASSISTANTS\IFA\DOC\HELP\INTYPE_OBJECT_TYPES.HTM (Disinfected) * C:\ORACLE\ORA92\ASSISTANTS\IFA\DOC\HELP\SCHEMA.HTM (Disinfected) * C:\ORACLE\ORA92\ASSISTANTS\IFA\DOC\HELP\WHAT_IS_THE_OBJECT_TYPE_TRANSLAT.HTM (Disinfected) * C:\ORACLE\ORA92\ASSISTANTS\IFA\DOC\HELP\WHAT_IS_THE_OBJECT_TYPE_TRANSLATOR_.HTM (Disinfected) * C:\DYN HELP\ACTIONS_GENERATEWORKORDERS.HTML (Disinfected) * C:\DYN HELP\ACTIONS_INITIATEEVENT.HTML (Disinfected) * C:\DYN HELP\ACTIONS_SWITCHINSTALLATION.HTML (Disinfected) * C:\DYN HELP\ADMIN_ACCESSMODULES.HTML (Disinfected) * C:\DYN HELP\ADMIN_ALERTDEFINITIONSWINDOW.HTML (Disinfected) * C:\DYN HELP\ADMIN_APPRAISALPROFILEWINDOW.HTML (Disinfected) * C:\DYN HELP\ADMIN_AUDITDASHBOARD.HTML (Disinfected) * C:\DYN HELP\ADMIN_AUDITDASH_LOGIN.HTML (Disinfected) * C:\DYN HELP\ADMIN_AUDITTRAIL_CONFIG.HTML (Disinfected) * C:\DYN HELP\ADMIN_AUDITTRAIL_LOGVIEWER.HTML (Disinfected) * C:\DYN HELP\ADMIN_BF_ACTIONSSTATUSTAB.HTML (Disinfected) * C:\DYN HELP\ADMIN_BF_ACTIVATEBF.HTML (Disinfected) * C:\DYN HELP\ADMIN_BF_DIAGRAM.HTML (Disinfected) * C:\DYN HELP\ADMIN_BF_MODIFYBF.HTML (Disinfected) * C:\DYN HELP\ADMIN_BF_TRANSFORMTAB.HTML (Disinfected) * C:\DYN HELP\ADMIN_BUSINESSFLOWWINDOW.HTML (Disinfected) * C:\DYN HELP\ADMIN_CHANGEPASSWORDDIALOG.HTML (Disinfected) * C:\DYN HELP\ADMIN_COMMONSETTINGSWINDOW.HTML (Disinfected) * C:\DYN HELP\ADMIN_COMMON_ADDRESS.HTML (Disinfected) * C:\DYN HELP\ADMIN_COMMON_AGENT.HTML (Disinfected) * C:\DYN HELP\ADMIN_COMMON_CERTIFICATES.HTML (Disinfected) * C:\DYN HELP\ADMIN_COMMON_COMMON.HTML (Disinfected) * C:\DYN HELP\ADMIN_COMMON_COURIER.HTML (Disinfected) * C:\DYN HELP\ADMIN_COMMON_CREWCHANGE.HTML (Disinfected) * C:\DYN HELP\ADMIN_COMMON_DOCHANDLING.HTML (Disinfected) * C:\DYN HELP\ADMIN_COMMON_INCIDENTACCIDENT.HTML (Disinfected) * C:\DYN HELP\ADMIN_COMMON_INSTALLATION.HTML (Disinfected) * C:\DYN HELP\ADMIN_COMMON_MAIL.HTML (Disinfected) * C:\DYN HELP\ADMIN_COMMON_MATERIAL.HTML (Disinfected) * C:\DYN HELP\ADMIN_COMMON_MINUTEMEET.HTML (Disinfected) * C:\DYN HELP\ADMIN_COMMON_NC.HTML (Disinfected) * C:\DYN HELP\ADMIN_COMMON_OPENAPI.HTML (Disinfected) * C:\DYN HELP\ADMIN_COMMON_RM.HTML (Disinfected) * C:\DYN HELP\ADMIN_COMMON_SA.HTML (Disinfected) * C:\DYN HELP\ADMIN_COMMON_STAFF_ACTIVITY.HTML (Disinfected) * C:\DYN HELP\ADMIN_COMMON_STAFF_ADDRESS.HTML (Disinfected) * C:\DYN HELP\ADMIN_COMMON_STAFF_APPRAISALCRITERIA.HTML (Disinfected) * C:\DYN HELP\ADMIN_COMMON_STAFF_APPRAISALGRADE.HTML (Disinfected) * C:\DYN HELP\ADMIN_COMMON_STAFF_CERTCATEGORY.HTML (Disinfected) * C:\DYN HELP\ADMIN_COMMON_STAFF_CERTTYPE.HTML (Disinfected) * C:\DYN HELP\ADMIN_COMMON_STAFF_CONTRACT.HTML (Disinfected) * C:\DYN HELP\ADMIN_COMMON_STAFF_DISABILITY.HTML (Disinfected) * C:\DYN HELP\ADMIN_COMMON_STAFF_EMPLOYEECATEGORY.HTML (Disinfected) * C:\DYN HELP\ADMIN_COMMON_STAFF_FAMILY.HTML (Disinfected) * C:\DYN HELP\ADMIN_COMMON_STAFF_INSTITUTE.HTML (Disinfected) * C:\DYN HELP\ADMIN_COMMON_STAFF_MEDINFCATEGORY.HTML (Disinfected) * C:\DYN HELP\ADMIN_COMMON_STAFF_MEDINFTYPE.HTML (Disinfected) * C:\DYN HELP\ADMIN_COMMON_STAFF_PPCATEGORY.HTML (Disinfected) * C:\DYN HELP\ADMIN_COMMON_STAFF_PPTYPE.HTML (Disinfected) * C:\DYN HELP\ADMIN_COMMON_STAFF_RANKTYPE.HTML (Disinfected) * C:\DYN HELP\ADMIN_COMMON_STAFF_SICKNESS.HTML (Disinfected) * C:\DYN HELP\ADMIN_DOCUMENTTEMPLATEWINDOW.HTML (Disinfected) * C:\DYN HELP\ADMIN_DYNAMICHELPWINDOW.HTML (Disinfected) * C:\DYN HELP\ADMIN_DYNAMICHELP_HELPFILES.HTML (Disinfected) * C:\DYN HELP\ADMIN_FORMDESIGNERBUILDINGEXPRESSIONDIALOG.HTML (Disinfected) * C:\DYN HELP\ADMIN_FORMDESIGNERFORMREG.HTML (Disinfected) * C:\DYN HELP\ADMIN_FORMDESIGNERGUIVIEW.HTML (Disinfected) * C:\DYN HELP\ADMIN_FORMDESIGNERPROPERTIESSECTION.HTML (Disinfected) * C:\DYN HELP\ADMIN_FORMDESIGNERSQLVIEW.HTML (Disinfected) * C:\DYN HELP\ADMIN_FORMDESIGNERTABS.HTML (Disinfected) * C:\DYN HELP\ADMIN_FORMDESIGNERWINDOW.HTML (Disinfected) * C:\DYN HELP\ADMIN_FRONTPAGEWINDOW.HTML (Disinfected) * C:\DYN HELP\ADMIN_GROUPACCESSWINDOW.HTML (Disinfected) * C:\DYN HELP\ADMIN_GROUPWINDOW.HTML (Disinfected) * C:\DYN HELP\ADMIN_INSTALLATIONWINDOW.HTML (Disinfected) * C:\DYN HELP\ADMIN_INSTALLATIONWINDOW_BELONGINGTAB.HTML (Disinfected) * C:\DYN HELP\ADMIN_INSTALLATIONWINDOW_CABINTAB.HTML (Disinfected) * C:\DYN HELP\ADMIN_INSTALLATIONWINDOW_CERTTAB.HTML (Disinfected) * C:\DYN HELP\ADMIN_INSTALLATIONWINDOW_CLASSIFICATIONTAB.HTML (Disinfected) * C:\DYN HELP\ADMIN_INSTALLATIONWINDOW_DISTTAB.HTML (Disinfected) * C:\DYN HELP\ADMIN_INSTALLATIONWINDOW_GROUPTAB.HTML (Disinfected) * C:\DYN HELP\ADMIN_INSTALLATIONWINDOW_LIFEBOATTAB.HTML (Disinfected) * C:\DYN HELP\ADMIN_INSTALLATIONWINDOW_MUSTERTAB.HTML (Disinfected) * C:\DYN HELP\ADMIN_INSTALLEDINSTALLATIONSWINDOW.HTML (Disinfected) * C:\DYN HELP\ADMIN_NOTIFICATIONTEMPLATEWINDOW.HTML (Disinfected) * C:\DYN HELP\ADMIN_PKTOOL.HTML (Disinfected) * C:\DYN HELP\ADMIN_SECURITYATTRIBUTEWINDOW.HTML (Disinfected) * C:\DYN HELP\ADMIN_SELFASSESSMENTCLASSREG.HTML (Disinfected) * C:\DYN HELP\ADMIN_SELFASSESSMENTPARAMETERSNEWELEMENT.HTML (Disinfected) * C:\DYN HELP\ADMIN_SELFASSESSMENTPARAMETERSNEWKPI.HTML (Disinfected) * C:\DYN HELP\ADMIN_SELFASSESSMENTPARAMETERSNEWSUBELEMENT.HTML (Disinfected) * C:\DYN HELP\ADMIN_SELFASSESSMENTPARAMETERSWINDOW.HTML (Disinfected) * C:\DYN HELP\ADMIN_SELFASSESSMENTSPARAMETERSNEWREVISION.HTML (Disinfected) * C:\DYN HELP\ADMIN_SETCURRENTINSTALLWINDOW.HTML (Disinfected) * C:\DYN HELP\ADMIN_SYSPARMWINDOW.HTML (Disinfected) * C:\DYN HELP\ADMIN_TABLEBUILDERWINDOW.HTML (Disinfected) * C:\DYN HELP\ADMIN_TABLEMANAGERWINDOW.HTML (Disinfected) * C:\DYN HELP\ADMIN_TABLEMANAGER_COLUMN.HTML (Disinfected) * C:\DYN HELP\ADMIN_TABLEMANAGER_TABLE.HTML (Disinfected) * C:\DYN HELP\ADMIN_TRIGGERSWINDOW.HTML (Disinfected) * C:\DYN HELP\ADMIN_UPGRADELICENSEWINDOW.HTML (Disinfected) * C:\DYN HELP\ADMIN_USERPREFERENCESWINDOW.HTML (Disinfected) * C:\DYN HELP\ADMIN_USERS_GROUPTAB.HTML (Disinfected) * C:\DYN HELP\ADMIN_USERWINDOW.HTML (Disinfected) * C:\DYN HELP\ADMIN_USER_ACCESSTAB.HTML (Disinfected) * C:\DYN HELP\CERT_CERTIFICATETYPE_INSTALLATIONGROUPTAB.HTML (Disinfected) * C:\DYN HELP\CERT_CERTIFICATETYPE_MEMORANDATAB.HTML (Disinfected) * C:\DYN HELP\CERT_CERTIFICATETYPE_WINDOW.HTML (Disinfected) * C:\DYN HELP\CERT_CERTIFICATE_MEMORANDATAB.HTML (Disinfected) * C:\DYN HELP\CERT_CERTIFICATE_SURVEYTAB.HTML (Disinfected) * C:\DYN HELP\CERT_CERTIFICATE_WINDOW.HTML (Disinfected) * C:\DYN HELP\CERT_MEMORANDA_WINDOW.HTML (Disinfected) * C:\DYN HELP\COM_ADDRESSREG.HTML (Disinfected) * C:\DYN HELP\COM_AGENTREG.HTML (Disinfected) * C:\DYN HELP\COM_AIRPORTREG.HTML (Disinfected) * C:\DYN HELP\COM_AREAREG.HTML (Disinfected) * C:\DYN HELP\COM_CHANGEREQUESTWINDOW.HTML (Disinfected) * C:\DYN HELP\COM_COUNTRYREG.HTML (Disinfected) * C:\DYN HELP\COM_COURIERREG.HTML (Disinfected) * C:\DYN HELP\COM_CURRENCYCODESREG.HTML (Disinfected) * C:\DYN HELP\COM_CURRENCYRATEREG.HTML (Disinfected) * C:\DYN HELP\COM_LISTPARTICIPANTS.HTML (Disinfected) * C:\DYN HELP\COM_MAILHANDLINGWINDOW.HTML (Disinfected) * C:\DYN HELP\COM_MINUTEMEETINGWINDOW.HTML (Disinfected) * C:\DYN HELP\COM_PORTREG.HTML (Disinfected) * C:\DYN HELP\COM_PORTREGAIRPORTTAB.HTML (Disinfected) * C:\DYN HELP\COM_PORTREGMASTERSNOTESTAB.HTML (Disinfected) * C:\DYN HELP\COM_PREPARINGSENDINGMAIL.HTML (Disinfected) * C:\DYN HELP\COM_SCHEDULINGMEETING.HTML (Disinfected) * C:\DYN HELP\COM_TIMEZONEREG.HTML (Disinfected) * C:\DYN HELP\MAT_COMPTYPECOMPTAB.HTML (Disinfected) * C:\DYN HELP\MAT_COMPTYPESTOCKTAB.HTML (Disinfected) * C:\DYN HELP\MAT_COMPTYPEWINDOW.HTML (Disinfected) * C:\DYN HELP\MAT_COMPWINDOW.HTML (Disinfected) * C:\DYN HELP\MAT_INOUTSTOCKWINDOW.HTML (Disinfected) * C:\DYN HELP\MAT_STOCKITEMNOTESTAB.HTML (Disinfected) * C:\DYN HELP\MAT_STOCKITEMSLOCATIONTAB.HTML (Disinfected) * C:\DYN HELP\MAT_STOCKITEMWINDOW.HTML (Disinfected) * C:\DYN HELP\MAT_STOCKTRANSWINDOW.HTML (Disinfected) * C:\DYN HELP\MAT_STOCKTYPEAVAILABLEITEMSTAB.HTML (Disinfected) * C:\DYN HELP\MAT_STOCKTYPECOMPONENTSUSEDTAB.HTML (Disinfected) * C:\DYN HELP\MAT_STOCKTYPECOMPTAB.HTML (Disinfected) * C:\DYN HELP\MAT_STOCKTYPENOTESTAB.HTML (Disinfected) * C:\DYN HELP\MAT_STOCKTYPEWINDOW.HTML (Disinfected) * C:\DYN HELP\MOM_OTHERATTS.HTML (Disinfected) * C:\DYN HELP\QMS_DOCUMENTDISTRIBUTIONBYINSTALLATIONGROUPTAB.HTML (Disinfected) * C:\DYN HELP\QMS_DOCUMENTDISTRIBUTIONBYINSTALLATIONTAB.HTML (Disinfected) * C:\DYN HELP\QMS_DOCUMENTDISTRIBUTIONEFFECTIVEDISTRIBUTIONTAB.HTML (Disinfected) * C:\DYN HELP\QMS_DOCUMENTDISTRIBUTIONWINDOW.HTML (Disinfected) * C:\DYN HELP\QMS_DOCUMENTHANDLINGCREATINGANEWDOCUMENT.HTML (Disinfected) * C:\DYN HELP\QMS_DOCUMENTHANDLINGCREATINGCONTENTFORADOCUMENT.HTML (Disinfected) * C:\DYN HELP\QMS_DOCUMENTHANDLINGCREATINGNEWREVISIONOFEXISTINGISSUEDDOCUMENT.HTML (Disinfected) * C:\DYN HELP\QMS_DOCUMENTHANDLINGDISTRIBUTIONTAB.HTML (Disinfected) * C:\DYN HELP\QMS_DOCUMENTHANDLINGINSERTINGDOCUMENTINTOSTANDARD.HTML (Disinfected) * C:\DYN HELP\QMS_DOCUMENTHANDLINGREADLOGTAB.HTML (Disinfected) * C:\DYN HELP\QMS_DOCUMENTHANDLINGREFERENCESTAB.HTML (Disinfected) * C:\DYN HELP\QMS_DOCUMENTHANDLINGREFERRINGNCTAB.HTML (Disinfected) * C:\DYN HELP\QMS_DOCUMENTHANDLINGWINDOW.HTML (Disinfected) * C:\DYN HELP\QMS_DOCUMENTHANDLINGWORKINSTRUCTIONSTAB.HTML (Disinfected) * C:\DYN HELP\QMS_INCIDENTACCIDENTCAUSESTAB.HTML (Disinfected) * C:\DYN HELP\QMS_INCIDENTACCIDENTCOSTTAB.HTML (Disinfected) * C:\DYN HELP\QMS_INCIDENTACCIDENTNAVINFOTAB.HTML (Disinfected) * C:\DYN HELP\QMS_INCIDENTACCIDENTRECOMMENDATIONTAB.HTML (Disinfected) * C:\DYN HELP\QMS_INCIDENTACCIDENTREPORTINGDETAILS.HTML (Disinfected) * C:\DYN HELP\QMS_INCIDENTACCIDENTWINDOW.HTML (Disinfected) * C:\DYN HELP\QMS_NEARMISSCAUSESTAB.HTML (Disinfected) * C:\DYN HELP\QMS_NEARMISSRECOMMENDATIONTAB.HTML (Disinfected) * C:\DYN HELP\QMS_NEARMISSWINDOW.HTML (Disinfected) * C:\DYN HELP\QMS_NONCONFORMITYACTIONLOGTAB.HTML (Disinfected) * C:\DYN HELP\QMS_NONCONFORMITYADDITIONALINFOTAB.HTML (Disinfected) * C:\DYN HELP\QMS_NONCONFORMITYCHANGINGTHETYPE.HTML (Disinfected) * C:\DYN HELP\QMS_NONCONFORMITYCOSTSTAB.HTML (Disinfected) * C:\DYN HELP\QMS_NONCONFORMITYWINDOW.HTML (Disinfected) * C:\DYN HELP\QMS_QASTANDARDADDINGANEWQUALITYSTANDARDTOYOURLIST.HTML (Disinfected) * C:\DYN HELP\QMS_QASTANDARDASSIGNINGDOCUMENTSTOSTANDARDS.HTML (Disinfected) * C:\DYN HELP\QMS_QASTANDARDPRINTING.HTML (Disinfected) * C:\DYN HELP\QMS_QASTANDARDSAVINGQUALITYSTANDARDSTOFOLDERS.HTML (Disinfected) * C:\DYN HELP\QMS_QASTANDARDWINDOW.HTML (Disinfected) * C:\DYN HELP\QMS_WORKINSTRUCTIONGENERATINGWORKORDERSFORNEW.HTML (Disinfected) * C:\DYN HELP\QMS_WORKINSTRUCTIONREFERENCESTAB.HTML (Disinfected) * C:\DYN HELP\QMS_WORKINSTRUCTIONTHESCHEDULETAB.HTML (Disinfected) * C:\DYN HELP\QMS_WORKINSTRUCTIONTRIGGEREVENTSTAB.HTML (Disinfected) * C:\DYN HELP\QMS_WORKINSTRUCTIONWINDOW.HTML (Disinfected) * C:\DYN HELP\QMS_WORKORDERFORMTAB.HTML (Disinfected) * C:\DYN HELP\QMS_WORKORDERGENERATINGFORWORKINSTRUCTION.HTML (Disinfected) * C:\DYN HELP\QMS_WORKORDERNOTESTAB.HTML (Disinfected) * C:\DYN HELP\QMS_WORKORDERREFERENCESTAB.HTML (Disinfected) * C:\DYN HELP\QMS_WORKORDERSWINDOW.HTML (Disinfected) * C:\DYN HELP\REGISTER_ADDINGINFO.HTML (Disinfected) * C:\DYN HELP\REGISTER_DELETINGFROM.HTML (Disinfected) * C:\DYN HELP\REGISTER_GENERAL.HTML (Disinfected) * C:\DYN HELP\REP_REPORTSREGISTRATION.HTML (Disinfected) * C:\DYN HELP\REP_REPORTSVIEWWINDOW.HTML (Disinfected) * C:\DYN HELP\RM_MATRIX_LIKELIHOODTAB.HTML (Disinfected) * C:\DYN HELP\RM_MATRIX_MATRIXTAB.HTML (Disinfected) * C:\DYN HELP\RM_MATRIX_RISKINXTAB.HTML (Disinfected) * C:\DYN HELP\RM_MATRIX_RISKLEVELTAB.HTML (Disinfected) * C:\DYN HELP\RM_MATRIX_SEVERITYTAB.HTML (Disinfected) * C:\DYN HELP\RM_RISKMATRIXWINDOW.HTML (Disinfected) * C:\DYN HELP\RM_SCENARIOCAUSESTAB.HTML (Disinfected) * C:\DYN HELP\RM_SCENARIOCONSEQUENCESTAB.HTML (Disinfected) * C:\DYN HELP\RM_SCENARIOEVALUATIONTAB.HTML (Disinfected) * C:\DYN HELP\RM_SCENARIOSAFEGUARDSTAB.HTML (Disinfected) * C:\DYN HELP\RM_SCENARIOTYPECAUSESTAB.HTML (Disinfected) * C:\DYN HELP\RM_SCENARIOTYPECONSEQUENCESTAB.HTML (Disinfected) * C:\DYN HELP\RM_SCENARIOTYPEEX.SAFEGUARDSTAB.HTML (Disinfected) * C:\DYN HELP\RM_SCENARIOTYPEINSTGROUPTAB.HTML (Disinfected) * C:\DYN HELP\RM_SCENARIOTYPETEAMTAB.HTML (Disinfected) * C:\DYN HELP\RM_SCENARIOTYPEWINDOW.HTML (Disinfected) * C:\DYN HELP\RM_SCENARIOWINDOW.HTML (Disinfected) * C:\DYN HELP\RM_SCENARIO_CREATELOCAL.HTML (Disinfected) * C:\DYN HELP\SA_SELFASSESSMENTPERFORMINGNEW.HTML (Disinfected) * C:\DYN HELP\SA_SELFASSESSMENTWINDOW.HTML (Disinfected) * C:\DYN HELP\SMAN_CERTEXPIRYWINDOW.HTML (Disinfected) * C:\DYN HELP\SMAN_COMPANYPOSITIONGROUPMEMBERTAB.HTML (Disinfected) * C:\DYN HELP\SMAN_COMPANYPOSITIONGROUPWINDOW.HTML (Disinfected) * C:\DYN HELP\SMAN_COMPANYPOSITIONTYPEWINDOW.HTML (Disinfected) * C:\DYN HELP\SMAN_COMPANYPOSITIONWINDOW.HTML (Disinfected) * C:\DYN HELP\SMAN_COPYINGPOSITIONSAMONGINSTALLATIONS.HTML (Disinfected) * C:\DYN HELP\SMAN_CREWCHANGEREQUEST.HTML (Disinfected) * C:\DYN HELP\SMAN_CREWLISTCREWTAB.HTML (Disinfected) * C:\DYN HELP\SMAN_CREWLISTWINDOW.HTML (Disinfected) * C:\DYN HELP\SMAN_EMPLOYEEACTIVITYLOG.HTML (Disinfected) * C:\DYN HELP\SMAN_EMPLOYEEAPPRAISALTAB.HTML (Disinfected) * C:\DYN HELP\SMAN_EMPLOYEECERTIFICATIONTAB.HTML (Disinfected) * C:\DYN HELP\SMAN_EMPLOYEECONTACTDETAILSTAB.HTML (Disinfected) * C:\DYN HELP\SMAN_EMPLOYEECONTRACTTAB.HTML (Disinfected) * C:\DYN HELP\SMAN_EMPLOYEECOVERPOSITIONTAB.HTML (Disinfected) * C:\DYN HELP\SMAN_EMPLOYEEFAMILYTAB.HTML (Disinfected) * C:\DYN HELP\SMAN_EMPLOYEEJOBHISTORYTAB.HTML (Disinfected) * C:\DYN HELP\SMAN_EMPLOYEELOGTAB.HTML (Disinfected) * C:\DYN HELP\SMAN_EMPLOYEEMEDICALINFOTAB.HTML (Disinfected) * C:\DYN HELP\SMAN_EMPLOYEEMEMOTAB.HTML (Disinfected) * C:\DYN HELP\SMAN_EMPLOYEEPASSPORTSTAB.HTML (Disinfected) * C:\DYN HELP\SMAN_EMPLOYEEPERSONALINFOTAB.HTML (Disinfected) * C:\DYN HELP\SMAN_EMPLOYEESCONTACTTAB.HTML (Disinfected) * C:\DYN HELP\SMAN_EMPLOYEESICKNESSTAB.HTML (Disinfected) * C:\DYN HELP\SMAN_EMPLOYEESNOTESTAB.HTML (Disinfected) * C:\DYN HELP\SMAN_EMPLOYEEWINDOW.HTML (Disinfected) * C:\DYN HELP\SMAN_ORGANISATIONALCHART.HTML (Disinfected) * C:\DYN HELP\SMAN_RANKWINDOW.HTML (Disinfected) * C:\DYN HELP\SMAN_SIGNINGINMULTI.HTML (Disinfected) * C:\DYN HELP\SMAN_SIGNINOUTACTIVITYLOGTAB.HTML (Disinfected) * C:\DYN HELP\SMAN_SIGNINOUTCOVEREDPOSITIONTAB.HTML (Disinfected) * C:\DYN HELP\SMAN_SIGNINSIGNOUTWINDOW.HTML (Disinfected) * C:\DYN HELP\SMAN_SUPERNUMERARYWINDOW.HTML (Disinfected) * C:\DYN HELP\STANDARD_BUSINESSFLOW.HTML (Disinfected) * C:\DYN HELP\STANDARD_EXTERNALFILESTAB.HTML (Disinfected) * C:\DYN HELP\STANDARD_FILTERS.HTML (Disinfected) * C:\DYN HELP\STANDARD_HOME_PAGE.HTML (Disinfected) * C:\DYN HELP\STANDARD_NOTESTAB.HTML (Disinfected) * C:\DYN HELP\STANDARD_NOTIFICATIONTAB.HTML (Disinfected) * C:\DYN HELP\STANDARD_WORKFLOW.HTML (Disinfected) * C:\DOCUMENTS AND SETTINGS\ROGERCA\MY DOCUMENTS\HPPSCAN158.HTM (Disinfected) * C:\DOCUMENTS AND SETTINGS\ROGERCA\MY DOCUMENTS\SNAGIT.HTM (Disinfected) * C:\DOCUMENTS AND SETTINGS\ROGERCA\MY DOCUMENTS\SNAGIT1.HTM (Disinfected) * C:\DOCUMENTS AND SETTINGS\ROGERCA\MY DOCUMENTS\DOCUMENTS\SCRIPT\DELETE_INSTALLATION\ABS REMOVE INSTALLATION _PT.HTM (Disinfected) * C:\DOCUMENTS AND SETTINGS\ROGERCA\MY DOCUMENTS\DOCUMENTS\LABB\SPECTEC - WELCOME.HTM (Disinfected) * C:\DOCUMENTS AND SETTINGS\ROGERCA\MY DOCUMENTS\DOCUMENTS\CUSTOMERS\VIKING\QNS\VB OT-RAPPORTERING.HTM (Disinfected) * C:\DOCUMENTS AND SETTINGS\ROGERCA\MY DOCUMENTS\DOCUMENTS\CUSTOMERS\HOLY HOUSE\MISC\ATT001.HTM (Disinfected) * C:\DOCUMENTS AND SETTINGS\ROGERCA\APPLICATION DATA\REAL\MSG\4155_1195674941\20071121NEWMUSIC_3LINKS.HTML (Disinfected) * C:\DOCUMENTS AND SETTINGS\ROGERCA\APPLICATION DATA\REAL\MSG\4155_1195078543\20071114NEWMUSIC_3LINKS.HTML (Disinfected) * C:\DOCUMENTS AND SETTINGS\ROGERCA\APPLICATION DATA\REAL\MSG\104_1195697050\IPM_MOVIES112107.HTML (Disinfected) * C:\DOCUMENTS AND SETTINGS\ROGERCA\APPLICATION DATA\REAL\MSG\104_1195258060\IPM_MOVIES111607.HTML (Disinfected) * C:\DOCUMENTS AND SETTINGS\ROGERCA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\U1WN5ZFI.DEFAULT\BOOKMARKBACKUPS\BOOKMARKS-2008-04-08.HTML (Disinfected) * C:\DOCUMENTS AND SETTINGS\ROGERCA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\U1WN5ZFI.DEFAULT\BOOKMARKBACKUPS\BOOKMARKS-2008-04-09.HTML (Disinfected) * C:\DOCUMENTS AND SETTINGS\ROGERCA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\U1WN5ZFI.DEFAULT\BOOKMARKBACKUPS\BOOKMARKS-2008-04-10.HTML (Disinfected) * C:\DOCUMENTS AND SETTINGS\ROGERCA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\U1WN5ZFI.DEFAULT\BOOKMARKBACKUPS\BOOKMARKS-2008-04-12.HTML (Disinfected) * C:\DOCUMENTS AND SETTINGS\ROGERCA\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\U1WN5ZFI.DEFAULT\BOOKMARKBACKUPS\BOOKMARKS-2008-04-13.HTML (Disinfected) * C:\DOCUMENTS AND SETTINGS\ROGERCA\APPLICATION DATA\MICROSOFT\SIGNATURES\PLAXO SIGNATURE-OUTLOOK.HTM (Disinfected) * C:\DOCUMENTS AND SETTINGS\ROGERCA\APPLICATION DATA\MICROSOFT\SIGNATURES\PLAXO_UTAN_HTML.HTM (Disinfected) * C:\DOCUMENTS AND SETTINGS\ROGERCA\APPLICATION DATA\MICROSOFT\SIGNATURES\ROGER.HTM (Disinfected) * C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\SKYPE\PLUGINS\PLUGINS\F57B48ADF2224F088EDD1A2B9BAD84E8\PICKGAME.HTM (Disinfected) * C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\ADOBE\PHOTOSHOP ALBUM\3.2\UPSELLCACHE\CALENDAR.HTML (Disinfected) * C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\ADOBE\PHOTOSHOP ALBUM\3.2\UPSELLCACHE\CREATION.HTML (Disinfected) * C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\ADOBE\PHOTOSHOP ALBUM\3.2\UPSELLCACHE\FIX.HTML (Disinfected) * C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\ADOBE\PHOTOSHOP ALBUM\3.2\UPSELLCACHE\ORGANIZE.HTML (Disinfected) * C:\DELL\DELLBUTN.HTM (Disinfected) * C:\APPS\AMOS2\DYN HELP\ADMIN_FORMDESIGNERFORMREG.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\ADMIN_FORMDESIGNERGUIVIEW.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\ADMIN_FORMDESIGNERPROPERTIESSECTION.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\ADMIN_FORMDESIGNERSQLVIEW.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\ADMIN_FORMDESIGNERTABS.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\ADMIN_FORMDESIGNERWINDOW.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\ADMIN_SELFASSESSMENTCLASSREG.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\ADMIN_SELFASSESSMENTPARAMETERSNEWELEMENT.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\ADMIN_SELFASSESSMENTPARAMETERSNEWKPI.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\ADMIN_SELFASSESSMENTPARAMETERSNEWSUBELEMENT.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\ADMIN_SELFASSESSMENTPARAMETERSWINDOW.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\ADMIN_SELFASSESSMENTSPARAMETERSNEWREVISION.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\ADMIN_TABLEBUILDERWINDOW.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\CERT_CERTIFICATETYPE_INSTALLATIONGROUPTAB.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\CERT_CERTIFICATETYPE_MEMORANDATAB.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\CERT_CERTIFICATETYPE_WINDOW.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\CERT_CERTIFICATE_MEMORANDATAB.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\CERT_CERTIFICATE_SURVEYTAB.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\CERT_CERTIFICATE_WINDOW.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\CERT_MEMORANDA_WINDOW.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\COM_ADDRESSREG.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\COM_AGENTREG.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\COM_AREAREG.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\COM_CHANGEREQUESTWINDOW.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\COM_COUNTRYREG.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\COM_COURIERREG.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\COM_CURRENCYCODESREG.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\COM_CURRENCYRATEREG.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\COM_LISTPARTICIPANTS.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\COM_MAILHANDLINGWINDOW.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\COM_MINUTEMEETINGWINDOW.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\COM_PORTREG.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\COM_PREPARINGSENDINGMAIL.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\COM_SCHEDULINGMEETING.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\COM_TIMEZONEREG.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\QMS_DOCUMENTDISTRIBUTIONBYINSTALLATIONGROUPTAB.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\QMS_DOCUMENTDISTRIBUTIONBYINSTALLATIONTAB.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\QMS_DOCUMENTDISTRIBUTIONEFFECTIVEDISTRIBUTIONTAB.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\QMS_DOCUMENTDISTRIBUTIONWINDOW.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\QMS_DOCUMENTHANDLINGCREATINGANEWDOCUMENT.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\QMS_DOCUMENTHANDLINGCREATINGCONTENTFORADOCUMENT.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\QMS_DOCUMENTHANDLINGCREATINGNEWREVISIONOFEXISTINGISSUEDDOCUMENT.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\QMS_DOCUMENTHANDLINGDISTRIBUTIONTAB.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\QMS_DOCUMENTHANDLINGINSERTINGDOCUMENTINTOSTANDARD.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\QMS_DOCUMENTHANDLINGREADLOGTAB.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\QMS_DOCUMENTHANDLINGREFERENCESTAB.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\QMS_DOCUMENTHANDLINGREFERRINGNCTAB.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\QMS_DOCUMENTHANDLINGWINDOW.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\QMS_DOCUMENTHANDLINGWORKINSTRUCTIONSTAB.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\QMS_INCIDENTACCIDENTCAUSESTAB.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\QMS_INCIDENTACCIDENTCOSTTAB.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\QMS_INCIDENTACCIDENTNAVINFOTAB.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\QMS_INCIDENTACCIDENTRECOMMENDATIONTAB.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\QMS_INCIDENTACCIDENTREPORTINGDETAILS.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\QMS_INCIDENTACCIDENTWINDOW.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\QMS_NEARMISSCAUSESTAB.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\QMS_NEARMISSRECOMMENDATIONTAB.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\QMS_NEARMISSWINDOW.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\QMS_NONCONFORMITYACTIONLOGTAB.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\QMS_NONCONFORMITYADDITIONALINFOTAB.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\QMS_NONCONFORMITYCHANGINGTHETYPE.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\QMS_NONCONFORMITYCOSTSTAB.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\QMS_NONCONFORMITYWINDOW.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\QMS_QASTANDARDADDINGANEWQUALITYSTANDARDTOYOURLIST.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\QMS_QASTANDARDASSIGNINGDOCUMENTSTOSTANDARDS.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\QMS_QASTANDARDPRINTING.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\QMS_QASTANDARDSAVINGQUALITYSTANDARDSTOFOLDERS.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\QMS_QASTANDARDWINDOW.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\QMS_WORKINSTRUCTIONGENERATINGWORKORDERSFORNEW.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\QMS_WORKINSTRUCTIONREFERENCESTAB.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\QMS_WORKINSTRUCTIONTHESCHEDULETAB.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\QMS_WORKINSTRUCTIONTRIGGEREVENTSTAB.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\QMS_WORKINSTRUCTIONWINDOW.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\QMS_WORKORDERFORMTAB.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\QMS_WORKORDERGENERATINGFORWORKINSTRUCTION.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\QMS_WORKORDERNOTESTAB.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\QMS_WORKORDERREFERENCESTAB.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\QMS_WORKORDERSWINDOW.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\REGISTER_ADDINGINFO.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\REGISTER_DELETINGFROM.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\REGISTER_GENERAL.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\REP_REPORTSREGISTRATION.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\REP_REPORTSVIEWWINDOW.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\RM_SCENARIOCAUSESTAB.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\RM_SCENARIOCONSEQUENCESTAB.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\RM_SCENARIOEVALUATIONTAB.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\RM_SCENARIOSAFEGUARDSTAB.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\RM_SCENARIOTYPECAUSESTAB.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\RM_SCENARIOTYPECONSEQUENCESTAB.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\RM_SCENARIOTYPEEX.SAFEGUARDSTAB.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\RM_SCENARIOTYPEINSTGROUPTAB.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\RM_SCENARIOTYPETEAMTAB.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\RM_SCENARIOTYPEWINDOW.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\RM_SCENARIOWINDOW.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\SA_SELFASSESSMENTPERFORMINGNEW.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\SA_SELFASSESSMENTWINDOW.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\SMAN_COMPANYPOSITIONGROUPMEMBERTAB.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\SMAN_COMPANYPOSITIONGROUPWINDOW.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\SMAN_COMPANYPOSITIONWINDOW.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\SMAN_COPYINGPOSITIONSAMONGINSTALLATIONS.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\SMAN_CREWCHANGEREQUEST.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\SMAN_EMPLOYEELOGTAB.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\SMAN_EMPLOYEESCONTACTTAB.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\SMAN_EMPLOYEESNOTESTAB.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\SMAN_EMPLOYEEWINDOW.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\SMAN_ORGANISATIONALCHART.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\SMAN_RANKWINDOW.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\SMAN_SIGNINGINMULTI.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\SMAN_SIGNINSIGNOUTWINDOW.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\STANDARD_BUSINESSFLOW.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\STANDARD_EXTERNALFILESTAB.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\STANDARD_FILTERS.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\STANDARD_HOME_PAGE.HTML (Disinfected) * C:\APPS\AMOS2\DYN HELP\STANDARD_NOTIFICATIONTAB.HTML (Disinfected) Statistics Scanned: * Files: 62838 * System: 5068 * Not scanned: 11 Actions: * Disinfected: 572 * Renamed: 1 * Deleted: 0 * None: 4 * Submitted: 0 Files not scanned: * C:\HIBERFIL.SYS * C:\PAGEFILE.SYS * C:\WINDOWS\SYSTEM32\DRIVERS\SPTD.SYS * C:\WINDOWS\SYSTEM32\CONFIG\DEFAULT * C:\WINDOWS\SYSTEM32\CONFIG\SAM * C:\WINDOWS\SYSTEM32\CONFIG\SECURITY * C:\WINDOWS\SYSTEM32\CONFIG\SOFTWARE * C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM * C:\WINDOWS\SOFTWAREDISTRIBUTION\EVENTCACHE\{489B58D7-7E6B-49C2-990F-0386A008F328}.BIN * C:\DOCUMENTS AND SETTINGS\ROGERCA\LOCAL SETTINGS\TEMP\HSPERFDATA_ROGERCA\2368 * C:\DOCUMENTS AND SETTINGS\ROGERCA\LOCAL SETTINGS\TEMP\HSPERFDATA_ROGERCA\3236 Options Scanning engines: * F-Secure USS: 2.30.0 * F-Secure Hydra: 2.8.8110, 2008-04-14 * F-Secure AVP: 7.0.171, 2008-04-14 * F-Secure Pegasus: 1.20.0, 2008-02-28 * F-Secure Blacklight: 1.0.64 Scanning options: * Scan defined files: COM EXE SYS OV? BIN SCR DLL SHS HTM HTML HTT VBS JS INF VXD DO? XL? RTF CPL WIZ HTA PP? PWZ P?T MSO PIF . ACM ASP AX CNV CSC DRV INI MDB MPD MPP MPT OBD OBT OCX PCI TLB TSP WBK WBT WPC WSH VWP WML BOO HLP TD0 TT6 MSG ASD JSE VBE WSC CHM EML PRC SHB LNK WSF {* PDF ZL? XML ZIP XXX ANI AVB BAT CMD JPG LSP MAP MHT MIF PHP POT SWF WMF NWS TAR * Use Advanced heuristics Copyright © 1998-2007 Product support |Send virus sample to F-Secure F-Secure assumes no responsibility for material created or published by third parties that F-Secure World Wide Web pages have a link to. Unless you have clearly stated otherwise, by submitting material to any of our servers, for example by E-mail or via our F-Secure's CGI E-mail, you agree that the material you make available may be published in the F-Secure World Wide Pages or hard-copy publications. You will reach F-Secure public web site by clicking on underlined links. While doing this, your access will be logged to our private access statistics with your domain name.This information will not be given to any third party. You agree not to take action against us in relation to material that you submit. Unless you have clearly stated otherwise, by submitting material you warrant that F-Secure may incorporate any concepts described in it in the F-Secure products/publications without liability. I tried to get you a HijackThis log also, but I recieved an error message; Windows Script Host Loading script "C:\wondows\rogerca.vbs" failed (Access is denied) Otherwise the problems are still there… I will restart the computer and see how it behaves. Wish you a good day! /Triton
Post #20
Hello again,
Ok, after I restarted the computer I managed to make a HiJackThis scan, this is the log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:10, on 2008-04-14
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\program filesNorman\Npm\bin\ELOGSVC.EXE
C:\program filesNorman\Npm\Bin\Zanda.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
c:\Program Files\Microsoft SQL Server\MSSQL.2\MSSQL\Binn\sqlservr.exe
C:\oracle\ora92\bin\omtsreco.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\System32\tcpsvcs.exe
c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
C:\WINDOWS\System32\svchost.exe
C:\program filesNorman\Npm\bin\NJEEVES.EXE
C:\program filesNorman\Nvc\BIN\NVCSCHED.EXE
C:\program filesNorman\Nvc\bin\nvcoas.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\WScript.exe
C:\program filesNorman\Npm\bin\ZLH.EXE
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe
C:\program filesNorman\Nvc\BIN\NIP.EXE
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\program filesNorman\Nvc\bin\cclaw.exe
C:\Program Files\Creative\Shared Files\CAMTRAY.EXE
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Logitech\QuickCam\Quickcam.exe
C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Sybase\SQL Anywhere 9\win32\dbisqlg.exe
C:\Program Files\Plaxo\2.13.1.3\PlaxoHelper.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Citrix\GoToMeeting\198\g2mstart.exe
C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
C:\PROGRA~1\MI3AA1~1\wcescomm.exe
C:\Program Files\Sybase\Shared\Sybase Central 4.3\win32\scjview.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Citrix\GoToMeeting\198\g2mcomm.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
C:\PROGRA~1\MI3AA1~1\rapimgr.exe
C:\Program Files\TechSmith\SnagIt 8\SnagIt32.exe
C:\Program Files\Citrix\GoToMeeting\198\g2mlauncher.exe
C:\WINDOWS\Seiko\slpcap.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
C:\Program Files\TechSmith\SnagIt 8\TSCHelp.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
C:\Program Files\TechSmith\SnagIt 8\SnagPriv.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\tosOBEX.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\tosBtProc.exe
C:\WINDOWS\System32\wbem\wmiprvse.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://intranet.spectec.net/directory/secure/apps/login.asp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
F3 - REG:win.ini: load=C:\WINDOWS\system32\rogerca.vbs
O2 - BHO: SnagIt Toolbar Loader - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\TechSmith\SnagIt 8\SnagItBHO.dll
O2 - BHO: Länkhjälp till Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files\TechSmith\SnagIt 8\SnagItIEAddin.dll
O4 - HKLM\..\Run: [Norman ZANDA] C:\program filesNorman\Npm\bin\ZLH.EXE /LOAD /SPLASH
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [IntelWireless] C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [Creative WebCam Tray] C:\Program Files\Creative\Shared Files\CAMTRAY.EXE
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [DBISQL9] "C:\Program Files\Sybase\SQL Anywhere 9\win32\dbisqlg.exe" -preload
O4 - HKCU\..\Run: [PlaxoUpdate] C:\Program Files\Plaxo\2.13.1.3\PlaxoHelper.exe -a
O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKCU\..\Run: [GoToMeeting] C:\Program Files\Citrix\GoToMeeting\198\g2mstart.exe "/Trigger RunAtLogon"
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\PROGRA~1\MI3AA1~1\wcescomm.exe"
O4 - HKCU\..\Run: [SybaseCentral43] "C:\Program Files\Sybase\Shared\Sybase Central 4.3\win32\scjview.exe" -preload
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - S-1-5-18 Startup: SmartCapture.lnk = C:\WINDOWS\Seiko\slpcap.exe (User 'SYSTEM')
O4 - .DEFAULT Startup: SmartCapture.lnk = C:\WINDOWS\Seiko\slpcap.exe (User 'Default user')
O4 - Startup: SmartCapture.lnk = C:\WINDOWS\Seiko\slpcap.exe
O4 - Global Startup: Bluetooth Manager.lnk = ?
O4 - Global Startup: SnagIt 8.lnk = C:\Program Files\TechSmith\SnagIt 8\SnagIt32.exe
O4 - Global Startup: VPN Client.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra 'Tools' menuitem: Create Mobile Favorite… - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.euro.dell.com/systemprofiler/SysPro.CAB
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd…b?1189776875845
O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - http://support.f-secure.com/ols/fscax.cab
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://www.adobe.com/products/acrobat/nos/gp.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc…ash/swflash.cab
O16 - DPF: {E856B973-45FD-4559-8F82-EAB539144667} (Dell PC Checkup Installer Control) - http://pccheckup.dellfix.com/rel/41/install/gtdownde.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = SpecTecAB.local
O17 - HKLM\Software\..\Telephony: DomainName = SpecTecAB.local
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = SpecTecAB.local
O17 - HKLM\System\CS3\Services\Tcpip\Parameters: Domain = SpecTecAB.local
O18 - Protocol: dynascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adaptive Server Anywhere - hollandica (ASANYs_hollandica) - iAnywhere Solutions, Inc. - C:\Program Files\Sybase\SQL Anywhere 9\win32\dbsrv9.exe
O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
O23 - Service: Norman eLogger service 6 (eLoggerSvc6) - Norman ASA - C:\program filesNorman\Npm\bin\ELOGSVC.EXE
O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: Norman NJeeves - Unknown owner - C:\program filesNorman\Npm\bin\NJEEVES.EXE
O23 - Service: Norman ZANDA - Norman ASA - C:\program filesNorman\Npm\Bin\Zanda.exe
O23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\program filesNorman\Nvc\bin\nvcoas.exe
O23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman ASA - C:\program filesNorman\Nvc\BIN\NVCSCHED.EXE
O23 - Service: OracleMTSRecoveryService - Oracle Corporation - C:\oracle\ora92\bin\omtsreco.exe
O23 - Service: OracleOraHome92ClientCache - Unknown owner - C:\oracle\ora92\BIN\ONRSD.EXE
O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: WLANKEEPER - Intel® Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe

–
End of file - 12658 bytes

Still the problems exist.
Maybe I should run the F-secure scan again?

Best Regards
/Triton
Post #22
Hello again, The problem is: When I open the task manager, it closes itself within a few seconds. The same goes for regedit, msconfig etc. Also some HTML-helps for different programs does not work.. (F1 - Help) Wish you a good day
Post #23

Hello,
Yes, now I can run the task Manager, MSCONFIG and regedit.
Thank You!
What do you suggest I do about the possible virus?
Is the only way to fix it by reinstalling my computer?

Best Regards
Triton

I thought we fixed that?



Open notepad and copy/paste the text in the quotebox below into it:

File::
C:\wondows\rogerca.vbs
C:\WINDOWS\system32\rogerca.vbs


Save this as CFScript.txt


[external image: Posted Image]

Refering to the picture above, drag CFScript.txt into ComboFix.exe

Then post the results log and a new HijackThis log.
Post #24
Hello, Well, I can run it using the tool you recomended me. The tool that makes copies of the task manager, regedit and msconfig. I will run the combofix again. Unfortunately, I will travel to China tomorrow, and I will not be back for at least a week. I know you have a policy to close issues that has not been active for five days, but when I get back I will continue. For now I would like to thank you A LOT for your time! You have really helped me. Wish you a good day! /Triton
Post #28
Hello,
The ComboFix program reported that it had no access (Access denied) when creating the log-file, so I can not present it.
However, I have the HiJacklog here:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 08:41, on 2008-04-28
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\program filesNorman\Npm\bin\ELOGSVC.EXE
C:\program filesNorman\Npm\Bin\Zanda.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
C:\Program Files\Xantic\AMOS Mail\dbssvc.exe
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
c:\Program Files\Microsoft SQL Server\MSSQL.2\MSSQL\Binn\sqlservr.exe
C:\oracle\ora92\bin\omtsreco.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\System32\tcpsvcs.exe
c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
C:\WINDOWS\System32\svchost.exe
C:\program filesNorman\Npm\bin\NJEEVES.EXE
C:\WINDOWS\System32\alg.exe
C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
C:\program filesNorman\Npm\bin\ZLH.EXE
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Creative\Shared Files\CAMTRAY.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Logitech\QuickCam\Quickcam.exe
C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Sybase\SQL Anywhere 9\win32\dbisqlg.exe
C:\Program Files\Plaxo\2.13.1.3\PlaxoHelper.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\PROGRA~1\MI3AA1~1\wcescomm.exe
C:\Program Files\Sybase\Shared\Sybase Central 4.3\win32\scjview.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
C:\Program Files\TechSmith\SnagIt 8\SnagIt32.exe
C:\PROGRA~1\MI3AA1~1\rapimgr.exe
C:\WINDOWS\Seiko\slpcap.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
C:\Program Files\TechSmith\SnagIt 8\TSCHelp.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
C:\Program Files\TechSmith\SnagIt 8\SnagPriv.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\tosOBEX.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\tosBtProc.exe
C:\program filesNorman\Nvc\BIN\NIP.EXE
C:\program filesNorman\Nvc\BIN\NVCSCHED.EXE
C:\program filesNorman\Nvc\bin\nvcoas.exe
C:\program filesNorman\Nvc\bin\cclaw.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\System32\wbem\wmiprvse.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://intranet.spectec.net/directory/secure/apps/login.asp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: SnagIt Toolbar Loader - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\TechSmith\SnagIt 8\SnagItBHO.dll
O2 - BHO: Länkhjälp till Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files\TechSmith\SnagIt 8\SnagItIEAddin.dll
O4 - HKLM\..\Run: [Norman ZANDA] C:\program filesNorman\Npm\bin\ZLH.EXE /LOAD /SPLASH
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [IntelWireless] C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [Creative WebCam Tray] C:\Program Files\Creative\Shared Files\CAMTRAY.EXE
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [DBISQL9] "C:\Program Files\Sybase\SQL Anywhere 9\win32\dbisqlg.exe" -preload
O4 - HKCU\..\Run: [PlaxoUpdate] C:\Program Files\Plaxo\2.13.1.3\PlaxoHelper.exe -a
O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKCU\..\Run: [GoToMeeting] C:\Program Files\Citrix\GoToMeeting\198\g2mstart.exe "/Trigger RunAtLogon"
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\PROGRA~1\MI3AA1~1\wcescomm.exe"
O4 - HKCU\..\Run: [SybaseCentral43] "C:\Program Files\Sybase\Shared\Sybase Central 4.3\win32\scjview.exe" -preload
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - S-1-5-18 Startup: SmartCapture.lnk = C:\WINDOWS\Seiko\slpcap.exe (User 'SYSTEM')
O4 - .DEFAULT Startup: SmartCapture.lnk = C:\WINDOWS\Seiko\slpcap.exe (User 'Default user')
O4 - Startup: SmartCapture.lnk = C:\WINDOWS\Seiko\slpcap.exe
O4 - Global Startup: Bluetooth Manager.lnk = ?
O4 - Global Startup: SnagIt 8.lnk = C:\Program Files\TechSmith\SnagIt 8\SnagIt32.exe
O4 - Global Startup: StartKSA.lnk = C:\Program Files\Kockum Sonics\KSL450\Archive\080415-135649\StartKSA.cmd
O4 - Global Startup: VPN Client.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra 'Tools' menuitem: Create Mobile Favorite… - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.euro.dell.com/systemprofiler/SysPro.CAB
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd…b?1189776875845
O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - http://support.f-secure.com/ols/fscax.cab
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://www.adobe.com/products/acrobat/nos/gp.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc…ash/swflash.cab
O16 - DPF: {E856B973-45FD-4559-8F82-EAB539144667} (Dell PC Checkup Installer Control) - http://pccheckup.dellfix.com/rel/41/install/gtdownde.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = SpecTecAB.local
O17 - HKLM\Software\..\Telephony: DomainName = SpecTecAB.local
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = SpecTecAB.local
O18 - Protocol: dynascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adaptive Server Anywhere - hollandica (ASANYs_hollandica) - iAnywhere Solutions, Inc. - C:\Program Files\Sybase\SQL Anywhere 9\win32\dbsrv9.exe
O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
O23 - Service: AMOS Mail Database (DbsRpcService) - Unknown owner - C:\Program Files\Xantic\AMOS Mail\dbssvc.exe

–
End of file - 10774 bytes

Best Regards
/Triton
Post #29
What are you using as an Anti-Virus program?

You need To disable TeaTimer, it can stop our fix.

1) Run Spybot-S&D
2) Go to the Mode menu, and make sure "Advanced Mode" is selected
3) On the left hand side, choose Tools -> Resident
4) Uncheck "Resident TeaTimer" and OK any prompts

The best way is to do both, Right click the system tray icon and shut down. This will reset TT's registry snapshot. Then, open spybot in advanced mode and turn it off. When cleaning is done, open Spybot in advanced mode to turn back on.

Once fix is completed in the all clear post!!

Make sure you have administrator rights. To run Combofix, you need administrator rights.

If you still can't access the scan results, look for the file Combofix.txt . That should be it. OPen with Notepad and copy/paste it here.
Post #30
Hi,
Here is the Combofix Log

ComboFix 08-04-26.5 - Rogerca 2008-04-28 13:54:22.8 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.362 [GMT 2:00]
Running from: C:\Documents and Settings\[removed]\Desktop\ComboFix.exe
Command switches used :: C:\Documents and Settings\rogerca\Desktop\cfscript.txt
* Created a new restore point
* Resident AV is active


WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Autorun.inf
.
—- Previous Run ——-
.
C:\Autorun.inf
C:\Temp\ABS8515.zip
C:\Temp\Amos Replication Export Files Explorer.zip
C:\Temp\avg75free_519a1276.exe
C:\Temp\HJTInstall.exe
C:\Temp\Norman_Malware_Cleaner.exe
C:\Temp\putty.zip
C:\Temp\spybotsd152.exe
C:\Temp\TS-fix.bat
C:\Temp\uploaded-8407_update helpfile.zip
C:\Temp\vnc-4_1_2-x86_win32.exe
C:\WINDOWS\MS_Ext1.DLL
C:\WINDOWS\MS_VXD_Ext.DLL

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

——-\Legacy_FAD
——-\Legacy_IPRIP
——-\Service_Iprip


((((((((((((((((((((((((( Files Created from 2008-03-28 to 2008-04-28 )))))))))))))))))))))))))))))))
.

2008-04-21 08:43 . 2001-03-18 20:52 766 ——— C:\WINDOWS\Uninstall.ico
2008-04-21 08:42 . 2006-12-19 15:24 156,552 –a—— C:\WINDOWS\system32\DELS3ci.exe
2008-04-21 08:42 . 2006-11-21 13:40 65,536 –a—— C:\WINDOWS\system32\DELS3ci.dll
2008-04-21 08:42 . 2005-10-25 08:24 20,594 –a—— C:\WINDOWS\system32\DELS3L3.DLL
2008-04-21 08:42 . 2005-10-25 08:24 533 –a—— C:\WINDOWS\system32\DELS3L3.SMT
2008-04-21 08:39 . 2008-04-21 08:48 d——– C:\Temp\TORHAFNIA_DELIVERY
2008-04-21 04:12 . 2008-04-21 06:08 d——– C:\Temp\cbm
2008-04-15 15:32 . 2006-10-11 14:26 546,560 -ra—— C:\WINDOWS\system32\drivers\mos24ser.sys
2008-04-15 15:32 . 2006-10-11 14:36 299,008 -ra—— C:\WINDOWS\system32\Mos24Serial.EXE
2008-04-15 15:32 . 2006-10-11 14:35 258,048 -ra—— C:\WINDOWS\system32\MSUninst.exe
2008-04-15 15:32 . 2006-10-11 14:36 61,440 -ra—— C:\WINDOWS\system32\Mos24SerPropPage.dll
2008-04-15 15:28 . 2007-03-31 13:43 253,952 –a—— C:\WINDOWS\system32\MultiMP.exe
2008-04-15 15:28 . 2006-11-06 07:58 159 –a—— C:\WINDOWS\system32\MSConfig.ini
2008-04-15 15:27 . 2008-04-15 15:27 d——– C:\Mos24Ser
2008-04-15 14:51 . 2008-04-15 14:51 268 –ah—– C:\sqmdata05.sqm
2008-04-15 14:51 . 2008-04-15 14:51 244 –ah—– C:\sqmnoopt05.sqm
2008-04-15 14:34 . 2008-04-15 14:34 40 –ahs—- C:\WINDOWS\system32\administrator.ini
2008-04-15 14:31 . 2008-04-15 14:31 33,842 —hs—- C:\WINDOWS\system32\administrator.vbs
2008-04-15 14:31 . 2008-04-15 14:31 33,842 —hs—- C:\WINDOWS\administrator.vbs
2008-04-15 14:31 . 2008-04-15 14:31 33,842 —hs—- C:\administrator.vbs
2008-04-15 14:17 . 2003-12-12 09:12 18,240 –a—— C:\WINDOWS\system32\drivers\DbgMsg.sys
2008-04-15 14:17 . 2008-04-15 14:17 636 –a—— C:\Documents and Settings\administrator.LNK
2008-04-15 13:54 . 2008-04-15 13:54 d——– C:\Documents and Settings\administrator.SPECTECAB\WINDOWS
2008-04-15 13:54 . 2004-04-01 12:24 1,369,264 –a—— C:\WINDOWS\system32\FPSPR70.OCX
2008-04-15 13:54 . 1997-08-11 11:43 817,152 –a—— C:\WINDOWS\system32\VCF132.OCX
2008-04-15 13:54 . 1997-01-18 11:40 299,520 –a—— C:\WINDOWS\uninst.exe
2008-04-15 11:12 . 2008-04-15 11:16 14,579,256 –a—— C:\Temp\snagit.exe
2008-04-15 10:04 . 2008-04-15 10:04 d——– C:\ampo
2008-04-15 10:01 . 2008-04-15 10:01 d——– C:\Program Files\Xantic
2008-04-15 10:01 . 2003-01-17 22:13 688,128 ——— C:\WINDOWS\system32\PolarSpellChecker.dll
2008-04-15 10:01 . 2006-05-11 17:33 266,240 –a—— C:\WINDOWS\system32\mapitif.dll
2008-04-15 10:01 . 2006-05-11 17:41 81,920 –a—— C:\WINDOWS\system32\mssshl32.dll
2008-04-15 10:01 . 2005-04-06 14:56 22,016 –a—— C:\WINDOWS\system32\mssmonnt.dll
2008-04-15 08:43 . 2008-04-15 08:43 1,075,712 –a—— C:\Temp\AMOS Mail Vrs[1]. 5.1.xx Installation Guide.exe
2008-04-14 21:06 . 2008-04-28 12:00 33,830 —hs—- C:\rogerca.vbs
2008-04-13 23:15 . 2008-04-13 23:15 d——– C:\fsaua.data
2008-04-13 22:54 . 2008-04-13 22:54 d——– C:\EmergencyUtils
2008-04-13 22:54 . 2004-07-26 23:26 32,768 –a—— C:\Temp\xp_emergencyutil.exe
2008-04-13 22:53 . 2008-04-13 22:53 7,875 –a—— C:\Temp\xp_emergencyutil.zip
2008-04-13 16:36 . 2008-04-13 16:36 d——– C:\Program Files\Malwarebytes' Anti-Malware
2008-04-13 16:36 . 2008-04-13 16:36 d——– C:\Documents and Settings\rogerca\Application Data\Malwarebytes
2008-04-13 16:36 . 2008-04-13 16:36 d——– C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-04-13 16:33 . 2008-04-13 16:33 50,688 –a—— C:\Temp\ATF-Cleaner.exe
2008-04-13 16:22 . 2008-04-13 16:22 d——– C:\Documents and Settings\All Users\Application Data\Avg7
2008-04-13 13:08 . 2008-04-13 13:01 10,360,321 –a—— C:\Enterprise_LEV_080413.zip
2008-04-11 11:43 . 2008-04-11 11:43 268 –ah—– C:\sqmdata04.sqm
2008-04-11 11:43 . 2008-04-11 11:43 244 –ah—– C:\sqmnoopt04.sqm
2008-04-11 11:25 . 2004-05-05 18:40 414,720 -ra—— C:\WINDOWS\system32\ftcunin.exe
2008-04-11 11:25 . 2004-03-16 12:03 69,632 -ra—— C:\WINDOWS\system32\ftd2xx.dll
2008-04-11 11:25 . 2004-03-23 18:36 56,031 -ra—— C:\WINDOWS\system32\drivers\ftcser2k.sys
2008-04-11 11:25 . 2003-06-11 13:48 48,625 -ra—— C:\WINDOWS\system32\ftcsui2.dll
2008-04-11 11:25 . 2004-05-05 12:10 43,235 -ra—— C:\WINDOWS\system32\drivers\ftcusb.sys
2008-04-11 11:25 . 2004-05-06 13:47 20,198 -ra—— C:\WINDOWS\system32\ftcserco.dll
2008-04-11 11:25 . 2004-03-11 13:27 92 -ra—— C:\WINDOWS\system32\ftcun2k.ini
2008-04-11 11:14 . 2008-04-15 13:54 d——– C:\Program Files\Kockum Sonics
2008-04-11 11:14 . 2004-10-07 20:03 74,240 –a—— C:\Norcontrol_sim.exe
2008-04-10 16:32 . 2008-03-28 10:00 57,594 –a—— C:\00008NL.D
2008-04-10 16:10 . 2008-04-25 01:33 d——– C:\Program Files\Spybot - Search & Destroy
2008-04-10 16:10 . 2008-04-11 11:11 d——– C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-04-08 09:25 . 2008-04-08 09:25 268 –ah—– C:\sqmdata03.sqm
2008-04-08 09:25 . 2008-04-08 09:25 244 –ah—– C:\sqmnoopt03.sqm
2008-04-08 09:18 . 2008-04-08 09:18 268 –ah—– C:\sqmdata02.sqm
2008-04-08 09:18 . 2008-04-08 09:18 244 –ah—– C:\sqmnoopt02.sqm
2008-04-07 11:28 . 2008-04-07 11:28 d——– C:\Temp\ar6341
2008-04-07 08:17 . 2008-04-07 08:17 d——– C:\Program Files\Trend Micro
2008-04-04 14:01 . 2008-04-07 07:54 d——– C:\cbm
2008-04-04 09:15 . 2008-04-04 09:12 102,664 –a—— C:\WINDOWS\system32\drivers\tmcomm.sys
2008-04-04 09:12 . 2008-04-04 12:41 d——– C:\Documents and Settings\rogerca\.housecall6.6
2008-04-03 08:45 . 2008-04-03 08:46 8,161,400 –a—— C:\Temp\Windows-KB890830-V1.39.exe
2008-04-01 12:03 . 2008-04-02 08:58 d——– C:\Temp\Repl_explorer
2008-04-01 08:30 . 2008-04-01 08:30 d——– C:\Program Files\RealVNC
2008-03-31 09:36 . 2008-03-06 18:50 37,153 –a—— C:\Temp\Update Helpfile.sql
2008-03-28 15:48 . 2008-03-28 15:57 d——– C:\Program Files\putty

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-04-28 10:14 ——— d—–w C:\Program Files\Plaxo
2008-04-28 10:07 33,830 –sh–w C:\WINDOWS\system32\rogerca.vbs
2008-04-28 09:48 ——— d—–w C:\Documents and Settings\rogerca\Application Data\Skype
2008-04-28 09:01 ——— d—–w C:\Documents and Settings\rogerca\Application Data\skypePM
2008-04-21 06:43 ——— d–h–w C:\Program Files\InstallShield Installation Information
2008-04-21 06:41 ——— d—–w C:\Program Files\Dell
2008-04-15 05:05 33,830 –sh–w C:\WINDOWS\rogerca.vbs
2008-04-10 12:05 ——— d—–w C:\Program Files\LOGIHOLD
2008-04-07 07:39 ——— d—–w C:\Program Files\DB Commander 2000 PRO
2008-04-04 14:54 ——— d—–w C:\Program Files\AMOS
2008-04-04 12:54 ——— d—–w C:\Program Files\Hourcnt
2008-03-28 14:03 ——— d—–w C:\Program Files\Wfwin
2008-03-19 09:47 1,845,248 —-a-w C:\WINDOWS\system32\win32k.sys
2008-03-18 07:00 ——— d—–w C:\Program Files\Java
2008-03-13 07:00 ——— d—–w C:\Documents and Settings\All Users\Application Data\X-Setup Pro
2008-03-10 07:14 32 —-a-w C:\Documents and Settings\All Users\Application Data\ezsid.dat
2008-03-10 07:13 ——— d—–w C:\Program Files\Skype
2008-03-10 07:13 ——— d—–w C:\Program Files\Common Files\Skype
2008-03-07 13:04 ——— d—–w C:\Program Files\Oracle
2008-03-06 09:54 ——— d—–w C:\Program Files\TechSmith
2008-03-06 09:54 ——— d—–w C:\Documents and Settings\All Users\Application Data\TechSmith
2008-03-06 09:53 ——— d—–w C:\Program Files\Common Files\Wise Installation Wizard
2008-03-01 13:06 826,368 —-a-w C:\WINDOWS\system32\wininet.dll
2008-02-28 07:27 ——— d—–w C:\Program Files\Seiko Instruments USA Inc
2008-02-20 06:51 282,624 —-a-w C:\WINDOWS\system32\gdi32.dll
2008-02-20 05:32 45,568 —-a-w C:\WINDOWS\system32\dnsrslvr.dll
2007-11-09 15:10 30,288 —-a-w C:\Program Files\mozilla firefox\plugins\cgpcfg.dll
2007-11-09 15:10 79,440 —-a-w C:\Program Files\mozilla firefox\plugins\CgpCore.dll
2007-11-09 15:10 75,344 —-a-w C:\Program Files\mozilla firefox\plugins\confmgr.dll
2007-11-09 15:10 140,880 —-a-w C:\Program Files\mozilla firefox\plugins\ctxmui.dll
2007-11-09 15:10 42,576 —-a-w C:\Program Files\mozilla firefox\plugins\icafile.dll
2007-11-09 15:10 50,768 —-a-w C:\Program Files\mozilla firefox\plugins\icalogon.dll
2007-11-09 15:10 34,384 —-a-w C:\Program Files\mozilla firefox\plugins\logging.dll
2007-06-21 17:39 685,640 —-a-w C:\Program Files\mozilla firefox\plugins\sslsdk_b.dll
2007-11-09 15:11 30,288 —-a-w C:\Program Files\mozilla firefox\plugins\TcpPServ.dll
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 09:56 15360]
"MsnMsgr"="C:\Program Files\MSN Messenger\MsnMsgr.exe" [2007-01-19 12:54 5674352]
"Skype"="C:\Program Files\Skype\Phone\Skype.exe" [2008-02-01 18:22 21898024]
"DBISQL9"="C:\Program Files\Sybase\SQL Anywhere 9\win32\dbisqlg.exe" [2008-01-17 21:38 144688]
"PlaxoUpdate"="C:\Program Files\Plaxo\2.13.1.3\PlaxoHelper.exe" [2007-12-11 18:21 227914]
"DAEMON Tools"="C:\Program Files\DAEMON Tools\daemon.exe" [2007-04-04 00:29 165784]
"GoToMeeting"="C:\Program Files\Citrix\GoToMeeting\198\g2mstart.exe" [2007-12-19 11:15 31816]
"H/PC Connection Agent"="C:\PROGRA~1\MI3AA1~1\wcescomm.exe" [2006-06-26 17:13 1207080]
"SybaseCentral43"="C:\Program Files\Sybase\Shared\Sybase Central 4.3\win32\scjview.exe" [2008-01-17 21:38 136496]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Norman ZANDA"="C:\program filesNorman\Npm\bin\ZLH.exe" [2007-08-09 14:40 183352]
"BluetoothAuthenticationAgent"="bthprops.cpl" [2004-08-04 09:56 110592 C:\WINDOWS\system32\bthprops.cpl]
"Adobe Photo Downloader"="C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe" [2007-03-22 15:09 63712]
"IntelWireless"="C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" [2004-10-30 14:59 385024]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 05:25 144784]
"Creative WebCam Tray"="C:\Program Files\Creative\Shared Files\CAMTRAY.EXE" [2003-10-13 03:04 184320]
"igfxtray"="C:\WINDOWS\system32\igfxtray.exe" [2005-10-14 14:49 94208]
"igfxhkcmd"="C:\WINDOWS\system32\hkcmd.exe" [2005-10-14 14:46 77824]
"igfxpers"="C:\WINDOWS\system32\igfxpers.exe" [2005-10-14 14:50 114688]
"LogitechQuickCamRibbon"="C:\Program Files\Logitech\QuickCam\Quickcam.exe" [2007-10-25 17:37 2178832]
"LogitechCommunicationsManager"="C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe" [2007-10-25 17:33 563984]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 23:16 39792]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2004-08-04 09:56 15360]

C:\Documents and Settings\rogerca\Start Menu\Programs\Startup\
SmartCapture.lnk - C:\WINDOWS\Seiko\slpcap.exe [2006-07-12 03:29:00 123917]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Bluetooth Manager.lnk - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe [2005-11-18 18:46:00 1724416]
SnagIt 8.lnk - C:\Program Files\TechSmith\SnagIt 8\SnagIt32.exe [2007-05-01 12:11:48 6395464]
StartKSA.lnk - C:\Program Files\Kockum Sonics\KSL450\Archive\080415-135649\StartKSA.cmd [2005-03-03 16:12:42 14]
VPN Client.lnk - C:\WINDOWS\Installer\{D25122BC-A60E-4663-B602-B01718F12044}\Icon3E5562ED7.ico [2008-02-18 09:49:44 6144]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoWelcomeScreen"= 1 (0x1)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\IntelWireless]
C:\Program Files\Intel\Wireless\Bin\LgNotify.dll 2004-09-07 16:08 110592 C:\Program Files\Intel\Wireless\Bin\LgNotify.dll

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
"C:\\Program Files\\MSN Messenger\\livecall.exe"=
"C:\\Program Files\\Sybase\\SQL Anywhere 9\\win32\\dbisqlg.exe"=
"C:\\Program Files\\Sybase\\Shared\\Sybase Central 4.3\\win32\\scjview.exe"=
"C:\\Program Files\\Sybase\\ASA 8.0\\win32\\dbeng8.exe"=
"C:\\Program Files\\Sybase\\SQL Anywhere 9\\win32\\dbeng9.exe"=
"C:\\Program Files\\totalcmd\\TOTALCMD.EXE"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"C:\\Program Files\\Nortel Networks\\Extranet.exe"=
"C:\Program Files\Microsoft ActiveSync\rapimgr.exe"= C:\Program Files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager
"C:\Program Files\Microsoft ActiveSync\wcescomm.exe"= C:\Program Files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager
"C:\Program Files\Microsoft ActiveSync\WCESMgr.exe"= C:\Program Files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application
"C:\\Program Files\\Star IPS\\Star.exe"=
"C:\\Program Files\\Xantic\\AMOS Mail\\winmss32.exe"=
"C:\\Program Files\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"1207:UDP"= 1207:UDP:Windows Media Format SDK (firefox.exe)
"1206:UDP"= 1206:UDP:Windows Media Format SDK (firefox.exe)
"1183:UDP"= 1183:UDP:Windows Media Format SDK (firefox.exe)
"1182:UDP"= 1182:UDP:Windows Media Format SDK (firefox.exe)
"26675:TCP"= 26675:TCP:169.254.2.0/255.255.255.0:Enabled:ActiveSync Service

R2 DbsRpcService;AMOS Mail Database;C:\Program Files\Xantic\AMOS Mail\dbssvc.exe [2006-05-11 17:31]
R2 Ndiskio;Ndiskio;C:\program filesNorman\Nse\bin\NDISKIO.SYS [2007-01-02 10:55]
R2 SQLWriter;SQL Server VSS Writer;"c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe" [2007-02-10 05:29]
R3 Eacfilt;Eacfilt Miniport;C:\WINDOWS\system32\DRIVERS\eacfilt.sys [2006-05-09 18:47]
R3 IPSECSHM;Nortel IPSECSHM Adapter;C:\WINDOWS\system32\DRIVERS\ipsecw2k.sys [2006-05-09 18:46]
R3 NvcMFlt;NvcMFlt;C:\WINDOWS\system32\DRIVERS\nvcw32mf.sys [2008-02-11 15:56]
R3 nvcoas;Norman Virus Control on-access component;C:\program filesNorman\Nvc\bin\nvcoas.exe [2007-12-12 12:45]
R3 NVCScheduler;Norman Virus Control Scheduler;C:\program filesNorman\Nvc\BIN\NVCSCHED.EXE [2007-05-23 13:23]
S3 ASANYs_hollandica;Adaptive Server Anywhere - hollandica;C:\Program Files\Sybase\SQL Anywhere 9\win32\dbsrv9.exe [2008-01-17 21:38]
S3 D100IB;D100IB;C:\WINDOWS\system32\DRIVERS\D100IB5.SYS [2001-08-17 12:12]
S3 Dell1110_FUService;Dell 1110 Status Monitor Service;"C:\Program Files\DELL\Dell Laser Printer 1110\LocalSM\ssmsrvc /Service []
S3 FTCSER2K;FTDI USB Dual Serial Port Driver;C:\WINDOWS\system32\drivers\ftcser2k.sys [2004-03-23 18:36]
S3 FTCUSB;FTCUSB.SYS FT2232C IO test driver;C:\WINDOWS\system32\drivers\ftcusb.sys [2004-05-05 12:10]
S3 IPSECEXT;Nortel Extranet Access Protocol;C:\WINDOWS\system32\DRIVERS\ipsecw2k.sys [2006-05-09 18:46]
S3 mos24ser;MosChip High-Speed USB MultiSerial Device Service;C:\WINDOWS\system32\DRIVERS\mos24ser.sys [2006-10-11 14:26]
S3 NetWlan5;Symbol Based 802.11b Wireless LAN Card Driver;C:\WINDOWS\system32\DRIVERS\NetWlan5.sys [2004-08-04 07:31]
S3 OracleOraHome92ClientCache;OracleOraHome92ClientCache;C:\oracle\ora92\BIN\ONRSD.EXE [2002-04-26 20:34]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\##10.43.4.53#gemensam]
\Shell\AutoRun\command - WScript.exe owepe.vbs "AutoRun"
\Shell\AutoRun1\command - WScript.exe owepe.vbs "AutoRun"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\##10.43.4.53#intranet]
\Shell\AutoRun\command - WScript.exe owepe.vbs "AutoRun"
\Shell\AutoRun1\command - WScript.exe owepe.vbs "AutoRun"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\##10.43.4.53#kunder]
\Shell\AutoRun\command - WScript.exe owepe.vbs "AutoRun"
\Shell\AutoRun1\command - WScript.exe owepe.vbs "AutoRun"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{22dd8f1a-70ef-11dc-a2eb-0016414c85eb}]
\Shell\AutoRun\command - WScript.exe owepe.vbs "AutoRun"
\Shell\AutoRun1\command - WScript.exe owepe.vbs "AutoRun"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{2951483f-03ea-11dd-a3b8-00166f732749}]
\Shell\AutoRun\command - WScript.exe rogerca.vbs "AutoRun"
\Shell\AutoRun1\command - WScript.exe rogerca.vbs "AutoRun"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{3e9eb2f2-8b72-11dc-a2f9-444553544200}]
\Shell\AutoRun\command - Q:\LaunchU3.exe -a

.
Contents of the 'Scheduled Tasks' folder
"2008-04-03 12:33:08 C:\WINDOWS\Tasks\CKUtil.job"


Brgds
/Triton

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI