PDA

View Full Version : iexplore.exe processes



csbigworm
2007-10-11, 06:33
hey guys i am having a problem and i cant seem to find a real answer so here is my logs per the sticky...


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:28:16 PM, on 10/10/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wuauclt.exe
F:\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.6.14.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [AirPaceWifi] "C:\Program Files\abit\abit uGuru\AirPaceWifi.exe" -nogui
O4 - HKLM\..\Run: [QUICKCARE] C:\Program Files\Qwest\QuickCare\bin\sprtcmd.exe /P QUICKCARE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKCU\..\Run: [Steam] "c:\program files\valve\steam\steam.exe" -silent
O4 - HKCU\..\Run: [NVIDIA nTune] "C:\Program Files\NVIDIA Corporation\nTune\nTuneCmd.exe" clear
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [4 Grim] C:\DOCUME~1\JACKBA~1\APPLIC~1\PHONEL~1\Load real.exe
O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: nTune Service (nTuneService) - NVIDIA - C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Sony SCSI Helper Service - Sony Corporation - C:\Program Files\Common Files\Sony Shared\Fsk\SonySCSIHelperService.exe

--
End of file - 6449 bytes

csbigworm
2007-10-11, 06:34
here is my AV log...



-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Wednesday, October 10, 2007 9:34:44 PM
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 11/10/2007
Kaspersky Anti-Virus database records: 430656
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
A:\
C:\
D:\
E:\
F:\

Scan Statistics:
Total number of scanned objects: 70094
Number of viruses found: 2
Number of infected objects: 31
Number of suspicious objects: 0
Duration of the scan process: 01:02:18

Infected Object Name / Virus Name / Last Action
C:\Documents and Settings\All Users\Application Data\beep axis mode free\Online Exit.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped
C:\Documents and Settings\Jack Bauer\.housecall6.6\Quarantine\keyfinder.exe.bac_a01740/data.rar/xpkey.exe Infected: not-a-virus:PSWTool.Win32.RAS.a skipped
C:\Documents and Settings\Jack Bauer\.housecall6.6\Quarantine\keyfinder.exe.bac_a01740/data.rar/officekey.exe Infected: not-a-virus:PSWTool.Win32.RAS.a skipped
C:\Documents and Settings\Jack Bauer\.housecall6.6\Quarantine\keyfinder.exe.bac_a01740/data.rar Infected: not-a-virus:PSWTool.Win32.RAS.a skipped
C:\Documents and Settings\Jack Bauer\.housecall6.6\Quarantine\keyfinder.exe.bac_a01740 RarSFX: infected - 3 skipped
C:\Documents and Settings\Jack Bauer\.housecall6.6\Quarantine\keyfinder.exe.bac_a01740 CryptFF.b: infected - 3 skipped
C:\Documents and Settings\Jack Bauer\Application Data\Mozilla\Firefox\Profiles\quvr7yxs.default\cert8.db Object is locked skipped
C:\Documents and Settings\Jack Bauer\Application Data\Mozilla\Firefox\Profiles\quvr7yxs.default\flashgot.log Object is locked skipped
C:\Documents and Settings\Jack Bauer\Application Data\Mozilla\Firefox\Profiles\quvr7yxs.default\formhistory.dat Object is locked skipped
C:\Documents and Settings\Jack Bauer\Application Data\Mozilla\Firefox\Profiles\quvr7yxs.default\history.dat Object is locked skipped
C:\Documents and Settings\Jack Bauer\Application Data\Mozilla\Firefox\Profiles\quvr7yxs.default\key3.db Object is locked skipped
C:\Documents and Settings\Jack Bauer\Application Data\Mozilla\Firefox\Profiles\quvr7yxs.default\parent.lock Object is locked skipped
C:\Documents and Settings\Jack Bauer\Application Data\Mozilla\Firefox\Profiles\quvr7yxs.default\search.sqlite Object is locked skipped
C:\Documents and Settings\Jack Bauer\Application Data\Mozilla\Firefox\Profiles\quvr7yxs.default\urlclassifier2.sqlite Object is locked skipped
C:\Documents and Settings\Jack Bauer\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\Jack Bauer\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat Object is locked skipped
C:\Documents and Settings\Jack Bauer\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\Jack Bauer\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\Jack Bauer\Local Settings\Application Data\Mozilla\Firefox\Profiles\quvr7yxs.default\Cache\_CACHE_001_ Object is locked skipped
C:\Documents and Settings\Jack Bauer\Local Settings\Application Data\Mozilla\Firefox\Profiles\quvr7yxs.default\Cache\_CACHE_002_ Object is locked skipped
C:\Documents and Settings\Jack Bauer\Local Settings\Application Data\Mozilla\Firefox\Profiles\quvr7yxs.default\Cache\_CACHE_003_ Object is locked skipped
C:\Documents and Settings\Jack Bauer\Local Settings\Application Data\Mozilla\Firefox\Profiles\quvr7yxs.default\Cache\_CACHE_MAP_ Object is locked skipped
C:\Documents and Settings\Jack Bauer\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Jack Bauer\Local Settings\History\History.IE5\MSHist012007101020071011\index.dat Object is locked skipped
C:\Documents and Settings\Jack Bauer\Local Settings\Temp\bis37.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\Documents and Settings\Jack Bauer\Local Settings\Temp\bis38.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\Documents and Settings\Jack Bauer\Local Settings\Temp\sta7.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\Documents and Settings\Jack Bauer\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Jack Bauer\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\Jack Bauer\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
C:\System Volume Information\_restore{B5B3735B-5666-401E-ABA7-E0D1D2138E07}\RP88\A0007285.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{B5B3735B-5666-401E-ABA7-E0D1D2138E07}\RP88\A0007287.exe/file4 Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{B5B3735B-5666-401E-ABA7-E0D1D2138E07}\RP88\A0007287.exe Inno: infected - 1 skipped
C:\System Volume Information\_restore{B5B3735B-5666-401E-ABA7-E0D1D2138E07}\RP92\A0011365.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{B5B3735B-5666-401E-ABA7-E0D1D2138E07}\RP92\A0011366.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{B5B3735B-5666-401E-ABA7-E0D1D2138E07}\RP92\A0011370.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{B5B3735B-5666-401E-ABA7-E0D1D2138E07}\RP92\A0011402.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{B5B3735B-5666-401E-ABA7-E0D1D2138E07}\RP93\A0011403.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{B5B3735B-5666-401E-ABA7-E0D1D2138E07}\RP93\A0011416.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{B5B3735B-5666-401E-ABA7-E0D1D2138E07}\RP94\A0011419.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{B5B3735B-5666-401E-ABA7-E0D1D2138E07}\RP95\A0011425.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{B5B3735B-5666-401E-ABA7-E0D1D2138E07}\RP96\A0011484.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{B5B3735B-5666-401E-ABA7-E0D1D2138E07}\RP96\A0011507.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{B5B3735B-5666-401E-ABA7-E0D1D2138E07}\RP97\A0011512.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{B5B3735B-5666-401E-ABA7-E0D1D2138E07}\RP97\A0011515.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{B5B3735B-5666-401E-ABA7-E0D1D2138E07}\RP97\A0011516.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{B5B3735B-5666-401E-ABA7-E0D1D2138E07}\RP97\A0011517.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{B5B3735B-5666-401E-ABA7-E0D1D2138E07}\RP97\A0011518.exe Infected: Trojan.Win32.Obfuscated.en skipped
C:\System Volume Information\_restore{B5B3735B-5666-401E-ABA7-E0D1D2138E07}\RP97\change.log Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\EventCache\{13F4E8AC-4DA7-48FE-ADEC-77B4403D5750}.bin Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\Internet.evt Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped

csbigworm
2007-10-11, 06:35
E:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
E:\System Volume Information\_restore{B5B3735B-5666-401E-ABA7-E0D1D2138E07}\RP97\change.log Object is locked skipped
F:\57983fa1bddc914602fd2a2dfc6c74fe\sp1\spmsg.dll Object is locked skipped
F:\57983fa1bddc914602fd2a2dfc6c74fe\sp1\spuninst.exe Object is locked skipped
F:\57983fa1bddc914602fd2a2dfc6c74fe\sp1\update\eula.txt Object is locked skipped
F:\57983fa1bddc914602fd2a2dfc6c74fe\sp1\update\spcustom.dll Object is locked skipped
F:\57983fa1bddc914602fd2a2dfc6c74fe\sp1\update\update.exe Object is locked skipped
F:\57983fa1bddc914602fd2a2dfc6c74fe\sp2\spmsg.dll Object is locked skipped
F:\57983fa1bddc914602fd2a2dfc6c74fe\sp2\spuninst.exe Object is locked skipped
F:\57983fa1bddc914602fd2a2dfc6c74fe\sp2\update\eula.txt Object is locked skipped
F:\57983fa1bddc914602fd2a2dfc6c74fe\sp2\update\spcustom.dll Object is locked skipped
F:\57983fa1bddc914602fd2a2dfc6c74fe\sp2\update\update.exe Object is locked skipped
F:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP10\A0000335.sys Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP10\A0000336.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP10\A0000337.exe Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP10\A0000338.cat Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP10\A0000339.inf Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP10\A0000340.ver Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP10\A0000341.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP10\A0000342.exe Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP10\A0000343.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP10\A0000344.exe Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP10\A0000345.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP10\A0000346.exe Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP10\A0000347.ver Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP10\A0000348.inf Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP10\A0000349.cat Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP10\A0000350.sys Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP10\A0000351.exe Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP10\A0000352.exe Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP10\A0000353.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP10\A0000354.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP10\A0000355.exe Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP11\A0000382.ver Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP11\A0000383.inf Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP11\A0000384.inf Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP11\A0000385.exe Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP11\A0000386.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP11\A0000387.cat Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP11\A0000388.exe Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP11\A0000389.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP11\A0000390.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP11\A0000391.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP11\A0000392.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP11\A0000393.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP11\A0000394.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP11\A0000395.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP11\A0000396.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP11\A0000397.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP11\A0000398.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP11\A0000399.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP11\A0000400.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP11\A0000401.cat Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP13\A0000441.ver Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP13\A0000442.inf Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP13\A0000443.exe Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP13\A0000444.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP13\A0000445.cat Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP13\A0000446.exe Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP13\A0000447.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP13\A0000448.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP13\A0000449.cnv Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP14\A0000486.exe Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP14\A0000487.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP14\A0000488.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP14\A0000489.exe Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP14\A0000490.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP14\A0000491.exe Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP14\A0000492.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP14\A0000493.exe Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP14\A0000494.inf Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP14\A0000495.inf Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP14\A0000496.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP14\A0000497.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP14\A0000498.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP14\A0000499.cat Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP14\A0000500.cat Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP14\A0000501.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP14\A0000502.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP14\A0000503.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP14\A0000504.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP14\A0000505.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP14\A0000506.exe Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP14\A0000507.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP14\A0000508.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP14\A0000509.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP14\A0000510.exe Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP14\A0000511.exe Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP14\A0000512.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP14\A0000513.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP14\A0000514.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP14\A0000515.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP14\A0000516.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP14\A0000517.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP14\A0000518.exe Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP14\A0000519.exe Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP14\A0000520.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP14\A0000521.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP14\A0000522.tsp Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP14\A0000523.TSP Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP14\A0000524.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP14\A0000525.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP14\A0000526.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP14\A0000527.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP14\A0000528.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP14\A0000529.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP14\A0000530.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP14\A0000531.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP14\A0000532.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP14\A0000533.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP14\A0000534.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP14\A0000535.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP14\A0000536.ver Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP14\A0000537.ver Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP14\A0000538.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP15\A0000582.exe Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP15\A0000583.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP15\A0000584.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP15\A0000585.exe Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP15\A0000586.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP15\A0000587.exe Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP15\A0000588.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP15\A0000589.exe Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP15\A0000590.exe Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP15\A0000591.exe Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP15\A0000592.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP15\A0000593.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP15\A0000594.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP15\A0000595.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP15\A0000596.inf Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP15\A0000597.inf Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP15\A0000598.exe Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP15\A0000599.exe Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP15\A0000600.cat Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP15\A0000601.cat Object is locked skipped

csbigworm
2007-10-11, 06:36
sorry this is the last of the log...


F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP15\A0000602.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP15\A0000603.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP15\A0000604.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP15\A0000605.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP15\A0000606.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP15\A0000607.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP15\A0000608.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP15\A0000609.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP15\A0000610.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP15\A0000611.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP15\A0000612.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP15\A0000613.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP15\A0000614.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP15\A0000615.exe Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP15\A0000616.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP15\A0000617.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP15\A0000618.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP15\A0000619.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP15\A0000620.ver Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP15\A0000621.ver Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP15\A0000622.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP15\A0000623.exe Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP15\A0000624.exe Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP15\A0000625.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP15\A0000626.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP15\A0000627.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP15\A0000628.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP15\A0000629.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP15\A0000630.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP15\A0000631.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP15\A0000632.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP15\A0000633.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP15\A0000634.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP15\A0000635.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP15\A0000636.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP15\A0000637.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP15\A0000638.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP15\A0000639.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP15\A0000640.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP5\A0000204.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP5\A0000205.exe Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP5\A0000206.sys Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP5\A0000207.cat Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP5\A0000208.inf Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP5\A0000209.ver Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP5\A0000210.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP5\A0000211.exe Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP5\A0000212.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP5\A0000213.exe Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP5\A0000214.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP5\A0000215.exe Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP5\A0000216.ver Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP5\A0000217.inf Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP5\A0000218.cat Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP5\A0000219.sys Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP5\A0000220.exe Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP5\A0000221.exe Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP5\A0000222.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP5\A0000223.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP5\A0000224.exe Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP6\A0000232.exe Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP6\A0000233.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP6\A0000234.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP6\A0000235.exe Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP6\A0000236.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP6\A0000237.exe Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP6\A0000238.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP6\A0000239.exe Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP6\A0000240.ver Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP6\A0000241.inf Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP6\A0000242.cat Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP6\A0000243.sys Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP6\A0000244.ver Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP6\A0000245.inf Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP6\A0000246.cat Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP6\A0000247.sys Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP6\A0000248.exe Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP6\A0000249.exe Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP6\A0000250.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP6\A0000251.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP6\A0000252.exe Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP7\A0000260.exe Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP7\A0000261.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP7\A0000262.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP7\A0000263.exe Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP7\A0000264.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP7\A0000265.exe Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP7\A0000266.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP7\A0000267.exe Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP7\A0000268.ver Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP7\A0000269.ver Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP7\A0000270.cat Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP7\A0000271.cat Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP7\A0000272.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP7\A0000273.inf Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP7\A0000274.inf Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP7\A0000275.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP7\A0000276.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP7\A0000277.exe Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP7\A0000278.exe Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP7\A0000279.exe Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP7\A0000280.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP8\A0000292.exe Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP8\A0000293.ocx Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP8\A0000294.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP8\A0000295.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP8\A0000296.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP8\A0000297.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP8\A0000298.exe Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP8\A0000299.cat Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP8\A0000300.inf Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP8\A0000301.ver Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP8\A0000302.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP8\A0000303.exe Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP8\A0000304.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP8\A0000305.exe Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP8\A0000306.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP8\A0000307.exe Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP8\A0000308.ver Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP8\A0000309.inf Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP8\A0000310.cat Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP8\A0000311.ocx Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP8\A0000312.exe Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP8\A0000313.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP8\A0000314.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP8\A0000315.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP8\A0000316.exe Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP8\A0000317.exe Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP8\A0000318.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP8\A0000319.dll Object is locked skipped
F:\System Volume Information\_restore{1BF09CBF-B54D-4A41-9173-F2E604E139B3}\RP8\A0000320.exe Object is locked skipped
F:\System Volume Information\_restore{B5B3735B-5666-401E-ABA7-E0D1D2138E07}\RP97\A0011527.exe/data.rar/xpkey.exe Infected: not-a-virus:PSWTool.Win32.RAS.a skipped
F:\System Volume Information\_restore{B5B3735B-5666-401E-ABA7-E0D1D2138E07}\RP97\A0011527.exe/data.rar/officekey.exe Infected: not-a-virus:PSWTool.Win32.RAS.a skipped
F:\System Volume Information\_restore{B5B3735B-5666-401E-ABA7-E0D1D2138E07}\RP97\A0011527.exe/data.rar Infected: not-a-virus:PSWTool.Win32.RAS.a skipped
F:\System Volume Information\_restore{B5B3735B-5666-401E-ABA7-E0D1D2138E07}\RP97\A0011527.exe RarSFX: infected - 3 skipped
F:\System Volume Information\_restore{B5B3735B-5666-401E-ABA7-E0D1D2138E07}\RP97\change.log Object is locked skipped
F:\System Volume Information\_restore{CAE4C9CB-DD94-40D2-ACF4-1AB580D49210}\RP17\A0001117.exe Object is locked skipped

Scan process completed.

pskelley
2007-10-16, 20:44
Welcome to Safer Networking, I wish to be sure you have viewed and understand this information.
"BEFORE you POST" (READ this Procedure before Requesting Assistance)
http://forums.spybot.info/showthread.php?t=288
All advice given is taken at your own risk.
Please make sure you have read this information so we are on the same page.

The Waiting Room
http://forums.spybot.info/forumdisplay.php?f=37

1) F:\HijackThis.exe <<< not in a folder or running from a hard drive, delete that copy.

2) Download from here and follow the prompts:
http://www.trendsecure.com/portal/en-US/threat_analytics/HJTInstall.exe

3) You are infected by LOP/C2 Media >>> http://inetexplorer.mvps.org/data/lop.htm
at least, there is more.

Please Download NoLop to your desktop from one of the links below...

http://www.spywareedge.net/nolop/NoLop.exe
http://www.spywaretimes.com/Tools/Download/Anti-malwareTools/NoLop!/
http://www.thespykiller.co.uk/index.php?action=tpmod;dl=get16

First close any other programs you have running as this will require a reboot
Double click NoLop.exe to run it.
Now click the button labelled "Search and Destroy"
<<your computer will now be scanned for infected files>>
When scanning is finished you will be prompted to reboot only if infected, Click OK
Now click the "REBOOT" Button.
A Message should popup from NoLop. If not, double click the program again and it will finish Please Post the contents of C:\NoLop.log along with a fresh HijackThis log

--If you receive an error, "mscomctl.ocx or one of its dependencies are not correctly registered," please download mscomctl.ocx to your system32 folder then rerun the program. --
http://www.boletrice.com/downloads/mscomctl.ocx


Thanks

tashi
2007-10-22, 07:39
This topic has been archived.

If you need it re-opened, please send me a private message (pm) and provide a link to the thread.

Applies only to the original poster, anyone else with similar problems please start a new topic.