PDA

View Full Version : Removal of small problem check !



Plisken
2008-02-22, 19:42
Hello. I had posted a thread previously and received help to remove malware and a hacker who had stolen my credit card details with the help of PSKELLY. However before i could follow the final direction i had to leave unexpectantly for a few days and the thread was subsequently lost.
i PM'D pskelly who instructed me to begin a new thread with his final instructions and hopefully another expert could check that the hacker/malware has been removed.



Complete those instructions and provide any information I reqested and a new HJT log.

Here is my new HJT log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:41:53, on 22/02/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\wltrysvc.exe
C:\WINDOWS\System32\bcmwltry.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\PROGRA~1\BTBROA~2\SMARTB~1\BTHelpNotifier.exe
C:\Program Files\btbb_wcm\McciTrayApp.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\system32\wltray.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\BT Broadband Desktop Help\bin\mpbtn.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Documents and Settings\Aaron Grieve\Desktop\BitLord\BitLord.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O3 - Toolbar: Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\system32\msdxm.ocx
O4 - HKLM\..\Run: [OemReset] %systemroot%\OPTIONS\OEMRESET.EXE /AUDIT
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [DSLAGENTEXE] C:\Program Files\BT Voyager 205 ADSL Router\Adsl\dslagent.exe
O4 - HKLM\..\Run: [MFServices] "C:\Program Files\Companion Suite IH\MFServices.exe" -n
O4 - HKLM\..\Run: [MFPrintServer] "C:\Program Files\Companion Suite IH\MFPrintServer.exe"
O4 - HKLM\..\Run: [OneTouch Monitor] C:\PROGRA~1\COMPAN~2\ONETOU~3.EXE
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\BTBROA~2\SMARTB~1\BTHelpNotifier.exe
O4 - HKLM\..\Run: [btbb_wcm_McciTrayApp] C:\Program Files\btbb_wcm\McciTrayApp.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [wltray.exe] C:\WINDOWS\system32\wltray.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [RealPlayer] "C:\Program Files\Real\RealPlayer\realplay.exe" /RunUPGToolCommandReBoot
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: Anapod Manager.lnk = C:\Program Files\Red Chair Software\Anapod Explorer\anamgr.exe
O4 - Global Startup: BT Broadband Desktop Help.lnk = C:\Program Files\BT Broadband Desktop Help\bin\matcli.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/default/kavwebscan_unicode.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {2250C29C-C5E9-4F55-BE4E-01E45A40FCF1} (CMediaMix Object) - http://musicmix.messenger.msn.com/Medialogic.CAB
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (CwlscInstall Object) - https://scan.safety.live.com/resource/download/scanner/en-us/wlscbase2213.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Norman API-hooking helper (NipSvc) - Unknown owner - C:\VIRUSfighter\Nvc\BIN\nipsvc.exe (file missing)
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe (file missing)
O23 - Service: Broadcom Wireless LAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\wltrysvc.exe

--
End of file - 8714 bytes

Sorry for the trouble. Thank you.

pskelley
2008-02-23, 14:18
Welcome to Safer Networking, I wish to be sure you have viewed and understand this information.
"BEFORE you POST" (READ this Procedure before Requesting Assistance)
http://forums.spybot.info/showthread.php?t=288
All advice given is taken at your own risk.
Please make sure you have read this information so we are on the same page.

What I wanted you to post was a link to the topic:
http://forums.spybot.info/showthread.php?t=23715
so a new helper could see what we had done.

All I see in the HJT log is this:
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
A dead line that you can remove or not with HJT.

Let's have Kaspersky Online Scan make sure nothing is hiding.

Run this online scan using Internet Explorer:
Kaspersky Online Scanner from http://www.kaspersky.com/virusscanner

Next Click on Launch Kaspersky Online Scanner

You will be prompted to install an ActiveX component from Kaspersky, Click Yes.

* The program will launch and then begin downloading the latest definition files:
* Once the files have been downloaded click on NEXT
* Now click on Scan Settings
* In the scan settings make that the following are selected:
* Scan using the following Anti-Virus database:
* Standard
* Scan Options:
* Scan Archives
* Scan Mail Bases
* Click OK
* Now under select a target to scan:
* Select My Computer
* This will program will start and scan your system.
* The scan will take a while so be patient and let it run.
* Once the scan is complete it will display if your system has been infected.
* Now click on the Save as Text button:
* Save the file to your desktop.

Then post it here. <<< no need to post a clean scan report.

Thanks

Plisken
2008-02-27, 23:41
-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Wednesday, February 27, 2008 9:37:48 PM
Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 27/02/2008
Kaspersky Anti-Virus database records: 538063
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: standard
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
A:\
C:\
D:\
E:\

Scan Statistics:
Total number of scanned objects: 114391
Number of viruses found: 12
Number of infected objects: 25
Number of suspicious objects: 0
Duration of the scan process: 03:35:00

Infected Object Name / Virus Name / Last Action
C:\Documents and Settings\Aaron Grieve\Application Data\Microsoft\Templates\Normal.dot Object is locked skipped
C:\Documents and Settings\Aaron Grieve\Application Data\Microsoft\Word\AutoRecovery save of Document1.asd Object is locked skipped
C:\Documents and Settings\Aaron Grieve\Application Data\Mozilla\Firefox\Profiles\wiqzi9az.default\cert8.db Object is locked skipped
C:\Documents and Settings\Aaron Grieve\Application Data\Mozilla\Firefox\Profiles\wiqzi9az.default\history.dat Object is locked skipped
C:\Documents and Settings\Aaron Grieve\Application Data\Mozilla\Firefox\Profiles\wiqzi9az.default\key3.db Object is locked skipped
C:\Documents and Settings\Aaron Grieve\Application Data\Mozilla\Firefox\Profiles\wiqzi9az.default\parent.lock Object is locked skipped
C:\Documents and Settings\Aaron Grieve\Application Data\Mozilla\Firefox\Profiles\wiqzi9az.default\search.sqlite Object is locked skipped
C:\Documents and Settings\Aaron Grieve\Application Data\Mozilla\Firefox\Profiles\wiqzi9az.default\urlclassifier2.sqlite Object is locked skipped
C:\Documents and Settings\Aaron Grieve\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\Aaron Grieve\Desktop\funky\N\New music\derek bell.wm Infected: Trojan-Downloader.WMA.Wimad.m skipped
C:\Documents and Settings\Aaron Grieve\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat Object is locked skipped
C:\Documents and Settings\Aaron Grieve\Local Settings\Application Data\Microsoft\Messenger\sebastion_cornellious_hemp@hotmail.com\SharingMetadata\Logs\Dfsr00005.log Object is locked skipped
C:\Documents and Settings\Aaron Grieve\Local Settings\Application Data\Microsoft\Messenger\sebastion_cornellious_hemp@hotmail.com\SharingMetadata\pending.dat Object is locked skipped
C:\Documents and Settings\Aaron Grieve\Local Settings\Application Data\Microsoft\Messenger\sebastion_cornellious_hemp@hotmail.com\SharingMetadata\Working\database_74F8_249D_F824_5F9A\dfsr.db Object is locked skipped
C:\Documents and Settings\Aaron Grieve\Local Settings\Application Data\Microsoft\Messenger\sebastion_cornellious_hemp@hotmail.com\SharingMetadata\Working\database_74F8_249D_F824_5F9A\fsr.log Object is locked skipped
C:\Documents and Settings\Aaron Grieve\Local Settings\Application Data\Microsoft\Messenger\sebastion_cornellious_hemp@hotmail.com\SharingMetadata\Working\database_74F8_249D_F824_5F9A\fsrtmp.log Object is locked skipped
C:\Documents and Settings\Aaron Grieve\Local Settings\Application Data\Microsoft\Messenger\sebastion_cornellious_hemp@hotmail.com\SharingMetadata\Working\database_74F8_249D_F824_5F9A\tmp.edb Object is locked skipped
C:\Documents and Settings\Aaron Grieve\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\Aaron Grieve\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\Aaron Grieve\Local Settings\Application Data\Microsoft\Windows Live Contacts\sebastion_cornellious_hemp@hotmail.com\real\members.stg Object is locked skipped
C:\Documents and Settings\Aaron Grieve\Local Settings\Application Data\Microsoft\Windows Live Contacts\sebastion_cornellious_hemp@hotmail.com\shadow\members.stg Object is locked skipped
C:\Documents and Settings\Aaron Grieve\Local Settings\Application Data\Mozilla\Firefox\Profiles\wiqzi9az.default\Cache\_CACHE_001_ Object is locked skipped
C:\Documents and Settings\Aaron Grieve\Local Settings\Application Data\Mozilla\Firefox\Profiles\wiqzi9az.default\Cache\_CACHE_002_ Object is locked skipped
C:\Documents and Settings\Aaron Grieve\Local Settings\Application Data\Mozilla\Firefox\Profiles\wiqzi9az.default\Cache\_CACHE_003_ Object is locked skipped
C:\Documents and Settings\Aaron Grieve\Local Settings\Application Data\Mozilla\Firefox\Profiles\wiqzi9az.default\Cache\_CACHE_MAP_ Object is locked skipped
C:\Documents and Settings\Aaron Grieve\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Aaron Grieve\Local Settings\History\History.IE5\MSHist012008022720080228\index.dat Object is locked skipped
C:\Documents and Settings\Aaron Grieve\Local Settings\Temp\bbassistant.log Object is locked skipped
C:\Documents and Settings\Aaron Grieve\Local Settings\Temp\hpodvd09.log Object is locked skipped
C:\Documents and Settings\Aaron Grieve\Local Settings\Temp\~DF4530.tmp Object is locked skipped
C:\Documents and Settings\Aaron Grieve\Local Settings\Temp\~DF49DC.tmp Object is locked skipped
C:\Documents and Settings\Aaron Grieve\Local Settings\Temp\~DFE3B5.tmp Object is locked skipped
C:\Documents and Settings\Aaron Grieve\Local Settings\Temp\~DFE3D8.tmp Object is locked skipped
C:\Documents and Settings\Aaron Grieve\Local Settings\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat Object is locked skipped
C:\Documents and Settings\Aaron Grieve\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Aaron Grieve\ntuser.dat Object is locked skipped
C:\Documents and Settings\Aaron Grieve\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temp\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temp\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\Mary\ntuser.dat Object is locked skipped
C:\Documents and Settings\Mary\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\Mary\Shared\02 Track 2.wma Infected: Trojan-Downloader.WMA.Wimad.l skipped
C:\Documents and Settings\Mary\Shared\Eighties classic (baby).wma Infected: Trojan-Downloader.WMA.Wimad.l skipped
C:\Documents and Settings\Mary\Shared\Top of Charts - 2005.wma Infected: Trojan-Downloader.WMA.Wimad.l skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\Documents and Settings\AARON GRIEVE\Application Data\Microsoft\Installer\{9D1CF8B6-17B3-4832-B062-2C2DD0B57B04}\1033.MST Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\Documents and Settings\AARON GRIEVE\Application Data\Microsoft\Installer\{9D1CF8B6-17B3-4832-B062-2C2DD0B57B04}\CCH1028.chm Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\Documents and Settings\AARON GRIEVE\Application Data\Microsoft\Installer\{9D1CF8B6-17B3-4832-B062-2C2DD0B57B04}\CCH1031.chm Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\Documents and Settings\AARON GRIEVE\Application Data\Microsoft\Installer\{9D1CF8B6-17B3-4832-B062-2C2DD0B57B04}\CCH1033.chm Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\Documents and Settings\AARON GRIEVE\Application Data\Microsoft\Installer\{9D1CF8B6-17B3-4832-B062-2C2DD0B57B04}\CCH1034.chm Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\Documents and Settings\AARON GRIEVE\Application Data\Microsoft\Installer\{9D1CF8B6-17B3-4832-B062-2C2DD0B57B04}\CCH1036.chm Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\Documents and Settings\AARON GRIEVE\Application Data\Microsoft\Installer\{9D1CF8B6-17B3-4832-B062-2C2DD0B57B04}\CCH1040.chm Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\Documents and Settings\AARON GRIEVE\Application Data\Microsoft\Installer\{9D1CF8B6-17B3-4832-B062-2C2DD0B57B04}\CCH1041.chm Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\Documents and Settings\AARON GRIEVE\Application Data\Microsoft\Installer\{9D1CF8B6-17B3-4832-B062-2C2DD0B57B04}\CCH1046.chm Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\Documents and Settings\AARON GRIEVE\Application Data\Microsoft\Installer\{9D1CF8B6-17B3-4832-B062-2C2DD0B57B04}\CCH2052.chm Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\Documents and Settings\AARON GRIEVE\Application Data\Microsoft\Installer\{9D1CF8B6-17B3-4832-B062-2C2DD0B57B04}\NewShortcut3.chm Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\Documents and Settings\AARON GRIEVE\Application Data\Microsoft\Installer\{D45EC259-4A19-4656-B588-C2C360DD18EA}\IconD45EC259.ico Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\Documents and Settings\AARON GRIEVE\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\Documents and Settings\AARON GRIEVE\Local Settings\Temp\qmgr.cab Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\Documents and Settings\AARON GRIEVE\Local Settings\Temp\qmgr.inf Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\Documents and Settings\Abby\Local Settings\Temp\hsperfdata_Abby\2720 Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp Object is locked skipped

Plisken
2008-02-27, 23:47
C:\My old Disk Structure -- 05-10-08 0650PM\f2d2f59dc5ef83ba61c904\sp2\spmsg.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\f2d2f59dc5ef83ba61c904\sp2\spuninst.exe Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\f2d2f59dc5ef83ba61c904\sp2\update\eula.txt Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\f2d2f59dc5ef83ba61c904\sp2\update\spcustom.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\f2d2f59dc5ef83ba61c904\sp2\update\update.exe Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\Program Files\InstallShield Installation Information\{2E4E8905-5F24-4AEA-84E2-923CC12E3AB1}\Setup.ilg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\Program Files\InstallShield Installation Information\{2F353D44-73BB-4971-B31D-F7642E9E9531}\setup.ilg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\Program Files\InstallShield Installation Information\{47808F78-F178-49DC-B708-15FE538B16FF}\Setup.ilg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\Program Files\InstallShield Installation Information\{51067386-0D0C-4F6C-97F5-E308D6D413D8}\setup.ilg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\Program Files\InstallShield Installation Information\{6977C4C5-213B-464B-81C8-8F343C4AFACB}\setup.ilg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\Program Files\InstallShield Installation Information\{930B2432-43D4-11D5-9871-00C04F8EEB39}\setup.ilg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\Program Files\InstallShield Installation Information\{E22F239F-953C-4C6C-8CAD-2CE1C26CCB2E}\setup.ilg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\Program Files\InstallShield Installation Information\{F6C6303B-F56F-11D5-B90B-005004892044}\setup.ilg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1A7545B4.exe Infected: Trojan-Downloader.Win32.Agent.tv skipped
C:\My old Disk Structure -- 05-10-08 0650PM\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1E171726.exe Infected: IM-Worm.Win32.Kelvir.a skipped
C:\My old Disk Structure -- 05-10-08 0650PM\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\27A85EA2.exe Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2ECA65B6.dll Infected: Trojan-Dropper.Win32.Delf.av skipped
C:\My old Disk Structure -- 05-10-08 0650PM\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2FB21B95.exe Infected: IM-Worm.Win32.Kelvir.a skipped
C:\My old Disk Structure -- 05-10-08 0650PM\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\358E3A0F.tmp Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\374E7241.dll Infected: Trojan-Downloader.Win32.Agent.tv skipped
C:\My old Disk Structure -- 05-10-08 0650PM\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\3DF13D09.dll Infected: Trojan-Dropper.Win32.Agent.og skipped
C:\My old Disk Structure -- 05-10-08 0650PM\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\3DF13D09.exe Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\3DF56705.exe Infected: Trojan-Downloader.Win32.Agent.tv skipped
C:\My old Disk Structure -- 05-10-08 0650PM\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\3DFB3AFE.dll Infected: Trojan.Win32.EliteBar.a skipped
C:\My old Disk Structure -- 05-10-08 0650PM\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\3DFE64FB.exe Infected: Packed.Win32.PolyCrypt.d skipped
C:\My old Disk Structure -- 05-10-08 0650PM\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\4FAD3BFF.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\4FC137EA.exe Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\4FC461E6.exe Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\4FC70BE3.exe Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\4FD433D4.exe Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\5A857967.exe Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\618F362C.tmp Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\63E63D48.exe Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\65F65843.dll Infected: Trojan-Dropper.Win32.Agent.og skipped
C:\My old Disk Structure -- 05-10-08 0650PM\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\68B7384C.zip Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\71861441.exe Infected: Trojan.Win32.EliteBar.a skipped
C:\My old Disk Structure -- 05-10-08 0650PM\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\7E926F68.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\7E951964.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\7E951964.tmp Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\7EA24156.exe Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\7EA56B52.exe Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\7EA56B52.tmp Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\Program Files\Packard Bell Diamond 1200Plus\Driver\Ap.exe Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\Program Files\Packard Bell Diamond 1200Plus\Driver\Ap.ini Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\Program Files\Packard Bell Diamond 1200Plus\Driver\INSTALL.LOG Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc1.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc10.gif Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc100.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc101.exe Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc102.mp3 Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc103.mp3 Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc104.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc105.exe Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc106.exe Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc107.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc108.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc109.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc11.gif Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc110.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc111.JPG Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc112.lnk Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc113.exe Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc114.gif Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc115.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc116.bmp Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc117.exe Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc118.gif Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc119.exe Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc12.gif Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc120.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc121.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc122.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc123.avi Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc124.avi Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc125.avi Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc126.avi Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc127.zip Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc128.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc129.wav Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc13.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc130.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc131.lnk Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc132.exe Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc133.exe Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc136.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc137.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc14.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc140.png Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc143.exe Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc144.mp3 Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc145.jpeg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc149.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc15.gif Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc150.lnk Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc151.lnk Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc152.exe Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc153.part Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc154.gif Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc155.lnk Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc156.doc Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc157.doc Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc158.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc159.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc16.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc160.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc161.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc162.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc163.asx Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc164.srt Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc165.exe Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc166.avi Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc167.lnk Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc168.nfo Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc169.png Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc17.JPG Object is locked skipped

Plisken
2008-02-27, 23:47
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc170.png Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc171.jpeg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc172.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc173.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc174.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc175.lnk Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc176.gif Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc177.lnk Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc178.asx Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc18.gif Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc181.mp3 Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc182.JPG Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc183.lnk Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc185.bc! Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc186.bc! Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc187.bc! Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc188.bc! Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc189.bc! Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc19.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc190.bc! Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc191.bc! Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc192.bc! Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc193.bc! Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc194.mp3 Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc195.mp3 Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc196.mp3 Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc197.lnk Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc198.lnk Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc199.lnk Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc2.png Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc20.bmp Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc200.lnk Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc201.lnk Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc202.wma Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc204.lnk Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc205.bmp Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc206.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc207.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc208.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc209.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc21.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc210.JPG Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc211.JPG Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc212.JPG Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc213.JPG Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc214.zip Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc215.m3u Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc216.nfo Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc217.sfv Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc219.exe Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc22.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc23.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc24.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc25.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc26.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc27.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc28.JPG Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc29.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc3.GIF Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc30.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc31.gif Object is locked skipped

Plisken
2008-02-27, 23:49
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc32.JPG Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc33.gif Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc34.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc35.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc36.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc37.png Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc38.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc39.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc4.png Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc40.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc41.gif Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc42.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc43.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc44.png Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc45.JPG Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc46.bmp Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc47.JPG Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc48.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc49.png Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc5.gif Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc50.JPG Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc51.torrent Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc52.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc53.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc54.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc55.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc56.jpeg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc57.rtf Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc58.PNG Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc59.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc6.txt Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc60.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc61.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc62.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc63.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc64.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc65.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc66.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc67.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc68.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc69.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc7.gif Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc70.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc71.doc Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc72.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc73.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc74.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc75.lnk Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc76.avi Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc77.nfo Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc78.srt Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc79.ssa Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc8.gif Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc80.exe Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc81.srt Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc82.ssa Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc83.torrent Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc84.bmp Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc85.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc86.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc87.JPG Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc88.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc89.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc9.gif Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc90.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc91.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc92.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc93.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc94.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc95.jpg Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc96.JPG Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc97.torrent Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc98.exe Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc99.lnk Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB824141$\win32k.sys Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB826939$\cryptsvc.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB828028$\msasn1.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB828035$\msgsvc.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB828035$\wkssvc.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB828741$\catsrv.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB828741$\catsrvut.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB828741$\clbcatex.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB828741$\clbcatq.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB828741$\colbact.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB828741$\comadmin.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB828741$\comrepl.exe Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB828741$\comsvcs.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB828741$\comuid.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB828741$\es.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB828741$\migregdb.exe Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB828741$\msdtcprx.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB828741$\msdtctm.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB828741$\msdtcuiu.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB828741$\mtxclu.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB828741$\mtxoci.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB828741$\ole32.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB828741$\rpcrt4.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB828741$\rpcss.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB828741$\txflog.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB835732$\callcont.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB835732$\gdi32.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB835732$\h323.tsp Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB835732$\h323msp.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB835732$\ipnathlp.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB835732$\lsasrv.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB835732$\mf3216.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB835732$\msasn1.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB835732$\msgina.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB835732$\mst120.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB835732$\netapi32.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB835732$\nmcom.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB835732$\rtcdll.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB835732$\schannel.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB837001$\dao360.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB837001$\expsrv.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB837001$\msexch40.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB837001$\msexcl40.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB837001$\msjet40.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB837001$\msjetol1.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB837001$\msjetoledb40.dll Object is locked skipped

Plisken
2008-02-27, 23:50
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB837001$\msjint40.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB837001$\msjter40.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB837001$\msjtes40.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB837001$\msltus40.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB837001$\mspbde40.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB837001$\msrd2x40.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB837001$\msrd3x40.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB837001$\msrepl40.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB837001$\mstext40.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB837001$\mswdat10.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB837001$\mswstr10.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB837001$\msxbde40.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB837001$\vbajet32.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB839645$\fldrclnr.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB839645$\shell32.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB839645$\shlwapi.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB839645$\sxs.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallKB839645$\xpsp2res.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallQ828026$\msdxm.ocx Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\$NtUninstallQ828026$\wmpcore.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\natynimatest.exe Infected: Trojan-Dropper.Win32.Small.acv skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\nnpiu.exe Infected: Backdoor.Win32.Agent.cg skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\ophdudil.dll Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\system32\Freeze.exe Infected: Trojan-Dropper.Win32.Agent.aoy skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\Temp\hsperfdata_AARON GRIEVE\508 Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\Temp\hsperfdata_DERMOT GRIEVE\204 Object is locked skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\Temp\jar_cache23843.tmp/Beyond.class Infected: Trojan-Dropper.Java.Beyond.e skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\Temp\jar_cache23843.tmp ZIP: infected - 1 skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\Temp\jar_cache56914.tmp/Beyond.class Infected: Trojan-Dropper.Java.Beyond.e skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\Temp\jar_cache56914.tmp ZIP: infected - 1 skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\Temp\jar_cache56915.tmp/Beyond.class Infected: Trojan-Dropper.Java.Beyond.e skipped
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\Temp\jar_cache56915.tmp ZIP: infected - 1 skipped
C:\Program Files\Alwil Software\Avast4\DATA\Avast4.db Object is locked skipped
C:\Program Files\Alwil Software\Avast4\DATA\integ\avast.int Object is locked skipped
C:\Program Files\BT Broadband Desktop Help\log\mpbtn.log Object is locked skipped
C:\Program Files\BT Broadband Desktop Help\SmartBridge\AlertFilter.log Object is locked skipped
C:\Program Files\BT Broadband Desktop Help\SmartBridge\log\httpclient.log Object is locked skipped
C:\Program Files\BT Broadband Desktop Help\SmartBridge\SBExtHost.log Object is locked skipped
C:\Program Files\BT Broadband Desktop Help\SmartBridge\SmartBridge.log Object is locked skipped
C:\RECYCLER\S-1-5-21-101265881-689911805-4247375476-1007\Dc36.wma Infected: Trojan-Downloader.WMA.Wimad.l skipped
C:\System Volume Information\catalog.wci\00000002.ps1 Object is locked skipped
C:\System Volume Information\catalog.wci\00000002.ps2 Object is locked skipped
C:\System Volume Information\catalog.wci\0001000C.ci Object is locked skipped
C:\System Volume Information\catalog.wci\cicat.fid Object is locked skipped
C:\System Volume Information\catalog.wci\cicat.hsh Object is locked skipped
C:\System Volume Information\catalog.wci\CiCL0001.000 Object is locked skipped
C:\System Volume Information\catalog.wci\CiP10000.000 Object is locked skipped
C:\System Volume Information\catalog.wci\CiP20000.000 Object is locked skipped
C:\System Volume Information\catalog.wci\CiPT0000.000 Object is locked skipped
C:\System Volume Information\catalog.wci\CiSL0001.000 Object is locked skipped
C:\System Volume Information\catalog.wci\CiSP0000.000 Object is locked skipped
C:\System Volume Information\catalog.wci\CiST0000.000 Object is locked skipped
C:\System Volume Information\catalog.wci\CiVP0000.000 Object is locked skipped
C:\System Volume Information\catalog.wci\INDEX.000 Object is locked skipped
C:\System Volume Information\catalog.wci\propstor.bk1 Object is locked skipped
C:\System Volume Information\catalog.wci\propstor.bk2 Object is locked skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
C:\System Volume Information\_restore{A750E427-8BD5-422D-9FC7-E4CCEA371408}\RP830\change.log Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\system32\config\Antivirus.Evt Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\Internet.evt Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\LogFiles\WUDF\WUDFTrace.etl Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\Temp\Perflib_Perfdata_5f0.dat Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped

Scan process completed.

pskelley
2008-02-28, 00:16
I can't say I have even seen anything like this? Looks like a lot of junk is in as Recycle Bin here:
C:\My old Disk Structure -- 05-10-08 0650PM\RECYCLER\S-1-5-21-4282951562-2136417557-3852222622-1008\Dc78.srt
But they appear not to be bad? I guess you know what you are doing on your computer and I will only concern myself with the bad items.

KASPERSKY ONLINE SCANNER REPORT Wednesday, February 27, 2008 9:37:48 PM

1) These files are infected, delete them.
C:\Documents and Settings\Aaron Grieve\Desktop\funky\N\New music\derek bell.wm
C:\Documents and Settings\Mary\Shared\02 Track 2.wma
C:\Documents and Settings\Mary\Shared\Eighties classic (baby).wma
C:\Documents and Settings\Mary\Shared\Top of Charts - 2005.wma


2) Delete the contents of the quarantine folder in red
C:\My old Disk Structure -- 05-10-08 0650PM\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\


3) Delete these files in red
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\natynimatest.exe
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\nnpiu.exe
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\system32\Freeze.exe
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\Temp\jar_cache23843.tmp
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\Temp\jar_cache56914.tmp
C:\My old Disk Structure -- 05-10-08 0650PM\WINDOWS\Temp\jar_cache56915.tmp


4) Empty the Recycle Bin on the Desktop
C:\RECYCLER\S-1-5-21-101265881-689911805-4247375476-1007\Dc36.wma

Thanks

Plisken
2008-02-29, 01:20
Well that is done and dusted I suppose. Is there anything else required? You happened to mention that you've never seen anything like this before, no doubt it's full of junk?

pskelley
2008-02-29, 01:28
Well, as you know one mans junk is surely another mans treasure, I am sure you know what you are doing on your computer. Make sure Kaspersky is scanning clean, would not hurt to update and scan with your resident antivirus also.

Some good information for you:
http://users.telenet.be/bluepatchy/miekiemoes/slowcomputer.html
http://www.microsoft.com/windowsxp/using/helpandsupport/learnmore/tips/mcgill1.mspx

Here is some great information from experts in this field that will help you stay clean and safe online.
http://users.telenet.be/bluepatchy/miekiemoes/prevention.html
http://forums.spybot.info/showthread.php?t=279
http://russelltexas.com/malware/allclear.htm
http://forum.malwareremoval.com/viewtopic.php?t=14
http://www.bleepingcomputer.com/forums/topict2520.html
http://cybercoyote.org/security/not-admin.shtml

http://www.malwarecomplaints.info/

Thanks...pskelley
Safer Networking Forums
http://www.spybot.info/en/donate/index.html
If you are reading this information...thank a teacher,
If you are reading it in English...thank a soldier.

Plisken
2008-02-29, 19:45
Well, a final thank you for helping clear up this problem and for your infinite patience.