ok..here is the file from qlocate...and again ewido is frozen upon opening...
Mon 04/10/2006
Running from: C:\FindQool
PLEASE NOTE: LEGIT FILES MIGHT BE LISTED. IF YOU ARE UNSURE OF WHAT IS LISTED LEAVE THEM ALONE.
Known file names
MD5 Check....
C:\WINDOWS\system32\esvfteh.dll
Files found with locate com.
C:\WINDOWS\SYSTEM32\ESVFTEH.DLL
C:\WINDOWS\NCNBNB.DAT
Re-check using dir /a:-d
C:\Documents and Settings\All Users\Start Menu\Programs\Startup
...
...
Runs, Listed here as a Doublecheck for the locate com results
HKLM
HKCU
...
Files In Winlogon shell and userinit
Listed here as a Doublecheck for the locate com results
shell REG_SZ Explorer.exe
userinit REG_SZ C:\WINDOWS\system32\userinit.exe,yqunncv.exe
...
SWReg utility
Written by Bobbi Flekman © 2005
Findqool edited 4/05/2006