bar888 command causing memory dump

[Shaba]

Hi

Yes, shortcut is the one we are looking for

That one in system32 folder is windows own and vital file.

Try to delete that shortcut (C:\Documents and settings\David\start menu\programs\start up\services.lnk) in safe mode. Now success?

 

[orion1234]

Yay! Success! Ok the services file is deleted. now do i delete Wnstscc.exe? And o4-stratup:services.lnk? in hijackthis?

I should say that the first 2 times my pc booted up i got a warning saying that a file containg windows registry data had to be recovered from a log file, the recovery was successful.

but services.lnk is still gone i checked.

 

[Shaba]

Hi

Yes, delete Wnstscc.exe and fix o4-startup:services.lnk? in hijackthis

Reboot and send a fresh HijackThis log

 

[orion1234]

Hi there, curiously, the o4 start up command was already gone, and i still can't delete Wnstscc.exe as it is still in use by another program, and yes i tried in safe mode too! here is my log

Logfile of HijackThis v1.99.1
Scan saved at 12:29:43, on 19/02/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\Program Files\Executive Software\DiskeeperWorkstation\DKService.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\RunDll32.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Eraser\eraser.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\david\Desktop\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.karoo.co.uk/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = IC1:8080
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [Eraser] C:\Program Files\Eraser\eraser.exe -hide
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: ATI CATALYST System Tray.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {70BA88C8-DAE8-4CE9-92BB-979C4A75F53B} (GSDACtl Class) - http://launch.gamespyarcade.com/software/launch/alaunch.cab
O16 - DPF: {7D1E9C49-BD6A-11D3-87A8-009027A35D73} (Yahoo! Audio UI1) - http://chat.yahoo.com/cab/yacsui.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {9122D757-5A4F-4768-82C5-B4171D8556A7} (PhotoPickConvert Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/PhotoSwap/PhtPkMSN.cab
O16 - DPF: {A1F2F2CE-06AF-483C-9F12-D3BAA72477D6} (BatchDownloader Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/PhotoSwap/DigWXMSN.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {D77EF652-9A6B-40C8-A4B9-1C0697C6CF41} (TikGames Online Control) - http://download.games.yahoo.com/games/web_games/tikgames/goldfever/goldfever.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} - http://download.games.yahoo.com/games/web_games/popcap/insaniquarium/popcaploader_v6.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: Diskeeper - Executive Software International, Inc. - C:\Program Files\Executive Software\DiskeeperWorkstation\DKService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe

 

[Shaba]

Hi

Download the Killbox.
Unzip it to the desktop

Double-click Killbox.exe to run it.

Select "Delete on Reboot".
Place the following line (complete path) in bold in the "Full Path of File to Delete" box in Killbox:
C:\Windows\System32\wnstscc.exe
Put a mark next to "Delete on Reboot"
Click the red-and-white "Delete File" button. Click "Yes" at the Delete on Reboot prompt. Click "No" at the Pending Operations prompt.
If your computer does not restart automatically, please restart it manually.

Please do an online scan with Kaspersky Online Scanner. You will be prompted to install an ActiveX component from Kaspersky, Click Yes.

• The program will launch and then start to download the latest definition files.
• Once the scanner is installed and the definitions downloaded, click Next.
• Now click on Scan Settings
• In the scan settings make sure that the following are selected:
  
  o Scan using the following Anti-Virus database:
  
  + Extended (If available otherwise Standard)
  
  o Scan Options:
  
  + Scan Archives
  + Scan Mail Bases
  
• Click OK
• Now under select a target to scan select My Computer
• The scan will take a while so be patient and let it run. Once the scan is complete it will display if your system has been infected.
• Now click on the Save as Text button
• Save the file to your desktop.
• Copy and paste that information in your next post.

Send:

- a fresh HijackThis log
- kaspersky report

And tell also if that C:\Windows\System32\wnstscc.exe is now gone?

 

[orion1234]

KASPERSKY ONLINE SCANNER REPORT
Monday, February 19, 2007 1:52:31 PM
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.83.0
Kaspersky Anti-Virus database last update: 19/02/2007
Kaspersky Anti-Virus database records: 269667
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
A:\
C:\
D:\
E:\

Scan Statistics:
Total number of scanned objects: 62534
Number of viruses found: 11
Number of infected objects: 81 / 0
Number of suspicious objects: 0
Duration of the scan process: 00:47:29

Infected Object Name / Virus Name / Last Action
C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\avg7log.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\avg7log.log.lck Object is locked skipped
C:\Documents and Settings\david\.jpi_cache\jar\1.0\ar3.jar-78ee691-7fe42ccc.zip/Beyond.class Infected: Trojan.Java.ClassLoader.k skipped
C:\Documents and Settings\david\.jpi_cache\jar\1.0\ar3.jar-78ee691-7fe42ccc.zip ZIP: infected - 1 skipped
C:\Documents and Settings\david\.jpi_cache\jar\1.0\nocheat.jar-67b60e84-7048bea8.zip/Matrix.class Infected: Trojan-Downloader.Java.OpenConnection.s skipped
C:\Documents and Settings\david\.jpi_cache\jar\1.0\nocheat.jar-67b60e84-7048bea8.zip ZIP: infected - 1 skipped
C:\Documents and Settings\david\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\david\Desktop\SmitfraudFix\Reboot.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped
C:\Documents and Settings\david\Desktop\SmitfraudFix.zip/SmitfraudFix/Reboot.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped
C:\Documents and Settings\david\Desktop\SmitfraudFix.zip ZIP: infected - 1 skipped
C:\Documents and Settings\david\Desktop\Unused Desktop Shortcuts\installcasino.exe Infected: not-a-virus:AdWare.Win32.Casino.n skipped
C:\Documents and Settings\david\Desktop\Unused Desktop Shortcuts\SetupCasino.exe Infected: not-a-virus:AdWare.Win32.Casino.w skipped
C:\Documents and Settings\david\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\david\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\david\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\david\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\david\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\david\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\Program Files\Common Files\Uninstall Information\RemoveWebDP.exe Infected: not-a-virus:AdWare.Win32.DelphinMediaViewer.f skipped
C:\RECYCLER\NPROTECT\00000251.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00000263.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00000327.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00000421.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00000470.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00000524.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00000565.exe Infected: not-a-virus:AdWare.Win32.DelphinMediaViewer.c skipped
C:\RECYCLER\NPROTECT\00000650.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00000760.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00000872.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00000929.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00000991.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00001147.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00001159.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00001195.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00001391.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00001427.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00001662.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00001723.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00001835.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00001837.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00001839.EXE Object is locked skipped
C:\RECYCLER\NPROTECT\00001846.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\NPROTECT\00001847.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00001990.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\NPROTECT\00001991.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc1\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc1\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc10\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc10\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc11\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc12\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc12\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc13\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc14\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc14\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc15\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc15\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc16\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc16\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc17\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc17\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc18\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc19\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc19\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc2\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc2\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc20\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc20\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc21\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc21\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc22\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc22\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc23\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc23\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc24\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc24\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc25\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc25\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc26\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc26\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc27\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc27\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc28\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc28\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc29\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc29\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc3\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc3\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc30\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc30\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc31\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc31\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc32\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc32\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc33\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc33\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc34\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc34\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc35\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc35\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc36\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc36\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc37\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc37\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc38\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc38\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc39\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc39\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc4\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc4\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc40\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc40\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc41\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc41\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc42\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc42\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc43\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc43\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc44\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc45\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc45\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc46\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc46\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc47\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc47\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc48\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc48\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc49\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc49\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc5\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc5\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc50\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc50\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc51\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc51\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc52\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc52\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc53\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc53\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc54\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc54\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc55\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc55\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc56\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc56\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc57\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc57\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc58\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc58\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc59\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc59\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc6\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc6\Update.exe Object is locked

 

[orion1234]

C:\RECYCLER\S-1-5-18\Dc60\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc60\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc7\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc7\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc8\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc8\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc9\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
C:\System Volume Information\_restore{AEE6296C-20EE-401F-AAD2-7E53FA704D3A}\RP1\A0003046.exe Infected: not-a-virus:AdWare.Win32.DelphinMediaViewer.j skipped
C:\System Volume Information\_restore{AEE6296C-20EE-401F-AAD2-7E53FA704D3A}\RP2\A0006219.ocx Infected: not-a-virus:AdWare.Win32.DelphinMediaViewer.c skipped
C:\System Volume Information\_restore{AEE6296C-20EE-401F-AAD2-7E53FA704D3A}\RP2\A0006220.dll Infected: not-a-virus:AdWare.Win32.DelphinMediaViewer.f skipped
C:\System Volume Information\_restore{AEE6296C-20EE-401F-AAD2-7E53FA704D3A}\RP2\A0006221.exe Infected: not-a-virus:AdWare.Win32.DelphinMediaViewer.f skipped
C:\System Volume Information\_restore{AEE6296C-20EE-401F-AAD2-7E53FA704D3A}\RP8\change.log Object is locked skipped
C:\WINDOWS\bet365casino setup.exe Infected: not-a-virus:AdWare.Win32.Casino.w skipped
C:\WINDOWS\Betfred Poker setup.exe Infected: not-a-virus:AdWare.Win32.Casino.w skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\Downloaded Program Files\gsda.dll Infected: not-a-virusownloader.Win32.SpyGame skipped
C:\WINDOWS\RGF2ZSBEZXNib3JvdWdo\asappsrv.dll Infected: not-a-virus:AdWare.Win32.CommAd.a skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
C:\WINDOWS\system32\config\ACEEvent.evt Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
D:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003313.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003314.ver Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003315.msi Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003316.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003317.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003318.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003319.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003320.CAT Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003321.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003322.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003323.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003324.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003325.ini Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003326.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003327.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003328.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003329.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003330.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003331.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003332.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003333.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003334.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003335.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003336.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003337.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003338.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003339.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003340.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003341.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003342.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003343.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003344.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003345.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003346.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003347.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003348.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003349.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003350.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003351.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003352.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003353.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003354.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003355.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003356.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003357.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003358.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003359.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003360.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003361.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003362.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003363.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003364.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003365.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003366.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003367.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003368.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003369.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003370.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003371.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003372.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003373.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003374.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003375.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003376.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003377.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003378.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003379.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003380.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003381.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003382.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003383.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003384.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003385.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003386.tlb Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003387.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003388.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003389.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003390.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003391.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003392.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003393.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003394.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003395.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003396.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003397.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003398.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003399.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003400.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003401.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003402.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003403.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003404.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003405.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003406.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003407.exe Object is locked skipped

 

[orion1234]

D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003408.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003409.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003410.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003411.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003412.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003413.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003414.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003415.sys Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003416.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003417.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003418.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003419.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003420.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003421.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003422.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003423.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003424.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003425.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003426.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003427.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003428.cat Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003429.sys Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003430.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003431.com Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003432.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003433.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003434.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003435.ocx Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003436.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003437.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003438.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003439.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003440.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003441.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003442.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003443.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003444.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003445.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003446.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003447.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003448.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003449.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003450.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003451.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003452.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003453.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003454.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003455.tlb Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003456.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003457.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003458.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003459.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003460.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003461.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003462.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003463.msc Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003464.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003465.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003466.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003467.cmd Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003468.mof Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003469.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003470.sys Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003471.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003472.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003473.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003474.msi Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003475.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003476.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003477.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003478.sif Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003479.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003480.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003481.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003482.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003483.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003484.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003485.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003486.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003487.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003488.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003489.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003490.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003491.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003492.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003493.cat Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003494.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003495.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003496.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003497.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003498.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003499.msi Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003500.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003501.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003502.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003503.sif Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003504.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003505.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003506.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003507.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003508.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003509.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003510.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003511.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003512.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003513.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003514.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003515.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003516.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003517.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003518.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003519.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003520.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003521.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003522.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003523.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003524.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003525.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003526.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003527.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003528.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003529.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003530.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003531.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003532.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B

 

[orion1234]

D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003534.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003535.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003536.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003537.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003538.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003539.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003540.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003541.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003542.sdb Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003543.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003544.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003545.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003546.ini Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003547.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003548.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003549.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003550.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003551.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003552.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003553.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003554.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003555.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003556.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003557.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003558.ini Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003559.ini Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003560.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003561.cat Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003562.cat Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003563.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003564.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003565.cat Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003566.cat Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003567.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003568.cat Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003569.cat Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003570.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003571.cat Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003572.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003573.cat Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003574.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003575.cat Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003576.cat Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003577.cat Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003578.cat Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003579.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003580.cat Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003581.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003582.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003583.wa_ Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003584.wa_ Object is locked skipped

Scan process completed.

 

[orion1234]

Logfile of HijackThis v1.99.1
Scan saved at 14:02:12, on 19/02/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\RunDll32.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Eraser\eraser.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\Program Files\Executive Software\DiskeeperWorkstation\DKService.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\david\Desktop\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.karoo.co.uk/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = IC1:8080
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [Eraser] C:\Program Files\Eraser\eraser.exe -hide
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: ATI CATALYST System Tray.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
O16 - DPF: {70BA88C8-DAE8-4CE9-92BB-979C4A75F53B} (GSDACtl Class) - http://launch.gamespyarcade.com/software/launch/alaunch.cab
O16 - DPF: {7D1E9C49-BD6A-11D3-87A8-009027A35D73} (Yahoo! Audio UI1) - http://chat.yahoo.com/cab/yacsui.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {9122D757-5A4F-4768-82C5-B4171D8556A7} (PhotoPickConvert Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/PhotoSwap/PhtPkMSN.cab
O16 - DPF: {A1F2F2CE-06AF-483C-9F12-D3BAA72477D6} (BatchDownloader Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/PhotoSwap/DigWXMSN.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {D77EF652-9A6B-40C8-A4B9-1C0697C6CF41} (TikGames Online Control) - http://download.games.yahoo.com/games/web_games/tikgames/goldfever/goldfever.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} - http://download.games.yahoo.com/games/web_games/popcap/insaniquarium/popcaploader_v6.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: Diskeeper - Executive Software International, Inc. - C:\Program Files\Executive Software\DiskeeperWorkstation\DKService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe


Ok, the file wnstscc is gone

Ishould also mention that on reboot i was informed that cli.exe encountered a problem and had to close, although the system seems stable

 

[Shaba]

Hi

Empty this folder:

C:\Documents and Settings\david\.jpi_cache\jar\1.0

Delete these:

C:\WINDOWS\bet365casino setup.exe
C:\WINDOWS\Betfred Poker setup.exe
C:\WINDOWS\Downloaded Program Files\gsda.dll
C:\WINDOWS\RGF2ZSBEZXNib3JvdWdo
C:\Documents and Settings\david\Desktop\Unused Desktop Shortcuts\installcasino.exe
C:\Documents and Settings\david\Desktop\Unused Desktop Shortcuts\SetupCasino.exe
C:\Program Files\Common Files\Uninstall Information\RemoveWebDP.exe

Empty Recycle Bin

Re-scan with kaspersky

Send:

- a fresh HijackThis log
- kaspersky report

 

[orion1234]

Logfile of HijackThis v1.99.1
Scan saved at 15:44:03, on 19/02/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\RunDll32.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Eraser\eraser.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\Program Files\Executive Software\DiskeeperWorkstation\DKService.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Teamspeak2_RC2\TeamSpeak.exe
C:\Documents and Settings\david\Desktop\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.karoo.co.uk/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = IC1:8080
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [Eraser] C:\Program Files\Eraser\eraser.exe -hide
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: ATI CATALYST System Tray.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
O16 - DPF: {7D1E9C49-BD6A-11D3-87A8-009027A35D73} (Yahoo! Audio UI1) - http://chat.yahoo.com/cab/yacsui.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {9122D757-5A4F-4768-82C5-B4171D8556A7} (PhotoPickConvert Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/PhotoSwap/PhtPkMSN.cab
O16 - DPF: {A1F2F2CE-06AF-483C-9F12-D3BAA72477D6} (BatchDownloader Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/PhotoSwap/DigWXMSN.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {D77EF652-9A6B-40C8-A4B9-1C0697C6CF41} (TikGames Online Control) - http://download.games.yahoo.com/games/web_games/tikgames/goldfever/goldfever.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} - http://download.games.yahoo.com/games/web_games/popcap/insaniquarium/popcaploader_v6.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: Diskeeper - Executive Software International, Inc. - C:\Program Files\Executive Software\DiskeeperWorkstation\DKService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe

 

[Shaba]

Hi

How about new kaspersky report?

 

[orion1234]

-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Monday, February 19, 2007 4:30:44 PM
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.83.0
Kaspersky Anti-Virus database last update: 19/02/2007
Kaspersky Anti-Virus database records: 269774
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
A:\
C:\
D:\
E:\

Scan Statistics:
Total number of scanned objects: 61151
Number of viruses found: 10
Number of infected objects: 80 / 0
Number of suspicious objects: 0
Duration of the scan process: 00:39:34

Infected Object Name / Virus Name / Last Action
C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\avg7log.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\avg7log.log.lck Object is locked skipped
C:\Documents and Settings\david\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\david\Desktop\SmitfraudFix\Reboot.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped
C:\Documents and Settings\david\Desktop\SmitfraudFix.zip/SmitfraudFix/Reboot.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped
C:\Documents and Settings\david\Desktop\SmitfraudFix.zip ZIP: infected - 1 skipped
C:\Documents and Settings\david\Desktop\Unused Desktop Shortcuts\installcasino.exe Infected: not-a-virus:AdWare.Win32.Casino.n skipped
C:\Documents and Settings\david\Desktop\Unused Desktop Shortcuts\SetupCasino.exe Infected: not-a-virus:AdWare.Win32.Casino.w skipped
C:\Documents and Settings\david\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\david\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\david\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\david\Local Settings\History\History.IE5\MSHist012007021920070220\index.dat Object is locked skipped
C:\Documents and Settings\david\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\david\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\david\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\Program Files\Common Files\Uninstall Information\RemoveWebDP.exe Infected: not-a-virus:AdWare.Win32.DelphinMediaViewer.f skipped
C:\RECYCLER\NPROTECT\00000251.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00000263.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00000327.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00000421.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00000470.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00000524.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00000565.exe Infected: not-a-virus:AdWare.Win32.DelphinMediaViewer.c skipped
C:\RECYCLER\NPROTECT\00000650.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00000760.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00000872.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00000929.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00000991.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00001147.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00001159.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00001195.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00001391.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00001427.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00001662.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00001723.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00001835.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00001837.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00001839.EXE Object is locked skipped
C:\RECYCLER\NPROTECT\00001846.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\NPROTECT\00001847.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00001990.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\NPROTECT\00001991.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc1\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc1\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc10\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc10\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc11\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc12\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc12\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc13\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc14\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc14\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc15\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc15\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc16\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc17\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc17\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc18\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc19\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc19\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc2\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc2\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc20\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc20\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc21\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc21\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc22\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc22\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc23\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc23\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc24\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc24\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc25\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc25\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc26\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc26\Update.exe Object is locked skipped

 

[orion1234]

C:\RECYCLER\S-1-5-18\Dc27\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc27\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc28\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc28\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc29\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc29\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc3\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc3\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc30\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc30\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc31\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc31\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc32\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc32\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc33\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc33\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc34\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc34\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc35\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc35\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc36\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc36\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc37\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc37\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc38\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc38\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc39\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc39\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc4\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc4\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc40\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc40\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc41\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc41\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc42\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc42\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc43\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc43\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc44\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc45\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc45\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc46\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc46\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc47\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc47\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc48\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc48\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc49\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc49\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc5\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc5\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc50\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc50\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc51\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc51\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc52\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc52\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc53\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc53\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc54\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc54\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc55\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc55\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc56\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc56\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc57\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc57\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc58\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc58\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc59\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc59\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc6\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc6\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc60\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc60\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc7\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc7\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc8\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc8\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc9\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-21-1547161642-436374069-839522115-1005\Dc142.zip/Matrix.class Infected: Trojan-Downloader.Java.OpenConnection.s skipped
C:\RECYCLER\S-1-5-21-1547161642-436374069-839522115-1005\Dc142.zip ZIP: infected - 1 skipped
C:\RECYCLER\S-1-5-21-1547161642-436374069-839522115-1005\Dc202.exe Infected: not-a-virus:AdWare.Win32.Casino.w skipped
C:\RECYCLER\S-1-5-21-1547161642-436374069-839522115-1005\Dc7.zip/Beyond.class Infected: Trojan.Java.ClassLoader.k skipped
C:\RECYCLER\S-1-5-21-1547161642-436374069-839522115-1005\Dc7.zip ZIP: infected - 1 skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
C:\System Volume Information\_restore{AEE6296C-20EE-401F-AAD2-7E53FA704D3A}\RP1\A0003046.exe Infected: not-a-virus:AdWare.Win32.DelphinMediaViewer.j skipped
C:\System Volume Information\_restore{AEE6296C-20EE-401F-AAD2-7E53FA704D3A}\RP2\A0006219.ocx Infected: not-a-virus:AdWare.Win32.DelphinMediaViewer.c skipped
C:\System Volume Information\_restore{AEE6296C-20EE-401F-AAD2-7E53FA704D3A}\RP2\A0006220.dll Infected: not-a-virus:AdWare.Win32.DelphinMediaViewer.f skipped
C:\System Volume Information\_restore{AEE6296C-20EE-401F-AAD2-7E53FA704D3A}\RP2\A0006221.exe Infected: not-a-virus:AdWare.Win32.DelphinMediaViewer.f skipped
C:\System Volume Information\_restore{AEE6296C-20EE-401F-AAD2-7E53FA704D3A}\RP8\A0015049.exe Object is locked skipped
C:\System Volume Information\_restore{AEE6296C-20EE-401F-AAD2-7E53FA704D3A}\RP8\change.log Object is locked skipped
C:\WINDOWS\Betfred Poker setup.exe Infected: not-a-virus:AdWare.Win32.Casino.w skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\RGF2ZSBEZXNib3JvdWdo\asappsrv.dll Infected: not-a-virus:AdWare.Win32.CommAd.a skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\system32\config\ACEEvent.evt Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
D:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003313.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003314.ver Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003315.msi Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003316.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003317.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003318.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003319.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003320.CAT Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003321.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003322.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003323.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003324.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003325.ini Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003326.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003327.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003328.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003329.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003330.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003331.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003332.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003333.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003334.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003335.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003336.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003337.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003338.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003339.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003340.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003341.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003342.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003343.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003344.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003345.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003346.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003347.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003348.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003349.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003350.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003351.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003352.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003353.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003354.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003355.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003356.dll Object is locked skipped

 

[orion1234]

D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003357.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003358.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003359.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003360.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003361.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003362.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003363.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003364.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003365.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003366.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003367.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003368.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003369.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003370.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003371.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003372.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003373.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003374.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003375.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003376.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003377.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003378.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003379.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003380.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003381.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003382.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003383.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003384.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003385.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003386.tlb Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003387.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003388.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003389.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003390.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003391.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003392.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003393.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003394.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003395.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003396.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003397.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003398.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003399.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003400.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003401.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003402.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003403.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003404.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003405.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003406.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003407.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003408.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003409.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003410.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003411.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003412.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003413.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003414.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003415.sys Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003416.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003417.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003418.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003419.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003420.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003421.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003422.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003423.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003424.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003425.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003426.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003427.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003428.cat Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003429.sys Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003430.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003431.com Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003432.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003433.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003434.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003435.ocx Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003436.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003437.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003438.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003439.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003440.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003441.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003442.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003443.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003444.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003445.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003446.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003447.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003448.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003449.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003450.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003451.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003452.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003453.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003454.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003455.tlb Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003456.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003457.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003458.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003459.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003460.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003461.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003462.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003463.msc Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003464.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003465.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003466.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003467.cmd Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003468.mof Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003469.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003470.sys Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003471.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003472.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003473.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003474.msi Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003475.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003476.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003477.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003478.sif Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003479.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003480.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003481.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003482.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003483.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003484.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003485.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003486.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003487.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003488.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003489.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003490.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003491.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003492.exe Object is locked skipped

 

[orion1234]

D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003493.cat Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003494.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003495.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003496.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003497.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003498.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003499.msi Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003500.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003501.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003502.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003503.sif Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003504.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003505.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003506.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003507.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003508.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003509.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003510.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003511.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003512.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003513.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003514.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003515.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003516.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003517.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003518.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003519.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003520.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003521.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003522.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003523.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003524.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003525.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003526.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003527.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003528.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003529.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003530.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003531.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003532.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003533.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003534.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003535.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003536.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003537.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003538.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003539.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003540.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003541.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003542.sdb Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003543.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003544.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003545.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003546.ini Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003547.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003548.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003549.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003550.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003551.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003552.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003553.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003554.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003555.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003556.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003557.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003558.ini Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003559.ini Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003560.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003561.cat Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003562.cat Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003563.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003564.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003565.cat Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003566.cat Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003567.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003568.cat Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003569.cat Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003570.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003571.cat Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003572.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003573.cat Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003574.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003575.cat Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003576.cat Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003577.cat Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003578.cat Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003579.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003580.cat Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003581.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003582.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003583.wa_ Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003584.wa_ Object is locked skipped

Scan process completed.
I should say that the file with all the alpha numerics didnt seem to exist, i checked all folders hidden and otherwise aswell as the path you gave.

the others i deleted apart from the betfred stuff cause i use that program (am avid poker player)

 

[Shaba]

Hi

Well, that does exist It just might be superhidden.

Save text below as remcmd.bat on Notepad to desktop (save it as all files, *.*):

@ECHO OFF
attrib -r -h C:\WINDOWS\RGF2ZSBEZXNib3JvdWdo\*.*
del /a /f /q C:\WINDOWS\RGF2ZSBEZXNib3JvdWdo\*.*
RD /s /q "C:\WINDOWS\RGF2ZSBEZXNib3JvdWdo"

Doubleclick remcmd.bat on desktop, click yes and ok; black dos windows will flash, that's normal.

Re-scan with kaspersky

Send:

- a fresh HijackThis log
- kaspersky report

 

[orion1234]

-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Monday, February 19, 2007 6:58:56 PM
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.83.0
Kaspersky Anti-Virus database last update: 19/02/2007
Kaspersky Anti-Virus database records: 270293
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
A:\
C:\
D:\
E:\

Scan Statistics:
Total number of scanned objects: 61170
Number of viruses found: 10
Number of infected objects: 80 / 0
Number of suspicious objects: 0
Duration of the scan process: 00:40:15

Infected Object Name / Virus Name / Last Action
C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\avg7log.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\avg7log.log.lck Object is locked skipped
C:\Documents and Settings\david\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\david\Desktop\SmitfraudFix\Reboot.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped
C:\Documents and Settings\david\Desktop\SmitfraudFix.zip/SmitfraudFix/Reboot.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped
C:\Documents and Settings\david\Desktop\SmitfraudFix.zip ZIP: infected - 1 skipped
C:\Documents and Settings\david\Desktop\Unused Desktop Shortcuts\installcasino.exe Infected: not-a-virus:AdWare.Win32.Casino.n skipped
C:\Documents and Settings\david\Desktop\Unused Desktop Shortcuts\SetupCasino.exe Infected: not-a-virus:AdWare.Win32.Casino.w skipped
C:\Documents and Settings\david\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\david\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\david\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\david\Local Settings\History\History.IE5\MSHist012007021920070220\index.dat Object is locked skipped
C:\Documents and Settings\david\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\david\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\david\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\Program Files\Common Files\Uninstall Information\RemoveWebDP.exe Infected: not-a-virus:AdWare.Win32.DelphinMediaViewer.f skipped
C:\RECYCLER\NPROTECT\00000251.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00000263.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00000327.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00000421.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00000470.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00000524.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00000565.exe Infected: not-a-virus:AdWare.Win32.DelphinMediaViewer.c skipped
C:\RECYCLER\NPROTECT\00000650.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00000760.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00000872.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00000929.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00000991.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00001147.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00001159.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00001195.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00001391.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00001427.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00001662.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00001723.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00001835.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00001837.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00001839.EXE Object is locked skipped
C:\RECYCLER\NPROTECT\00001846.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\NPROTECT\00001847.exe Object is locked skipped
C:\RECYCLER\NPROTECT\00001990.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\NPROTECT\00001991.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc1\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc1\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc10\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc10\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc11\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc12\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc12\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc13\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc14\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc14\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc15\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc15\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc16\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc17\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc17\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc18\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc19\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc19\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc2\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc2\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc20\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc20\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc21\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc21\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc22\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc22\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc23\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc23\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc24\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc24\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc25\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc25\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc26\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc26\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc27\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc27\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc28\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc28\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc29\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc29\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc3\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc3\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc30\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc30\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc31\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc31\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc32\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc32\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc33\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc33\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc34\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc34\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc35\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc35\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc36\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc36\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc37\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc37\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc38\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc38\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc39\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc39\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc4\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc4\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc40\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc40\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc41\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc41\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc42\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc42\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc43\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc43\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc44\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc45\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc45\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc46\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc46\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc47\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc47\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc48\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc48\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc49\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc49\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc5\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc5\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc50\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc50\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc51\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc51\Update.exe Object is locked skipped

 

[orion1234]

C:\RECYCLER\S-1-5-18\Dc52\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc52\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc53\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc53\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc54\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc54\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc55\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc55\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc56\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc56\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc57\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc57\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc58\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc58\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc59\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc59\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc6\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc6\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc60\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc60\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc7\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc7\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc8\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-18\Dc8\Update.exe Object is locked skipped
C:\RECYCLER\S-1-5-18\Dc9\system.dll Infected: not-a-virus:AdWare.Win32.Softomate.ac skipped
C:\RECYCLER\S-1-5-21-1547161642-436374069-839522115-1005\Dc142.zip/Matrix.class Infected: Trojan-Downloader.Java.OpenConnection.s skipped
C:\RECYCLER\S-1-5-21-1547161642-436374069-839522115-1005\Dc142.zip ZIP: infected - 1 skipped
C:\RECYCLER\S-1-5-21-1547161642-436374069-839522115-1005\Dc202.exe Infected: not-a-virus:AdWare.Win32.Casino.w skipped
C:\RECYCLER\S-1-5-21-1547161642-436374069-839522115-1005\Dc7.zip/Beyond.class Infected: Trojan.Java.ClassLoader.k skipped
C:\RECYCLER\S-1-5-21-1547161642-436374069-839522115-1005\Dc7.zip ZIP: infected - 1 skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
C:\System Volume Information\_restore{AEE6296C-20EE-401F-AAD2-7E53FA704D3A}\RP1\A0003046.exe Infected: not-a-virus:AdWare.Win32.DelphinMediaViewer.j skipped
C:\System Volume Information\_restore{AEE6296C-20EE-401F-AAD2-7E53FA704D3A}\RP2\A0006219.ocx Infected: not-a-virus:AdWare.Win32.DelphinMediaViewer.c skipped
C:\System Volume Information\_restore{AEE6296C-20EE-401F-AAD2-7E53FA704D3A}\RP2\A0006220.dll Infected: not-a-virus:AdWare.Win32.DelphinMediaViewer.f skipped
C:\System Volume Information\_restore{AEE6296C-20EE-401F-AAD2-7E53FA704D3A}\RP2\A0006221.exe Infected: not-a-virus:AdWare.Win32.DelphinMediaViewer.f skipped
C:\System Volume Information\_restore{AEE6296C-20EE-401F-AAD2-7E53FA704D3A}\RP8\A0015049.exe Object is locked skipped
C:\System Volume Information\_restore{AEE6296C-20EE-401F-AAD2-7E53FA704D3A}\RP8\A0017049.dll Infected: not-a-virus:AdWare.Win32.CommAd.a skipped
C:\System Volume Information\_restore{AEE6296C-20EE-401F-AAD2-7E53FA704D3A}\RP8\change.log Object is locked skipped
C:\WINDOWS\Betfred Poker setup.exe Infected: not-a-virus:AdWare.Win32.Casino.w skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\system32\config\ACEEvent.evt Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
D:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003313.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003314.ver Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003315.msi Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003316.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003317.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003318.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003319.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003320.CAT Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003321.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003322.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003323.exe Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003324.inf Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003325.ini Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003326.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003327.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003328.dll Object is locked skipped
D:\System Volume Information\_restore{AB0BD23C-2FE6-42F3-8C7A-3035DBA2B7A8}\RP4\A0003329.dll Object is locked skipped