Help With Trojans

[leviathan]

hI I RAN A SCAN AND REMOVED A LOT OF MALWARE AND OTHER STUFF BUT THE SCAN ADVISE ME TO CONTACT YOU FOR REMOVAL OF "SMITHFRAUD-C.CORESERVICE" AND "VIRTUMONDE" DO HERE i AM HOW DO I DO IT?:spider:

 

[tashi]

"BEFORE you POST"(READ this Procedure before Requesting Assistance)

 

[leviathan]

on-lin scan and hijack log

here are the scan results you ordered:crowned:
ca-online scan=
File Infection Status Path
aqgodpva.exe Win32/Secdrop.OF infected C:\WINDOWS\system32\
mljkhgd.dll Win32/Chisyne!generic infected C:\WINDOWS\system32\
vturp.dll Win32/Vundo!generic infected C:\WINDOWS\system32\


hijackthis log=

Logfile of HijackThis v1.99.1
Scan saved at 7:24:17 PM, on 8/5/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Microsoft Windows OneCare Live\Antivirus\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Netscape Internet Service\ncupdatesvc.exe
C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe
C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
C:\Program Files\Corel\Corel Photo Album 6\MediaDetect.exe
C:\WINDOWS\mkiqozdA.exe
C:\Program Files\Microsoft Windows OneCare Live\winssnotify.exe
C:\Program Files\NetWaiting\netWaiting.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\ScreenArt\WillowRd.exe
C:\Program Files\Microsoft Office\Office\1033\msoffice.exe
C:\Program Files\Microsoft Windows OneCare Live\Firewall\msfwsvc.exe
C:\Program Files\Microsoft Windows OneCare Live\winss.exe
C:\Program Files\MUSICMATCH\Musicmatch Jukebox\mim.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\MUSICMATCH\Musicmatch Jukebox\MMDiag.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe
C:\WINDOWS\system32\nwgpespa.exe
C:\Documents and Settings\Mildred Sanchez\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.rr.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [ShowLOMControl]

O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [MimBoot] C:\PROGRA~1\MUSICM~1\MUSICM~3\mimboot.exe
O4 - HKLM\..\Run: [MMTray] "C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe"
O4 - HKLM\..\Run: [SsAAD.exe] C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
O4 - HKLM\..\Run: [Corel Photo Downloader] C:\Program Files\Corel\Corel Photo Album 6\MediaDetect.exe
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKLM\..\Run: [Synchronization Manager] %SystemRoot%\system32\mobsync.exe /logon
O4 - HKLM\..\Run: [mkiqozdA] C:\WINDOWS\mkiqozdA.exe
O4 - HKLM\..\Run: [{E3-31-1B-B4-ZN}] C:\windows\system32\mpdsrego.exe SKY009
O4 - HKLM\..\Run: [OneCareUI] "C:\Program Files\Microsoft Windows OneCare Live\winssnotify.exe"
O4 - HKLM\..\Run: [SystemOptimizer] rundll32.exe "C:\WINDOWS\system32\cuvriypg.dll",forkonce
O4 - HKCU\..\Run: [ModemOnHold] C:\Program Files\NetWaiting\netWaiting.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: America Online 9.0 Tray Icon.lnk = C:\Program Files\America Online 9.0\aoltray.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: ScreenArt.lnk = C:\Program Files\ScreenArt\WillowRd.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O12 - Plugin for .bcf: C:\Program Files\Internet Explorer\Plugins\NPBelv32.dll
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {55027008-315F-4F45-BBC3-8BE119764741} (Slide Image Uploader Control) - http://www.slide.com/uploader/SlideImageUploader.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1145330506484
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www.ca.com/us/securityadvisor/virusinfo/webscan.cab
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: Netscape Update Service (NCUpdateSvc) - Netscape Communications Corporation - C:\Program Files\Netscape Internet Service\ncupdatesvc.exe
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe
O23 - Service: Intel(R) PROSet/Wireless SSO Service (WLANKEEPER) - Intel(R) Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe


thanks for you help

 

[pskelley]

Welcome to Safer Networking, I wish to be sure you have viewed and understand this information.
"BEFORE you POST" (READ this Procedure before Requesting Assistance)
http://forums.spybot.info/showthread.php?t=288
All advice given is taken at your own risk.
Please make sure you have read this information so we are on the same page.

1) Please see this: http://forums.spybot.info/showpost.php?p=12880&postcount=2
C:\Program Files\Java\j2re1.4.2_03\ <<< Java is BADLY out of date, download the newest version and uninstall all old versions in Add Remove programs.

2) C:\Documents and Settings\Mildred Sanchez\Desktop\HijackThis.exe
Move HJT from the Desktop for safety. I prefer C:\HJT\HijackThis.exe, if you need additional instructions use these: http://russelltexas.com/malware/createhjtfolder.htm
After it is move, rename HJT.exe, call it leviathan.exe or whatever you wish. It will look like this: C:\HJT\leviathan.exe

Thanks to sUBs and anyone else who helped with this fix.

3) Download ComboFix from Here or Here to your Desktop.

• Double click combofix.exe and follow the prompts.
• When finished, it shall produce a log for you. Post that log and a HiJackthis log in your next reply

Note: Do not mouseclick combofix's window while its running. That may cause it to stall

Thanks

 

[leviathan]

combo fix log

thank for the help here go the logs

combo fix=

ComboFix 07-08-04.3 - "Mildred Sanchez" 2007-08-06 21:59:38.1 [GMT -5:00] - NTFS
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.True
* Created a new restore point


((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))


C:\DOCUME~1\CARLYS~1\APPLIC~1\WinTouch
C:\DOCUME~1\CARLYS~1\APPLIC~1\WinTouch\wintouch.cfg
C:\DOCUME~1\CARLYS~1\APPLIC~1\WinTouch\WinTouch.exe
C:\DOCUME~1\CARLYS~1\APPLIC~1\WinTouch\WTUninstaller.exe
C:\DOCUME~1\MILDRE~1\APPLIC~1.\crosof~1.net
C:\DOCUME~1\MILDRE~1\APPLIC~1.\dobe~1
C:\DOCUME~1\MILDRE~1\MYDOCU~1.\dobe~1
C:\DOCUME~1\MILDRE~1\MYDOCU~1.\ystem~1
C:\Program Files\outerinfo
C:\Program Files\outerinfo\Terms.rtf
C:\Program Files\Windows Media Player\rteprejyfs.html
C:\temp\0c2
C:\temp\0c2\tmpRC.log
C:\temp\brr
C:\temp\tn3
C:\WINDOWS\b138.exe
C:\WINDOWS\ppatch~1
C:\WINDOWS\system32\aqgodpva.exe
C:\WINDOWS\system32\B0
C:\WINDOWS\system32\b02FdUe
C:\WINDOWS\system32\B1
C:\WINDOWS\system32\B2
C:\WINDOWS\system32\B3
C:\WINDOWS\system32\B5
C:\WINDOWS\system32\crosof~1.net
C:\WINDOWS\system32\driver
C:\WINDOWS\system32\dxnroglh.exe
C:\WINDOWS\system32\fkacosfv.dll
C:\WINDOWS\system32\gfxopxma.exe
C:\WINDOWS\system32\hhbdobyk.exe
C:\WINDOWS\system32\hhvowyve.exe
C:\WINDOWS\system32\ihplkwxd.exe
C:\WINDOWS\system32\knynlnwh.exe
C:\WINDOWS\system32\kypckxcs.dll
C:\WINDOWS\system32\mljkhgd.dll
C:\WINDOWS\system32\mpqss.bak1
C:\WINDOWS\system32\mpqss.bak2
C:\WINDOWS\system32\mpqss.ini
C:\WINDOWS\system32\mpqss.ini2
C:\WINDOWS\system32\mpqss.tmp
C:\WINDOWS\system32\mrqgbwsn.exe
C:\WINDOWS\system32\nwgpespa.exe
C:\WINDOWS\system32\payeodjn.exe
C:\WINDOWS\system32\pdgbukiy.exe
C:\WINDOWS\system32\prutv.bak1
C:\WINDOWS\system32\prutv.bak2
C:\WINDOWS\system32\prutv.ini
C:\WINDOWS\system32\prutv.ini2
C:\WINDOWS\system32\prutv.tmp
C:\WINDOWS\system32\racle~1
C:\WINDOWS\system32\rtddeosm.exe
C:\WINDOWS\system32\rxgireaw.exe
C:\WINDOWS\system32\uqfexkaf.exe
C:\WINDOWS\system32\vturp.dll
C:\WINDOWS\system32\wnsinticomsv.exe
C:\WINDOWS\system32\xfpnxsyt.dll
C:\WINDOWS\system32\xykhvvdx.exe
C:\WINDOWS\tk58.exe
C:\WINDOWS\wnsxs~1
C:\WINDOWS\wr.txt


((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))


-------\LEGACY_CORE
-------\LEGACY_NETWORK_MONITOR
-------\LEGACY_NWSAPAGENT
-------\LEGACY_WINDOWS_OVERLAY_COMPONENTS
-------\core
-------\NwSapAgent


((((((((((((((((((((((((( Files Created from 2007-07-07 to 2007-08-07 )))))))))))))))))))))))))))))))


2007-08-06 21:57 51,200 --a------ C:\WINDOWS\nircmd.exe
2007-08-06 21:13 125,504 --a------ C:\WINDOWS\system32\lwlaxbyf.dll
2007-08-06 21:12 <DIR> d-------- C:\hjt
2007-07-27 12:57 <DIR> d-------- C:\WINDOWS\network diagnostic
2007-07-27 12:56 33,792 --a------ C:\WINDOWS\system32\dllcache\custsat.dll
2007-07-27 12:01 81,024 --a------ C:\WINDOWS\system32\drivers\msfwdrv.sys
2007-07-27 12:01 105,856 --a------ C:\WINDOWS\system32\drivers\msfwhlpr.sys
2007-07-27 11:57 67,784 --a------ C:\WINDOWS\system32\drivers\MpFilter.sys
2007-07-27 11:57 <DIR> d----c--- C:\WINDOWS\system32\DRVSTORE
2007-07-27 11:41 <DIR> d-------- C:\Program Files\Microsoft Windows OneCare Live
2007-07-17 13:24 <DIR> d-------- C:\DOCUME~1\CARLYS~1\APPLIC~1\A?pPatch
2007-07-15 02:42 <DIR> d-------- C:\Program Files\Yahoo!
2007-07-15 01:19 <DIR> d-------- C:\DOCUME~1\CARLYS~1\APPLIC~1\?ystem32
2007-07-14 14:47 <DIR> d---s---- C:\DOCUME~1\LOCALS~1\UserData
2007-07-12 21:46 459,336 --a------ C:\temp\bY001.exe
2007-07-12 21:46 316,352 -r-hs---- C:\WINDOWS\mkiqozdA.exe
2007-07-06 18:09 <DIR> d-------- C:\DOCUME~1\CARLYS~1\APPLIC~1\s?mbols
2007-07-06 15:18 <DIR> d-------- C:\DOCUME~1\BRANDO~1\APPLIC~1\FUJIFILM
2007-07-06 11:04 <DIR> d---s---- C:\DOCUME~1\BRANDO~1\UserData


(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

2007-07-27 20:14 --------- d-------- C:\Program Files\SpywareBlaster
2007-07-27 00:50 --------- d-------- C:\Program Files\Google
2007-07-27 00:10 --------- d-------- C:\Program Files\Common Files\AOL
2007-07-17 18:04 7518 --ahs---- C:\WINDOWS\system32\KGyGaAvL.sys
2007-07-17 18:04 152 -r-hs---- C:\WINDOWS\system32\8FB80101DF.sys
2007-07-01 21:00 --------- d-------- C:\Program Files\Buddy Icon Maker
2007-07-01 20:52 --------- d-------- C:\Program Files\BuddyList Ops
2007-06-26 23:07 664 --a------ C:\WINDOWS\system32\d3d9caps.dat
2007-06-25 08:54 53248 --a------ C:\WINDOWS\uni_eh44.exe
2007-06-25 08:53 53248 --a------ C:\WINDOWS\uninst1014.exe
2007-05-16 10:12 86528 --------- C:\WINDOWS\system32\dllcache\directdb.dll
2007-05-16 10:12 85504 --------- C:\WINDOWS\system32\dllcache\wabimp.dll
2007-05-16 10:12 683520 --a------ C:\WINDOWS\system32\inetcomm.dll
2007-05-16 10:12 683520 --------- C:\WINDOWS\system32\dllcache\inetcomm.dll
2007-05-16 10:12 510976 --------- C:\WINDOWS\system32\dllcache\wab32.dll
2007-05-16 10:12 1314816 --------- C:\WINDOWS\system32\dllcache\msoe.dll
2007-05-08 04:24 3583488 --a------ C:\WINDOWS\system32\dllcache\mshtml.dll


((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))


*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{5BF1077C-7428-469B-904F-DE151345A2EB}]
C:\WINDOWS\system32\ssqpm.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray"="C:\WINDOWS\ehome\ehtray.exe" [2005-09-29 14:01]
"igfxtray"="C:\WINDOWS\system32\igfxtray.exe" [2005-12-13 23:44]
"igfxhkcmd"="C:\WINDOWS\system32\hkcmd.exe" [2005-12-13 23:41]
"igfxpers"="C:\WINDOWS\system32\igfxpers.exe" [2005-12-13 23:45]
"IntelZeroConfig"="C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe" [2005-12-28 11:55]
"IntelWireless"="C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" [2005-12-28 11:56]
"SigmatelSysTrayApp"="stsystra.exe" [2005-11-16 21:35 C:\WINDOWS\stsystra.exe]
"Dell QuickSet"="C:\Program Files\Dell\QuickSet\quickset.exe" [2005-12-06 10:45]
"ShowLOMControl"="1 (0x1)" []
"SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2005-11-29 18:56]
"DVDLauncher"="C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe" [2005-12-09 20:29]
"RealTray"="C:\Program Files\Real\RealPlayer\RealPlay.exe" [2006-04-05 15:53]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2006-04-05 15:53]
"dla"="C:\WINDOWS\system32\dla\tfswctrl.exe" [2004-12-06 01:05]
"ISUSPM Startup"="C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" [2005-06-10 10:44]
"ISUSScheduler"="C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" [2005-06-10 10:44]
"MimBoot"="C:\PROGRA~1\MUSICM~1\MUSICM~3\mimboot.exe" [2006-09-18 14:46]
"MMTray"="C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe" [2006-09-18 14:46]
"SsAAD.exe"="C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe" [2005-06-03 07:16]
"Corel Photo Downloader"="C:\Program Files\Corel\Corel Photo Album 6\MediaDetect.exe" [2005-08-31 11:06]
"REGSHAVE"="C:\Program Files\REGSHAVE\REGSHAVE.exe" [2002-02-04 22:32]
"Synchronization Manager"="C:\WINDOWS\system32\mobsync.exe" [2004-08-10 05:00]
"mkiqozdA"="C:\WINDOWS\mkiqozdA.exe" [1989-12-12 10:10]
"{E3-31-1B-B4-ZN}"="C:\windows\system32\mpdsrego.exe" []
"OneCareUI"="C:\Program Files\Microsoft Windows OneCare Live\winssnotify.exe" [2007-08-02 10:47]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe" [2007-07-12 04:00]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ModemOnHold"="C:\Program Files\NetWaiting\netWaiting.exe" [2003-09-10 02:24]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 11:24]
"DellSupport"="C:\Program Files\DellSupport\DSAgnt.exe" [2007-03-15 11:09]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-10 05:00]

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" /background
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Adobe Gamma Loader.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2006-04-17 20:22:43]
America Online 9.0 Tray Icon.lnk - C:\Program Files\America Online 9.0\aoltray.exe [2006-04-05 15:53:01]
Digital Line Detect.lnk - C:\Program Files\Digital Line Detect\DLG.exe [2006-04-05 15:49:12]
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office\OSA9.EXE [1999-02-17 12:05:56]
ScreenArt.lnk - C:\Program Files\ScreenArt\WillowRd.exe [2006-12-10 14:29:15]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"InstallVisualStyle"=C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
"InstallTheme"=C:\WINDOWS\Resources\Themes\Royale.theme

[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\0]
Source= C:\Program Files\Windows Media Player\rteprejyfs.html
FriendlyName=

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\ssqpm]
C:\WINDOWS\system32\ssqpm.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\OneCareMP]
@="Service"

R1 MSFWHLPR;MSFWHLPR;C:\WINDOWS\system32\DRIVERS\msfwhlpr.sys
R1 sscdbhk5;sscdbhk5;C:\WINDOWS\system32\drivers\sscdbhk5.sys
R1 ssrtln;ssrtln;C:\WINDOWS\system32\drivers\ssrtln.sys
R2 ASCTRM;ASCTRM;C:\WINDOWS\system32\drivers\ASCTRM.sys
R2 MSFWDrv;MSFWDrv;C:\WINDOWS\system32\DRIVERS\msfwdrv.sys
R2 msfwsvc;OneCare Firewall;"C:\Program Files\Microsoft Windows OneCare Live\Firewall\msfwsvc.exe"
R2 OneCareMP;OneCare AntiSpyware and AntiVirus;"C:\Program Files\Microsoft Windows OneCare Live\Antivirus\MsMpEng.exe"
R2 s24trans;WLAN Transport;C:\WINDOWS\system32\DRIVERS\s24trans.sys
R2 SbcpHid;SbcpHid;\??\C:\WINDOWS\system32\Drivers\SbcpHid.sys
R2 tfsnpool;tfsnpool;C:\WINDOWS\system32\dla\tfsnpool.sys
R3 rimmptsk;rimmptsk;C:\WINDOWS\system32\DRIVERS\rimmptsk.sys
R3 rimsptsk;rimsptsk;C:\WINDOWS\system32\DRIVERS\rimsptsk.sys
R3 rismxdp;Ricoh xD-Picture Card Driver;C:\WINDOWS\system32\DRIVERS\rixdptsk.sys
R3 sdbus;sdbus;C:\WINDOWS\system32\DRIVERS\sdbus.sys
R3 STHDA;SigmaTel High Definition Audio CODEC;C:\WINDOWS\system32\drivers\sthda.sys
R3 SynTP;Synaptics TouchPad Driver;C:\WINDOWS\system32\DRIVERS\SynTP.sys
R3 wanatw;WAN Miniport (ATW);C:\WINDOWS\system32\DRIVERS\wanatw4.sys
S3 E100B;Intel(R) PRO Adapter Driver;C:\WINDOWS\system32\DRIVERS\e100b325.sys
S3 MHN;MHN;C:\WINDOWS\System32\svchost.exe -k netsvcs
S3 MHNDRV;MHN driver;C:\WINDOWS\system32\DRIVERS\mhndrv.sys
S3 MpFilter;Microsoft Malware Protection Driver;C:\WINDOWS\system32\DRIVERS\MpFilter.sys
S3 nm;Network Monitor Driver;C:\WINDOWS\system32\DRIVERS\NMnt.sys
S3 w39n51;Intel(R) PRO/Wireless 3945ABG Adapter Driver;C:\WINDOWS\system32\DRIVERS\w39n51.sys


[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{361ac05d-0e0d-11da-9aa9-806d6172696f}]
AutoRun\command- E:\setup.exe


**************************************************************************

catchme 0.3.1061 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-08-06 22:16:09
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden registry entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************

Completion time: 2007-08-06 22:17:44 - machine was rebooted
C:\ComboFix-quarantined-files.txt ... 2007-08-06 22:17

--- E O F ---

 

[leviathan]

new hjt log from c:hjt

Logfile of HijackThis v1.99.1
Scan saved at 10:24:20 PM, on 8/6/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Microsoft Windows OneCare Live\Antivirus\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Netscape Internet Service\ncupdatesvc.exe
C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\Microsoft Windows OneCare Live\Firewall\msfwsvc.exe
C:\Program Files\Microsoft Windows OneCare Live\winss.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Microsoft Windows OneCare Live\winssnotify.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe
C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
C:\Program Files\Corel\Corel Photo Album 6\MediaDetect.exe
C:\WINDOWS\mkiqozdA.exe
C:\PROGRA~1\MUSICM~1\MUSICM~3\MMDiag.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\Program Files\NetWaiting\netWaiting.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe
C:\Program Files\MUSICMATCH\Musicmatch Jukebox\mim.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\ScreenArt\WillowRd.exe
C:\Program Files\Microsoft Office\Office\1033\msoffice.exe
C:\WINDOWS\system32\notepad.exe
C:\hjt\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.rr.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: PBlockHelper Class - {4115122B-85FF-4DD3-9515-F075BEDE5EB5} - C:\PROGRA~1\NETSCA~1\NETSCA~1\pbhelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {5BF1077C-7428-469B-904F-DE151345A2EB} - C:\WINDOWS\system32\ssqpm.dll (file missing)
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - c:\Program Files\BAE\BAE.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [ShowLOMControl]

O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [MimBoot] C:\PROGRA~1\MUSICM~1\MUSICM~3\mimboot.exe
O4 - HKLM\..\Run: [MMTray] "C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe"
O4 - HKLM\..\Run: [SsAAD.exe] C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
O4 - HKLM\..\Run: [Corel Photo Downloader] C:\Program Files\Corel\Corel Photo Album 6\MediaDetect.exe
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKLM\..\Run: [Synchronization Manager] %SystemRoot%\system32\mobsync.exe /logon
O4 - HKLM\..\Run: [mkiqozdA] C:\WINDOWS\mkiqozdA.exe
O4 - HKLM\..\Run: [{E3-31-1B-B4-ZN}] C:\windows\system32\mpdsrego.exe SKY009
O4 - HKLM\..\Run: [OneCareUI] "C:\Program Files\Microsoft Windows OneCare Live\winssnotify.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKCU\..\Run: [ModemOnHold] C:\Program Files\NetWaiting\netWaiting.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: America Online 9.0 Tray Icon.lnk = C:\Program Files\America Online 9.0\aoltray.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: ScreenArt.lnk = C:\Program Files\ScreenArt\WillowRd.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O12 - Plugin for .bcf: C:\Program Files\Internet Explorer\Plugins\NPBelv32.dll
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {55027008-315F-4F45-BBC3-8BE119764741} (Slide Image Uploader Control) - http://www.slide.com/uploader/SlideImageUploader.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1145330506484
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www.ca.com/us/securityadvisor/virusinfo/webscan.cab
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O20 - Winlogon Notify: ssqpm - C:\WINDOWS\system32\ssqpm.dll (file missing)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: Netscape Update Service (NCUpdateSvc) - Netscape Communications Corporation - C:\Program Files\Netscape Internet Service\ncupdatesvc.exe
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe
O23 - Service: Intel(R) PROSet/Wireless SSO Service (WLANKEEPER) - Intel(R) Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe

 

[pskelley]

Thanks for returning your information, let's proceed like this:

C:\Program Files\ScreenArt\WillowRd.exe <<< assure me you know this program is safe. Instances of the same executable have been know to be CoolWebSearch malware. If you are unsure, scan the file here: http://www.virustotal.com/

Microsoft Windows OneCare Live <<< may block changes, many spyware programs do. If you find HJT will not remove that stuff you may have to turn the program off, run HJT again and then turn this program back on. Be sure you are not online if you do this.

1) How to make files and folders visible:
Click Start > Open My Computer.
Select the Tools menu and click Folder Options.
Select the View Tab. Under the Hidden files and folders heading, select Show hidden files and folders.
Uncheck: Hide file extensions for known file types
Uncheck the Hide protected operating system files (recommended) option.
Click Yes to confirm. Click OK.
You may reverse this for safety when we are finished.

2) Please download ATF Cleaner by Atribune
http://www.atribune.org/content/view/25/2/
Save it to your Desktop. We will use this later.

3) Open HijackThis and choose "Do a system scan only" then check the box in front of these line items:

O2 - BHO: PBlockHelper Class - {4115122B-85FF-4DD3-9515-F075BEDE5EB5} - C:\PROGRA~1\NETSCA~1\NETSCA~1\pbhelper.dll
O2 - BHO: (no name) - {5BF1077C-7428-469B-904F-DE151345A2EB} - C:\WINDOWS\system32\ssqpm.dll (file missing)
O4 - HKLM\..\Run: [mkiqozdA] C:\WINDOWS\mkiqozdA.exe
O4 - HKLM\..\Run: [{E3-31-1B-B4-ZN}] C:\windows\system32\mpdsrego.exe SKY009
O20 - Winlogon Notify: ssqpm - C:\WINDOWS\system32\ssqpm.dll (file missing)

Close all programs but HJT and all browser windows, then click on "Fix Checked"

4) RIGHT Click on Start then click on Explore. Locate and delete these items:

C:\WINDOWS\mkiqozdA.exe <<< delete this file

C:\windows\system32\mpdsrego.exe <<< delete this file

5) Run ATF Cleaner
Double-click ATF-Cleaner.exe to run the program.
Click Select All found at the bottom of the list.
Click the Empty Selected button.
Click Exit on the Main menu to close the program.

restart the computer and post a new HJT log, let me know how the computer is running now.

Thanks

 

[leviathan]

no popups so far

could not find C:\windows\system32\mpdsrego.exe .....inside this folder just was not there...system is starting faster now an no pop ups so far here is the log for virus total that file you asked about

File WillowRd.exe received on 08.08.2007 05:29:28 (CET)
Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED


Result: 0/30 (0%)


Antivirus Version Last Update Result
AhnLab-V3 2007.8.3.0 2007.08.08 -
AntiVir 7.4.0.57 2007.08.07 -
Authentium 4.93.8 2007.08.07 -
Avast 4.7.1029.0 2007.08.07 -
BitDefender 7.2 2007.08.08 -
CAT-QuickHeal 9.00 2007.08.07 -
ClamAV 0.91 2007.08.08 -
DrWeb 4.33 2007.08.08 -
eSafe 7.0.15.0 2007.07.31 -
eTrust-Vet 31.1.5042 2007.08.08 -
Ewido 4.0 2007.08.07 -
FileAdvisor 1 2007.08.08 -
Fortinet 2.91.0.0 2007.08.08 -
F-Prot 4.3.2.48 2007.08.07 -
F-Secure 6.70.13030.0 2007.08.08 -
Ikarus T3.1.1.12 2007.08.07 -
Kaspersky 4.0.2.24 2007.08.08 -
McAfee 5092 2007.08.07 -
Microsoft 1.2704 2007.08.08 -
NOD32v2 2442 2007.08.07 -
Norman 5.80.02 2007.08.07 -
Panda 9.0.0.4 2007.08.07 -
Rising 19.35.20.00 2007.08.08 -
Sophos 4.19.0 2007.08.01 -
Sunbelt 2.2.907.0 2007.08.07 -
Symantec 10 2007.08.08 -
TheHacker 6.1.7.163 2007.08.07 -
VBA32 3.12.2.2 2007.08.07 -
VirusBuster 4.3.26:9 2007.08.07 -
Webwasher-Gateway 6.0.1 2007.08.08 -
Additional information
File size: 335872 bytes
MD5: 5bef40daa85172f0abf0b6dd756e48b6
SHA1: b164bdbce7cce946c5240c08fd4f92032a2f1f04

 

[leviathan]

also here is the new hjt log you asked for

Logfile of HijackThis v1.99.1
Scan saved at 12:01:03 AM, on 8/8/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Microsoft Windows OneCare Live\Antivirus\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Netscape Internet Service\ncupdatesvc.exe
C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\Microsoft Windows OneCare Live\Firewall\msfwsvc.exe
C:\Program Files\Microsoft Windows OneCare Live\winss.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Microsoft Windows OneCare Live\winssnotify.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe
C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
C:\Program Files\Corel\Corel Photo Album 6\MediaDetect.exe
C:\PROGRA~1\MUSICM~1\MUSICM~3\MMDiag.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\Program Files\NetWaiting\netWaiting.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\MUSICMATCH\Musicmatch Jukebox\mim.exe
C:\Program Files\ScreenArt\WillowRd.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Microsoft Office\Office\1033\msoffice.exe
C:\hjt\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.rr.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - c:\Program Files\BAE\BAE.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [ShowLOMControl]

O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [MimBoot] C:\PROGRA~1\MUSICM~1\MUSICM~3\mimboot.exe
O4 - HKLM\..\Run: [MMTray] "C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe"
O4 - HKLM\..\Run: [SsAAD.exe] C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
O4 - HKLM\..\Run: [Corel Photo Downloader] C:\Program Files\Corel\Corel Photo Album 6\MediaDetect.exe
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKLM\..\Run: [Synchronization Manager] %SystemRoot%\system32\mobsync.exe /logon
O4 - HKLM\..\Run: [OneCareUI] "C:\Program Files\Microsoft Windows OneCare Live\winssnotify.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKCU\..\Run: [ModemOnHold] C:\Program Files\NetWaiting\netWaiting.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: America Online 9.0 Tray Icon.lnk = C:\Program Files\America Online 9.0\aoltray.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: ScreenArt.lnk = C:\Program Files\ScreenArt\WillowRd.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O12 - Plugin for .bcf: C:\Program Files\Internet Explorer\Plugins\NPBelv32.dll
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {55027008-315F-4F45-BBC3-8BE119764741} (Slide Image Uploader Control) - http://www.slide.com/uploader/SlideImageUploader.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1145330506484
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www.ca.com/us/securityadvisor/virusinfo/webscan.cab
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: Netscape Update Service (NCUpdateSvc) - Netscape Communications Corporation - C:\Program Files\Netscape Internet Service\ncupdatesvc.exe
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe
O23 - Service: Intel(R) PROSet/Wireless SSO Service (WLANKEEPER) - Intel(R) Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe

 

[pskelley]

Thanks for returning your information and the feedback. Let's run another good scan to check for anything hidden. First, delete combofix from your computer. Make sure to delete c:\qoobox\quarantine also or the scan will see the quarantine items as infections. Once that is done, then do this:

Run this online scan using Internet Explorer:
Kaspersky Online Scanner from http://www.kaspersky.com/virusscanner

Next Click on Launch Kaspersky Online Scanner

You will be prompted to install an ActiveX component from Kaspersky, Click Yes.

* The program will launch and then begin downloading the latest definition files:
* Once the files have been downloaded click on NEXT
* Now click on Scan Settings
* In the scan settings make that the following are selected:
* Scan using the following Anti-Virus database:
* Standard
* Scan Options:
* Scan Archives
* Scan Mail Bases
* Click OK
* Now under select a target to scan:
* Select My Computer
* This will program will start and scan your system.
* The scan will take a while so be patient and let it run.
* Once the scan is complete it will display if your system has been infected.
* Now click on the Save as Text button:
* Save the file to your desktop.

Then post it here. It's going to take a while, a lot of files to scan.

Thanks

 

[leviathan]

kaspersky results part 1

hi there thanks lots for helping here is the log u asked for..also this is my cousins laptop can u tell me what game aplications are the colpurate for these infection and trojans so i can unistall them so this does not continue to happen once i give this unit back to them?
KASPERSKY ONLINE SCANNER REPORT
Friday, August 10, 2007 12:30:53 PM
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.93.0
Kaspersky Anti-Virus database last update: 10/08/2007
Kaspersky Anti-Virus database records: 354817
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: standard
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
C:\
D:\

Scan Statistics:
Total number of scanned objects: 134324
Number of viruses found: 17
Number of infected objects: 70
Number of suspicious objects: 4
Duration of the scan process: 01:38:01

Infected Object Name / Virus Name / Last Action
C:\32.tmp/data0002 Infected: Trojan-Downloader.Win32.PurityScan.eg skipped
C:\32.tmp NSIS: infected - 1 skipped
C:\D1.tmp/data0002 Infected: Trojan-Downloader.Win32.PurityScan.eg skipped
C:\D1.tmp NSIS: infected - 1 skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3ad391678a806ec4d691e83aaa393b6f_24adf822-76f7-4481-b30b-ff1b40f8687f Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\eHome\logs\ehRecvr.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\OneCare Protection\Support\MPLog-07272007-115747.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Protection Service\edb.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Protection Service\edbtmp.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Protection Service\MPSSVCPolicyIdLog.etl Object is locked skipped
C:\Documents and Settings\All Users\Application Data\QSLLPSVCShare Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Yazzle.zip/Yazzle1552OinUninstaller.exe Suspicious: Password-protected-EXE skipped
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Yazzle.zip ZIP: suspicious - 1 skipped
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Yazzle1.zip/Yazzle1281OinUninstaller.exe Suspicious: Password-protected-EXE skipped
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Yazzle1.zip ZIP: suspicious - 1 skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\1\012DFB1E172D9767DA62373F9C78CE6C Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\1\0201D205A1 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\1\0201D20C32 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\1\0201D21B4D Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\1\0201D233DE Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\1\0201D26871 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\1\0201E0515E Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\1\0201E06222 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\1\020256406D Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\1\0797787C8EA50BE60C78A6D33D5F2D3A Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\1\2B00000660 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\1\2B00000886 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\1\2B00000A71 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\1\2B00000A78 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\1\2B00000ACB Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\1\2B00000F88 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\1\2B000016C9 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\1\2B00001721 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\1\2B00002B40 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\1\2C61705F69636F6E Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\1\2E000C00000000000001007CAF6F01 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\1\2E000C00000000000002007B9BA001 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\1\2E000C000000000000030071C22401 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\1\2E000C0000000000000500622CBC01 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\1\3F9A73942309D05345AD6C484BAEEE0C Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\1\4230F807CC34D37A5F496A660571A727 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\1\4CA4B90186E1226DE7B0D097A89114B8 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\1\4D85B4C70B1F6D4B37BD1417356EEFC9 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\1\4DB213B8FEDAE2645C58C94E5ACCF74E Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\1\55FFB155679770D696DC38B6FA9191E6 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\1\5B885BCB1782DAA5C231E17ED6413153 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\1\66331980C0CCAF7C9952F714E13458BA Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\1\6B6072D1DFC0A8C955AB72FE37A7EB27 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\1\74E88A15444C3536ACB26C91D3B9D47A Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\1\7655BBE00396AD813AFA44B135FE2154 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\1\7B64D7B51F8CB5651E7C4B6A8C1C00D4 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\1\7DC6E1CFDAE77D624E3FFAF8E626E3F8 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\1\8193BB602FEACB6B7252A507BCEF7282 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\1\8C11465692A359E76583DE0FE0C65BA5 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\1\93819A5AAA9000BE79AACADD31670833 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\1\A285183E38933E3B48067BD259F62C8E Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\1\ABA77FA898E70031CFC3E39304C0CCA1 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\1\B30E80914F9BFED2987F0A4DB18297C3 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\1\B98711740E21D1EAFDE72EBD80EEFAAF Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\1\BEE51A1B23F04918E3B539B75AFF1C2A Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\1\C626CF5212DED080DEC2417F594B36AD Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\1\CB3FE5B23C3F7E01A717AA58B79BF4B2 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\1\E6FE3AE78B291E41C79A83B8F6AA8B66 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\1\FD5A2A9F75DF5BE2936DB3DE1B5BB60C Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\1024\0201D205D4 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\1024\0201E05B65 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\1024\0201E05FD0 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\1024\2B000001B7 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\1024\2B000001E4 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\1024\2B00000281 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\129\0201D210D1 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\129\0201D215F1 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\129\0201D22AB6 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\129\0201D22ABA Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\129\0201D22ABD Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\129\0201D22AC1 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\129\0201E01830 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\129\0202564A67 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\129\2B0000144F Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\129\2B00001455 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\129\2B00001459 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\129\2B0000145C Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\129\2B00001460 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\129\2B00001471 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\129\2B00001A61 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\129\2B00001B5D Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\129\2B00001B60 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\129\2B000020EB Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\129\2B00002B6F Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\129\2B00002D62 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\131\0201D21A29 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\131\0201D23F04 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\131\0201D29435 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\131\0201D29436 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\131\0201D29437 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\131\0201D29C7C Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\131\0201E010DC Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\131\2B000007DA Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\131\2B000007E0 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\131\2B000007E1 Object is locked skipped

 

[leviathan]

kaspersky results part 2

C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\131\2B000007E2 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\131\2B00000BED Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\131\2B00000C2B Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\131\2B00000CE2 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\136\2B00001872 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\136\2B00002B17 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\137\2B00001872 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\137\2B00002B17 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\137\2E000C00000000000001007CAF6F01 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\137\2E000C000000000000020071C22401 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\137\2E000C00000000000002007B9BA001 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\137\2E000C000000000000030071C22401 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\137\2E000C0000000000000400622CBC01 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\137\2E000C0000000000000500622CBC01 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\3\0201D21A29 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\3\0201D23F04 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\3\0201D29435 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\3\0201D29436 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\3\0201D29437 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\3\0201D29C7C Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\3\0201E010DC Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\3\2B000007DA Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\3\2B000007E0 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\3\2B000007E1 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\3\2B000007E2 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\3\2B00000BED Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\3\2B00000C2B Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\3\2B00000CE2 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\96\0201D219E3 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\96\0201D21A29 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\96\0201D23F04 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\96\0201D25DB8 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\96\0201D29435 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\96\0201D29436 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\96\0201D29437 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\96\0201D29C7C Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\96\0201E010DC Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\96\2B00000716 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\96\2B000007DA Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\96\2B000007E0 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\96\2B000007E1 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\96\2B000007E2 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\96\2B00000BED Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\96\2B00000C2B Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\96\2B00000CE2 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\bart\96\2B00001057 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\users\iamfame75\buddyicon Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\acccore\caches\users\iamfame75\feedbag Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Adobe\Acrobat\6.0\AcroForm\MRUFormsList Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Adobe\Acrobat\6.0\AdobeComFnt06.lst Object is locked skipped

 

[leviathan]

kaspersky results part 3

C:\Documents and Settings\Carly Sanchez\Application Data\Adobe\Acrobat\6.0\AdobeSysFnt06.lst Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Adobe\Acrobat\6.0\Collab\OfflineDocs Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Adobe\Acrobat\6.0\Collab\Reviews Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Adobe\Acrobat\6.0\Preferences\AutoFillDefaults.dat Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Adobe\Acrobat\6.0\Preferences\defaultHeuristics.dat Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Adobe\Acrobat\6.0\TMGrpPrm.sav Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Adobe\Acrobat\6.0\Updater\udstore.js Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\AOL\Flash Player\localhost\1.1353255.753313939\rache11.sol Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\ClipBook\Clipboard 1\{18CF1BBD-DD36-4ef0-8802-56823CD78A65}.dat Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\Paint Shop Pro\10\Cache\CMD.PspCache Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\Paint Shop Pro\10\Cache\Gradients.PspCache Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\Paint Shop Pro\10\Cache\MYPICTURES.jbf Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\Paint Shop Pro\10\Cache\Patterns.PspCache Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\Paint Shop Pro\10\Cache\Swatches.PspCache Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\Paint Shop Pro\10\Cache\Textures.PspCache Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\Paint Shop Pro\10\Cache\USE.PspCache Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\QuattroPro12\COUNTRY.INF Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\QuattroPro12\FormatEN.INF Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\WordPerfect Office 12\User Config\CdrConv.ini Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\WordPerfect Office 12\User Config\Color.ini Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\WordPerfect Office 12\User Config\CorelApp.ini Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\WordPerfect Office 12\User Config\Corelflt.ini Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\WordPerfect Office 12\User Config\corelpdf.ini Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\WordPerfect Office 12\User Config\filters.ini Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\WordPerfect Office 12\User Workspace\QuattroPro12\Corel Quattro Pro 7\QP_EN_Bar.cfg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\WordPerfect Office 12\User Workspace\QuattroPro12\Corel Quattro Pro 7\QP_EN_Docker.cfg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\WordPerfect Office 12\User Workspace\QuattroPro12\Corel Quattro Pro 7\QP_EN_GlobalItemProp.cfg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\WordPerfect Office 12\User Workspace\QuattroPro12\Corel Quattro Pro 7\QP_EN_ShortCutKeys.cfg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\WordPerfect Office 12\User Workspace\QuattroPro12\Corel Quattro Pro 7\QuattroPro.INI Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\WordPerfect Office 12\User Workspace\QuattroPro12\Corel Quattro Pro 7.CW_ Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\WordPerfect Office 12\User Workspace\QuattroPro12\Lotus 1-2-3\QP_EN_Bar.cfg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\WordPerfect Office 12\User Workspace\QuattroPro12\Lotus 1-2-3\QP_EN_Docker.cfg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\WordPerfect Office 12\User Workspace\QuattroPro12\Lotus 1-2-3\QP_EN_GlobalItemProp.cfg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\WordPerfect Office 12\User Workspace\QuattroPro12\Lotus 1-2-3\QP_EN_ShortCutKeys.cfg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\WordPerfect Office 12\User Workspace\QuattroPro12\Lotus 1-2-3\QuattroPro.INI Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\WordPerfect Office 12\User Workspace\QuattroPro12\Lotus 1-2-3.CW_ Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\WordPerfect Office 12\User Workspace\QuattroPro12\Microsoft Excel\QP_EN_Bar.cfg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\WordPerfect Office 12\User Workspace\QuattroPro12\Microsoft Excel\QP_EN_Docker.cfg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\WordPerfect Office 12\User Workspace\QuattroPro12\Microsoft Excel\QP_EN_GlobalItemProp.cfg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\WordPerfect Office 12\User Workspace\QuattroPro12\Microsoft Excel\QP_EN_ShortCutKeys.cfg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\WordPerfect Office 12\User Workspace\QuattroPro12\Microsoft Excel\QuattroPro.INI Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\WordPerfect Office 12\User Workspace\QuattroPro12\Microsoft Excel.CW_ Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\WordPerfect Office 12\User Workspace\QuattroPro12\_default\QP_EN_Bar.cfg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\WordPerfect Office 12\User Workspace\QuattroPro12\_default\QP_EN_Docker.cfg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\WordPerfect Office 12\User Workspace\QuattroPro12\_default\QP_EN_GlobalItemProp.cfg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\WordPerfect Office 12\User Workspace\QuattroPro12\_default\QP_EN_ShortCutKeys.cfg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\WordPerfect Office 12\User Workspace\QuattroPro12\_default\QuattroPro.INI Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\WordPerfect Office 12\User Workspace\QuattroPro12\_default.CW_ Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel Photo Album\6\Backup\ixdb.mdb Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel Photo Album\6\ixdb.mdb Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\desktop.ini Object is locked skipped

 

[leviathan]

kaspersky results part 4

C:\Documents and Settings\Carly Sanchez\Application Data\Adobe\Acrobat\6.0\AdobeSysFnt06.lst Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Adobe\Acrobat\6.0\Collab\OfflineDocs Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Adobe\Acrobat\6.0\Collab\Reviews Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Adobe\Acrobat\6.0\Preferences\AutoFillDefaults.dat Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Adobe\Acrobat\6.0\Preferences\defaultHeuristics.dat Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Adobe\Acrobat\6.0\TMGrpPrm.sav Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Adobe\Acrobat\6.0\Updater\udstore.js Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\AOL\Flash Player\localhost\1.1353255.753313939\rache11.sol Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\ClipBook\Clipboard 1\{18CF1BBD-DD36-4ef0-8802-56823CD78A65}.dat Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\Paint Shop Pro\10\Cache\CMD.PspCache Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\Paint Shop Pro\10\Cache\Gradients.PspCache Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\Paint Shop Pro\10\Cache\MYPICTURES.jbf Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\Paint Shop Pro\10\Cache\Patterns.PspCache Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\Paint Shop Pro\10\Cache\Swatches.PspCache Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\Paint Shop Pro\10\Cache\Textures.PspCache Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\Paint Shop Pro\10\Cache\USE.PspCache Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\QuattroPro12\COUNTRY.INF Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\QuattroPro12\FormatEN.INF Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\WordPerfect Office 12\User Config\CdrConv.ini Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\WordPerfect Office 12\User Config\Color.ini Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\WordPerfect Office 12\User Config\CorelApp.ini Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\WordPerfect Office 12\User Config\Corelflt.ini Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\WordPerfect Office 12\User Config\corelpdf.ini Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\WordPerfect Office 12\User Config\filters.ini Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\WordPerfect Office 12\User Workspace\QuattroPro12\Corel Quattro Pro 7\QP_EN_Bar.cfg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\WordPerfect Office 12\User Workspace\QuattroPro12\Corel Quattro Pro 7\QP_EN_Docker.cfg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\WordPerfect Office 12\User Workspace\QuattroPro12\Corel Quattro Pro 7\QP_EN_GlobalItemProp.cfg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\WordPerfect Office 12\User Workspace\QuattroPro12\Corel Quattro Pro 7\QP_EN_ShortCutKeys.cfg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\WordPerfect Office 12\User Workspace\QuattroPro12\Corel Quattro Pro 7\QuattroPro.INI Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\WordPerfect Office 12\User Workspace\QuattroPro12\Corel Quattro Pro 7.CW_ Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\WordPerfect Office 12\User Workspace\QuattroPro12\Lotus 1-2-3\QP_EN_Bar.cfg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\WordPerfect Office 12\User Workspace\QuattroPro12\Lotus 1-2-3\QP_EN_Docker.cfg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\WordPerfect Office 12\User Workspace\QuattroPro12\Lotus 1-2-3\QP_EN_GlobalItemProp.cfg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\WordPerfect Office 12\User Workspace\QuattroPro12\Lotus 1-2-3\QP_EN_ShortCutKeys.cfg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\WordPerfect Office 12\User Workspace\QuattroPro12\Lotus 1-2-3\QuattroPro.INI Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\WordPerfect Office 12\User Workspace\QuattroPro12\Lotus 1-2-3.CW_ Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\WordPerfect Office 12\User Workspace\QuattroPro12\Microsoft Excel\QP_EN_Bar.cfg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\WordPerfect Office 12\User Workspace\QuattroPro12\Microsoft Excel\QP_EN_Docker.cfg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\WordPerfect Office 12\User Workspace\QuattroPro12\Microsoft Excel\QP_EN_GlobalItemProp.cfg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\WordPerfect Office 12\User Workspace\QuattroPro12\Microsoft Excel\QP_EN_ShortCutKeys.cfg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\WordPerfect Office 12\User Workspace\QuattroPro12\Microsoft Excel\QuattroPro.INI Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\WordPerfect Office 12\User Workspace\QuattroPro12\Microsoft Excel.CW_ Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\WordPerfect Office 12\User Workspace\QuattroPro12\_default\QP_EN_Bar.cfg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\WordPerfect Office 12\User Workspace\QuattroPro12\_default\QP_EN_Docker.cfg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\WordPerfect Office 12\User Workspace\QuattroPro12\_default\QP_EN_GlobalItemProp.cfg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\WordPerfect Office 12\User Workspace\QuattroPro12\_default\QP_EN_ShortCutKeys.cfg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\WordPerfect Office 12\User Workspace\QuattroPro12\_default\QuattroPro.INI Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel\WordPerfect Office 12\User Workspace\QuattroPro12\_default.CW_ Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel Photo Album\6\Backup\ixdb.mdb Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Corel Photo Album\6\ixdb.mdb Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\desktop.ini Object is locked skipped

 

[leviathan]

kaspersky results part 5

C:\Documents and Settings\Carly Sanchez\Application Data\FUJIFILM\FinePixViewer\FileTransferLog\FPV4LOG00 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\FUJIFILM\FinePixViewer\FileTransferLog\FPV4LOGTEMP Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\FUJIFILM\FinePixViewer\FileTransferLog\FPV4MANAGE Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\FUJIFILM\G-FNAP2\Settings\GFNAPWIN.INI Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Google\Local Search History\google%2Eimages.w Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Google\Local Search History\google%2Eweb.w Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\gtny\88D7456F-2D0E-40AA-BDBC-7BC292A1FF1A_CONFIRM.cache Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\channels.ini Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\chdata\chdata.cfg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\chn.pk Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\1046.ucl Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\1050.ucl Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\1051.ucl Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\632.ucl Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\Config\channel.cfg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\AutoMaintenance\AutoMaintenance.dll Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\AutoMaintenance\diag\bios.ini Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\AutoMaintenance\diag\DAntivirus.cfg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\AutoMaintenance\diag\DFirewalls.cfg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\AutoMaintenance\diag\dvd.ini Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\AutoMaintenance\diag\printers.ini Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\AutoMaintenance\diag\RemoveWare.ini Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\AutoMaintenance\diag\trojan.ini Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\AutoMaintenance\diag\unwantedapp.ini Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\AutoMaintenance\hosts Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\AutoMaintenance\Images.dll Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\AutoMaintenance\index.htm Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\config\groups.js Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\config\ocxid.js Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\group_icon\services\icon.png Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\html\blank.htm Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\html\confirm.htm Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\html\gtagent_events.vbs Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\html\index.htm Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\html\moreinfo.htm Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\html\noitems.htm Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\html\senddata.htm Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\html\statinfo.htm Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\html\survey.htm Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\html\wait.htm Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\bg.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\but_a.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\but_b.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\close_a.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\close_b.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\close_c.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\count_bg.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\delete_a.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\delete_b.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\delete_c.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\delete_d.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\dialog_strip.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\dialog_title.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\first_a.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\first_b.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\first_c.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\first_d.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\fix_abort.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\fix_fail.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\fix_ok.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\help_a.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\help_b.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\help_c.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\last_a.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\last_b.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\last_c.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\last_d.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\left_but_a.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\left_but_b.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\min_a.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\min_b.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\min_c.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\msg_bg.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\next_a.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\next_a2.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\next_b.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\next_c.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\next_d.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\noproblems.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\prev_a.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\prev_b.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\prev_c.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\prev_d.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\right_but_a.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\right_but_b.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\settings_a.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\settings_b.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\settings_c.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\spacer.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\images\wait.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\index.htm Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\agent_infolet_exe.htm Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\common\images\items_img\DELL_blackneedle.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\item_templ\common\images\items_img\noproblemdell.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\localization\lang_blank.xml Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\localization\lang_closeapp.xml Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\localization\lang_delitem.xml Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\localization\lang_download.xml Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\localization\lang_infolet_cond.xml Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\localization\lang_infolet_exe.xml Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\localization\lang_infolet_exe_subscribe.xml Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\localization\lang_infolet_fixray.xml Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\localization\lang_infolet_link.xml Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\localization\lang_infolet_survey.xml Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\localization\lang_moreinfo.xml Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\localization\lang_noitems.xml Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\localization\lang_senddata.xml Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\localization\lang_statinfo.xml Object is locked skipped

 

[leviathan]

kaspersky results part 6

C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\localization\lang_survey.xml Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\localization\lang_tw.xml Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\localization\lang_wait.xml Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\Triggers\Am.xml Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\HTML\Triggers\trigger_defrag.xml Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\lock.tmp Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u1\persist.cfg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\chdata\chdata.cfg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\chn.pk Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\Config\689.ucl Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\Config\690.ucl Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\Config\727.ucl Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\Config\728.ucl Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\Config\729.ucl Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\Config\730.ucl Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\Config\731.ucl Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\Config\732.ucl Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\Config\733.ucl Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\Config\735.ucl Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\Config\736.ucl Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\Config\737.ucl Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\Config\738.ucl Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\Config\739.ucl Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\Config\740.ucl Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\Config\741.ucl Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\Config\742.ucl Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\Config\743.ucl Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\Config\744.ucl Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\Config\855.ucl Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\Config\874.ucl Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\Config\876.ucl Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\Config\904.ucl Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\Config\913.ucl Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\Config\channel.cfg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\config\groups.js Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\config\ocxid.js Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\10559742.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\10559746.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\10559747.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\10559748.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\10559749.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\10568781.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\10568785.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\10657131.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\106571310.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\10657133.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\10657134.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\10657136.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\10657138.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\10657139.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\10675121.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\10710781.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\10726052.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\107419412.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\107672626.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\10886371.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\10887993.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\108913758.jpg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\1089706.html Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\109045314.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\109045317.jpg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\109045319.jpg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\109045320.jpg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\122779.html Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\696.htm Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\697.htm Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\box.jpg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\cable_modem.jpg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\cat5.jpg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\DRT\10675121.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\DRT\drt.htm Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\DRT\global.css Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\DRT\title.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\enable_faxing\922_AIO.jpg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\enable_faxing\942_AIO.jpg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\enable_faxing\962_AIO.jpg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\enable_faxing\A920_AIO.jpg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\enable_faxing\A940_AIO.jpg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\enable_faxing\A960_AIO.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\enable_faxing\Fax_Using_AIO.htm Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\enable_faxing\globe.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\FA1018529.html Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\FA1026016.html Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\FA1055890.html Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\FA1065237.html Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\FA1073964.html Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\FA1073993.html Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\FA1074250.html Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\FA1077154.html Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\global.css Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\globe.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\hardware.jpg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\images_Connected.jpg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\images_Notconnected.jpg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\modem_helper_sp2\global.css Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\modem_helper_sp2\globe.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\modem_helper_sp2\MDMhlp_SP2_1_shrunk.jpg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\modem_helper_sp2\MDMhlp_SP2_2_Shrunk.jpg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\modem_helper_sp2\MDMhlp_SP2_3_Shrunk.jpg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\modem_helper_sp2\MDMhlp_SP2_Shrunk.jpg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\modem_helper_sp2\Modem_Helper_XP_SP2.htm Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\modem_helper_sp2\Note.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\modem_router_box_nopower.jpg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\modem_router_nopower.jpg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\Note.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\PA1089329.html Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\PA1090313.html Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\PA1090384.html Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\PA1090493.html Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\pc_recovery\1055856.htm Object is locked skipped

 

[leviathan]

kaspersky results part 7

C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\pc_recovery\10565005.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\pc_recovery\10565295.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\pc_recovery\10568785.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\pc_recovery\10675121.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\pc_recovery\1083341.htm Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\pc_recovery\1089154103.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\pc_recovery\1089154104.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\pc_recovery\1090152.htm Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\pc_recovery\1091713.htm Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\pc_recovery\1092188.htm Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\pc_recovery\global.css Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\pc_recovery\globe.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\pc_recovery\Help Icon.ico Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\pc_recovery\title.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\RA1055974.html Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\router_config.jpg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\router_config2.jpg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\simple_wired.jpg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\title.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\TrendManualScan.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\TrendScanScreen.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\TrendSystemScreen.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\TT1055646.html Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\TT1055856.html Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\TT1056916.html Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\TT1066822.html Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\TT1078218.html Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\TT1082421.html Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\TT1088799.html Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\TT1090151.html Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\WAP.jpg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\Wirele1.jpg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\Wirele4.jpg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\wireless.htm Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\wireless1.GIF Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\wireless1.JPG Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\faqs\WLAN_big_image_3.jpg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\group_icon\tips\icon.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\html\index.htm Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\images\arrow.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\images\bullet.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\images\but_a.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\images\but_b.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\images\left_but_a.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\images\left_but_b.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\images\right_but_a.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\images\right_but_b.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\images\title.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\images\wait.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\index.htm Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\agent_infolet_exe.htm Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\ab.ppk Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\adpglobal\AdpUtil.js Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\adpglobal\Adp_GUI.js Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\adpglobal\Common\adpicon.ico Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\adpglobal\Common\button_cirlce.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\adpglobal\Common\button_disable.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\adpglobal\Common\Chimes.wav Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\adpglobal\Common\close_popup.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\adpglobal\Common\close_popup_over.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\adpglobal\Common\dot.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\adpglobal\Common\Ending_v.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\adpglobal\Common\Ending_x.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\adpglobal\Common\field_bar.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\adpglobal\Common\inprogress.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\adpglobal\Common\installing.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\adpglobal\Common\logo.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\adpglobal\Common\main_bar.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\adpglobal\Common\mini_logo.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\adpglobal\Common\mini_topbar.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\adpglobal\Common\Notify.wav Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\adpglobal\Common\progress_bg.gif Object is locked skipped

 

[leviathan]

kaspersky results part 8

C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\adpglobal\Common\progress_slice.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\adpglobal\Common\topbar.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\adpglobal\De\Generic.css Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\adpglobal\De\global_adp_Text.xml Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\adpglobal\En\Generic.css Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\adpglobal\En\global_adp_Text.xml Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\adpglobal\Es\Generic.css Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\adpglobal\Es\global_adp_Text.xml Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\adpglobal\Fr\Generic.css Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\adpglobal\Fr\global_adp_Text.xml Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\adpglobal\ImgOver.js Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\adpglobal\Initialize.js Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\adpglobal\It\Generic.css Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\adpglobal\It\global_adp_Text.xml Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\adpglobal\Jp\Generic.css Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\adpglobal\Jp\global_adp_Text.xml Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\adpglobal\Ko\Generic.css Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\adpglobal\Ko\global_adp_Text.xml Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\adpglobal\main.htm Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\adpglobal\Nl\Generic.css Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\adpglobal\Nl\global_adp_Text.xml Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\adpglobal\popupMsg.js Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\adpglobal\PtB\Generic.css Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\adpglobal\PtB\global_adp_Text.xml Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\adpglobal\Query.js Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\adpglobal\Sv\Generic.css Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\adpglobal\Sv\global_adp_Text.xml Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\adpglobal\Wrapper.js Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\adpglobal\Zh\Generic.css Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\adpglobal\Zh\global_adp_Text.xml Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\adpglobal\ZhT\Generic.css Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\adpglobal\ZhT\global_adp_Text.xml Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\ccnotify.cfg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\cybercoach.cfg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\enginecf_ver.ini Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\glfs\default.glf Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\glfs\Dell.glf Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\LibDir\abort.trn Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\LibDir\cloak.trn Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\LibDir\De_LibText.ini Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\LibDir\En_LibText.ini Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\LibDir\errorlib.trn Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\LibDir\Es_LibText.ini Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\LibDir\Fr_LibText.ini Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\LibDir\func.trn Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\LibDir\generic.trn Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\LibDir\getmaindriver.trn Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\LibDir\It_LibText.ini Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\LibDir\Jp_LibText.ini Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\LibDir\Ko_LibText.ini Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\LibDir\mini.trn Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\LibDir\Nl_LibText.ini Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\LibDir\oeonwindows.trn Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\LibDir\outlookexpress.trn Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\LibDir\PtB_LibText.ini Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\LibDir\Sv_LibText.ini Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\LibDir\taskbarandstartmenu.trn Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\LibDir\xsystray.trn Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\LibDir\ZhT_LibText.ini Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\LibDir\Zh_LibText.ini Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\configuration\trainer.ppk Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\lessons\1.gdpb Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\RunGdp.exe Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\coach\RunGdpCfg.cfg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\item_templ\faq.htm Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\HTML\localization\lang_main.xml Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\lock.tmp Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\persist.cfg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u2\Policies\1037.ucl Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\chdata\chdata.cfg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\chn.pk Object is locked skipped

 

[leviathan]

kaspersky results part 9

C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\Config\632.ucl Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\Config\channel.cfg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\config\groups.js Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\config\ocxid.js Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\diag\bios.ini Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\diag\DAntivirus.cfg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\diag\dell_printers.ini Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\diag\dmi.ini Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\diag\DProg.ini Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\diag\dvd.ini Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\diag\printers.ini Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\diag\trojan.ini Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\diag\unwantedapp.ini Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\faqs\10675121.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\faqs\10886371.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\faqs\122779.htm Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\faqs\696.htm Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\faqs\global.css Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\faqs\title.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\fix\arg.ini Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\fix\DellSupportLauncher.exe Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\fix\DellSupportODBK.exe Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\html\blank.htm Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\html\confirm.htm Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\html\gtagent_events.vbs Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\html\index.htm Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\html\moreinfo.htm Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\html\noitems.htm Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\html\senddata.htm Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\html\statinfo.htm Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\html\survey.htm Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\html\wait.htm Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\bg.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\but_a.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\but_b.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\close_a.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\close_b.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\close_c.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\count_bg.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\delete_a.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\delete_b.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\delete_c.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\delete_d.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\dialog_strip.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\dialog_title.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\first_a.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\first_b.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\first_c.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\first_d.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\fix_abort.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\fix_fail.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\fix_ok.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\help_a.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\help_b.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\help_c.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\last_a.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\last_b.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\last_c.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\last_d.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\left_but_a.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\left_but_b.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\min_a.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\min_b.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\min_c.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\msg_bg.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\next_a.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\next_a2.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\next_b.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\next_c.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\next_d.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\noproblems.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\prev_a.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\prev_b.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\prev_c.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\prev_d.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\right_but_a.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\right_but_b.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\settings_a.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\settings_b.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\settings_c.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\spacer.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\images\wait.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\index.htm Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\item_templ\agent_infolet_exe.htm Object is locked skipped

 

[leviathan]

kaspersky results part 10

C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\item_templ\common\images\items_img\noproblemdell.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\localization\lang_blank.xml Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\localization\lang_closeapp.xml Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\localization\lang_delitem.xml Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\localization\lang_download.xml Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\localization\lang_infolet_cond.xml Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\localization\lang_infolet_exe.xml Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\localization\lang_infolet_exe_subscribe.xml Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\localization\lang_infolet_fixray.xml Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\localization\lang_infolet_link.xml Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\localization\lang_infolet_survey.xml Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\localization\lang_moreinfo.xml Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\localization\lang_noitems.xml Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\localization\lang_senddata.xml Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\localization\lang_statinfo.xml Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\localization\lang_survey.xml Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\localization\lang_tw.xml Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\localization\lang_wait.xml Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\MakeDesktopShortcut.EXE Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\offline\privacy_policy.htm Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\offline\privacy_policy_files\css.css Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\offline\privacy_policy_files\extlink.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\offline\privacy_policy_files\left.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\offline\privacy_policy_files\main.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\offline\privacy_policy_files\privacyseal.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\offline\privacy_policy_files\shad.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\offline\privacy_policy_files\smextlink.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\offline\privacy_policy_files\spacer.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\PC_Recovery\1055856.htm Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\PC_Recovery\10565005.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\PC_Recovery\10565295.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\PC_Recovery\10568785.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\PC_Recovery\10675121.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\PC_Recovery\1083341.htm Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\PC_Recovery\1089154103.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\PC_Recovery\1089154104.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\PC_Recovery\1090152.htm Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\PC_Recovery\1091713.htm Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\PC_Recovery\1092188.htm Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\PC_Recovery\global.css Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\PC_Recovery\globe.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\PC_Recovery\Help Icon.ico Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\HTML\PC_Recovery\title.gif Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\lock.tmp Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u3\persist.cfg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Application Data\Gtek\GTUpdate\AUpdate\Channels\ch_u4\chdata\chdata.cfg Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Local Settings\Temp\hsperfdata_Carly Sanchez\2476 Object is locked skipped
C:\Documents and Settings\Carly Sanchez\Local Settings\Temp\Temporary Internet Files\Content.IE5\23TCQ2SD\movie[1].qtl Infected: Exploit.Multi.Qtp.b skipped
C:\Documents and Settings\Carly Sanchez\Local Settings\Temp\Temporary Internet Files\Content.IE5\YTU1AJGP\ii[1].exe/data0002 Infected: Trojan-Downloader.Win32.PurityScan.eg skipped
C:\Documents and Settings\Carly Sanchez\Local Settings\Temp\Temporary Internet Files\Content.IE5\YTU1AJGP\ii[1].exe NSIS: infected - 1 skipped
C:\Documents and Settings\Carly Sanchez\Local Settings\Temp\Temporary Internet Files\Content.IE5\YTU1AJGP\stats[1].htm Infected: Trojan-Downloader.VBS.Agent.n skipped
C:\Documents and Settings\Carly Sanchez\Local Settings\Temp\yazzlesnet.exe/data0002 Infected: Trojan-Downloader.Win32.PurityScan.eg skipped
C:\Documents and Settings\Carly Sanchez\Local Settings\Temp\yazzlesnet.exe NSIS: infected - 1 skipped
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\Mildred Sanchez\Application Data\Gtek\GTUpdate\AUpdate\DellSupport\DSAgnt.log Object is locked skipped
C:\Documents and Settings\Mildred Sanchez\Application Data\Gtek\GTUpdate\AUpdate\DellSupport\DSAgnt_GTActions.log Object is locked skipped
C:\Documents and Settings\Mildred Sanchez\Application Data\Gtek\GTUpdate\AUpdate\DellSupport\gdql_d_DSAgnt.log Object is locked skipped
C:\Documents and Settings\Mildred Sanchez\Application Data\Gtek\GTUpdate\AUpdate\DellSupport\glog.log Object is locked skipped
C:\Documents and Settings\Mildred Sanchez\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\Mildred Sanchez\Local Settings\Application Data\BVRP Software\NetWaiting\MoHlog.txt Object is locked skipped
C:\Documents and Settings\Mildred Sanchez\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\Mildred Sanchez\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\Mildred Sanchez\Local Settings\Application Data\Musicmatch\Jukebox\mmjbaltlog.txt Object is locked skipped
C:\Documents and Settings\Mildred Sanchez\Local Settings\Application Data\Musicmatch\Jukebox\mmjblog.txt Object is locked skipped
C:\Documents and Settings\Mildred Sanchez\Local Settings\Application Data\Musicmatch\MIM\Database\Default.ldb Object is locked skipped
C:\Documents and Settings\Mildred Sanchez\Local Settings\Application Data\Musicmatch\MIM\Database\Default.mdb Object is locked skipped
C:\Documents and Settings\Mildred Sanchez\Local Settings\History\History.IE5\index.dat Object is locked skipped