Specialty Forums
Security and Virus
General Hardware
CPUs/Overclocking
Networking
Digital Photo/Video
Office Software
PC Gaming
Console Gaming
Programming
Database
Web Development
Digital Home

General Forums
Windows XP
Windows Vista
Windows 95/98
Windows Me
Windows NT
Windows 2000
Win Server 2008
Win Server 2003
Windows 3.1
Linux
PDAs
BeOS
Novell Netware
OpenVMS
Solaris
Disk Op. System
Unix
Mac
OS/2

Drivers
Driver Scan
Driver Forum

Software
Automatic Updates

BIOS Updates

My Computing.Net

Solution Center

Free IT eBook

Howtos

Site Search

Message Find

RSS Feeds

Install Guides

Data Recovery

About

Home
Reply to Message Icon Go to Main Page Icon

tons of pos files, can't delete

Original Message
Name: missmysoldier28
Date: March 8, 2008 at 00:07:03 Pacific
Subject: tons of pos files, can't delete
OS: not sure
CPU/Ram: not sure
Model/Manufacturer: not sure
Comment:
I'm on remote assistance with my mom's computer trying to help her with this virus. There's probably about a thousand files under her documents all labeled pos of some sort. She also has 2 icons on her desktop that you can delete, but then they come right back. They're labeled help and support. I deleted all the files I could. The rest of them won't let you delete them though. A message pops up saying something about 0x02354e50, something about memory couldn't delete this file. Hope someone can help. Thanx

Report Offensive Message For Removal


Response Number 1
Name: missmysoldier28
Date: March 8, 2008 at 12:08:29 Pacific
Subject: tons of pos files, can't delete
Reply: (edit)
also, the c drive has the red x and I tried to download vundofix but it was missing a file. So I downloaded the missing file but when I tried to unzip it with winzip it said this file couldn't be recognized.

Report Offensive Follow Up For Removal

Response Number 2
Name: jabuck
Date: March 8, 2008 at 18:02:44 Pacific
Subject: tons of pos files, can't delete
Reply: (edit)
Go to the this link:

Disable Realtime Protection

Follow their directions to disable any realtime protection that you have as it will interfere with the fix by reinstalling the corrupt files.

Please download Atribune's VundoFix.exe from the following site to your desktop:

Vundofix.exe

Double-click VundoFix.exe to run it.

Click the Scan for Vundo button.

Once it's done scanning, click the Remove Vundo button.

You will receive a prompt asking if you want to remove the files,
click "yes".

Once you click yes, your desktop will go blank as it starts removing
Vundo.

When completed, it will prompt that it will reboot your computer,
click "ok".

Please download and install the latest version of HijackThis v2.0.2:


Download the "HijackThis" Installer from this link:
Hijack This


1. Save " HJTInstall.exe" to your desktop.
2. Double click on HJTInstall.exe to run the program.
3. By default it will install to C:\Program Files\Trend Micro\HijackThis.
4. Accept the license agreement by clicking the "I Accept" button.
5.Click on the "Do a system scan and save a log file" button. It will scan and then ask you to save the log.
6. Click "Save log" to save the log file and then the log will open in Notepad.
7. Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.
8. Paste the log in your next reply.
9. Do NOT have HijackThis fix anything yet! Most of what it finds will be harmless or even required.

Please download ComboFix to the desktop from one of the following links:

Link1

Link 2

Link 3

Double-click combofix.exe
Follow the prompts.
(Don't click on the window while the program is running, it may cause your system to hang.)
Please post the log it produces.


Report Offensive Follow Up For Removal

Response Number 3
Name: missmysoldier28
Date: March 9, 2008 at 15:46:54 Pacific
Subject: tons of pos files, can't delete
Reply: (edit)
I downloaded vundofix, but when I tried to run it, it said it was missing file comdlg32.ocx. So then I went and downloaded that file too, but I couldn't unzip it. So then I even downloaded a free trial of winzip, but that wouldn't open it either because it said something about it missing an archive. Also, I downloaded hijackthis and ran it without any problems and she's in the middle of running combofix right now, but I have to wait to post the results because they broke the cord that connects to the internet and have to go buy one before they can get back online. What should I do about vundofix though, is there a different program she can use besides that? Thnx

Report Offensive Follow Up For Removal

Response Number 4
Name: missmysoldier28
Date: March 9, 2008 at 17:51:29 Pacific
Subject: tons of pos files, can't delete
Reply: (edit)
Okay, like I said, I couldn't run vundofix but here's the logs.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:59:13 PM, on 3/9/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\CTsvcCDA.exe
C:\Program Files\OneStepSearch\onestep.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\OneStepSearch\onestep.exe
C:\PROGRA~1\Yahoo!\browser\ybrwicon.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\AdvancedCleaner Free\UADC.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\AdvancedCleaner Free\ian_monitor.exe
C:\WINDOWS\system32\Rundll32.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Common Files\MySoftware\NewsFlsh.exe
C:\Program Files\Yahoo!\Yahoo! Music Jukebox\ymetray.exe
C:\PROGRA~1\Yahoo!\browser\ybrowser.exe
C:\PROGRA~1\Yahoo!\browser\ycommon.exe
C:\Program Files\TeamViewer3\TeamViewer.exe
C:\PROGRA~1\Yahoo!\browser\ybrowser.exe
C:\Documents and Settings\harold\Desktop\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?T...
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/cus...
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?T...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://red.clientapps.yahoo.com/cus...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/cus...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/cus...
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: Dealio - {E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} - C:\Program Files\Dealio\kb106\Dealio.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [YBrowser] C:\PROGRA~1\Yahoo!\browser\ybrwicon.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start
O4 - HKLM\..\Run: [au] C:\Program Files\Dealio\DealioAU.exe
O4 - HKLM\..\Run: [a442b0f1] rundll32.exe "C:\WINDOWS\system32\girtrfiv.dll",b
O4 - HKLM\..\Run: [AdvancedCleaner Free] "C:\Program Files\AdvancedCleaner Free\UADC.exe" /min
O4 - HKLM\..\Run: [SM_IAN] C:\Program Files\AdvancedCleaner Free\ian_monitor.exe
O4 - HKLM\..\Run: [BMa771836d] Rundll32.exe "C:\WINDOWS\system32\vmohugeu.dll",s
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Startup: PowerReg Scheduler V3.exe
O4 - Global Startup: AT&T Self Support Tool.lnk = C:\Program Files\SBC Self Support Tool\bin\matcli.exe
O4 - Global Startup: MySoftware NewsFlash.lnk = C:\Program Files\Common Files\MySoftware\NewsFlsh.exe
O4 - Global Startup: Quicken Scheduled Updates.lnk = C:\Program Files\Quicken\bagent.exe
O4 - Global Startup: ymetray.lnk = C:\Program Files\Yahoo!\Yahoo! Music Jukebox\ymetray.exe
O8 - Extra context menu item: Compare Prices with &Dealio - C:\Program Files\Dealio\kb106\res\DealioSearch.html
O9 - Extra button: AT&T Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\PROGRA~1\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Acez.com - Download Free Screen Savers - {88E50F1D-4790-4C6B-BEE3-D54E46B6EEF6} - C:\WINDOWS\acezlink.htm
O9 - Extra button: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb106\Dealio.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:\Program Files\HPQ\SHARED\HPQWMI.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Microsoft cache control (MSControlService) - Unknown owner - C:\WINDOWS\system32\windows
O23 - Service: OneStep Search Service - OneStepSearch.net, Inc. - C:\Program Files\OneStepSearch\onestep.exe

--
End of file - 6246 bytes


and here's the combofix log

ComboFix 08-03-09.1 - harold 2008-03-09 15:16:49.1 - NTFSx86
Running from: C:\Documents and Settings\harold\Desktop\ComboFix.exe

[color=red][b]WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !![/b][/color]
.
[i] ADS - svchost.exe: deleted 228 bytes in 1 streams. [/i]
[i] ADS - ntoskrnl.exe: deleted 68 bytes in 1 streams. [/i]
[i] ADS - explorer.exe: deleted 132 bytes in 1 streams. [/i]

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Program Files\bravesentry
C:\Program Files\bravesentry\BraveSentry.exe
C:\Program Files\bravesentry\BraveSentry.lic
C:\Program Files\bravesentry\BraveSentry0.bs
C:\Program Files\bravesentry\BraveSentry0.dll
C:\Program Files\bravesentry\BraveSentry1.bs
C:\Program Files\bravesentry\BraveSentry2.dll
C:\Program Files\bravesentry\BraveSentry3.dll
C:\Program Files\bravesentry\Uninstall.exe
C:\Program Files\Internet Explorer\lavulaxas.dll
C:\Program Files\screensavers.com
C:\Program Files\screensavers.com\ActiveDesktop\bin\ActiveDesktopExe.exe
C:\Program Files\screensavers.com\SSSInstaller\bin\screensavers.exe
C:\Program Files\screensavers.com\SSSInstaller\bin\sinstaller3.exe
C:\Program Files\screensavers.com\SSSInstaller\bin\SSSInstaller.dll
C:\Program Files\screensavers.com\SSSUninst.exe
C:\Program Files\Windows Media Player\niqaxidiq89104.dll
C:\Temp\1cb
C:\Temp\1cb\syscheck.log
C:\Temp\isgTi19
C:\Temp\isgTi19\lPig.log
C:\WINDOWS\BMa771836d.xml
C:\WINDOWS\cookies.ini
C:\WINDOWS\pskt.ini
C:\WINDOWS\system32\a1
C:\WINDOWS\system32\aakohcop.dll
C:\WINDOWS\system32\aakypsfg.dll
C:\WINDOWS\system32\adeeg.ini
C:\WINDOWS\system32\adeeg.ini2
C:\WINDOWS\system32\aeuwxrsy.dll
C:\WINDOWS\system32\barjphok.dll
C:\WINDOWS\system32\bnwfigtv.dll
C:\WINDOWS\system32\cxxkpopc.dll
C:\WINDOWS\system32\dektimok.dll
C:\WINDOWS\system32\dlfchsex.dll
C:\WINDOWS\system32\eifusoln.dll
C:\WINDOWS\system32\emrdrnxp.ini
C:\WINDOWS\system32\euqxwvrc.dll
C:\WINDOWS\system32\fbeyiqey.dll
C:\WINDOWS\system32\fnotwboi.ini
C:\WINDOWS\system32\foqiyjxu.ini
C:\WINDOWS\system32\fwstwgxt.dll
C:\WINDOWS\system32\gchkgxvn.dll
C:\WINDOWS\system32\geeda.dll
C:\WINDOWS\system32\girtrfiv.dll
C:\WINDOWS\system32\hkdjynup.ini
C:\WINDOWS\system32\ilxvgvou.dll
C:\WINDOWS\system32\ipsqyfyn.dll
C:\WINDOWS\system32\iunnsvfy.ini
C:\WINDOWS\system32\jlngbygb.dll
C:\WINDOWS\system32\kvckoygc.ini
C:\WINDOWS\system32\kvwvmxsj.dll
C:\WINDOWS\system32\kyhnxfkk.dll
C:\WINDOWS\system32\lptpgxkx.dll
C:\WINDOWS\system32\lseapteo.dll
C:\WINDOWS\system32\lskjhlva.dll
C:\WINDOWS\system32\mbyqcaih.dll
C:\WINDOWS\system32\mcrh.tmp
C:\WINDOWS\system32\mfaehecl.dll
C:\WINDOWS\system32\mwqnibgf.ini
C:\WINDOWS\system32\mxljiwmc.dll
C:\WINDOWS\system32\nGpxx01
C:\WINDOWS\system32\nsksbqvd.ini
C:\WINDOWS\system32\nxcubkfe.ini
C:\WINDOWS\system32\oetpaesl.ini
C:\WINDOWS\system32\oxqcqgdr.dll
C:\WINDOWS\system32\p9
C:\WINDOWS\system32\p9\liopud89104.exe
C:\WINDOWS\system32\pac.txt
C:\WINDOWS\system32\pfyhfiuj.ini
C:\WINDOWS\system32\punyjdkh.dll
C:\WINDOWS\system32\qmduohum.dll
C:\WINDOWS\system32\qomklli.dll
C:\WINDOWS\system32\qxmnixve.dll
C:\WINDOWS\system32\rmrqvrif.dll
C:\WINDOWS\system32\sighbgmx.ini
C:\WINDOWS\system32\sklxbbgc.dll
C:\WINDOWS\system32\snqjlitt.dll
C:\WINDOWS\system32\uayygheq.dll
C:\WINDOWS\system32\ujajrcud.dll
C:\WINDOWS\system32\unuvbjwa.dll
C:\WINDOWS\system32\uorhhjuc.dll
C:\WINDOWS\system32\urqqqrs.dll
C:\WINDOWS\system32\usmwcego.dll
C:\WINDOWS\system32\utixhyri.dll
C:\WINDOWS\system32\uxjyiqof.dll
C:\WINDOWS\system32\v6
C:\WINDOWS\system32\vifrtrig.ini
C:\WINDOWS\system32\vllyrtoy.dll
C:\WINDOWS\system32\vmohugeu.dll
C:\WINDOWS\system32\w11
C:\WINDOWS\system32\w11\hiba3133.exe
C:\WINDOWS\system32\waoupilw.dll
C:\WINDOWS\system32\windows
C:\WINDOWS\system32\wsnpoem
C:\WINDOWS\system32\wwcennky.ini
C:\WINDOWS\system32\xhyjigvv.ini
C:\WINDOWS\system32\xknbbahw.ini
C:\WINDOWS\system32\xnesrjkq.dll
C:\WINDOWS\system32\yknnecww.dll
C:\WINDOWS\system32\yykmfvoo.dll
C:\WINDOWS\system32\zaahufmp.dll
C:\WINDOWS\tk58.exe

.
((((((((((((((((((((((((( Files Created from 2008-02-10 to 2008-03-10 )))))))))))))))))))))))))))))))
.

2008-03-09 15:05 . 2008-03-09 15:06 <DIR> d-------- C:\ComboFix[1]
2008-03-09 00:46 . 2008-03-09 12:39 <DIR> d-------- C:\Documents and Settings\Administrator.HOME-E1E53A042E\Application Data\Yahoo!
2008-03-08 15:16 . 2008-03-08 19:30 <DIR> d-a------ C:\Documents and Settings\All Users.WINDOWS\Application Data\TEMP
2008-03-08 02:42 . 2008-03-08 02:46 <DIR> d-------- C:\Program Files\AdvancedCleaner Free
2008-03-08 01:49 . 2008-03-08 19:33 <DIR> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\WinZip
2008-03-07 20:57 . 2008-03-07 20:57 <DIR> d-------- C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\TeamViewer
2008-03-07 20:53 . 2008-03-07 20:53 2,560 --a------ C:\WINDOWS\_MSRSTRT.EXE
2008-03-07 20:29 . 2008-03-08 21:32 <DIR> d-------- C:\Program Files\TeamViewer3
2008-03-07 20:29 . 2008-03-07 20:29 <DIR> d-------- C:\Documents and Settings\harold\Application Data\TeamViewer
2008-03-07 13:18 . 2008-03-07 20:16 1,307,355 ---hs---- C:\WINDOWS\system32\ospdmdka.ini
2008-03-06 13:17 . 2008-03-07 13:17 1,307,115 ---hs---- C:\WINDOWS\system32\grscsqje.ini
2008-03-04 13:12 . 2008-03-05 13:12 1,308,214 ---hs---- C:\WINDOWS\system32\untaweop.ini
2008-03-01 10:45 . 2008-03-01 10:45 3,120 --a------ C:\WINDOWS\D9H7ADCC.ocx
2008-02-20 12:07 . 2008-02-20 12:07 26,048 --a------ C:\WINDOWS\system32\tuvtrrq.dll
2008-02-19 00:25 . 2008-03-09 15:17 20,612 ---hs---- C:\WINDOWS\system32\zaahufmp.dllbox
2008-02-18 12:13 . 2008-03-09 15:20 <DIR> d-------- C:\Temp

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-03-08 03:56 --------- d-----w C:\Program Files\Stamps.com Internet Postage
2008-03-04 22:53 --------- d-----w C:\Program Files\SiteError Search
2008-03-04 22:53 --------- d-----w C:\Program Files\OneStepSearch
2008-03-01 16:41 --------- d-----w C:\Program Files\McAfee AntiSpyware 1.00 Install
2008-02-25 16:32 --------- d-----w C:\Documents and Settings\harold\Application Data\AdobeUM
2008-02-19 18:58 --------- d-----w C:\Program Files\BroadJump
2008-02-19 18:52 --------- d-----w C:\Program Files\Haunted House Horrors Screen Saver 1.3
2008-02-19 18:51 --------- d-----w C:\Program Files\DivX
2008-01-27 18:21 --------- d-----w C:\Documents and Settings\harold\Application Data\Creative
2007-05-19 00:50 1,174,284 ----a-w C:\Documents and Settings\Harold Millsap\Application Data\Install.dat
.

((((((((((((((((((((((((((((((((((((((((((((( AWF ))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Yahoo! Pager"="C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.exe" [2007-03-01 18:11 4670968]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 09:24 1694208]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IMJPMIG8.1"="C:\WINDOWS\IME\imjp8_1\IMJPMIG.exe" [2004-08-04 05:00 208952]
"PHIME2002ASync"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe" [2004-08-04 05:00 455168]
"PHIME2002A"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe" [2004-08-04 05:00 455168]
"YBrowser"="C:\PROGRA~1\Yahoo!\browser\ybrwicon.exe" [2006-07-21 16:19 129536]
"SynTPLpr"="C:\Program Files\Synaptics\SynTP\SynTPLpr.exe" [2004-05-26 10:15 98304]
"SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2004-05-26 10:15 536576]
"IgfxTray"="C:\WINDOWS\system32\igfxtray.exe" [2003-10-30 01:46 155648]
"HotKeysCmds"="C:\WINDOWS\system32\hkcmd.exe" [2003-10-30 01:33 118784]
"Cpqset"="C:\Program Files\HPQ\Default Settings\cpqset.exe" [2004-04-30 10:32 208958]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2004-04-21 11:28 286720]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-05-25 19:27 98304]
"eabconfg.cpl"="C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe" [2004-07-30 08:33 286720]
"au"="C:\Program Files\Dealio\DealioAU.exe" [2007-06-27 12:46 238936]
"AdvancedCleaner Free"="C:\Program Files\AdvancedCleaner Free\UADC.exe" [2007-10-02 17:11 1558528]
"SM_IAN"="C:\Program Files\AdvancedCleaner Free\ian_monitor.exe" [2007-12-19 11:59 241152]

C:\Documents and Settings\harold\Start Menu\Programs\Startup\
PowerReg Scheduler V3.exe [2008-01-25 17:39:53 225280]

C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programs\Startup\
AT&T Self Support Tool.lnk - C:\Program Files\SBC Self Support Tool\bin\matcli.exe [2007-01-07 08:11:26 217088]
MySoftware NewsFlash.lnk - C:\Program Files\Common Files\MySoftware\NewsFlsh.exe [2007-11-24 15:26:14 261120]
Quicken Scheduled Updates.lnk - C:\Program Files\Quicken\bagent.exe [2004-01-28 23:36:18 57344]
ymetray.lnk - C:\Program Files\Yahoo!\Yahoo! Music Jukebox\ymetray.exe [2006-10-03 11:04:38 54776]

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
"C:\\Program Files\\Yahoo!\\Messenger\\YServer.exe"=
"C:\\Program Files\\Yahoo!\\Yahoo! Music Jukebox\\YahooMusicEngine.exe"=
"C:\\Program Files\\iTunes\\iTunes.exe"=
"C:\\Program Files\\TeamViewer3\\TeamViewer.exe"=

R2 OneStep Search Service;OneStep Search Service;"C:\Program Files\OneStepSearch\onestep.exe" "C:\Program Files\OneStepSearch\onestep.dll" Service []

.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-03-09 17:16:09
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
Cpqset = C:\Program Files\HPQ\Default Settings\cpqset.exe????????9?4?4?8??P???? ???B???????????????B? ??????
SM_IAN = C:\Program Files\AdvancedCleaner Free\ian_monitor.exe??|??????????@???@????????????????|??@?????????p???????? A?3??|???|??C???@???@???????C????????|??@?????????,?????@???@?d???u)?|??@??????????)?|???|??C???@?3??|??????C???@???@?????????? A????|??????@?d??????

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
r Running Proce
.
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\CTsvcCDA.exe
C:\Program Files\OneStepSearch\onestep.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\OneStepSearch\onestep.exe
C:\PROGRA~1\Yahoo!\browser\ycommon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\SBC Self Support Tool\bin\mpbtn.exe
.
**************************************************************************
.
Completion time: 2008-03-09 17:22:28 - machine was rebooted
ComboFix-quarantined-files.txt 2008-03-10 00:22:22
.
2008-02-14 11:06:22 --- E O F ---


Thanks so much, it's already made it so much better. All the files are already gone in the documents. There's still those icons on the desktop though, they don't look like they're in use though. Let me know, thanks.


Report Offensive Follow Up For Removal

Response Number 5
Name: jabuck
Date: March 10, 2008 at 03:34:45 Pacific
Subject: tons of pos files, can't delete
Reply: (edit)
Go to start> control panel> add/remove programs and uninstall "Advanced Cleaner Free".

Open Notepad and copy/paste everything between the X"s into it and make sure "File::" is at the very top of the page.
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
File::
C:\WINDOWS\system32\grscsqje.ini
C:\WINDOWS\system32\untaweop.ini
C:\WINDOWS\D9H7ADCC.ocx
C:\WINDOWS\system32\tuvtrrq.dll
C:\WINDOWS\system32\zaahufmp.dllbox
C:\Program Files\AdvancedCleaner Free\ian_monitor.exe


Folder::
C:\Temp

XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
Go to File on the top bar and choose" Save As", Change the "Save As Type" to All Files, Name it CFScript.txt then save it to your desktop.
Then drag/drop the CFScript.txt onto ComboFix.exe (the red X on your desktop) if combofix does not auto start click "run".

Empty the restore folder. Go to start>control panel>system>system restore tab>check the box beside "turn off system restore>apply (takes a minute)>ok. Go back and uncheck the box to turn system restore back on>apply>ok.

Download CCleaner from the following link:

http://filehippo.com/download_ccleaner/

After you download it to your desktop and begin installing it only allow the "install icon on desktop" to install . Then run it, use only as suggested, it's powerful use only the prechecked items.

Run an online scan with Kaspersky from the following link:
Kaspersky Online Scanner

Note: If you have used this particular scanner before, you MAY HAVE YO UNINSTALL the program through Add/Remove Programs before downloading the new ActiveX component

Click Yes, when prompted to install its ActiveX component.
(Note.. for Internet Explorer 7 users: If at any time you have trouble with the "Accept" button of the license, click on the "Zoom" tool located at the bottom right of the IE window and set the zoom to 75 %. Once the license has been accepted, reset to 100%.)
The program launches and downloads the latest definition files.
Once the files are downloaded click on Next
Click on Scan Settings and configure as follows:
Scan using the following Anti-Virus database:
Extended
Scan Options:
Scan Archives
Scan Mail Base
Click OK and, under select a target to scan, select My Computer
When the scan is done, in the Scan is completed window (below), any infection is displayed.
There is no option to clean/disinfect, however, we need to analyze the information on the report.
To obtain the report:
Click on: Save Report As (above - red blinking arrow)
Next, in the Save as prompt, Save in area, select: Desktop
In the File name area, use KScan, or something similar
In Save as type, click the drop arrow and select: Text file [*.txt]
Then, click: Save
Please post the Kaspersky Online Scanner Report in your reply.

Post a new Combofix log.


Report Offensive Follow Up For Removal


Response Number 6
Name: missmysoldier28
Date: March 10, 2008 at 18:11:15 Pacific
Subject: tons of pos files, can't delete
Reply: (edit)
---------------------
KASPERSKY ONLINE SCANNER REPORT
Monday, March 10, 2008 17:43
Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 10/03/2008
Kaspersky Anti-Virus database records: 622455
---------------------

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
C:\
D:\

Scan Statistics:
Total number of scanned objects: 59556
Number of viruses found: 33
Number of infected objects: 144
Number of suspicious objects: 3
Duration of the scan process: 01:43:27

Infected Object Name / Virus Name / Last Action
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\483b775a47756a69002e5a27e7ccd169_bd212cbc-0e09-41c5-910f-da6dcfec7273 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp Object is locked skipped
C:\Documents and Settings\All Users\Application Data\muvee Technologies\030410\0102\0102\values Object is locked skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped
C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped
C:\Documents and Settings\harold\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\harold\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\harold\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\harold\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\harold\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\harold\Local Settings\Temporary Internet Files\Content.IE5\W1WXQF2D\22517[1].htm Object is locked skipped
C:\Documents and Settings\harold\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\harold\NTUSER.DAT.LOG Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService.NT AUTHORITY\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService.NT AUTHORITY\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService.NT AUTHORITY\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService.NT AUTHORITY\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService.NT AUTHORITY\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService.NT AUTHORITY\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService.NT AUTHORITY\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService.NT AUTHORITY\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Adobe\Acrobat\6.0\AcroForm\MRUFormsList Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Adobe\Acrobat\6.0\AdobeComFnt06.lst Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Adobe\Acrobat\6.0\Updater\udstore.js Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\AOL\ACS\1.0\Credentials.db Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\AOL\C_America Online 9.0\IDB\Apps.Lst Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\AOL\C_America Online 9.0\IDB\art.idx Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\AOL\C_America Online 9.0\IDB\sap.dat Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\AOL\C_America Online 9.0\IDB\spool.lst Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\AOL\C_America Online 9.0\IDB\sysnews.lst Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\AOL\C_America Online 9.0a\IDB\Apps.Lst Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\AOL\C_America Online 9.0a\IDB\art.idx Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\AOL\C_America Online 9.0a\IDB\guest.idx Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\AOL\C_America Online 9.0a\IDB\sap.dat Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\AOL\C_America Online 9.0a\IDB\spool.lst Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\AOL\C_America Online 9.0a\IDB\sysnews.lst Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\AOL\Flash Player\localhost\1.1353255.753313939\rache11.sol Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Atari\RCT3\MusicGenre.txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Atari\RCT3\Options.txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\desktop.ini Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\HP\Memories Disc\comslog.txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\HP\Memories Disc\hpodctr.htm Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\HP\Memories Disc\hpodlog.htm Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Macromedia\Flash Player\#SharedObjects\Q6NKQJEN\aol.com\tvtop5.sol Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Macromedia\Flash Player\#SharedObjects\Q6NKQJEN\chatango.com\fixed_id.sol Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Macromedia\Flash Player\#SharedObjects\Q6NKQJEN\chatango.com\mini_login.sol Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Macromedia\Flash Player\#SharedObjects\Q6NKQJEN\localhost\core.sol Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Macromedia\Flash Player\#SharedObjects\Q6NKQJEN\static.userplane.com\presence\m\presence.swf\presence.sol Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Macromedia\Flash Player\#SharedObjects\Q6NKQJEN\video.aol.com\rootmovie.swf\videoSO.sol Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Macromedia\Flash Player\#SharedObjects\Q6NKQJEN\www.youtube.com\soundData.sol Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#aol.com\settings.sol Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#chatango.com\settings.sol Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#local\settings.sol Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#static.userplane.com\settings.sol Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#video.aol.com\settings.sol Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.youtube.com\settings.sol Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Microsoft\Address Book\RENEE SCOTT.wab Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Microsoft\Address Book\RENEE SCOTT.wab~ Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Microsoft\CLR Security Config\v1.1.4322\security.config Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Microsoft\CLR Security Config\v1.1.4322\security.config.cch Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Microsoft\CryptnetUrlCache\Content\3C83474D61E624A4F9844DF935AFE217 Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Microsoft\CryptnetUrlCache\Content\60E31627FDA0A46932B0E5948949F2A5 Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Microsoft\CryptnetUrlCache\Content\6C68A73125F3238F044A8115D96841B6 Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Microsoft\CryptnetUrlCache\Content\A8FABA189DB7D25FBA7CAC806625FD30 Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Microsoft\CryptnetUrlCache\Content\F482C95F83F1B59228F1B1E720F2EDF1 Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Microsoft\CryptnetUrlCache\MetaData\3C83474D61E624A4F9844DF935AFE217 Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Microsoft\CryptnetUrlCache\MetaData\60E31627FDA0A46932B0E5948949F2A5 Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Microsoft\CryptnetUrlCache\MetaData\6C68A73125F3238F044A8115D96841B6 Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Microsoft\CryptnetUrlCache\MetaData\A8FABA189DB7D25FBA7CAC806625FD30 Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Microsoft\CryptnetUrlCache\MetaData\F482C95F83F1B59228F1B1E720F2EDF1 Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Microsoft\Crypto\RSA\S-1-5-21-823518204-436374069-1343024091-1004\075565f57e1abf53ccc9ca66560b8be0_bd212cbc-0e09-41c5-910f-da6dcfec7273 Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Microsoft\Crypto\RSA\S-1-5-21-823518204-436374069-1343024091-1004\83aa4cc77f591dfc2374580bbd95f6ba_bd212cbc-0e09-41c5-910f-da6dcfec7273 Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Microsoft\HTML Help\hh.dat Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Microsoft\IMJP8_1\imjp81u.dic Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Microsoft\Internet Explorer\brndlog.bak Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Microsoft\Internet Explorer\brndlog.txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Microsoft\Internet Explorer\Desktop.htt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Microsoft\Internet Explorer\Quick Launch\America Online 9.0.lnk Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Microsoft\Internet Explorer\Quick Launch\desktop.ini Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Microsoft\Internet Explorer\Quick Launch\QuickTime Player.lnk Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Microsoft\Media Player\003553DB.wpl Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Microsoft\Media Player\00B82069.wpl Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Microsoft\Protect\CREDHIST Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Microsoft\Protect\S-1-5-21-823518204-436374069-1343024091-1004\4253feed-71de-4b11-9ac2-ca59188dd9d1 Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Microsoft\Protect\S-1-5-21-823518204-436374069-1343024091-1004\493278cb-91d7-413a-9c64-781d2dcc0430 Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Microsoft\Protect\S-1-5-21-823518204-436374069-1343024091-1004\Preferred Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Microsoft\Speech\Files\UserLexicons\SP_2771BF763FCC4572B5FC4B7B88FDFCDF.dat Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Microsoft\Windows\Themes\Custom.theme Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Sonic\Update Manager\sumdb.dat Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\adhere.gif-614e13aa-1f8ead5a.gif Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\adhere.gif-614e13aa-1f8ead5a.idx Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\adhere.gif-670d1578-70a909d5.gif Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\adhere.gif-670d1578-70a909d5.idx Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\CrapAI.class-3d271bfe-3c25f9a2.class Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\CrapAI.class-3d271bfe-3c25f9a2.idx Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\DannoAI.class-4c2d726c-21507498.class Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\DannoAI.class-4c2d726c-21507498.idx Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\DannoAI2.class-653ecef0-6111a1dd.class Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\DannoAI2.class-653ecef0-6111a1dd.idx Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\etaser.gif-6eb1fd25-150d7d95.gif Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\etaser.gif-6eb1fd25-150d7d95.idx Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\etaser.gif-7470fef3-32ee2d6f.gif Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\etaser.gif-7470fef3-32ee2d6f.idx Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\faces.gif-3413a79f-5a44042f.gif Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\faces.gif-3413a79f-5a44042f.idx Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\faces.gif-39d2a96d-71e20e0a.gif Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\faces.gif-39d2a96d-71e20e0a.idx Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\facingreporters.gif-455d7ac1-4d85d270.gif Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\facingreporters.gif-455d7ac1-4d85d270.idx Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\facingreporters.gif-4b1c7c8f-201d94b5.gif Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\facingreporters.gif-4b1c7c8f-201d94b5.idx Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\InspectorApplet.class-2e2454ac-2a9dc290.class Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\InspectorApplet.class-2e2454ac-2a9dc290.idx Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\newsclip21.class-43c9a835-7b9fce1d.class Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\newsclip21.class-43c9a835-7b9fce1d.idx Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\newsclip21a.class-774ec854-3fbda9ef.class Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\newsclip21a.class-774ec854-3fbda9ef.idx Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\newsclip21b.class-2c350395-654d6e2e.class Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\newsclip21b.class-2c350395-654d6e2e.idx Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\RiadaBillboard.class-321a222b-56f9e5d8.class Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\RiadaBillboard.class-321a222b-56f9e5d8.idx Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\SlimeAI.class-730faa22-192c7a8b.class Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\file\SlimeAI.class-730faa22-192c7a8b.idx Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\fcchat.zip-6e5ade1c-7d0747af.idx Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\fcchat.zip-6e5ade1c-7d0747af.zip Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\LiveVideo.zip-25f8a5da-6f39ac26.idx Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\LiveVideo.zip-25f8a5da-6f39ac26.zip Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\OneSlime.jar-4783e5b5-3f7e50b3.idx Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\OneSlime.jar-4783e5b5-3f7e50b3.zip Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\vivid_jni_sun.jpeg-92ef704-4eaa5e4e.idx Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\vivid_jni_sun.jpeg-92ef704-4eaa5e4e.zip Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Sun\Java\Deployment\log\plugin142_03.trace Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Application Data\Yahoo!\Browser\YScamGuard.xml Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@01.presence.userplane[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@02.presence.userplane[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@1070388247[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@1071486675[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@112.2o7[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@247realmedia[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@2o7[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@38.116.139[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@4136[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@66693905[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@70431107[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@a.photobucket[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@a.websponsors[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@about[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@ad.yieldmanager[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@adknowledge[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@adprofile[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@ads.addynamix[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@ads.pointroll[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@ads.ussearch[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@adserver.cheatplanet[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@adserving.autotrader[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@advertising[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@als.umusic[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@amazon[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@americanexpress[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@ancestry[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@aol.call.ingenio[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@aol[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@apmebf[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@ask[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@atdmt[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@autotrader[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@bin[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@blogshares[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@bluestreak[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@braincash[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@bransontourismcenter[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@bravenet[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@burstnet[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@buzznet[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@c.fsx[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@casalemedia[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@centrport[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@cgi-bin[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@cheatplanet[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@cingular[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@citi.bridgetrack[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@city-guides[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@click.fantasypromotion[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@coolsavings[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@counter.hitslink[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@counter13.sextracker[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@counter15.sextracker[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@creativeby1.unicast[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@csa.hotwire[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@c[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@data2.perf.overture[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@data3.perf.overture[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@db.fetishcash[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@dehp.myspace[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@delb.myspace[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@demr.myspace[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@designerlove[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@desk.myspace[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@did-it[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@dogpile[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@dtr[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@dtr[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@edge.ru4[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@egreetings[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@emarketmakers[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@emjcd[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@exit[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@expedia[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@extra-incest[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@falloutboyrock[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@fastclick[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@ffxcam.smh.com[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@fidelity[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@free-public-records.big[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@funny[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@ga.tattoomart[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@games.realarcade[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@google[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@groups.msn[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@hb.lycos[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@hits.turn2offers[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@hive[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@homestore[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@hotelbrowser[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@hotmail.msn[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@hotwire[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@ic-live[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@image.masterstats[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@images.zoolinks[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@insightexpressai[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@insightexpresserdd[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@internest[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@jp1.sb01[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@livejournal[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@live[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@login.tracking101[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@lycos[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@m02.webmail.aol[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@magnetamerica[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@mail-to-a-friend[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@mapquest[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@mdmngr[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@mediaplex[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@memberpromotions[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@metareward[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@microsoft[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@milfcruiser[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@monsterlocal[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@monstermarketplace[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@moreover[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@msg.yahoo[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@msn[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@music.aol[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@mylocalbands[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@netflix[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@nextag[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@nsvapp-prod-rr.stream.aol[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@nytimes[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@oklahomafamilylawcenter[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@olam[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@onlinehotels[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@onlinerewardcenter[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@overstock[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@overture[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@passport[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@passport[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@perf.overture[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@pictureheaven[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@pornogateway[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@preggopoontang[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@premiumproductsonline[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@products.search.aol[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@producttestpanel[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@qnsr[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@questionmarket[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@revsci[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@rewardsgateway[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@S145994[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@screenname.aol[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@search.msn.co[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@search.msn[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@server.iad.liveperson[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@server2.bkvtrack[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@sexlist[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@sexsearchcom[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@shopping.aol[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@staging.preview.fuse[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@statse.webtrendslive[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@superpages[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@tacoda[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@tarot[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@tattoos-pictures[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@thumbsweek[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@tiny-star[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@top1[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@top2[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@top2[3].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@topix[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@top[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@torture-sex[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@tracking[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@travel.aol[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@tribalfusion[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@tripod[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@trk.roitrax[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@uk.msnusers[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@ussearch[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@vhost.oddcast[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@vidman-rnd.buzznet[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@vidman.buzznet[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@vidman[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@vmix[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@w.moreover[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@web-stat[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@web4.realtracker[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@webcombilling[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@webled[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@weeklyad.target[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@wls.cingular[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@wt.ticketmaster[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@wvw.experian[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@www.10-7[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@www.amishdonkey[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@www.ananova[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@www.ancestry[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@www.animal-pleasure[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@www.animalcash[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@www.animaltraffic[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@www.aol.egreetings[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@www.apartmentguide[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@www.barnboys[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@www.beastthebest[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@www.bestialitytop[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@www.betterskintoday[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@www.blogshares[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@www.caledonianmales[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@www.capitolimpact[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@www.cashventure[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@www.championhomes[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@www.classesusa[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@www.colonize[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@www.designerlove[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@www.ebaumsworld[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@www.econsumer.equifax[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@www.experian[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@www.funnyjunk[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@www.fuse[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@www.gaysexfarm[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@www.grand-mothers[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@www.groople[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@www.hotwire[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@www.illegal-incest[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@www.livejasmin[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@www.mature-lovers[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@www.mature-secret[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@www.momspornvideo[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@www.moremoms[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@www.myaccount.cingular[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@www.oldvsyoung[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@www.pickup.aol.egreetings[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@www.policeworld[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@www.pornoverview[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@www.publicrecordsinfo[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@www.res99[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@www.rowise[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@www.screensavers[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@www.southwest[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@www.tshirthell[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@www.usa-people-search[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@www.usacops[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@www.welivetogether[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@www.yahoo[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@www6.falloutboyrock[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@xanga[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@xxxcounter[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@xxxpower[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@yahoo[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@youtube[1].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Cookies\renee scott@zedo[2].txt Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Desktop\FREE! Instant Messenger.lnk Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Desktop\Spyware Protection from AOL.lnk Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Accessories.URL Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Desktop.ini Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Home.URL Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\HP Music.URL Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Links\Customize Links.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Links\Free Hotmail.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Links\My Yahoo!.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Links\RealPlayer.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Links\Windows Marketplace.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Links\Windows Media.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Links\Windows.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Links\Yahoo! Bookmarks.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Links\Yahoo! Mail.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Links\Yahoo!.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Media\Real.com Radio Tuner.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\MSN.com.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\My Yahoo!.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Radio Station Guide.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\RealPlayer Home Page.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Search.URL Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Shop.URL Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Symantec Security Check.URL Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Symantec.URL Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Communication\Alerts.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Communication\Greetings.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Communication\Mail.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Communication\Messenger.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Communication\Mobile.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Communication\Phone Card.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Communication\Yahoo! by Phone.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Community\Chat.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Community\Education.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Community\Groups.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Community\Member Directory.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Community\Message Boards.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Community\People Search.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Community\Personals.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Community\Photos.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Entertainment\Astrology.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Entertainment\Entertainment.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Entertainment\Games.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Entertainment\LAUNCH Music.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Entertainment\Movies.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Entertainment\TV Coverage.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Finance.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Games.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Groups.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Home & Living\Autos.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Home & Living\Careers.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Home & Living\Coupons.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Home & Living\Family Accounts.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Home & Living\Get Local.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Home & Living\Health.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Home & Living\Personals.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Home & Living\Pets.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Home & Living\Real Estate.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Home & Living\Yahooligans!.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Hot Jobs.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Information Management\Address Book.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Information Management\Bookmarks.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Information Management\Briefcase.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Information Management\Calendar.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Information Management\Companion.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Information Management\Family Accounts.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Information Management\My Yahoo!.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Information Management\Notepad.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Information Management\Postal Center.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\LAUNCH Music.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\News\Alerts.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\News\Buzz Index.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\News\Lottery Results.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\News\News Front Page.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\News\News Full Coverage.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\News\Weather.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\News.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Personal Finance\Bill Pay.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Personal Finance\Finance.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Personal Finance\PayDirect.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Personal Publishing\Domains.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Personal Publishing\GeoCities.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Personal Publishing\Photos.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Personal Publishing\Picture Gallery.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Shopping\Auctions.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Shopping\Autos.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Shopping\Classifieds.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Shopping\Coupons.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Shopping\Points.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Shopping\Real Estate.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Shopping\Shopping.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Shopping\Wallet.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Shopping\Yahoo! Gear.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Shopping\Yellow Pages.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Shopping.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Small Business.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Sports & Outdoors\Fantasy Sports.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Sports & Outdoors\Ski & Snow.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Sports & Outdoors\Sports.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Sports.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Tools for Business\Business Messenger.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Tools for Business\Marketing Tools.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Tools for Business\Merchant Solutions.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Tools for Business\Small Business.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Tools for Business\Sponsor Listings.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Tools for Business\Web Hosting.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Tools for Business\Yahoo! Express.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Travel & Transportation\Lodging.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Travel & Transportation\Maps & Driving Directions.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Travel & Transportation\Restaurants.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Travel & Transportation\Travel.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!\Travel.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo! Bookmarks.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo! Mail.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Favorites\Yahoo!.url Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Local Settings\Application Data\ApplicationHistory\csc.exe.3e4ac0af.ini Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Local Settings\Application Data\ApplicationHistory\hpqgalry.exe.cf8dd223.ini Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Local Settings\Application Data\ApplicationHistory\hpqselsk.exe.a048b05c.ini Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Local Settings\Application Data\ApplicationHistory\hpqthb08.exe.a935d1e0.ini Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Local Settings\Application Data\fusioncache.dat Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Local Settings\Application Data\GDIPFONTCACHEV1.DAT Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Local Settings\Application Data\HP\Digital Imaging\all_skins.xml Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Local Settings\Application Data\HP\Digital Imaging\db\ImageCatalog.mdb Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Local Settings\Application Data\HP\Digital Imaging\db\ImageCatalog.mdb.bak Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Local Settings\Application Data\HP\Digital Imaging\devices.xml Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Local Settings\Application Data\HP\Digital Imaging\help.xml Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Local Settings\Application Data\HP\Digital Imaging\hp1_skindef.dat Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Local Settings\Application Data\HP\Digital Imaging\settings.xml Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Local Settings\Application Data\HP\Digital Imaging\ThumbnailPrefs.dat Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Local Settings\Application Data\IconCache.db Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Local Settings\Application Data\Identities\{11775596-A02F-492E-BAEA-987F3D38D1B6}\Microsoft\Outlook Express\Deleted Items.dbx Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Local Settings\Application Data\Identities\{11775596-A02F-492E-BAEA-987F3D38D1B6}\Microsoft\Outlook Express\Drafts.dbx Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Local Settings\Application Data\Identities\{11775596-A02F-492E-BAEA-987F3D38D1B6}\Microsoft\Outlook Express\Folders.dbx Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Local Settings\Application Data\Identities\{11775596-A02F-492E-BAEA-987F3D38D1B6}\Microsoft\Outlook Express\Inbox.dbx Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Local Settings\Application Data\Identities\{11775596-A02F-492E-BAEA-987F3D38D1B6}\Microsoft\Outlook Express\Offline.dbx Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Local Settings\Application Data\Identities\{11775596-A02F-492E-BAEA-987F3D38D1B6}\Microsoft\Outlook Express\Outbox.dbx Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Local Settings\Application Data\Identities\{11775596-A02F-492E-BAEA-987F3D38D1B6}\Microsoft\Outlook Express\Sent Items.dbx Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Local Settings\Application Data\IsolatedStorage\c52tlgmh.j1n\rrf45jkx.0pu\StrongName.czm5tyszaplbnspbwrwr5sftif5gm0kk\AssemFiles\framePref.dat Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Local Settings\Application Data\IsolatedStorage\c52tlgmh.j1n\rrf45jkx.0pu\StrongName.czm5tyszaplbnspbwrwr5sftif5gm0kk\identity.dat Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Local Settings\Application Data\IsolatedStorage\c52tlgmh.j1n\rrf45jkx.0pu\StrongName.czm5tyszaplbnspbwrwr5sftif5gm0kk\info.dat Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Local Settings\Application Data\IsolatedStorage\c52tlgmh.j1n\rrf45jkx.0pu\StrongName.zm3mix00r4oodf2vo5zlyh1za3feugtg\AssemFiles\MyImagesPrefs.dat Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Local Settings\Application Data\IsolatedStorage\c52tlgmh.j1n\rrf45jkx.0pu\StrongName.zm3mix00r4oodf2vo5zlyh1za3feugtg\identity.dat Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Local Settings\Application Data\IsolatedStorage\c52tlgmh.j1n\rrf45jkx.0pu\StrongName.zm3mix00r4oodf2vo5zlyh1za3feugtg\info.dat Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Local Settings\Application Data\Microsoft\HelpCtr\HelpSessionHistory.dat Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Local Settings\Application Data\Microsoft\Internet Explorer\MSIMGSIZ.DAT Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Local Settings\Application Data\Microsoft\Media Player\CurrentDatabase_59R.wmdb Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Local Settings\Application Data\Microsoft\Media Player\wmpfolders.wmdb Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Local Settings\Application Data\Microsoft\Movie Maker\MEDIATAB0.DAT Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Local Settings\Application Data\Microsoft\Windows Media\9.0\WMSDKNS.DTD Object is locked skipped
C:\Documents and Settings\RENEE SCOTT\Local Settings\Application Data\Microsoft\Windows Media\9.0\WMSDKNS.XML Object is locked skipped
C:\Documents and Setting


Report Offensive Follow Up For Removal

Response Number 7
Name: jabuck
Date: March 10, 2008 at 19:25:14 Pacific
Subject: tons of pos files, can't delete
Reply: (edit)
Please post the requested Combofix log.

Report Offensive Follow Up For Removal

Response Number 8
Name: missmysoldier28
Date: March 11, 2008 at 14:07:32 Pacific
Subject: tons of pos files, can't delete
Reply: (edit)
ComboFix 08-03-09.1 - harold 2008-03-10 18:01:13.4 - NTFSx86
Running from: C:\Documents and Settings\harold\Desktop\ComboFix.exe

[color=red][b]WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !![/b][/color]
.

((((((((((((((((((((((((( Files Created from 2008-02-11 to 2008-03-11 )))))))))))))))))))))))))))))))
.

2008-03-10 15:30 . 2008-03-10 15:30 <DIR> d-------- C:\WINDOWS\system32\Kaspersky Lab
2008-03-10 15:30 . 2008-03-10 15:30 <DIR> d-------- C:\WINDOWS\LastGood
2008-03-10 15:30 . 2008-03-10 15:30 <DIR> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\Kaspersky Lab
2008-03-10 15:23 . 2008-03-10 15:23 <DIR> d-------- C:\Program Files\CCleaner
2008-03-09 15:05 . 2008-03-09 15:06 <DIR> d-------- C:\ComboFix[1]
2008-03-09 00:46 . 2008-03-09 12:39 <DIR> d-------- C:\Documents and Settings\Administrator.HOME-E1E53A042E\Application Data\Yahoo!
2008-03-08 15:16 . 2008-03-08 19:30 <DIR> d-a------ C:\Documents and Settings\All Users.WINDOWS\Application Data\TEMP
2008-03-08 01:49 . 2008-03-08 19:33 <DIR> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\WinZip
2008-03-07 20:57 . 2008-03-07 20:57 <DIR> d-------- C:\Documents and Settings\LocalService.NT AUTHORITY\Application Data\TeamViewer
2008-03-07 20:53 . 2008-03-07 20:53 2,560 --a------ C:\WINDOWS\_MSRSTRT.EXE
2008-03-07 20:29 . 2008-03-10 15:14 <DIR> d-------- C:\Program Files\TeamViewer3
2008-03-07 20:29 . 2008-03-07 20:29 <DIR> d-------- C:\Documents and Settings\harold\Application Data\TeamViewer
2008-03-07 13:18 . 2008-03-07 20:16 1,307,355 ---hs---- C:\WINDOWS\system32\ospdmdka.ini

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-03-08 03:56 --------- d-----w C:\Program Files\Stamps.com Internet Postage
2008-03-04 22:53 --------- d-----w C:\Program Files\SiteError Search
2008-03-04 22:53 --------- d-----w C:\Program Files\OneStepSearch
2008-03-01 16:41 --------- d-----w C:\Program Files\McAfee AntiSpyware 1.00 Install
2008-02-25 16:32 --------- d-----w C:\Documents and Settings\harold\Application Data\AdobeUM
2008-02-19 18:58 --------- d-----w C:\Program Files\BroadJump
2008-02-19 18:52 --------- d-----w C:\Program Files\Haunted House Horrors Screen Saver 1.3
2008-02-19 18:51 --------- d-----w C:\Program Files\DivX
2008-01-27 18:21 --------- d-----w C:\Documents and Settings\harold\Application Data\Creative
.

((((((((((((((((((((((((((((( snapshot@2008-03-09_17.21.43.76 )))))))))))))))))))))))))))))))))))))))))
.
- 2008-03-08 23:13:24 16,384 ----a-w C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat
+ 2008-03-10 22:14:06 16,384 ----a-w C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat
- 2008-03-08 23:13:24 32,768 ----a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
+ 2008-03-10 22:14:06 32,768 ----a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
- 2008-03-08 23:13:24 32,768 ----a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
+ 2008-03-10 22:14:06 32,768 ----a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
+ 2005-05-24 19:27:16 213,048 ----a-w C:\WINDOWS\system32\Kaspersky Lab\Kaspersky Online Scanner\kavss.dll
+ 2007-08-29 22:47:20 94,208 ----a-w C:\WINDOWS\system32\Kaspersky Lab\Kaspersky Online Scanner\kavuninstall.exe
+ 2007-08-29 22:49:54 950,272 ----a-w C:\WINDOWS\system32\Kaspersky Lab\Kaspersky Online Scanner\kavwebscan.dll
- 2008-03-10 00:17:52 48,230 ----a-w C:\WINDOWS\system32\perfc009.dat
+ 2008-03-10 22:18:08 48,230 ----a-w C:\WINDOWS\system32\perfc009.dat
- 2008-03-10 00:17:52 328,866 ----a-w C:\WINDOWS\system32\perfh009.dat
+ 2008-03-10 22:18:08 328,866 ----a-w C:\WINDOWS\system32\perfh009.dat
.
((((((((((((((((((((((((((((((((((((((((((((( AWF ))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Yahoo! Pager"="C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.exe" [2007-03-01 18:11 4670968]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 09:24 1694208]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IMJPMIG8.1"="C:\WINDOWS\IME\imjp8_1\IMJPMIG.exe" [2004-08-04 05:00 208952]
"PHIME2002ASync"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe" [2004-08-04 05:00 455168]
"PHIME2002A"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe" [2004-08-04 05:00 455168]
"YBrowser"="C:\PROGRA~1\Yahoo!\browser\ybrwicon.exe" [2006-07-21 16:19 129536]
"SynTPLpr"="C:\Program Files\Synaptics\SynTP\SynTPLpr.exe" [2004-05-26 10:15 98304]
"SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2004-05-26 10:15 536576]
"IgfxTray"="C:\WINDOWS\system32\igfxtray.exe" [2003-10-30 01:46 155648]
"HotKeysCmds"="C:\WINDOWS\system32\hkcmd.exe" [2003-10-30 01:33 118784]
"Cpqset"="C:\Program Files\HPQ\Default Settings\cpqset.exe" [2004-04-30 10:32 208958]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2004-04-21 11:28 286720]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-05-25 19:27 98304]
"eabconfg.cpl"="C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe" [2004-07-30 08:33 286720]
"au"="C:\Program Files\Dealio\DealioAU.exe" [2007-06-27 12:46 238936]
"SM_IAN"="C:\Program Files\AdvancedCleaner Free\ian_monitor.exe" [ ]

C:\Documents and Settings\harold\Start Menu\Programs\Startup\
PowerReg Scheduler V3.exe [2008-01-25 17:39:53 225280]

C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programs\Startup\
AT&T Self Support Tool.lnk - C:\Program Files\SBC Self Support Tool\bin\matcli.exe [2007-01-07 08:11:26 217088]
MySoftware NewsFlash.lnk - C:\Program Files\Common Files\MySoftware\NewsFlsh.exe [2007-11-24 15:26:14 261120]
Quicken Scheduled Updates.lnk - C:\Program Files\Quicken\bagent.exe [2004-01-28 23:36:18 57344]
ymetray.lnk - C:\Program Files\Yahoo!\Yahoo! Music Jukebox\ymetray.exe [2006-10-03 11:04:38 54776]

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
"C:\\Program Files\\Yahoo!\\Messenger\\YServer.exe"=
"C:\\Program Files\\Yahoo!\\Yahoo! Music Jukebox\\YahooMusicEngine.exe"=
"C:\\Program Files\\iTunes\\iTunes.exe"=
"C:\\Program Files\\TeamViewer3\\TeamViewer.exe"=

R2 OneStep Search Service;OneStep Search Service;"C:\Program Files\OneStepSearch\onestep.exe" "C:\Program Files\OneStepSearch\onestep.dll" Service []

.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-03-10 18:04:31
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
Cpqset = C:\Program Files\HPQ\Default Settings\cpqset.exe????????9?4?4?8??????? ???B???????????????B? ??????
SM_IAN = C:\Program Files\AdvancedCleaner Free\ian_monitor.exe??|??????????@???@????????????????|??@?????????p???????? A?3??|???|??C???@???@???????C????????|??@?????????,?????@???@?d???u)?|??@??????????)?|???|??C???@?3??|??????C???@???@?????????? A????|??????@?d??????

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2008-03-10 18:07:11
ComboFix-quarantined-files.txt 2008-03-11 01:06:52
ComboFix2.txt 2008-03-11 00:52:19
ComboFix3.txt 2008-03-10 22:06:14
ComboFix4.txt 2008-03-10 00:22:30
.
2008-02-14 11:06:22 --- E O F ---


sorry about that, i thought i had pasted it


Report Offensive Follow Up For Removal

Response Number 9
Name: jabuck
Date: March 11, 2008 at 17:26:55 Pacific
Subject: tons of pos files, can't delete
Reply: (edit)
Navigate yo and delete this file in your start up programs

C:\Documents and Settings\harold\Start Menu\Programs\Startup\
PowerReg Scheduler V3.exe

Go to add/remove programs and uninstall these programs


AdvancedCleaner Free
OneStepSearch

Open Notepad and copy/paste everything between the X"s into it and make sure "File::" is at the very top of the page.
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
File::
C:\WINDOWS\system32\ospdmdka.ini

Folder::

Registry::
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SM_IAN"=-

XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
Go to File on the top bar and choose" Save As", Change the "Save As Type" to All Files, Name it CFScript.txt then save it to your desktop.
Then drag/drop the CFScript.txt onto ComboFix.exe (the red X on your desktop) if combofix does not auto start click "run".

Please run the BitDefender online scan this link:
Bitdefender Online Scanner

You will need to allow an active x install for the scan to run.
Leave the scanning options at default and press "click here to scan"
When finished scanning, click on "click here to export the scan report"
Save it to your desktop, at "file name" type in "bdscan" then click save.
Post a log in your reply.

Post a new Combofix log.


Report Offensive Follow Up For Removal

Response Number 10
Name: missmysoldier28
Date: March 11, 2008 at 23:32:38 Pacific
Subject: tons of pos files, can't delete
Reply: (edit)
BitDefender Online Scanner



Scan report generated at: Tue, Mar 11, 2008 - 22:55:26





Scan path: C:\;D:\;







Statistics

Time
01:18:39

Files
204672

Folders
5691

Boot Sectors
2

Archives
1587

Packed Files
67503




Results

Identified Viruses
41

Infected Files
136

Suspect Files
0

Warnings
0

Disinfected
0

Deleted Files
136




Engines Info

Virus Definitions
986815

Engine build
AVCORE v1.0 (build 2422) (i386) (Sep 25 2007 08:26:36)

Scan plugins
16

Archive plugins
41

Unpack plugins
7

E-mail plugins
6

System plugins
5




Scan Settings

First Action
Disinfect

Second Action
Delete

Heuristics
Yes

Enable Warnings
Yes

Scanned Extensions
*;

Exclude Extensions


Scan Emails
Yes

Scan Archives
Yes

Scan Packed
Yes

Scan Files
Yes

Scan Boot
Yes




Scanned File
Status

C:\QooBox\Quarantine\C\Program Files\BraveSentry\BraveSentry.exe.vir
Detected with: Adware.BraveSentry.F

C:\QooBox\Quarantine\C\Program Files\BraveSentry\BraveSentry.exe.vir
Deleted

C:\QooBox\Quarantine\C\Program Files\BraveSentry\BraveSentry0.dll.vir
Detected with: Adware.SpySheriff.BS

C:\QooBox\Quarantine\C\Program Files\BraveSentry\BraveSentry0.dll.vir
Deleted

C:\QooBox\Quarantine\C\Program Files\BraveSentry\BraveSentry2.dll.vir
Detected with: Adware.SpySheriff.BS

C:\QooBox\Quarantine\C\Program Files\BraveSentry\BraveSentry2.dll.vir
Deleted

C:\QooBox\Quarantine\C\Program Files\BraveSentry\BraveSentry3.dll.vir
Detected with: Adware.SpySheriff.BS

C:\QooBox\Quarantine\C\Program Files\BraveSentry\BraveSentry3.dll.vir
Deleted

C:\QooBox\Quarantine\C\Program Files\BraveSentry\Uninstall.exe.vir
Detected with: Adware.SpySheriff.BS

C:\QooBox\Quarantine\C\Program Files\BraveSentry\Uninstall.exe.vir
Deleted

C:\QooBox\Quarantine\C\Program Files\Internet Explorer\lavulaxas.dll.vir
Infected with: Trojan.BHO.AW

C:\QooBox\Quarantine\C\Program Files\Internet Explorer\lavulaxas.dll.vir
Deleted

C:\QooBox\Quarantine\C\Program Files\Screensavers.com\SSSInstaller\bin\screensavers.exe.vir=>(NSIS o)=>lzma_nsis0010
Detected with: Adware.Comet.BA

C:\QooBox\Quarantine\C\Program Files\Screensavers.com\SSSInstaller\bin\screensavers.exe.vir=>(NSIS o)=>lzma_nsis0010
Deleted

C:\QooBox\Quarantine\C\Program Files\Screensavers.com\SSSInstaller\bin\screensavers.exe.vir=>(NSIS o)
Update failed

C:\QooBox\Quarantine\C\Program Files\Screensavers.com\SSSInstaller\bin\screensavers.exe.vir=>(NSIS o)=>lzma_nsis0011
Detected with: Adware.StarWire.A

C:\QooBox\Quarantine\C\Program Files\Screensavers.com\SSSInstaller\bin\screensavers.exe.vir=>(NSIS o)=>lzma_nsis0011
Deleted

C:\QooBox\Quarantine\C\Program Files\Screensavers.com\SSSInstaller\bin\screensavers.exe.vir=>(NSIS o)
Update failed

C:\QooBox\Quarantine\C\WINDOWS\system32\aakohcop.dll.vir
Infected with: Trojan.Vundo.DZK

C:\QooBox\Quarantine\C\WINDOWS\system32\aakohcop.dll.vir
Deleted

C:\QooBox\Quarantine\C\WINDOWS\system32\aeuwxrsy.dll.vir
Infected with: Trojan.Vundo.DZK

C:\QooBox\Quarantine\C\WINDOWS\system32\aeuwxrsy.dll.vir
Deleted

C:\QooBox\Quarantine\C\WINDOWS\system32\barjphok.dll.vir
Infected with: Trojan.Vundo.DZK

C:\QooBox\Quarantine\C\WINDOWS\system32\barjphok.dll.vir
Deleted

C:\QooBox\Quarantine\C\WINDOWS\system32\cxxkpopc.dll.vir
Infected with: Trojan.Vundo.DZK

C:\QooBox\Quarantine\C\WINDOWS\system32\cxxkpopc.dll.vir
Deleted

C:\QooBox\Quarantine\C\WINDOWS\system32\dektimok.dll.vir
Infected with: Trojan.Vundo.EBG

C:\QooBox\Quarantine\C\WINDOWS\system32\dektimok.dll.vir
Deleted

C:\QooBox\Quarantine\C\WINDOWS\system32\dlfchsex.dll.vir
Infected with: Trojan.Vundo.DZK

C:\QooBox\Quarantine\C\WINDOWS\system32\dlfchsex.dll.vir
Deleted

C:\QooBox\Quarantine\C\WINDOWS\system32\eifusoln.dll.vir
Infected with: Trojan.Vundo.DZK

C:\QooBox\Quarantine\C\WINDOWS\system32\eifusoln.dll.vir
Deleted

C:\QooBox\Quarantine\C\WINDOWS\system32\fbeyiqey.dll.vir
Infected with: Trojan.Vundo.DZK

C:\QooBox\Quarantine\C\WINDOWS\system32\fbeyiqey.dll.vir
Deleted

C:\QooBox\Quarantine\C\WINDOWS\system32\fwstwgxt.dll.vir
Infected with: Trojan.Vundo.EBH

C:\QooBox\Quarantine\C\WINDOWS\system32\fwstwgxt.dll.vir
Deleted

C:\QooBox\Quarantine\C\WINDOWS\system32\gchkgxvn.dll.vir
Infected with: Trojan.Vundo.DZK

C:\QooBox\Quarantine\C\WINDOWS\system32\gchkgxvn.dll.vir
Deleted

C:\QooBox\Quarantine\C\WINDOWS\system32\ilxvgvou.dll.vir
Infected with: Trojan.Vundo.DZS

C:\QooBox\Quarantine\C\WINDOWS\system32\ilxvgvou.dll.vir
Deleted

C:\QooBox\Quarantine\C\WINDOWS\system32\jlngbygb.dll.vir
Infected with: Trojan.Vundo.DZV

C:\QooBox\Quarantine\C\WINDOWS\system32\jlngbygb.dll.vir
Deleted

C:\QooBox\Quarantine\C\WINDOWS\system32\lptpgxkx.dll.vir
Infected with: Trojan.Vundo.DZK

C:\QooBox\Quarantine\C\WINDOWS\system32\lptpgxkx.dll.vir
Deleted

C:\QooBox\Quarantine\C\WINDOWS\system32\lseapteo.dll.vir
Infected with: Trojan.Vundo.DZK

C:\QooBox\Quarantine\C\WINDOWS\system32\lseapteo.dll.vir
Deleted

C:\QooBox\Quarantine\C\WINDOWS\system32\lskjhlva.dll.vir
Infected wi